Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
File:                     ee4R2MQpe-xUvTBUMMpHct-shHo.mft (raw, json)
Hash identifier:          qVSDf0hj6/zkn0GMJXE0/+/jS2UXUATzGkiIsCVTsko=
Subject key identifier:   3A:12:1F:2A:E7:72:F5:F7:B3:25:34:76:1B:03:06:15:48:64:1B:8D
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Certificate issuer:       /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial:       01A08A8D2B0EEB7972D31DC96A80101E6D88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
Manifest number:          0E55
Signing time:             Thu 10 Sep 2026 09:01:42 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:42 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:42 +0000
Files and hashes:         1: ee4R2MQpe-xUvTBUMMpHct-shHo.crl (hash: 397ysdA2KosEhYADC6HNPLRly5MuaDD5NO80k2UOJKI=)
                          2: nkXiZoMMW3zafsjty-VJgGg0Xzc.roa (hash: F3sEH4KSkZNHFk1f1SP7LzRoEDV0ahVUx0fynXewv18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 09:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:2b:0e:eb:79:72:d3:1d:c9:6a:80:10:1e:6d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
        Validity
            Not Before: Sep 10 09:01:42 2026 GMT
            Not After : Sep 11 09:01:42 2026 GMT
        Subject: CN=3a121f2ae772f5f7b32534761b03061548641b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:7f:8f:1a:b7:bc:bf:b8:5c:24:04:92:84:
                    18:1b:bf:ab:95:82:cb:d8:6a:52:a1:96:d9:79:91:
                    3d:f1:ce:cb:bd:6f:66:90:3e:05:b7:82:41:f1:b8:
                    2c:80:22:86:39:90:94:0a:43:5f:52:c1:9c:77:b7:
                    57:45:22:d8:6b:0d:cb:8c:60:cb:c9:bd:3b:a9:47:
                    71:01:ad:98:e0:7e:75:9b:67:5b:84:74:02:bb:02:
                    c2:e4:b3:cf:95:86:66:95:e3:d8:bb:d4:a1:1a:8f:
                    72:9b:6c:8c:4d:64:36:09:88:26:6d:16:f2:d4:5a:
                    7b:00:c0:12:44:9a:80:91:22:88:ec:17:9a:6b:9f:
                    15:a3:e7:b8:b6:1d:d4:c9:2f:c2:37:2c:56:a7:4d:
                    7b:cb:46:3a:00:5f:bc:b3:48:b4:09:b7:2e:42:0e:
                    fc:e7:e3:a9:e3:95:13:2c:38:41:a5:11:ce:6f:de:
                    a4:4a:4e:dc:2f:ab:a1:67:8a:f4:5d:e2:e6:bd:0b:
                    88:91:84:ea:a9:5a:c0:8f:ef:d9:c2:81:64:b5:2b:
                    ab:5b:31:91:fc:b2:21:9f:c0:2c:76:0c:e7:53:69:
                    67:ef:1e:6d:46:41:ee:eb:be:fd:3f:8b:1c:27:5d:
                    67:9e:3e:7c:d6:a1:06:02:c7:6c:9d:29:6b:dc:6b:
                    42:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:12:1F:2A:E7:72:F5:F7:B3:25:34:76:1B:03:06:15:48:64:1B:8D
            X509v3 Authority Key Identifier:
                keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:68:28:cc:4c:1f:4a:cd:8c:5f:c0:71:d6:fb:b5:49:a7:3c:
         a3:95:43:89:5b:47:82:34:26:4f:98:e9:0f:95:00:58:57:b2:
         c3:ea:31:7e:60:c6:d6:e8:23:02:4c:fe:22:4d:32:63:cb:55:
         5b:7f:c6:d5:38:10:3f:39:27:6f:d4:cb:34:80:57:36:cf:c4:
         4f:79:b4:54:08:13:ac:ec:4c:1a:67:9c:68:0c:67:22:2b:c3:
         0d:cd:2b:04:9d:67:23:a5:0e:9e:b2:43:4b:16:f8:d4:61:15:
         80:f8:97:5c:b2:b0:e9:50:7f:43:f9:e5:9f:c6:8b:be:00:4e:
         11:f9:88:b4:55:82:d5:ef:53:60:41:fe:4a:73:cb:26:ca:2b:
         f5:ca:81:56:f7:22:b6:61:79:5d:fb:29:a6:58:2a:a4:7a:5d:
         06:34:b0:5a:24:4c:f9:7a:2f:f2:80:2e:f3:20:0b:4c:33:2d:
         42:35:f2:a4:97:4b:86:1b:41:fc:01:61:6b:86:ce:e7:c3:6c:
         10:11:72:14:3d:cb:1e:db:da:db:5f:9f:89:67:58:6e:c5:e7:
         3d:81:d5:45:c9:13:80:99:78:c8:ad:6f:c7:f7:b7:3b:74:b1:
         06:a8:a3:d3:10:75:c3:30:9a:27:eb:0e:6e:98:c6:41:8d:49:
         ad:e9:12:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:29:11 2026 by rpki-client