Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
File:                     7V6DgxLgSu-flTbiDNQSg6e4t3s.mft (raw, json)
Hash identifier:          vwhpE5o902gMR04rYniL4pP14DeWluxssTEpbgx2gUE=
Subject key identifier:   81:09:64:B8:4A:B9:7A:A4:53:7C:6E:08:45:81:90:73:B8:8F:DD:90
Authority key identifier: ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
Certificate issuer:       /CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Certificate serial:       01A0CE23A7E6C75B6B456B170545E8AC4044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 12:00:38 +0000
Manifest this update:     Wed 23 Sep 2026 12:00:38 +0000
Manifest next update:     Thu 24 Sep 2026 12:00:38 +0000
Files and hashes:         1: 1tXKvbccZVqmGCzOIY3BaiKWNpI.roa (hash: ZMIDM8rVxwZQ46a51953kpL3cP7HCn+o1QL6WgtS1ZM=)
                          2: 7V6DgxLgSu-flTbiDNQSg6e4t3s.crl (hash: KJtn+90YBaCsN8YaWkVPU+XE82P/HpZe8OclcVjNLVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:23:a7:e6:c7:5b:6b:45:6b:17:05:45:e8:ac:40:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
        Validity
            Not Before: Sep 23 12:00:38 2026 GMT
            Not After : Sep 24 12:00:38 2026 GMT
        Subject: CN=810964b84ab97aa4537c6e0845819073b88fdd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7f:0f:77:a1:ad:e4:c0:ba:b1:cb:f2:a7:09:
                    d4:c7:11:8d:c8:76:14:de:c1:ec:4d:75:52:1f:b1:
                    a9:13:c3:c0:5b:b0:42:64:cd:66:16:63:88:f3:02:
                    6f:37:53:5c:09:78:ec:d8:fd:59:0b:f2:d4:49:e2:
                    34:d4:53:33:9a:72:68:71:3b:39:19:22:f4:7c:8d:
                    41:2d:12:12:5e:da:ef:b8:88:a0:ac:b9:9f:73:94:
                    1f:7f:2c:c1:c2:46:d2:eb:01:4c:76:92:ce:9c:de:
                    9b:e0:cc:19:bd:7c:7a:28:72:8c:6f:b0:90:a0:e0:
                    c5:10:d6:47:d3:8e:6d:6e:0a:de:7c:46:af:32:c0:
                    24:36:3b:00:89:c2:da:5f:3e:0f:e0:72:17:1c:0a:
                    d7:e6:18:a0:ca:86:e2:6b:a7:b4:4d:70:ba:e1:ab:
                    3b:2c:b4:74:d6:7c:40:5d:9f:8d:8b:75:9a:81:ac:
                    0d:75:8c:b5:1f:62:82:7a:40:30:bc:39:f2:1d:62:
                    e2:6a:b8:82:12:35:06:6c:52:a8:c9:3f:fc:b8:70:
                    80:67:06:40:d1:20:4e:48:a1:cd:a8:2a:b8:49:61:
                    df:51:c3:b4:1c:c7:3a:0a:c1:3d:89:3b:c0:d8:fb:
                    75:8a:88:09:28:f8:cd:4b:2e:b0:4f:e1:74:d9:fb:
                    dc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:09:64:B8:4A:B9:7A:A4:53:7C:6E:08:45:81:90:73:B8:8F:DD:90
            X509v3 Authority Key Identifier:
                keyid:ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:a5:f0:f1:0a:82:d5:7f:46:1c:d4:ae:ea:41:ad:a4:47:fc:
         0f:02:1b:77:05:7c:62:c4:81:42:e3:04:48:da:17:52:0a:9f:
         9d:7c:d8:9e:b6:3a:d4:31:70:be:fa:55:3e:40:2e:04:30:bd:
         b8:7b:0d:79:53:32:fe:1f:59:21:21:57:63:cc:f6:a7:35:03:
         b3:b8:35:d3:ae:dd:8f:4c:6d:0d:0b:f7:b3:f0:6a:b0:bd:92:
         2f:ae:14:d5:5a:b5:59:85:16:df:0d:7f:f2:92:8b:b5:59:c3:
         1b:10:5e:8f:00:fd:5f:80:05:38:2b:30:54:3e:99:44:e4:68:
         bc:c6:10:e6:b1:78:e3:1b:89:4c:ee:e4:64:0a:30:19:17:c9:
         f6:6d:64:30:a1:37:c9:19:ef:ec:f5:a5:bd:c0:33:15:9a:f5:
         04:88:bd:9e:e5:a5:f7:58:97:0e:71:61:5b:25:e4:df:76:3c:
         2a:51:49:a1:04:37:db:7f:b1:01:35:13:7f:fe:88:7a:1c:b7:
         53:0d:db:bc:60:11:85:0c:43:0f:8f:e1:51:dd:15:3c:e3:1d:
         a0:92:f5:a0:41:6e:28:06:1e:20:d4:19:73:6d:43:88:25:f3:
         fa:16:76:6e:f2:37:40:e3:bb:3b:bd:a8:b2:86:7f:7c:70:6f:
         2e:72:60:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:34:12 2026 by rpki-client