Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
File:                     EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft (raw, json)
Hash identifier:          pgfR6sQvGaBAdl43BKE5fc7K3YeS6rb++PU9oRVeqYg=
Subject key identifier:   7C:F8:19:F5:82:15:B8:7A:48:80:61:92:D1:3A:32:88:19:C2:1A:48
Authority key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5
Certificate issuer:       /CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
Certificate serial:       01A08AFAA2CB71C4339597969C3B73D0C06A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
Manifest number:          19DC
Signing time:             Thu 10 Sep 2026 11:01:16 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:16 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:16 +0000
Files and hashes:         1: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl (hash: aZ3TsynFOhaRTmZNuwo0yqeXVOdyFmcFhADAB7RoaCo=)
                          2: x3NbWiQWCZXyc2uMnZ5Ab6Fhu_I.roa (hash: 93sj77pr5rKe1tU77xXMj7hopzpAX8jIqepZA0pnhsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:a2:cb:71:c4:33:95:97:96:9c:3b:73:d0:c0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
        Validity
            Not Before: Sep 10 11:01:16 2026 GMT
            Not After : Sep 11 11:01:16 2026 GMT
        Subject: CN=7cf819f58215b87a48806192d13a328819c21a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:1c:bf:fe:7b:fb:ec:ac:34:95:04:09:39:
                    4e:43:f9:7d:e6:26:b4:ed:67:17:b5:58:74:a8:9f:
                    2c:f8:c0:46:d6:d4:8e:c0:b1:b4:f2:1e:4c:bb:cd:
                    2a:2c:d8:6f:58:48:71:ba:2d:6d:47:37:94:91:69:
                    aa:d0:cb:bb:83:d8:00:5a:89:08:be:87:92:22:a0:
                    27:ce:bf:89:67:89:5a:38:b1:bf:0f:32:a5:25:3b:
                    34:48:29:8e:01:8a:21:89:00:cb:55:20:05:6c:d3:
                    20:4b:78:51:d5:fa:1c:b7:a4:87:c3:23:b1:48:b5:
                    b1:69:b2:b8:ff:ef:14:de:13:9d:04:d5:0f:de:b9:
                    84:6a:a2:57:90:d1:46:16:fe:5f:dc:57:dd:28:66:
                    26:63:55:dc:62:5b:f3:04:35:e8:89:66:5d:48:3b:
                    c2:de:1f:b6:61:97:0d:e4:e1:02:df:5c:c7:a5:61:
                    5d:52:70:f5:20:e1:80:c2:6f:30:ba:0c:24:bf:0d:
                    63:52:6a:12:75:4d:be:06:ce:45:07:1c:dd:83:ff:
                    1e:cc:57:dc:43:90:9d:65:51:2a:0b:0d:07:e1:36:
                    2a:a8:07:4c:01:86:ed:5a:1f:eb:6b:41:ef:c4:fc:
                    c8:68:ff:54:fd:fa:53:23:1a:b3:f1:13:4a:61:3e:
                    b2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F8:19:F5:82:15:B8:7A:48:80:61:92:D1:3A:32:88:19:C2:1A:48
            X509v3 Authority Key Identifier:
                keyid:11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cb:25:62:d7:c8:1e:5a:de:23:72:16:b9:4a:f9:4b:05:fb:
         3c:c9:6c:fa:68:45:25:a5:a5:2e:26:3a:e4:be:ed:6b:42:99:
         9f:fd:c2:2f:c1:fc:7c:f7:8d:5f:e5:73:5a:e2:2d:77:02:b3:
         ff:36:b7:f9:1d:b7:de:7f:d4:5a:07:02:d4:50:09:bc:59:f7:
         ad:4b:92:97:ac:be:21:d4:a1:b3:55:05:90:f4:c9:52:8f:1c:
         d5:fc:0e:d9:59:4b:63:99:53:88:77:1e:e0:5c:89:e7:9b:37:
         21:1b:c7:ed:33:c1:36:a0:5b:fc:60:2b:ed:96:64:b0:67:51:
         98:8f:4c:0a:35:d6:7d:fe:ca:27:bb:8d:4a:7a:19:ab:9c:7f:
         9f:99:e0:e8:1c:54:24:9a:a2:2b:0b:35:10:75:f1:9c:49:ea:
         65:ce:8f:6c:d5:2d:eb:93:df:43:45:bb:77:c3:92:45:9e:a3:
         e3:e0:c9:3e:4b:e6:6a:20:a1:73:68:a2:99:82:3b:98:e4:86:
         9e:e5:69:71:89:d9:85:25:64:fc:e4:96:4e:75:a7:a8:48:95:
         ea:ac:e3:89:0c:7e:b4:ef:15:23:d8:ad:e0:c1:02:c8:6a:41:
         e8:77:77:2d:b8:b4:31:90:20:92:1c:6c:fe:fc:d2:1c:3e:6d:
         0c:b3:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:22 2026 by rpki-client