Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File:                     A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier:          7BCFXU4WBq8N4KouhjQo4Nsi7rpo9zHmG00Nglk+P24=
Subject key identifier:   A5:A3:E4:28:17:CA:E1:DB:9B:B4:DD:3C:2B:C7:58:6D:2A:D7:C4:95
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer:       /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial:       01A0E32BA780FE1967FFAB1989F1F75BCDB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number:          0731
Signing time:             Sun 27 Sep 2026 14:01:23 +0000
Manifest this update:     Sun 27 Sep 2026 14:01:23 +0000
Manifest next update:     Mon 28 Sep 2026 14:01:23 +0000
Files and hashes:         1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: ZtY1YttzhhaOiC0zxv8hgEqj3yZ1B/27yTDNoNwkDnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:2b:a7:80:fe:19:67:ff:ab:19:89:f1:f7:5b:cd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
        Validity
            Not Before: Sep 27 14:01:23 2026 GMT
            Not After : Sep 28 14:01:23 2026 GMT
        Subject: CN=a5a3e42817cae1db9bb4dd3c2bc7586d2ad7c495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:25:5a:db:6c:86:d5:b7:de:70:cf:ba:19:
                    47:7e:96:71:04:a3:11:8e:0b:3f:62:74:51:ad:ec:
                    a1:97:f1:78:2e:4d:1e:44:97:48:49:c1:a4:19:e8:
                    8e:8e:e4:74:59:ea:11:84:e1:e8:b1:77:3e:69:af:
                    7c:da:43:3c:94:cd:b5:fe:bd:24:8c:b5:87:ac:de:
                    c3:0d:70:d0:68:0c:47:cc:9e:e7:31:6c:30:c7:7e:
                    0e:6d:71:3e:6e:84:1e:bd:f8:4f:9b:c2:b6:cb:be:
                    c8:67:99:ab:25:59:36:40:68:61:bf:75:44:b4:1f:
                    af:a8:93:c2:69:9c:05:f7:ff:52:71:79:b2:cf:a7:
                    a1:f9:ce:91:1f:59:fc:ba:f1:b2:8b:c2:a4:64:0b:
                    eb:00:af:25:09:c9:02:f2:9a:4d:d9:ed:e3:99:25:
                    29:5a:12:98:12:83:76:90:0e:48:e8:99:27:0d:6d:
                    cf:c7:ac:40:8d:be:a1:9f:bf:d3:fc:62:8a:81:a1:
                    e2:e7:1d:94:c8:15:ca:21:74:05:e6:59:8c:cf:ed:
                    83:8e:11:f0:13:71:c7:09:ab:b5:84:ec:c6:93:d6:
                    ae:5e:bb:b7:ed:12:72:24:a7:ac:0b:44:6f:42:eb:
                    c7:c8:95:ea:1f:4e:f8:71:dc:07:cc:11:e9:17:a7:
                    d0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A3:E4:28:17:CA:E1:DB:9B:B4:DD:3C:2B:C7:58:6D:2A:D7:C4:95
            X509v3 Authority Key Identifier:
                keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:67:fc:af:df:43:c9:38:98:ce:19:76:cf:01:3b:33:a3:79:
         b3:6e:6a:27:1f:fb:b9:3f:27:fb:81:5a:af:eb:94:94:0e:b1:
         db:b8:f7:46:54:e6:f1:62:51:ff:06:26:cd:60:87:e6:94:19:
         ab:4a:01:ac:7b:fa:94:fd:7f:3e:f6:4d:ea:0a:6a:30:94:ad:
         3f:bf:1c:3a:de:91:da:46:6b:43:26:45:c4:b6:09:51:2a:b6:
         7a:0b:3e:ae:fc:60:fc:52:fa:4e:23:5e:f3:f6:05:80:60:42:
         a5:eb:44:8f:05:d3:f9:ab:7b:f2:be:de:cf:65:80:62:d1:b7:
         24:78:00:af:aa:91:50:0d:95:71:fc:3b:0d:17:73:d2:40:f8:
         af:ca:f5:48:83:c2:54:4a:49:2c:fb:e8:5a:a2:e0:47:a1:be:
         c4:cb:0b:56:33:c5:85:c7:d8:5d:ee:07:92:a4:a1:a8:3c:4d:
         9e:d1:f3:ab:4d:66:b2:2d:83:8e:f8:99:51:f5:52:2e:ad:37:
         fe:96:e0:c1:4d:6b:18:07:e9:bc:80:7e:8d:e1:5b:2d:df:55:
         26:ec:05:0b:af:9a:d9:ab:e3:b9:c6:89:6c:65:4b:12:5a:79:
         87:62:e7:35:b2:95:b7:5c:89:0f:a5:65:4e:51:82:7e:49:45:
         a6:ab:e4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:31:54 2026 by rpki-client