Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
File:                     7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft (raw, json)
Hash identifier:          ko8vqyR5AmMiUPVeLy2/hff4AhS3t5SKasq4lMconD8=
Subject key identifier:   3B:18:2E:D8:34:0C:EA:FF:85:4C:00:1C:CF:E7:40:92:60:F6:7D:9C
Authority key identifier: EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
Certificate issuer:       /CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Certificate serial:       01A0D45D7AF8EBDB20FD451C4993C2DB79F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
Manifest number:          E9
Signing time:             Thu 24 Sep 2026 17:01:30 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:30 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:30 +0000
Files and hashes:         1: 2Zslfn__QIhx6OX48_NKfIqrzSc.roa (hash: VYnOK+rc+xOxyoEFqSm+yquuiXcM9YH3Y4gu3Gh6hXg=)
                          2: 7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl (hash: 4oy+H714P/p1HEV+0NluTgQnPJ+p7MJJNKRtWHa48iY=)
                          3: U_aK72jJa-ON6gMyyHq3rWjkxhU.roa (hash: /1YQ5iJbTHBFdQHsTl7LBGFueR1LkqoE0aary4QG3rs=)
                          4: afRxnYS9xX0pCvGVtIiS73I1z44.roa (hash: 3LuTMNKBz2sfRa7X5G714MtGThF0TEEgGy5wQUhxdjE=)
                          5: vRS2jZFjxoSx-tm8vDYCL3R4utg.roa (hash: Pn3uKydeyTx0VUXK/a6rHQd1kChS2y8vCNb98B0FpoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:7a:f8:eb:db:20:fd:45:1c:49:93:c2:db:79:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
        Validity
            Not Before: Sep 24 17:01:30 2026 GMT
            Not After : Sep 25 17:01:30 2026 GMT
        Subject: CN=3b182ed8340ceaff854c001ccfe7409260f67d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:be:9e:85:3a:a9:9f:c2:41:6b:ae:52:c0:
                    d9:67:a3:c3:83:46:d2:53:1d:2d:79:33:fe:35:e6:
                    ec:39:ed:88:20:44:61:73:bb:cb:e2:9f:cd:66:0f:
                    01:86:d5:de:e6:55:36:21:06:5c:3d:65:ae:fd:27:
                    5f:d3:76:e9:36:9c:08:be:52:ba:c4:6a:62:5b:00:
                    12:be:64:c5:01:cb:ee:44:27:c8:5e:76:de:b0:94:
                    23:0a:bb:ac:4a:ff:2a:09:da:7e:10:a1:a0:7e:50:
                    63:c1:78:86:4e:83:9b:5c:43:4c:5a:f3:9f:06:82:
                    a7:ce:7b:58:9c:14:62:58:e2:79:dc:27:c5:bf:ce:
                    4a:d2:99:48:53:c4:82:23:54:9d:7c:38:9a:62:bd:
                    e4:ed:98:4f:c9:c4:50:3b:63:b8:fe:9d:63:d6:93:
                    88:27:f0:65:ee:ce:ab:2e:16:ec:2e:81:d3:b1:e6:
                    61:00:14:a6:44:67:a1:34:92:c1:81:34:32:9d:ba:
                    da:a7:4f:be:3b:ed:fe:27:5b:31:40:2d:20:9d:cc:
                    2d:bc:7c:b2:f0:fb:c5:bb:ff:27:44:40:e1:c1:01:
                    f1:36:a3:e1:a4:70:69:9a:56:3d:45:16:1e:7e:09:
                    ba:b5:57:f1:3b:52:d4:27:c4:41:a0:25:88:b9:17:
                    0c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:18:2E:D8:34:0C:EA:FF:85:4C:00:1C:CF:E7:40:92:60:F6:7D:9C
            X509v3 Authority Key Identifier:
                keyid:EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:58:7c:42:71:5a:fe:2b:b5:8e:5c:0e:9d:9b:02:31:df:88:
         55:bd:a4:31:7e:c3:9c:12:e1:4d:ea:fe:d0:a1:dd:f0:44:0e:
         1f:5e:52:15:36:0c:48:5e:77:49:a6:37:d3:6f:9f:b9:80:27:
         f0:47:17:2d:c8:19:37:28:f8:4a:21:27:82:30:46:d4:46:9a:
         3e:3c:b1:ac:eb:96:06:5b:64:f0:eb:e2:b3:d8:fa:06:3f:b5:
         2c:e3:d0:cf:2f:80:69:a9:31:96:12:75:7e:c6:e5:94:8c:19:
         6f:45:a3:09:b4:ad:7a:d4:81:36:af:68:e5:00:7a:fc:c5:05:
         e2:e8:96:6d:02:ee:bc:f3:d2:e2:5a:67:e2:ac:15:9a:95:b2:
         d2:3c:0c:04:71:6c:ea:d5:b4:09:25:31:40:06:55:b6:60:4c:
         ed:93:a1:73:48:ca:0b:32:1e:cd:d5:ad:4e:d1:b1:30:d3:db:
         bc:d7:d2:47:29:58:ef:a3:0d:65:7b:96:51:12:4e:5f:ec:44:
         f5:16:bf:db:b3:1f:a5:d0:2f:43:81:4a:7d:c9:a6:50:1c:38:
         67:df:03:7c:02:33:ae:bf:c9:66:9f:7a:fc:29:c8:9a:f5:56:
         64:c3:c7:63:7f:4d:10:24:f5:0d:32:06:dd:bb:6a:05:9d:ec:
         dd:22:ab:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:33:33 2026 by rpki-client