Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
File:                     Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json)
Hash identifier:          olSmDS6oRGJa3KqTsvayZFFaMQzS9xlwMVsHkT20I4M=
Subject key identifier:   2D:94:6B:72:4F:89:1C:F0:04:F6:35:9B:B5:09:62:A0:10:5E:24:7D
Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
Certificate issuer:       /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Certificate serial:       01A06D5D87A4ABCC06AB13F7BB6A1BAEA9C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
Manifest number:          0EDE
Signing time:             Fri 04 Sep 2026 17:00:41 +0000
Manifest this update:     Fri 04 Sep 2026 17:00:41 +0000
Manifest next update:     Sat 05 Sep 2026 17:00:41 +0000
Files and hashes:         1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: yCdJU8ODV/HTx/quZWFuyazgGSITOX+HdOS3juIK1q0=)
                          2: c0i8991UJCOly_bGDSBQG4Aot8k.roa (hash: fe/DfYOp9gMMpbSc+SphBLp4DkHzqjeSNzT9WK5FYRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:5d:87:a4:ab:cc:06:ab:13:f7:bb:6a:1b:ae:a9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
        Validity
            Not Before: Sep  4 17:00:41 2026 GMT
            Not After : Sep  5 17:00:41 2026 GMT
        Subject: CN=2d946b724f891cf004f6359bb50962a0105e247d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:18:e6:ff:85:04:7e:78:90:e0:be:2e:a4:
                    8a:5b:8a:bb:4e:89:7b:56:7a:d9:f8:ea:cd:c7:1c:
                    c4:da:23:96:0f:69:cb:db:c5:ce:e3:99:f0:cc:29:
                    81:d0:e3:c6:c7:d7:3e:64:7e:16:17:3d:3d:b1:8a:
                    cc:b3:e4:86:0c:2b:36:76:68:70:70:a4:cf:54:fb:
                    19:c0:31:ea:85:eb:4b:dd:3a:60:48:f4:b3:db:0f:
                    07:45:d8:b0:aa:72:9f:7c:89:28:38:59:00:69:2d:
                    74:e1:b2:f7:00:1f:df:c5:0b:9f:ce:cb:83:27:9f:
                    79:d7:f8:a2:72:23:a0:60:5d:ec:de:ad:ce:01:5a:
                    da:47:db:4d:e4:d5:5a:b5:e3:b5:9e:87:7f:f1:7b:
                    06:37:10:d8:95:e6:9b:c8:fe:87:9b:e5:57:d6:97:
                    92:61:4f:ed:8f:10:a9:aa:c3:16:6e:e1:6d:79:84:
                    8e:ae:3d:8f:84:20:3d:80:a8:d0:83:6f:a3:3c:e4:
                    10:04:71:0a:20:51:c9:c8:bd:d5:79:bb:66:13:0c:
                    5b:48:75:bc:b0:6a:8a:3d:12:39:d1:d4:fd:72:25:
                    d9:e0:06:5b:c8:90:cb:b1:0b:4d:94:3c:eb:66:99:
                    31:81:d4:2f:75:2f:ee:5d:a1:e1:49:6a:da:66:60:
                    3d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:94:6B:72:4F:89:1C:F0:04:F6:35:9B:B5:09:62:A0:10:5E:24:7D
            X509v3 Authority Key Identifier:
                keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:87:e3:af:b7:e1:12:e4:81:3b:0f:7b:13:21:7a:47:04:d2:
         0e:80:95:57:79:d8:f4:9b:a7:09:7f:c6:ed:97:99:5d:c0:33:
         c1:cc:68:3f:b7:0e:31:ab:b1:c7:67:a9:67:dc:fb:9b:7d:fa:
         10:20:22:3a:f9:f1:7a:17:14:aa:1f:28:45:29:8d:f4:57:a7:
         3a:1a:cb:46:ea:09:69:c4:3d:c5:06:27:79:0f:59:da:7e:2f:
         2e:33:d1:1d:67:42:f8:7d:61:b0:91:96:79:6e:62:15:6c:9d:
         bb:88:fc:97:41:d9:80:34:4b:d2:4b:0a:19:7b:12:5d:96:1a:
         8d:9c:28:f5:90:26:45:48:b4:bb:f7:89:74:14:ee:92:19:96:
         63:1a:b5:51:6f:37:66:ce:68:1e:d3:bc:97:5e:b6:9f:72:84:
         4a:97:a9:1b:77:78:e8:54:a6:1b:4a:df:07:ad:e5:ef:43:32:
         ce:5c:0b:7e:40:03:41:dd:e5:17:6e:f4:d7:34:3b:38:37:81:
         c2:05:e0:72:b4:81:14:b8:af:e1:da:85:30:3d:05:52:2f:76:
         5d:61:ef:30:ce:96:2d:d8:bd:39:8b:c9:a3:54:b2:55:2d:e0:
         79:55:e9:f4:bf:69:cc:19:c5:dc:28:dc:98:e5:e5:ab:69:4e:
         cb:e0:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:43:04 2026 by rpki-client