Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.mft
File:                     eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.mft (raw, json)
Hash identifier:          VKwBj2+PGZSqQxAXaQE48jONcyJbBLk8bGE4aDFlKl4=
Subject key identifier:   22:E4:E2:5F:76:84:80:15:3F:CB:78:B4:62:21:DF:ED:F4:95:F3:87
Authority key identifier: 78:31:C6:91:2F:11:C2:DF:E9:2F:EE:14:93:53:AA:8E:6D:98:09:BD
Certificate issuer:       /CN=7831c6912f11c2dfe92fee149353aa8e6d9809bd
Certificate serial:       01A0EA09DCD1D96A90D70CD82FE87D17AD59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.mft
Manifest number:          0129
Signing time:             Mon 28 Sep 2026 22:01:49 +0000
Manifest this update:     Mon 28 Sep 2026 22:01:49 +0000
Manifest next update:     Tue 29 Sep 2026 22:01:49 +0000
Files and hashes:         1: eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.crl (hash: L++NoXaG3IpufjNlQiJf/EaQmLw4hOsdlLSX0k3M5mQ=)
                          2: fOw93NQ54fHKmnOokgNp9f_FGR8.asa (hash: C4FmaMhFhqwSsxNQqIZDGYzhfTxD/l6bXS+k4pCf9WM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:09:dc:d1:d9:6a:90:d7:0c:d8:2f:e8:7d:17:ad:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7831c6912f11c2dfe92fee149353aa8e6d9809bd
        Validity
            Not Before: Sep 28 22:01:49 2026 GMT
            Not After : Sep 29 22:01:49 2026 GMT
        Subject: CN=22e4e25f768480153fcb78b46221dfedf495f387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:fe:1d:74:97:cb:52:90:c6:99:67:a9:f8:
                    b3:e9:b9:8d:0a:14:66:c7:e4:a1:28:2b:36:38:42:
                    de:33:1e:29:27:5a:ca:b5:f9:07:d1:45:a8:35:65:
                    d4:87:00:d1:a7:d0:c1:c5:3f:c8:65:6b:03:c6:d1:
                    10:cf:99:4a:ef:2a:35:78:6a:52:1e:ff:9d:9a:a1:
                    ea:cc:a1:2b:4f:1a:19:28:c4:ba:92:18:de:6a:cb:
                    99:83:65:d6:37:93:59:01:17:e1:82:88:84:a0:ad:
                    e1:3e:0d:91:3b:f1:fc:cb:dc:fe:1d:ae:a5:73:80:
                    0a:b1:d3:70:15:93:cf:52:92:2b:64:01:75:d1:e0:
                    5e:3c:97:79:cd:cc:b0:be:d1:3d:b2:b9:85:47:42:
                    c1:94:eb:a0:f3:46:b5:7f:bb:5b:07:37:28:60:5d:
                    36:10:3d:5a:7d:df:eb:50:df:b3:b8:a8:f5:e8:30:
                    e4:15:ce:f3:05:87:4e:e8:88:3f:a1:67:3e:d2:f1:
                    b2:90:e5:9a:d7:3f:38:3c:6e:9c:59:bd:6b:27:27:
                    62:81:cf:11:38:cb:d3:2f:92:b4:85:ef:78:bc:00:
                    ed:c3:10:1c:87:6b:07:44:7b:f3:44:ab:0b:4d:a4:
                    a8:f0:15:91:6d:18:0e:af:8f:39:d7:cc:a1:4a:a3:
                    d2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E4:E2:5F:76:84:80:15:3F:CB:78:B4:62:21:DF:ED:F4:95:F3:87
            X509v3 Authority Key Identifier:
                keyid:78:31:C6:91:2F:11:C2:DF:E9:2F:EE:14:93:53:AA:8E:6D:98:09:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:38:53:59:ae:73:e7:8e:43:7e:76:49:37:bd:3b:29:57:b5:
         c0:55:77:55:65:fe:2c:d7:ee:fe:8a:5a:19:c0:09:11:ed:3d:
         3a:19:be:f8:52:88:56:49:5b:e1:3a:2f:79:03:ae:3b:f5:e9:
         da:a9:e0:0c:43:c8:9f:60:5f:78:35:57:c0:71:44:34:39:55:
         c3:36:2d:81:48:68:95:b2:3a:a9:45:84:d2:f5:65:d5:39:40:
         79:e8:4a:f4:59:dc:47:56:ed:65:77:f9:36:23:7e:db:6b:de:
         e7:98:4f:dd:56:e3:49:f6:51:ec:b4:04:a2:c8:8b:57:40:c5:
         c6:98:a1:46:10:74:9e:94:4c:ed:6d:9e:eb:0d:8c:a3:a3:13:
         fd:e1:2b:0d:68:01:ee:33:85:a1:85:ee:28:71:15:27:84:a7:
         29:59:21:b8:a7:73:0a:c3:69:0d:c7:43:2e:86:93:84:36:3e:
         ea:19:ef:53:0a:31:cf:14:91:66:24:58:36:b3:46:f8:1b:dd:
         4e:13:69:38:58:8c:07:61:76:f3:63:2f:8a:b3:37:c2:c9:2a:
         1e:c8:ec:ea:e1:b4:a4:22:e2:6e:4a:e8:c3:08:ae:19:7b:29:
         30:c8:22:4c:f1:99:39:2d:7f:ba:1c:43:26:32:51:aa:8a:5a:
         41:59:0d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 07:03:51 2026 by rpki-client