Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
File:                     0mepGaXTLOov1ByKnhhRC__86NY.mft (raw, json)
Hash identifier:          BhooYecSBlfy9YQwxqP1ihM6ombE7kwpYd9JkRUnGrQ=
Subject key identifier:   25:14:A9:DD:82:6B:4D:75:A0:5C:07:AE:7D:FF:43:8E:63:E7:CA:59
Authority key identifier: D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6
Certificate issuer:       /CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
Certificate serial:       01A00101C4867D2B10518429B6F38F7141E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
Manifest number:          146F
Signing time:             Fri 14 Aug 2026 16:01:28 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:28 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:28 +0000
Files and hashes:         1: 0mepGaXTLOov1ByKnhhRC__86NY.crl (hash: RNloMoEdF/rsdDZ5KWM7QMhYxaGeebSXrohzpzQ41G4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:c4:86:7d:2b:10:51:84:29:b6:f3:8f:71:41:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
        Validity
            Not Before: Aug 14 16:01:28 2026 GMT
            Not After : Aug 15 16:01:28 2026 GMT
        Subject: CN=2514a9dd826b4d75a05c07ae7dff438e63e7ca59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:40:49:89:6b:75:f6:ee:59:a0:7b:e7:81:
                    71:1e:b5:88:7c:f6:31:97:a9:5c:ab:c8:43:e3:31:
                    b6:9c:a5:39:a1:2e:05:25:a2:56:64:70:b7:6c:8c:
                    41:39:24:42:5a:58:22:92:8f:3c:4e:01:23:69:6c:
                    a7:27:97:1c:e1:63:29:1e:45:a9:53:0a:31:3f:fa:
                    6b:e7:53:ec:42:be:de:b5:77:06:b9:84:e7:49:88:
                    17:eb:60:6d:28:48:e2:8c:50:f5:31:5a:a5:17:2e:
                    39:5d:ae:10:75:e2:58:b1:ee:4d:cf:b6:dc:28:a7:
                    4c:fa:ec:c6:3f:fa:96:51:30:f2:22:cf:82:2f:ac:
                    41:87:47:a5:ff:33:17:0f:63:d2:fd:7a:25:bb:8e:
                    10:80:32:6f:99:65:17:4c:98:da:2e:6e:e8:3a:e3:
                    b0:40:ae:bf:b5:e0:83:ed:70:2f:e1:d5:fc:42:b9:
                    74:09:83:28:26:42:90:a6:8f:06:3b:e0:b2:2f:d6:
                    2a:b7:d0:aa:7a:5f:d6:61:af:c8:0c:ef:eb:f0:94:
                    08:a7:45:c6:77:aa:0f:f3:a7:4f:d7:5f:bc:94:ed:
                    4a:f1:f2:1f:92:58:53:aa:37:3c:f7:96:4b:a9:41:
                    20:54:52:64:3a:b9:1f:4c:1e:cf:96:2d:1e:e2:15:
                    e9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:14:A9:DD:82:6B:4D:75:A0:5C:07:AE:7D:FF:43:8E:63:E7:CA:59
            X509v3 Authority Key Identifier:
                keyid:D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c8:c8:60:b0:97:77:db:29:ea:7b:cf:7c:2d:e9:c0:96:5c:
         8e:6b:ca:cc:1c:93:5c:fe:f6:c5:e0:4f:e9:85:4d:8a:ad:3b:
         76:c9:b7:8e:58:b1:10:cf:ca:1c:e8:3d:fa:16:02:a2:4d:56:
         db:5a:72:d4:ec:2d:03:7d:8c:28:30:71:de:df:d3:9b:9a:4c:
         cd:f6:c6:10:d9:af:0a:8a:b9:3a:2e:e8:c8:a6:fb:f3:3d:4a:
         eb:bf:a5:50:19:4b:a0:90:f0:7b:4d:f7:08:51:45:e4:19:f7:
         f6:0c:13:da:5d:f5:19:43:05:e8:9a:97:b1:6e:c8:04:f9:51:
         4f:c2:17:63:6c:d6:22:ef:e3:cc:4b:20:c2:8e:06:63:a2:82:
         4a:9d:05:e8:45:30:4f:c7:d2:d4:a0:aa:4b:6f:da:d4:34:33:
         ba:b4:19:f9:bc:1c:ef:32:73:ff:7c:82:d1:ba:f8:33:df:0d:
         04:d5:03:ea:70:c4:a4:05:33:a6:4c:b8:92:15:db:37:a7:59:
         1e:40:15:b9:fa:65:67:d1:9f:1f:9c:61:ba:47:d8:af:48:15:
         16:67:7c:86:fc:ab:ac:d6:7e:99:f9:7b:2f:10:98:44:3b:30:
         32:5a:9c:0d:d5:64:6e:d6:d3:be:7e:5f:67:e9:b1:1e:a6:e8:
         6c:b3:1f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:44 2026 by rpki-client