Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File:                     SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier:          GnhJVbilnwuXYW3wACppb2OGb437cLYONCYK5OIfDLI=
Subject key identifier:   D6:D4:1D:B4:0B:54:69:A4:6B:3D:40:FC:3A:88:5A:F1:79:48:0F:82
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer:       /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial:       01A089E7BDBAFF5D92868BC60D7E5375F22A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number:          0E4B
Signing time:             Thu 10 Sep 2026 06:01:01 +0000
Manifest this update:     Thu 10 Sep 2026 06:01:01 +0000
Manifest next update:     Fri 11 Sep 2026 06:01:01 +0000
Files and hashes:         1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: E6xl5oQ1OsTWRZG1kb42cGPqwDLImOtLGocgQbRYXW8=)
                          2: kypMcuIm-WpR0ZjTrQvN18lgASs.roa (hash: rpyCcsQ2xUEDWY8mMlJ3ItAHPdOq2MVR8TSSQ09U5AQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e7:bd:ba:ff:5d:92:86:8b:c6:0d:7e:53:75:f2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
        Validity
            Not Before: Sep 10 06:01:01 2026 GMT
            Not After : Sep 11 06:01:01 2026 GMT
        Subject: CN=d6d41db40b5469a46b3d40fc3a885af179480f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:a2:9d:71:69:15:ef:26:a7:2b:74:52:d8:
                    08:33:af:40:9a:8c:80:0f:74:26:04:d5:43:24:78:
                    a3:8f:fe:5a:70:3b:ef:a4:29:17:0c:03:38:7d:9b:
                    76:b2:6e:9e:77:95:e7:98:ad:8f:a0:75:56:d6:b6:
                    92:c8:5a:f8:b0:1c:07:61:de:25:2c:cc:b7:80:88:
                    ef:7f:ca:43:ad:d0:58:71:5b:60:d2:e5:0b:33:61:
                    5b:9a:41:3d:8f:b0:eb:68:d6:24:7c:4b:bd:6e:c1:
                    17:ce:5a:22:82:1f:58:14:72:52:73:5f:81:f4:64:
                    1d:49:20:a2:28:f8:2e:63:26:79:3d:80:df:ef:fb:
                    1a:01:2a:62:5b:fc:60:c7:fd:c5:77:57:b9:68:8c:
                    4b:59:92:5d:ed:29:2b:d1:bd:79:5d:32:89:8a:e5:
                    68:0a:dd:06:3c:81:e2:9d:ff:8e:1c:69:13:a3:6c:
                    98:37:00:1e:28:8c:69:8d:c0:aa:c4:26:f4:2f:48:
                    75:24:52:ad:60:bb:7c:a0:12:96:11:3f:8f:01:06:
                    52:20:df:4a:c6:85:44:19:a6:2b:72:2f:9d:e4:c1:
                    58:23:fd:c1:3e:22:5b:e1:62:b7:64:9e:4c:d1:ba:
                    bc:56:62:a8:bc:3c:8e:63:5d:7f:e7:66:29:c3:41:
                    79:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D4:1D:B4:0B:54:69:A4:6B:3D:40:FC:3A:88:5A:F1:79:48:0F:82
            X509v3 Authority Key Identifier:
                keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:99:d0:52:f3:b6:57:21:b5:45:83:dd:6d:ee:37:4b:71:b2:
         63:f0:1e:fb:70:25:de:ff:a2:99:55:52:18:53:c0:c7:aa:d9:
         d5:ff:23:62:89:fc:c6:16:ff:36:b8:46:31:ce:c0:be:9a:f6:
         3a:d4:09:30:87:12:62:00:81:79:c9:01:af:9a:7f:9f:cb:ab:
         40:3c:65:b6:0d:6d:07:7e:c3:0d:7c:5e:3d:3d:9d:95:0c:31:
         20:b9:c6:56:11:4c:03:16:7f:42:b2:5d:5c:6f:35:7c:91:e1:
         2a:ba:e8:e3:74:e6:0a:90:ff:5b:e4:1c:00:16:4a:75:85:81:
         ca:ee:fd:e5:97:db:de:d0:5e:77:45:46:78:fb:70:79:d6:99:
         4c:0d:b0:2c:cf:54:e6:68:57:59:a9:a0:25:b1:93:a6:00:1e:
         19:05:70:05:ac:9a:b8:bb:38:04:b1:0c:e3:76:74:57:88:e4:
         89:fe:d2:0b:ff:70:ec:86:4e:ee:b1:39:57:96:fb:49:1a:63:
         b8:29:59:36:fa:98:6f:c7:5c:9a:40:7f:6f:e4:60:a4:39:e8:
         20:53:14:12:d2:bc:28:a7:7a:53:c0:be:06:3d:d0:1f:00:3e:
         fe:b8:b9:00:82:ec:a5:0f:cd:f2:32:c6:a0:8b:d1:c2:d3:9e:
         5b:54:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:30:23 2026 by rpki-client