Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File:                     dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier:          t1TLbwDwT9UMxtr4mVN1y2HJWTeic05BLARyCewi6oo=
Subject key identifier:   EB:73:44:0D:37:1B:7F:2E:A1:3F:32:3D:05:DE:CA:4E:A9:18:6C:5D
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer:       /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial:       01A12B441DC14737E650448698C22A3091E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number:          0EC4
Signing time:             Sun 11 Oct 2026 14:00:46 +0000
Manifest this update:     Sun 11 Oct 2026 14:00:46 +0000
Manifest next update:     Mon 12 Oct 2026 14:00:46 +0000
Files and hashes:         1: cLTBY0x98iSs-6Cq3vbECPm_74w.asa (hash: 8w6sqSdlGvX1lbVCngXKKl24zTm7KhQKQzRK40Ycchc=)
                          2: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: riYUQjEOBNk22zigxBLz75jFzkYtlBVBSIrO7cZIajY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:44:1d:c1:47:37:e6:50:44:86:98:c2:2a:30:91:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
        Validity
            Not Before: Oct 11 14:00:46 2026 GMT
            Not After : Oct 12 14:00:46 2026 GMT
        Subject: CN=eb73440d371b7f2ea13f323d05deca4ea9186c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:ad:46:0a:a8:a2:bf:df:a7:24:87:a7:78:
                    36:1e:90:e3:31:ab:63:fa:c4:65:5c:87:5d:a0:ea:
                    92:35:a6:ef:b1:92:4a:6d:ea:24:af:b7:2f:5f:84:
                    aa:10:50:8c:94:0e:f4:3d:a6:bb:89:c5:85:1c:43:
                    c9:80:56:2d:53:de:86:c2:08:c7:37:14:e7:ab:7d:
                    f8:61:e5:a2:7c:8c:9c:df:04:97:e6:b7:c3:fc:8c:
                    fb:11:7c:d8:dc:c2:b4:4f:a2:d0:15:49:14:92:06:
                    ac:73:3f:98:d9:1d:c2:af:8d:11:83:a1:21:59:5d:
                    2f:6e:93:8d:22:05:1b:47:75:81:fe:b5:b7:2f:83:
                    9a:c1:dc:6a:c8:2f:05:a2:8d:d0:a6:3b:f1:9c:38:
                    56:f7:0b:ed:c8:eb:6b:18:cd:f3:60:85:83:4d:24:
                    e5:b2:f6:eb:c8:b5:b9:a1:06:9e:6a:04:4b:cf:93:
                    01:77:98:9d:84:0a:91:e2:65:46:fe:24:62:ac:4f:
                    c5:8d:13:cd:a3:ca:20:14:08:2d:a6:c9:c0:fd:e2:
                    40:b2:28:3d:e0:fe:39:25:9b:2c:7e:3b:06:a4:29:
                    9a:8f:aa:0c:34:0c:6c:19:8b:c6:ac:8b:83:06:76:
                    00:84:6f:0d:a8:a7:25:45:3e:01:b7:cc:a1:93:00:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:73:44:0D:37:1B:7F:2E:A1:3F:32:3D:05:DE:CA:4E:A9:18:6C:5D
            X509v3 Authority Key Identifier:
                keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:9a:6a:5a:f6:cf:ab:14:31:86:a2:01:48:92:ab:af:e7:85:
         c6:53:ba:2e:1f:30:0b:99:a0:33:b8:43:ce:0c:52:07:e4:51:
         a4:30:4a:ee:eb:33:2a:90:50:e7:7e:5d:44:95:74:6c:66:d4:
         4f:c9:f0:ba:f3:a7:ac:98:8c:99:36:9e:ba:fe:af:6b:2e:36:
         d3:b5:c4:69:20:7a:40:20:07:37:49:ed:24:13:aa:e5:b8:38:
         7d:55:0d:88:a5:78:24:91:44:43:fe:24:67:37:c8:3b:89:0c:
         6e:2f:c4:2f:09:97:41:a0:fd:2a:49:9a:e4:9e:99:b7:3d:62:
         08:29:5f:00:f5:07:1f:c7:f4:b9:de:62:5e:99:73:0a:8a:b1:
         50:be:3c:df:05:81:30:91:7f:46:f5:07:75:99:ba:b8:13:6f:
         bf:d4:0e:18:ab:fc:c8:20:75:02:98:cf:8f:63:86:bb:01:c4:
         0f:b3:fa:da:e1:ca:65:55:fc:36:87:00:f2:2d:d6:1b:4f:2a:
         3d:d9:25:1e:7c:0d:9c:ba:0f:ab:22:46:9c:07:c1:81:1d:cd:
         8b:cc:b0:b7:c8:cb:83:1a:d3:98:9f:d3:3b:62:67:8e:f4:8c:
         87:8e:8d:c2:ab:77:51:fa:08:51:29:04:85:91:d6:98:1e:75:
         b4:cf:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:48:02 2026 by rpki-client