Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
File:                     7x8BiBtzyOm12SI5IppuUS7KTnw.mft (raw, json)
Hash identifier:          y8cZlVtz0nVcOd4Ch7u1BMbcKlx575Z4qgB0BSIpncI=
Subject key identifier:   8F:11:89:54:F7:A0:3F:48:F4:BE:52:54:21:4A:91:92:14:59:22:82
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Certificate issuer:       /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial:       01A0D7CCD326D138CFDBD567580FDB208972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
Manifest number:          1A78
Signing time:             Fri 25 Sep 2026 09:01:59 +0000
Manifest this update:     Fri 25 Sep 2026 09:01:59 +0000
Manifest next update:     Sat 26 Sep 2026 09:01:59 +0000
Files and hashes:         1: 7x8BiBtzyOm12SI5IppuUS7KTnw.crl (hash: YCbndqRghKAXHDP7Rv+BHKFpKAVQNGFg7owGkXFqujA=)
                          2: Y7mpLNYAxNrmVFE668fj26_4slk.roa (hash: sStKHdLvZFVko1S3+XaMnFnoZ14/U/Jcc7V7adFjD7Q=)
                          3: cCf8bwDm6OZbLKRo45eN0GsYupo.asa (hash: pEXggXokDbhwnLHVuScY4TqYFat6YIVQQnhip9Py3E4=)
                          4: yOLIkYkij4lfgAP24UayKikeBzk.roa (hash: 7gmVoPjBYJzfEDhfSMctp0lOvJ+CyhzzxGbFh2ljSD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cc:d3:26:d1:38:cf:db:d5:67:58:0f:db:20:89:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
        Validity
            Not Before: Sep 25 09:01:59 2026 GMT
            Not After : Sep 26 09:01:59 2026 GMT
        Subject: CN=8f118954f7a03f48f4be5254214a919214592282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:12:ed:9d:35:35:14:24:af:fa:cc:72:48:
                    15:75:92:24:79:76:0c:7a:e6:d7:74:0d:7a:fb:b2:
                    44:13:e6:84:3b:02:bd:93:6e:5e:03:69:43:13:81:
                    3a:ae:d1:d1:c0:97:48:53:2c:d6:48:0f:64:4b:5a:
                    1a:88:7e:76:a6:2a:d1:73:62:52:f7:41:04:f9:a2:
                    53:1f:53:c1:e9:67:bf:32:0d:5f:58:19:46:68:8b:
                    70:a7:51:a0:c8:5f:f3:74:26:ce:58:fe:9d:55:f8:
                    11:3d:2c:da:5e:10:9f:a3:a7:ef:3c:ea:c5:ba:4e:
                    f5:2a:4f:0a:e1:21:d7:ec:a8:c2:e7:4b:5c:70:4b:
                    89:7e:a5:db:02:f5:17:cd:30:e3:03:25:88:f5:4c:
                    12:ac:4c:d0:dc:63:84:98:ae:9a:84:e4:4d:80:29:
                    41:64:7e:d2:1e:6e:e0:c0:2e:4f:80:fa:9d:a9:d7:
                    c0:d6:d0:74:62:16:a0:d4:36:fa:80:c4:09:2e:03:
                    ef:80:10:b9:e8:3c:21:5e:f5:6b:8c:18:b1:66:8d:
                    1a:59:79:ee:7e:b6:29:0d:09:e0:22:25:6b:7b:ac:
                    47:58:0c:e1:07:50:98:aa:03:52:1c:bf:2b:05:3a:
