Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
File:                     c_-bDajLqCMr_Xx3EPBFN2eInp0.mft (raw, json)
Hash identifier:          rVS6p1Wv/AI/+IJEZgLuPtkLnk101snQBm0BwBmWKOE=
Subject key identifier:   25:73:C4:81:92:32:04:02:F9:97:50:6E:9F:D8:8E:A7:EA:0B:6B:C2
Authority key identifier: 73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D
Certificate issuer:       /CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
Certificate serial:       01A0D3EF479461EA1FD125792A9262638DF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
Manifest number:          E7
Signing time:             Thu 24 Sep 2026 15:01:08 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:08 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:08 +0000
Files and hashes:         1: c_-bDajLqCMr_Xx3EPBFN2eInp0.crl (hash: omuhC+ctcTfGezcl84Q9/WaPMs0R2wE6Rz57FM6G8qk=)
                          2: vTX4iIqH_CJW3BVeMGACQiGfVBw.roa (hash: B07mgx6eQq4EygaQx3Hss2ApntF23K/SLlLex5sG5XA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:47:94:61:ea:1f:d1:25:79:2a:92:62:63:8d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
        Validity
            Not Before: Sep 24 15:01:08 2026 GMT
            Not After : Sep 25 15:01:08 2026 GMT
        Subject: CN=2573c48192320402f997506e9fd88ea7ea0b6bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fe:6e:95:4c:2e:1a:92:4d:bc:87:b2:20:6a:
                    99:41:cf:57:5f:4d:b2:b0:87:f0:54:5a:8b:e6:9a:
                    f6:c0:29:ff:95:bc:db:7b:f2:3d:f7:79:9b:b2:ad:
                    78:3d:a2:f3:6d:d5:b3:d1:10:6f:9c:05:98:53:5f:
                    ce:f6:06:75:9d:fb:e1:86:09:8e:97:df:31:5b:d2:
                    d9:12:1d:05:34:ed:9a:78:ea:23:79:b4:0b:aa:c4:
                    ec:78:7c:96:dc:02:28:da:5c:de:80:b6:16:8d:f3:
                    57:9f:9e:a8:1d:86:95:d1:29:08:8b:21:af:66:d2:
                    f7:45:aa:a3:44:7f:a7:af:5a:fa:2d:a3:85:97:ee:
                    7f:67:b4:19:28:f1:ac:39:4e:52:2e:9a:d4:dc:9b:
                    76:bb:a3:e9:48:f3:ab:cc:5e:4b:03:09:87:10:d4:
                    6a:65:63:6d:4b:aa:1d:a2:6c:38:db:ca:fa:e8:a0:
                    36:2b:bc:3e:15:c4:c6:89:d2:81:39:da:1e:1d:b3:
                    f3:da:34:82:82:0d:78:d1:18:56:d0:a9:a7:2c:fb:
                    71:ca:d3:18:5d:1e:11:f9:91:d7:7e:8d:86:8b:b8:
                    16:dd:18:f0:e0:8b:ac:cc:47:8e:0d:28:b5:d0:80:
                    1a:9c:d5:ac:a2:ba:1d:9d:35:e6:ec:ae:82:4e:35:
                    49:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:73:C4:81:92:32:04:02:F9:97:50:6E:9F:D8:8E:A7:EA:0B:6B:C2
            X509v3 Authority Key Identifier:
                keyid:73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:43:f5:01:fe:6b:93:48:67:cc:b9:6c:22:2b:aa:1b:78:26:
         fc:00:35:33:73:9b:d3:df:2a:1c:43:0f:89:f6:72:ba:36:54:
         ea:da:a7:75:66:59:c2:72:12:39:5f:92:4f:2e:a9:f6:94:0d:
         f6:bd:58:bf:9c:d8:87:1f:f8:d8:0c:89:08:53:8d:d7:78:d6:
         49:e2:7d:a8:b3:d6:7d:68:42:0d:7e:29:21:67:96:74:74:50:
         31:89:43:05:e4:47:3e:87:81:f1:9c:db:9a:08:9d:1a:c4:b4:
         2d:50:7e:94:57:4c:12:03:84:8b:40:63:06:23:c6:03:1c:01:
         3a:d3:31:52:c2:e6:8f:cf:8c:1e:97:9c:9f:5f:51:32:5c:4d:
         fc:59:35:1e:fc:7f:05:df:da:75:9d:28:4c:1b:e7:33:b4:a3:
         69:cb:e3:78:26:32:61:98:4e:cc:ae:6e:42:38:9e:f7:bb:e2:
         9b:67:9d:62:e6:ae:be:68:c2:7f:f5:e0:5d:1f:a9:0c:e5:3a:
         b8:d9:43:87:95:3b:aa:81:0f:eb:df:66:7d:71:ff:99:31:6d:
         98:95:a7:ee:21:76:de:da:9e:68:83:95:81:9b:69:88:f1:1f:
         b5:89:93:2b:ad:66:c4:df:66:03:6a:38:6f:0e:78:aa:98:f5:
         73:5e:4c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:28:53 2026 by rpki-client