Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.mft
File:                     3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.mft (raw, json)
Hash identifier:          VSTNsvcAo+WNvr5m9NubQflsFPnpjT2E1aES3dTBB/s=
Subject key identifier:   C5:6D:0A:E5:02:0F:27:AC:3F:0A:5C:9A:75:A9:65:44:6E:B7:FF:32
Authority key identifier: DD:4C:BC:78:17:74:36:CF:E5:DF:BB:57:82:DD:70:28:F0:58:F4:44
Certificate issuer:       /CN=dd4cbc78177436cfe5dfbb5782dd7028f058f444
Certificate serial:       01A0E51A128427E822E92721F28A3A2B661C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.mft
Manifest number:          4E
Signing time:             Sun 27 Sep 2026 23:01:26 +0000
Manifest this update:     Sun 27 Sep 2026 23:01:26 +0000
Manifest next update:     Mon 28 Sep 2026 23:01:26 +0000
Files and hashes:         1: 3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.crl (hash: eSZT+C98vir1xZXGnq/h403yqxZ9gHAjVTWlHcL/sKw=)
                          2: qEAo8Mc9WDfrrACz_WIGNY6jEKw.asa (hash: aHzU+u1zOjJwE23C3Y/zhbfbtLovXRgW0Lo6a/gy4nk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:1a:12:84:27:e8:22:e9:27:21:f2:8a:3a:2b:66:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4cbc78177436cfe5dfbb5782dd7028f058f444
        Validity
            Not Before: Sep 27 23:01:26 2026 GMT
            Not After : Sep 28 23:01:26 2026 GMT
        Subject: CN=c56d0ae5020f27ac3f0a5c9a75a965446eb7ff32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2b:8f:96:47:49:01:db:b9:5a:09:8a:ab:e8:
                    82:0d:46:73:5b:12:94:1e:a1:49:f5:04:47:28:98:
                    80:23:ad:82:4c:46:ee:89:ae:68:ef:0d:3b:a8:59:
                    b3:51:9b:18:8c:07:25:d6:07:fe:46:af:fd:c0:62:
                    96:12:7a:78:81:29:a3:9a:8b:a6:83:5f:b4:40:b8:
                    ca:65:5b:a3:3e:59:ff:75:ab:23:2b:e9:92:fe:a7:
                    87:52:7e:0d:51:00:54:58:b3:33:fe:19:7f:46:eb:
                    c8:c1:38:53:8e:5c:59:a9:89:9a:93:9a:01:28:18:
                    79:ba:59:30:c8:95:1c:9c:1a:26:1a:50:6a:ce:0e:
                    50:d3:ab:2d:d3:3d:90:5a:d4:91:56:e1:87:c1:00:
                    a4:6f:c4:68:c4:00:a8:97:5a:c1:21:8d:56:97:4e:
                    30:22:b8:66:a4:37:c4:e6:f2:db:d3:cb:50:56:1b:
                    b9:cb:e9:71:3f:e2:6c:9b:0d:2c:47:bc:fd:f1:92:
                    5f:5e:b7:8f:1e:5f:07:6d:34:0c:6c:5a:13:92:da:
                    a1:3e:7b:07:33:62:59:63:cf:87:c1:fa:c3:49:c3:
                    06:27:3c:37:4b:0f:ad:63:eb:41:7c:82:ec:da:28:
                    39:74:ba:05:03:b9:a3:86:ca:66:3a:3c:60:32:23:
                    a9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6D:0A:E5:02:0F:27:AC:3F:0A:5C:9A:75:A9:65:44:6E:B7:FF:32
            X509v3 Authority Key Identifier:
                keyid:DD:4C:BC:78:17:74:36:CF:E5:DF:BB:57:82:DD:70:28:F0:58:F4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e7e16a-4f16-495a-a853-76169dfe5f18/1/3Uy8eBd0Ns_l37tXgt1wKPBY9EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:77:c1:08:8a:83:d8:db:a3:87:39:25:bc:84:0b:04:10:9f:
         4b:c7:6e:a3:59:ce:0a:93:a5:81:22:03:71:f3:45:85:5a:08:
         aa:c8:82:8e:fc:f6:90:b5:6d:50:5b:76:eb:3c:f9:68:8e:f6:
         a3:bc:74:81:ab:05:53:44:c9:c4:b2:c0:8f:e1:cc:0d:31:ab:
         97:7f:6b:26:26:27:5c:82:11:8c:40:cd:eb:f9:77:4f:ae:6c:
         8a:a7:c1:c2:35:cc:e4:b7:92:73:16:be:1f:0d:d7:bd:d0:86:
         24:d6:d7:43:8f:af:d2:f1:50:f9:27:38:3c:06:61:d5:d5:6c:
         0e:a5:1c:f5:78:39:10:6f:8d:24:43:f6:43:80:40:70:a1:fe:
         d7:72:52:6c:7d:fd:71:7c:e8:93:9b:dc:73:96:3c:58:9d:33:
         c2:c5:bf:3c:12:76:ef:b6:7d:9d:d3:da:11:8d:ed:84:74:09:
         3d:da:24:0b:3d:bb:77:d1:9d:6c:71:bb:98:e1:19:a6:c3:1c:
         c2:9d:a9:d9:be:eb:76:da:cf:dd:5e:56:84:42:03:37:40:7b:
         76:71:02:67:01:7b:83:e1:30:95:56:f7:f9:ee:95:67:96:eb:
         eb:c7:4d:cc:92:3d:ef:21:e6:e0:6c:00:60:3e:b6:0f:02:b0:
         b8:98:bb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:48:09 2026 by rpki-client