Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
File:                     e0nQsDY-emQIPi5UzDAfUUrgiRA.mft (raw, json)
Hash identifier:          w8c+wBCs0AIXesNj43XIxBPK+UOrjw0d6vPpa601xIk=
Subject key identifier:   0E:0A:28:77:23:20:3E:6E:2C:AF:01:68:48:4B:B2:A0:FE:D5:65:3E
Authority key identifier: 7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10
Certificate issuer:       /CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
Certificate serial:       01A0890C122F21DA6301A37764CB438C4024
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
Manifest number:          019A
Signing time:             Thu 10 Sep 2026 02:01:04 +0000
Manifest this update:     Thu 10 Sep 2026 02:01:04 +0000
Manifest next update:     Fri 11 Sep 2026 02:01:04 +0000
Files and hashes:         1: 1m5HSxX-lKOD4u4fGX6ma15JoUs.roa (hash: EihJQKal0ImjJVDDVfh3BA+ydTEzfWFyJ5mENKRj7AY=)
                          2: e0nQsDY-emQIPi5UzDAfUUrgiRA.crl (hash: 0BrskqFCWQMLZl3IqBIv38uoQobQJizuslug+mZY/BE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 02:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:0c:12:2f:21:da:63:01:a3:77:64:cb:43:8c:40:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b49d0b0363e7a64083e2e54cc301f514ae08910
        Validity
            Not Before: Sep 10 02:01:04 2026 GMT
            Not After : Sep 11 02:01:04 2026 GMT
        Subject: CN=0e0a287723203e6e2caf0168484bb2a0fed5653e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:87:1c:be:67:54:ec:b2:85:60:f2:c1:4d:
                    92:26:c0:e0:0f:ba:3a:38:73:e9:fb:68:00:3e:58:
                    54:0e:9d:48:83:3e:6e:d8:fd:64:54:3d:2f:99:cb:
                    6d:2a:13:cf:37:af:da:b5:42:63:7c:fa:cf:d8:5e:
                    78:b0:01:d0:5e:91:88:82:c1:a6:c0:f8:17:07:8d:
                    5b:30:50:ed:f9:c3:5b:54:7e:43:6d:bc:f6:7a:0e:
                    9c:df:81:09:d8:c9:2e:a4:3f:64:b1:77:e4:dd:f9:
                    93:00:c7:2b:72:6f:14:3b:24:7a:36:e2:1a:3c:ff:
                    f9:1a:b1:ca:de:2b:96:66:c4:42:ce:b1:cc:33:69:
                    7e:90:72:2f:e5:75:6c:0a:29:17:66:3f:48:db:4c:
                    78:82:f6:75:8a:d1:3f:c5:3b:6c:e9:d0:2c:f5:b2:
                    42:39:85:93:b8:8d:1d:6b:ba:de:ae:ae:43:5b:cc:
                    05:1c:28:81:81:38:3b:9d:78:b5:9b:ba:e4:82:98:
                    40:28:bd:5d:65:3c:d5:bd:48:7b:49:ca:64:62:6d:
                    60:0b:b5:1a:f1:b1:c8:3c:6a:d7:8f:ec:71:29:d5:
                    47:1a:a5:55:dc:73:36:b5:9d:06:48:49:e4:0c:00:
                    ae:73:6b:02:99:20:b0:32:f7:7d:c0:f5:e7:3e:40:
                    f4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0A:28:77:23:20:3E:6E:2C:AF:01:68:48:4B:B2:A0:FE:D5:65:3E
            X509v3 Authority Key Identifier:
                keyid:7B:49:D0:B0:36:3E:7A:64:08:3E:2E:54:CC:30:1F:51:4A:E0:89:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0nQsDY-emQIPi5UzDAfUUrgiRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/db3420-5947-494e-94de-6a73716d96d8/1/e0nQsDY-emQIPi5UzDAfUUrgiRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:dd:d7:9a:75:09:a4:35:fd:94:ee:81:a9:d9:00:12:ba:e7:
         34:1e:3a:e2:38:38:1a:78:34:68:c5:47:d3:b6:7e:19:6f:4e:
         b6:5e:d0:2d:eb:3c:80:f6:d8:26:f2:ca:56:5a:20:c2:ff:67:
         8e:25:b7:14:ea:9d:2c:2c:25:60:b7:d9:f5:2a:76:e0:bf:25:
         00:7d:f9:a0:77:c0:da:16:70:fc:40:4a:27:94:2e:fa:9f:81:
         90:84:35:06:6a:8d:c8:31:9e:44:87:4d:dc:97:cc:5a:86:4e:
         f9:25:e7:33:81:88:aa:e4:b3:46:f2:d2:9a:db:55:df:9a:af:
         f1:ac:01:0d:a2:f5:78:0e:9e:c8:b2:01:9b:53:9a:52:39:ab:
         61:fe:64:f8:20:22:10:39:e5:aa:8f:93:3c:19:fd:7e:6c:2f:
         0f:40:db:6b:85:31:9a:f0:95:b0:8f:06:8c:15:b6:76:dd:e0:
         ff:58:fd:14:7e:20:25:39:85:5a:b5:6a:ac:3b:35:c1:1e:7a:
         a6:b4:8f:2e:4c:ba:b6:60:07:f9:a2:30:85:57:83:e1:30:97:
         da:2b:83:f8:80:49:cc:5b:58:da:0a:a9:bc:5b:8e:94:1f:f4:
         97:1a:04:33:77:5a:2d:fe:15:68:bc:82:22:e6:11:59:01:47:
         0f:68:e7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:56:38 2026 by rpki-client