Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
File:                     71VFlkWXnEE9C8b3RU8NNuQOmfk.mft (raw, json)
Hash identifier:          nr7jiytfx030I3H58G1/exzZSEHus+PcigpJBl7ywsQ=
Subject key identifier:   F1:79:8A:D3:FD:00:29:4B:07:08:33:A1:1F:9E:9C:B3:FE:3D:AC:C6
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Certificate issuer:       /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial:       01A0CAEBEA5AE2EACA12B919BF4C48C5D91C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
Manifest number:          0755
Signing time:             Tue 22 Sep 2026 21:00:53 +0000
Manifest this update:     Tue 22 Sep 2026 21:00:53 +0000
Manifest next update:     Wed 23 Sep 2026 21:00:53 +0000
Files and hashes:         1: 71VFlkWXnEE9C8b3RU8NNuQOmfk.crl (hash: mnDawkxD5StQgyR90L1p8bSuruaMbNBfC3sTqc5/A1A=)
                          2: 9qV0mW2ia-2OR-SkYKC9xwGTJ6w.roa (hash: SoSvqfnQLKFn05LffsfjlMnv43OqaQmrvJqr1M8+Itw=)
                          3: Du79ji7HHfBba4InbN4bIGS0_iA.roa (hash: tcL+qNRXPaCLc8dP3FfLSCO8N4UwsOC7d+xUqdSxXTQ=)
                          4: RKdFVmXrgBUxVrb-m3ssg9G89V8.asa (hash: moQVYKRLDWz1bETxxHsk0fqtvaRGwzZCLCS/RcVGIHI=)
                          5: rkM9Dkk27e7GrxAxgpwlexYfMwo.asa (hash: z9mDNW7ukOPcxH+u/vWCCay6OznLkVvoVt6PHopHPgo=)
                          6: yoNR3031t1c5fIpSVbBNiZg-fgU.roa (hash: WFBkEZbt/RtOe+ZGOFWHx7RKyRoySV4z75BvLA08kjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:eb:ea:5a:e2:ea:ca:12:b9:19:bf:4c:48:c5:d9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
        Validity
            Not Before: Sep 22 21:00:53 2026 GMT
            Not After : Sep 23 21:00:53 2026 GMT
        Subject: CN=f1798ad3fd00294b070833a11f9e9cb3fe3dacc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:4e:6d:6f:dc:e1:39:91:fd:f1:59:1f:e5:
                    a1:68:22:40:4d:91:3e:f2:51:70:4b:fe:7b:b0:ba:
                    3d:97:49:f3:48:c5:41:b7:a1:f1:fa:f2:63:f1:bf:
                    1d:8b:39:62:a6:f3:3d:1c:91:98:33:ee:b3:c2:41:
                    8d:13:ed:09:42:9a:87:b2:06:e8:2b:bb:bb:24:ac:
                    e3:0a:c4:ed:68:a9:e2:0e:84:6c:03:a9:ea:50:bb:
                    6e:82:51:3e:2b:0f:75:af:26:30:5b:e3:8f:c9:4d:
                    92:47:24:a1:a6:90:53:8d:bf:44:97:af:09:90:52:
                    d1:0e:1e:e0:dc:bd:d7:99:3a:c7:06:a9:e0:d4:94:
                    b0:d9:53:8c:a9:c5:16:11:ab:65:92:25:fa:59:00:
                    18:c1:99:77:1e:3c:77:69:ad:59:1d:34:79:03:3b:
                    78:30:5f:48:a6:15:eb:4a:ba:33:47:8f:c5:b8:ba:
                    2d:23:62:89:5d:dd:7f:3b:be:a0:f0:b2:5f:4f:05:
                    a4:9e:bd:83:f5:3e:09:6b:f8:f7:35:fb:31:34:e5:
                    f2:b9:3a:b2:5c:7c:4e:a0:51:89:7a:7e:02:19:d9:
                    96:ee:25:e7:46:be:8c:5a:ea:7b:51:7f:2d:a5:d7:
                    99:53:55:cf:e8:90:ed:ab:6c:70:30:24:d0:72:2e:
                    1a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:79:8A:D3:FD:00:29:4B:07:08:33:A1:1F:9E:9C:B3:FE:3D:AC:C6
            X509v3 Authority Key Identifier:
                keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:9b:af:67:2b:c1:9c:e3:76:b5:b9:4e:fd:26:bf:ea:7d:99:
         1d:6f:5c:82:d0:8c:94:f3:6a:02:3d:46:a8:5d:c5:11:2f:27:
         d4:7c:72:9c:ea:41:16:e0:f5:46:dd:76:e4:54:af:9b:a7:24:
         82:dd:b4:b8:2a:02:e3:69:6c:95:7c:e9:f7:d9:07:b6:22:53:
         a2:39:4a:90:b1:94:5b:f6:a5:37:a8:99:15:e2:11:c2:e7:fd:
         8e:89:e3:e9:fd:c1:2b:38:34:4d:a8:1c:f0:04:47:dc:16:ed:
         8a:4c:ab:06:b3:b6:d0:06:67:56:84:e6:47:54:f6:35:f3:5f:
         5e:91:f7:1d:3a:39:2d:6f:d0:83:6c:82:b9:f9:b9:c5:69:25:
         f7:1e:7a:9c:91:bd:e5:ae:02:15:e0:5d:3e:34:85:7d:ea:51:
         a1:93:56:d1:cb:2d:5a:55:66:60:39:42:6f:19:8f:fb:d1:7b:
         88:08:1f:4f:d8:4b:f3:30:4a:59:0c:ca:5c:81:80:47:c9:ae:
         9d:55:ad:28:08:93:cc:3a:20:86:16:26:35:ff:a1:fc:df:a5:
         d4:8f:76:71:b9:6f:cf:0f:4a:4a:9b:cd:ed:a5:b7:0f:84:af:
         ce:c0:f8:62:56:d5:88:5a:71:48:03:49:28:9a:b1:a0:4a:8c:
         88:a3:6d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:10:11 2026 by rpki-client