Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
File:                     rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft (raw, json)
Hash identifier:          U2ZiNiIbDq/A0AYbtxwPQkgiN4ilxakbhnUFaY2bnHM=
Subject key identifier:   B8:0A:7D:B6:56:93:29:9F:73:C7:5E:73:F0:4B:54:DC:F9:9F:34:F2
Authority key identifier: AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
Certificate issuer:       /CN=adec58a002495d03ad5d9d11dd1421f195128524
Certificate serial:       01A08AFA90502AD659A7F700315D18EB1E4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
Manifest number:          0941
Signing time:             Thu 10 Sep 2026 11:01:11 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:11 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:11 +0000
Files and hashes:         1: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl (hash: 9XgLK0d1GpeD+lRrJcqvvjXizXjHVOLdWqrmuOGg+AM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:90:50:2a:d6:59:a7:f7:00:31:5d:18:eb:1e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adec58a002495d03ad5d9d11dd1421f195128524
        Validity
            Not Before: Sep 10 11:01:11 2026 GMT
            Not After : Sep 11 11:01:11 2026 GMT
        Subject: CN=b80a7db65693299f73c75e73f04b54dcf99f34f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:56:a5:7b:22:c3:7f:93:09:3f:21:41:41:
                    39:90:b5:2d:bf:54:23:49:91:f4:25:1c:42:24:7f:
                    6e:a8:22:4d:e8:53:14:50:d5:b8:77:9a:16:a6:47:
                    80:66:24:a5:0c:5a:4d:11:9a:d0:ea:b0:11:7c:13:
                    b0:16:8d:5f:b9:71:24:a3:cc:4a:33:7a:4c:70:55:
                    54:80:df:ee:fe:bc:82:b5:e6:ad:2b:a5:e3:a8:e9:
                    63:37:ab:00:d8:88:be:fa:ce:d1:15:c6:c7:ec:ab:
                    96:7c:dc:00:94:08:7f:f4:8d:d7:31:15:0e:bc:e8:
                    56:df:11:1f:cf:e4:ff:9f:91:4c:50:32:68:f1:91:
                    77:13:31:f1:1a:30:bb:8e:71:3e:ae:26:f3:67:2e:
                    dd:fa:4f:5b:67:c5:56:fa:a6:4f:f1:ba:89:41:90:
                    f6:00:45:40:15:ed:95:5b:1d:a8:3a:4b:87:7b:1d:
                    f4:bf:94:76:68:c2:76:f7:28:d2:80:15:fb:11:a0:
                    f8:22:a3:66:86:ce:95:d2:e0:b9:6c:36:5d:21:27:
                    90:d8:62:e1:17:62:e4:f4:cc:4d:c1:4e:2c:8a:78:
                    53:64:32:d8:2b:de:12:e5:8d:a4:28:55:0c:31:9f:
                    30:77:d2:15:71:c6:b6:31:8f:56:63:5d:c0:03:62:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0A:7D:B6:56:93:29:9F:73:C7:5E:73:F0:4B:54:DC:F9:9F:34:F2
            X509v3 Authority Key Identifier:
                keyid:AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e9:68:65:bb:40:61:a6:6f:14:63:ee:6d:0f:22:e0:58:fd:
         9e:fc:d2:20:1c:b3:ea:d6:2d:99:7c:75:39:b4:63:90:ee:41:
         4f:10:ec:3e:81:d1:89:e3:5a:b4:d9:4c:6f:27:e8:80:4d:d5:
         8e:34:7b:2b:77:45:cc:a2:7d:36:fe:5f:6e:c9:31:14:40:c5:
         48:f2:95:ff:8a:bf:7f:a3:9b:e7:0d:bb:82:d8:7d:e9:84:e2:
         f7:bc:2a:75:0a:50:27:5a:8d:59:bc:55:8a:eb:fa:c0:34:f4:
         19:c2:29:78:87:15:20:2b:97:28:51:d5:25:d1:b3:f4:3a:d7:
         e2:ab:fa:12:3a:42:dc:b8:dd:d4:01:02:06:80:44:e0:0c:9b:
         72:35:c0:d6:f7:3b:68:f2:95:97:ee:09:e3:71:0d:ee:a4:12:
         90:b2:8d:e2:16:ac:af:9e:45:27:bd:c4:24:4e:6f:13:49:0b:
         1c:89:54:f9:cf:3e:63:6e:d7:5f:42:59:36:df:d3:4c:54:86:
         60:72:58:be:a2:62:9b:77:25:dc:90:98:4d:d0:7d:ff:db:6f:
         2b:64:38:b2:f6:bf:79:2b:31:49:25:62:c9:6f:65:19:51:49:
         ce:07:fd:3f:c5:d8:af:a4:b6:03:58:c1:16:9e:20:2c:b2:ea:
         e2:47:0b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:29 2026 by rpki-client