Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
File:                     xorAnHI17TE4Ph_ThzkY3RgzNCo.mft (raw, json)
Hash identifier:          YF+OVszfuAg6iZ+jX4saWb5e6RlvD/qBJJXpOBDwng0=
Subject key identifier:   0B:D2:48:09:77:AC:70:54:9E:E9:1D:4F:54:85:6C:EA:A6:DB:58:18
Authority key identifier: C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
Certificate issuer:       /CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Certificate serial:       01A08B314ECE872B6875010CFE503C340742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
Manifest number:          0A17
Signing time:             Thu 10 Sep 2026 12:00:59 +0000
Manifest this update:     Thu 10 Sep 2026 12:00:59 +0000
Manifest next update:     Fri 11 Sep 2026 12:00:59 +0000
Files and hashes:         1: xorAnHI17TE4Ph_ThzkY3RgzNCo.crl (hash: 7bl/BURGg8qpKOjK33zy6MDgcoLc0peH7XPycPFKWaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 12:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:31:4e:ce:87:2b:68:75:01:0c:fe:50:3c:34:07:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68ac09c7235ed31383e1fd3873918dd1833342a
        Validity
            Not Before: Sep 10 12:00:59 2026 GMT
            Not After : Sep 11 12:00:59 2026 GMT
        Subject: CN=0bd2480977ac70549ee91d4f54856ceaa6db5818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:e7:8a:5a:32:36:97:3d:02:0a:b4:04:d5:
                    5a:3c:c1:cd:7a:d3:36:e3:92:2f:bd:85:54:e5:1b:
                    57:9c:46:64:74:b2:2c:be:56:d7:fd:67:c5:17:b7:
                    bc:c8:2f:f5:4f:83:79:d7:1f:d5:33:12:bd:07:de:
                    de:f2:32:b3:a0:f4:2b:3f:b8:70:24:a2:5e:10:2c:
                    d4:b7:cd:5f:4a:83:6a:b4:28:e3:7b:4c:a0:e3:28:
                    f3:f3:43:98:bf:2a:40:1a:83:93:12:87:c5:8b:30:
                    03:11:30:ec:25:41:02:c9:59:f0:bf:32:c8:e3:db:
                    38:1a:fd:3f:f8:70:af:9f:23:e7:72:21:cd:eb:c6:
                    32:f7:b7:96:49:12:0f:d9:d6:26:70:aa:5b:62:f5:
                    7c:1f:9b:6d:5c:29:37:cc:96:5a:38:13:4e:9d:18:
                    16:eb:1d:37:a9:68:ea:57:c0:22:20:0a:06:0a:7d:
                    58:15:18:54:dc:d7:44:70:90:f4:90:c5:be:a6:40:
                    6c:b9:4b:5b:ad:66:06:be:9e:6e:6b:16:23:34:9a:
                    68:e2:56:43:38:4b:6c:90:51:c0:90:52:c0:94:2b:
                    c5:3a:73:4f:31:e6:d4:49:69:73:f4:0d:2c:78:ec:
                    98:e9:72:20:da:a8:d5:78:ff:4a:a7:06:23:a6:14:
                    87:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D2:48:09:77:AC:70:54:9E:E9:1D:4F:54:85:6C:EA:A6:DB:58:18
            X509v3 Authority Key Identifier:
                keyid:C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:1b:a0:f4:43:dd:12:47:28:24:8a:a1:bb:23:3c:f6:b7:86:
         56:fa:51:61:63:8d:a0:66:a4:50:eb:ae:9b:75:d6:b3:48:d1:
         f6:09:5a:24:63:03:d9:68:89:5e:fe:30:4a:eb:46:e5:dc:d0:
         fb:39:c6:49:91:30:fc:a7:69:cc:81:5d:9a:e2:33:9d:01:4f:
         b3:ac:70:ab:40:3a:0f:6f:42:de:fc:b5:c5:12:e7:ba:81:b5:
         84:81:bb:d4:ad:83:f5:83:12:c6:78:de:bd:7a:ec:c4:0f:83:
         52:ee:20:ed:2e:7d:83:06:e0:9e:e7:de:cb:5d:21:6c:fa:be:
         52:99:68:54:ce:aa:db:21:0d:9e:3e:39:11:fd:f9:e4:94:7e:
         82:3f:f6:a4:86:a9:7a:dd:b9:d6:2e:70:37:df:eb:21:d7:02:
         f3:d7:9e:a2:23:58:be:71:be:7d:24:23:67:53:6b:e5:b3:00:
         cf:ff:d5:64:1c:08:5a:e8:63:ba:f2:a0:76:fa:3c:0f:a4:87:
         22:22:75:ee:ae:79:4a:87:98:1b:c1:80:fd:42:af:d5:58:81:
         c1:ef:5d:ac:1f:88:e5:89:34:19:8e:83:96:72:a6:95:2d:90:
         72:e1:4d:2e:26:f3:fe:d9:a1:f6:2e:f7:7d:8c:97:ed:ac:38:
         66:2e:79:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:24:37 2026 by rpki-client