Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
File:                     lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft (raw, json)
Hash identifier:          Wf58p4ORMn++6WJie/OV5eSSyvcFxTNNmLyBSCijAAU=
Subject key identifier:   98:9E:EC:8A:08:CE:FB:DB:D5:EB:D7:38:BA:76:1C:93:51:57:3C:F8
Authority key identifier: 95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE
Certificate issuer:       /CN=951bb490e09df1467e4eec43d8f20484cee839fe
Certificate serial:       01A06CF04955E69DB492DA31ABDA6FBE1DD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
Manifest number:          0EBA
Signing time:             Fri 04 Sep 2026 15:01:21 +0000
Manifest this update:     Fri 04 Sep 2026 15:01:21 +0000
Manifest next update:     Sat 05 Sep 2026 15:01:21 +0000
Files and hashes:         1: kE66fhDE4xBKZgP00aDSZ5wUo8Q.roa (hash: Xz3m7rpESDDSay6iugLcdgSAsdxY3IOPYIq5I7x/X5M=)
                          2: lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl (hash: JDqJp0hl4IYciRNyFL1IelkyXCxIHQjMu8OPoxt/sKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 15:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6c:f0:49:55:e6:9d:b4:92:da:31:ab:da:6f:be:1d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951bb490e09df1467e4eec43d8f20484cee839fe
        Validity
            Not Before: Sep  4 15:01:21 2026 GMT
            Not After : Sep  5 15:01:21 2026 GMT
        Subject: CN=989eec8a08cefbdbd5ebd738ba761c9351573cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:21:20:e8:4b:8c:21:a4:a1:d1:16:15:8a:
                    42:da:7a:35:6b:26:b3:dd:4a:66:cc:d4:db:1c:55:
                    5d:fe:12:86:ad:ed:1f:8c:15:e4:48:4d:0b:98:7c:
                    a3:60:1e:1a:46:63:d2:1b:89:a3:69:dd:68:d8:1c:
                    18:67:7a:a9:af:b4:53:e7:c7:17:fb:83:b6:49:d5:
                    5e:65:03:b4:39:45:4c:50:63:4e:a2:51:89:80:eb:
                    a1:08:ad:bc:55:d2:8d:f9:dd:67:71:57:45:8e:e5:
                    9a:4d:da:68:99:20:8c:5d:1e:57:85:e4:55:13:ff:
                    b9:29:22:97:6c:81:55:19:87:52:c5:67:00:4d:29:
                    64:ae:b3:02:a9:4c:83:48:92:f7:6f:76:a6:64:92:
                    e3:67:55:35:e0:95:16:96:94:a8:50:9a:5d:41:97:
                    f3:49:d1:7c:aa:ef:a6:7c:8b:94:f2:8f:3e:9b:e0:
                    cc:b6:0e:5e:fb:67:12:26:c7:c9:1b:88:38:66:4f:
                    30:61:a6:de:03:04:fb:25:d7:94:9e:8b:87:11:b0:
                    21:77:81:61:98:c6:be:1e:78:48:a7:45:b5:a1:98:
                    84:ca:fd:e0:54:26:21:da:1c:25:af:03:71:72:fe:
                    d1:27:21:66:16:c2:ab:92:61:bc:d8:42:15:f7:f2:
                    c9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9E:EC:8A:08:CE:FB:DB:D5:EB:D7:38:BA:76:1C:93:51:57:3C:F8
            X509v3 Authority Key Identifier:
                keyid:95:1B:B4:90:E0:9D:F1:46:7E:4E:EC:43:D8:F2:04:84:CE:E8:39:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea6f61-a9d2-4c6b-b717-1db4ed131bc3/1/lRu0kOCd8UZ-TuxD2PIEhM7oOf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:0d:a0:3a:2b:9e:08:d3:24:0f:94:72:84:0d:db:9a:f9:2c:
         72:cc:8c:44:a6:9e:97:b9:52:71:cb:5c:82:9a:9d:ac:51:7f:
         74:77:c9:5c:ea:c6:0d:f7:9e:46:2c:73:d5:5d:bf:aa:11:5b:
         b1:f9:66:34:0f:38:14:ff:27:16:04:3a:f2:ca:bb:3a:9e:79:
         d9:a5:7a:0e:75:f9:c3:58:5d:80:b8:53:3e:17:3a:f9:a0:63:
         7d:b6:c2:dd:5b:1c:7f:92:f9:00:ed:5e:74:8d:b4:40:da:90:
         8c:b8:30:50:d2:65:17:fe:7b:1e:2e:11:e7:d2:d6:f7:e2:59:
         bf:53:7f:84:bc:8b:f3:4c:70:48:9a:56:a3:d5:29:d4:9b:ba:
         c2:93:8c:3c:60:31:9d:45:56:43:b7:83:5c:8f:57:f0:c0:cd:
         87:ed:d1:fd:dd:29:46:20:97:66:8d:c8:8c:40:4e:ac:b4:3f:
         a0:24:34:f1:88:92:4b:72:74:a3:7f:4f:41:a6:65:34:32:2d:
         11:45:3c:83:13:9c:af:62:57:1f:a6:24:6c:26:0b:be:22:ac:
         5b:90:0b:7c:ef:0b:c6:7c:30:bf:27:9b:8a:14:6d:2a:9a:db:
         90:a9:c5:88:9b:55:bc:ba:a0:90:cd:57:4e:e2:97:43:3b:3c:
         b1:13:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:55:28 2026 by rpki-client