Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
File:                     e9kR8fTQvD7mLvgzIwehNUVitSU.mft (raw, json)
Hash identifier:          gBADbt9kqigMWsu81kOLE8GKQujmtl6aupLL4OnHh8Y=
Subject key identifier:   2C:18:82:22:75:43:57:85:C4:95:89:A0:82:66:A2:E9:FC:FE:55:48
Authority key identifier: 7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25
Certificate issuer:       /CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
Certificate serial:       019FA07186BBA21531512D4B5EF3EBC1E243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
Manifest number:          0DD0
Signing time:             Sun 26 Jul 2026 22:00:22 +0000
Manifest this update:     Sun 26 Jul 2026 22:00:22 +0000
Manifest next update:     Mon 27 Jul 2026 22:00:22 +0000
Files and hashes:         1: e9kR8fTQvD7mLvgzIwehNUVitSU.crl (hash: 2zUfK+Pll4yGX1XGE/trrHUEc8nAm2t5p5Seq+BB6po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:71:86:bb:a2:15:31:51:2d:4b:5e:f3:eb:c1:e2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
        Validity
            Not Before: Jul 26 22:00:22 2026 GMT
            Not After : Jul 27 22:00:22 2026 GMT
        Subject: CN=2c18822275435785c49589a08266a2e9fcfe5548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:5a:0a:b0:08:0b:75:95:2a:b4:fa:87:21:
                    a9:96:7e:60:20:e3:f4:22:32:e3:c3:c7:a0:4d:25:
                    2d:5c:9d:d4:13:72:ce:cb:b2:29:0b:ca:20:7e:d9:
                    ac:2a:4e:1b:16:64:da:65:fd:e2:bb:8e:70:fd:e5:
                    0a:20:b6:6a:2f:34:4b:cd:b2:c1:72:d3:86:08:46:
                    b6:d1:03:16:82:67:7d:e2:bf:7a:05:4d:8c:b2:00:
                    43:a7:30:61:a0:a0:24:d7:da:c1:3d:6d:48:29:ac:
                    8f:e2:74:92:20:44:8d:ee:f5:86:51:75:db:66:06:
                    96:14:9f:3f:23:a9:fa:80:b9:88:a0:ce:a3:f1:1e:
                    b5:26:26:b4:fe:44:78:eb:d6:66:f0:60:0e:6f:e7:
                    4a:95:0d:e5:5a:3d:04:30:09:44:58:be:94:4f:bc:
                    8b:a5:37:62:b5:8d:3a:5a:4d:e2:dd:ce:f7:79:40:
                    a7:b1:69:d2:f3:14:52:17:fd:31:15:33:7e:b7:1b:
                    02:9f:b8:1e:8d:04:d5:cb:6e:5c:d2:25:45:5f:c1:
                    3c:bd:2d:9d:d5:20:e5:ff:22:29:de:ef:71:ac:ad:
                    16:58:d4:11:9a:89:2a:d2:ad:84:3a:2b:21:03:87:
                    bd:4e:96:81:25:41:4f:5c:8e:51:95:af:ca:c1:fd:
                    f2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:18:82:22:75:43:57:85:C4:95:89:A0:82:66:A2:E9:FC:FE:55:48
            X509v3 Authority Key Identifier:
                keyid:7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:26:19:a5:b7:56:ac:69:44:97:0e:0d:30:00:d1:72:1f:7e:
         a5:63:82:f7:51:be:73:f4:42:89:85:f9:24:9b:56:9e:0c:4e:
         2b:68:b3:87:96:a4:ff:3f:f9:76:2d:9a:77:20:e1:95:e6:ad:
         3d:d3:60:47:51:3a:79:2a:ea:54:00:59:06:a6:40:8c:82:06:
         fd:8e:b4:8d:56:e0:6a:a9:de:79:eb:1e:9a:ff:84:e1:98:73:
         dc:0d:25:5a:86:64:f4:e6:53:23:bc:54:2d:ae:2c:12:ab:b9:
         b8:4c:5b:ec:25:95:48:57:6b:22:9f:1f:ec:c7:97:ea:40:27:
         86:da:28:b3:54:fe:d0:04:3a:6c:f6:e2:6b:d0:a5:2a:0e:57:
         25:b7:e7:f0:2a:d0:6c:32:2d:1a:ad:02:db:46:28:c1:32:66:
         fd:42:8a:1b:a1:40:ac:cb:11:92:3f:f4:b6:ba:1f:09:48:57:
         87:b8:6f:91:57:2e:75:24:78:af:5a:ad:ea:47:03:1b:5b:05:
         9b:d8:19:6d:5d:bb:f7:3b:76:7a:97:8e:67:6a:8d:92:82:87:
         71:cb:a3:8e:d7:ed:70:60:bd:34:72:19:07:9a:6e:f3:ca:8d:
         26:bd:fd:d8:45:4b:38:53:70:85:d6:34:66:74:ee:aa:1f:51:
         e8:48:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:48 2026 by rpki-client