Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft
File:                     eNd4_ldU3D4W2SJwQkviG5KB7HI.mft (raw, json)
Hash identifier:          eOPj4dqOPpPz1++ZO6mq5MV3mvzPQG/5v12BDBgJ6no=
Subject key identifier:   A1:CF:96:33:8A:BA:FF:E1:1E:E0:73:2D:B5:B1:25:7F:AF:FE:82:1A
Authority key identifier: 78:D7:78:FE:57:54:DC:3E:16:D9:22:70:42:4B:E2:1B:92:81:EC:72
Certificate issuer:       /CN=78d778fe5754dc3e16d92270424be21b9281ec72
Certificate serial:       01A08D1FE2490AF670F9C3234D134CD2F874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft
Manifest number:          1A4C
Signing time:             Thu 10 Sep 2026 21:01:11 +0000
Manifest this update:     Thu 10 Sep 2026 21:01:11 +0000
Manifest next update:     Fri 11 Sep 2026 21:01:11 +0000
Files and hashes:         1: L1y1n7vwtV_ZZ6f70GX8Ca_tsko.roa (hash: lCvX9qpvtnukUOvjzxgh8UYmCcQAY/5d+y3Ps/qJrU0=)
                          2: eNd4_ldU3D4W2SJwQkviG5KB7HI.crl (hash: mX79jSkLkRD7MkvLfpN05QyO/qiZ7ifMk58zAFfqHCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:1f:e2:49:0a:f6:70:f9:c3:23:4d:13:4c:d2:f8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d778fe5754dc3e16d92270424be21b9281ec72
        Validity
            Not Before: Sep 10 21:01:11 2026 GMT
            Not After : Sep 11 21:01:11 2026 GMT
        Subject: CN=a1cf96338abaffe11ee0732db5b1257faffe821a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:29:70:a6:d9:af:90:02:2d:73:b6:f2:ba:
                    5d:21:5e:e8:1b:60:10:0a:c9:23:4d:c3:33:f8:04:
                    d6:23:1d:fd:29:8b:a6:ce:4d:c4:b8:6d:f7:ac:6e:
                    81:6c:f0:36:63:57:d2:89:b7:5e:88:e3:17:c0:c5:
                    d4:df:98:e0:4b:d7:39:21:a3:57:ef:2a:c0:d7:86:
                    2b:87:37:17:29:c5:a6:97:4d:40:a3:d3:da:c9:54:
                    f8:0b:a6:19:61:f8:bb:4c:90:2e:6a:81:4d:20:7a:
                    2c:1a:6d:85:5c:d7:28:12:f3:65:54:e1:1e:27:28:
                    65:75:bc:1c:dd:0f:09:f8:63:3a:14:9c:8a:a4:ad:
                    b7:b1:7e:3d:1a:a0:d2:20:65:94:31:c7:d1:6e:cb:
                    3f:68:9f:ab:35:ae:50:96:4d:9c:25:09:5b:59:52:
                    33:16:ea:58:94:c4:e3:3d:64:05:30:a3:f7:3b:62:
                    a8:bd:1a:f0:c9:fc:3e:e0:06:de:83:da:70:f9:a3:
                    36:af:5f:d5:10:c9:45:8b:46:de:35:a2:3c:76:ba:
                    0e:fd:53:8d:66:8a:fd:e9:db:c0:db:37:58:36:9a:
                    70:9d:e9:39:e2:91:0a:4a:76:db:94:38:0b:5f:73:
                    0a:03:f7:91:e5:45:d4:96:d9:3b:7e:5c:14:19:c1:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CF:96:33:8A:BA:FF:E1:1E:E0:73:2D:B5:B1:25:7F:AF:FE:82:1A
            X509v3 Authority Key Identifier:
                keyid:78:D7:78:FE:57:54:DC:3E:16:D9:22:70:42:4B:E2:1B:92:81:EC:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNd4_ldU3D4W2SJwQkviG5KB7HI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d15a62-e2ff-404d-a94c-7fdbf6fb0df8/1/eNd4_ldU3D4W2SJwQkviG5KB7HI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:1b:4c:5e:b7:6d:f2:39:ac:4b:aa:bb:1a:db:c7:d6:94:7f:
         14:a4:64:d0:f1:0f:a0:15:38:48:51:03:ff:e8:0a:73:f0:08:
         0b:40:95:ea:2d:c6:b2:bd:0c:f8:a6:e8:f0:29:37:63:52:86:
         8b:0e:ed:d5:7f:ec:bc:da:d5:86:0b:fb:a0:1c:77:42:66:6e:
         89:09:21:48:1a:9c:d6:7a:f1:32:ee:5e:48:37:a9:e5:cd:ba:
         bf:e5:83:d4:74:17:2d:e7:c4:16:8d:c4:6b:6b:6a:97:dc:41:
         ba:44:aa:56:24:85:5f:f7:ff:eb:a2:43:ee:b9:66:ff:6e:1f:
         fc:3b:98:52:33:25:7e:8e:a6:39:8e:f6:f2:0f:cf:f9:e2:97:
         a0:5f:e2:e0:a1:61:3c:10:94:cc:f9:1b:fb:94:ae:0e:bd:ce:
         55:74:7b:3f:b0:56:cf:32:4a:ce:f8:f0:73:e9:66:54:f5:4a:
         ed:6e:e6:71:ee:86:53:14:19:74:46:e0:93:61:11:00:39:0e:
         f5:d1:2c:0a:be:3a:e9:1f:e6:a2:f2:51:e3:81:78:02:18:1f:
         0c:a2:74:be:d4:eb:89:4c:fa:14:41:59:c6:8d:18:4e:91:d8:
         70:8b:ee:fd:0f:07:35:4e:b7:64:b5:36:2b:cb:4c:9e:e0:5f:
         bb:93:2e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:30:32 2026 by rpki-client