Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
File:                     7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json)
Hash identifier:          O2Ukynzhqv0zh967g4ACoApdDAVMMoKdqzP/vvmtz/s=
Subject key identifier:   4D:B1:EC:8D:51:13:97:79:CE:C8:50:AC:78:36:90:40:60:DE:55:01
Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
Certificate issuer:       /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Certificate serial:       01A0D6BA3E4140FB24CC9BC7AFA18146D218
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
Manifest number:          0945
Signing time:             Fri 25 Sep 2026 04:02:04 +0000
Manifest this update:     Fri 25 Sep 2026 04:02:04 +0000
Manifest next update:     Sat 26 Sep 2026 04:02:04 +0000
Files and hashes:         1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: jhYrNSvjXYz1jLGyb3ltfSmCqS0LOcTWKr6WmqKAV8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:ba:3e:41:40:fb:24:cc:9b:c7:af:a1:81:46:d2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
        Validity
            Not Before: Sep 25 04:02:04 2026 GMT
            Not After : Sep 26 04:02:04 2026 GMT
        Subject: CN=4db1ec8d51139779cec850ac7836904060de5501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:d2:45:9e:80:d0:0c:94:07:0e:f0:18:5f:
                    c6:07:b2:34:82:5c:9c:77:fd:37:62:93:7a:85:41:
                    26:73:08:b0:e3:75:96:b9:79:ec:f0:1e:5e:b1:d1:
                    80:2d:f7:29:b6:c3:4d:82:de:31:b6:b1:83:25:00:
                    aa:02:73:62:d5:5b:4e:89:b8:6a:a5:6c:cd:c4:e7:
                    0b:45:82:39:22:f1:61:dd:2a:e5:4d:f3:09:08:85:
                    24:51:93:7e:c2:77:b7:0f:5c:61:0f:4e:bb:da:d2:
                    b8:82:d1:c5:0e:e1:00:7c:c8:04:73:d7:10:7e:cf:
                    63:fe:f4:07:e4:33:0d:32:e4:98:c0:04:b2:b0:f2:
                    ef:e4:60:cb:d9:70:47:a6:16:35:3e:f2:c2:3c:38:
                    0d:c4:41:a2:bb:f1:f0:1c:f0:20:8a:10:9a:48:8c:
                    7e:2c:04:11:67:d2:35:93:3e:db:b5:0e:3a:1b:3b:
                    32:66:81:c9:9c:a7:ac:b6:ec:dd:72:7f:25:65:50:
                    43:26:f8:f4:e7:75:ee:73:61:11:05:aa:a3:f8:6a:
                    f8:a7:61:b5:0f:4d:b0:b6:be:b7:4b:17:dc:fc:b0:
                    26:0f:37:41:02:01:9a:4a:4f:52:63:a9:0c:cb:1b:
                    c2:c8:63:61:fe:4f:1e:51:1b:e4:09:6f:fd:8c:c4:
                    fb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B1:EC:8D:51:13:97:79:CE:C8:50:AC:78:36:90:40:60:DE:55:01
            X509v3 Authority Key Identifier:
                keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:41:d2:d3:c6:2d:6b:7c:41:de:22:1e:3f:2d:f8:ce:6a:a5:
         2c:bc:d6:60:a1:73:58:6f:30:1b:80:9e:59:bd:3a:14:54:51:
         2c:dc:dd:d9:61:22:71:05:5c:a5:2a:41:44:95:7b:77:ac:03:
         93:ab:c7:a7:c1:4a:f0:fa:5c:54:0a:56:1b:e4:68:d9:20:4c:
         65:9b:be:9c:90:5f:2a:c6:f5:0e:5f:cf:24:fb:67:87:91:99:
         ee:d5:56:0f:e6:7e:0f:32:c8:3e:3d:3e:e9:6f:e6:54:cb:20:
         7e:be:0d:47:17:54:63:a9:b6:29:2e:72:cf:21:57:c7:33:c1:
         be:91:4b:06:0e:cf:cc:ad:23:8a:f8:99:ec:47:38:92:9c:c7:
         ad:8a:a9:9e:75:02:fc:1e:1b:ef:6b:dd:3d:d2:29:ee:bd:26:
         2e:dd:44:92:f7:02:9a:b3:09:df:41:33:3b:4a:94:2e:39:79:
         91:93:2a:c2:f8:d6:89:6d:b6:b4:b6:ca:24:66:c2:d1:01:83:
         68:57:ab:d0:c7:5c:63:ee:23:c7:99:ec:b4:86:3d:5c:f1:8c:
         d5:81:0b:0c:f7:bf:ce:a3:ee:4d:46:d8:ce:35:f6:a4:4b:22:
         fe:a5:7e:5e:52:62:08:29:04:c2:bf:26:0e:63:16:46:4c:bb:
         ed:4b:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:38:24 2026 by rpki-client