                    98:08:dd:3f:17:5c:78:3c:da:db:87:76:52:9c:30:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:11:89:54:F7:A0:3F:48:F4:BE:52:54:21:4A:91:92:14:59:22:82
            X509v3 Authority Key Identifier:
                keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:11:78:9b:c8:e4:c8:3d:7d:06:5c:06:60:4c:56:a5:2d:0d:
         f5:68:46:c5:9b:5b:22:53:6e:dd:cf:cd:c2:db:71:b4:af:da:
         78:bc:35:2a:87:5e:50:2e:e0:e6:bd:fb:d2:88:72:01:16:21:
         e5:37:68:dd:53:b2:ae:f3:c9:93:f8:e1:74:80:c0:da:dc:d4:
         d4:e8:1c:3d:96:f8:4f:c4:e1:21:18:45:ef:97:c6:30:5a:43:
         cf:2c:4d:16:8e:40:59:90:0a:7e:06:22:ab:9b:9b:09:79:32:
         bc:e7:62:f1:c0:37:ae:eb:a5:6e:57:9c:17:f4:a7:97:bb:22:
         ca:72:68:6b:91:a2:e6:14:48:20:5f:13:5b:af:97:c7:4a:04:
         1c:8c:eb:67:16:e2:6d:ab:dc:7b:0d:d3:35:c9:c5:3f:35:f9:
         62:0e:b6:27:cd:64:e7:77:e0:b4:c0:a5:62:20:da:c8:a0:db:
         65:06:46:c6:2d:c9:cf:82:d3:3f:74:30:63:4d:ad:38:a8:7a:
         fc:0d:fa:73:b5:41:09:9a:e6:97:31:58:c5:fc:9d:3c:4c:c0:
         68:3f:e0:4f:62:f6:5c:b2:76:6f:9e:7a:70:ed:08:c9:fc:7a:
         8a:4b:4a:15:36:6e:4d:2c:63:6f:0b:ac:98:9e:04:05:fe:3a:
         4f:b4:45:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzNMm0TjP29VnWA/bIIlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMWYwMTg4MWI3M2M4ZTliNWQ5MjIzOTIyOWE2ZTUxMmVj
YTRlN2MwHhcNMjYwOTI1MDkwMTU5WhcNMjYwOTI2MDkwMTU5WjAzMTEwLwYDVQQD
Eyg4ZjExODk1NGY3YTAzZjQ4ZjRiZTUyNTQyMTRhOTE5MjE0NTkyMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrcS7Z01NRQkr/rMckgVdZIkeXYM
eubXdA16+7JEE+aEOwK9k25eA2lDE4E6rtHRwJdIUyzWSA9kS1oaiH52pirRc2JS
90EE+aJTH1PB6We/Mg1fWBlGaItwp1GgyF/zdCbOWP6dVfgRPSzaXhCfo6fvPOrF
uk71Kk8K4SHX7KjC50tccEuJfqXbAvUXzTDjAyWI9UwSrEzQ3GOEmK6ahORNgClB
ZH7SHm7gwC5PgPqdqdfA1tB0Yhag1Db6gMQJLgPvgBC56DwhXvVrjBixZo0aWXnu
frYpDQngIiVre6xHWAzhB1CYqgNSHL8rBTqYCN0/F1x4PNrbh3ZSnDCkAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8RiVT3oD9I9L5SVCFKkZIUWSKCMB8GA1UdIwQY
MBaAFO8fAYgbc8jptdkiOSKablEuyk58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYt
NTUxMzFjYzFlZmVhLzEvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS82NzUzOTktODFiZS00ZmVjLTlmODYtNTUxMzFjYzFlZmVh
LzEvN3g4QmlCdHp5T20xMlNJNUlwcHVVUzdLVG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxF4m8jk
yD19BlwGYExWpS0N9WhGxZtbIlNu3c/NwttxtK/aeLw1KodeUC7g5r370ohyARYh
5Tdo3VOyrvPJk/jhdIDA2tzU1OgcPZb4T8ThIRhF75fGMFpDzyxNFo5AWZAKfgYi
q5ubCXkyvOdi8cA3ruulblecF/Snl7siynJoa5Gi5hRIIF8TW6+Xx0oEHIzrZxbi
bavcew3TNcnFPzX5Yg62J81k53fgtMClYiDayKDbZQZGxi3Jz4LTP3QwY02tOKh6
/A36c7VBCZrmlzFYxfydPEzAaD/gT2L2XLJ2b556cO0Iyfx6iktKFTZuTSxjbwus
mJ4EBf46T7RFJA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:32:02 2026 by rpki-client