Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File:                     a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier:          naxapqbOsK1HUnUWNKAPA0g4XIYuBdOzqzVarmHBwpM=
Subject key identifier:   C7:AD:DE:47:34:28:5E:09:3B:61:69:75:40:EB:33:4F:4F:69:1D:BB
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer:       /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial:       01A0D45D97572BE882862D2BD9EF0D46E52B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 17:01:38 +0000
Manifest this update:     Thu 24 Sep 2026 17:01:38 +0000
Manifest next update:     Fri 25 Sep 2026 17:01:38 +0000
Files and hashes:         1: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (hash: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8=)
                          2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: o2TvRrf5YPGZAvMX2qgh/INYA+89mCpTlMUB9n+otdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5d:97:57:2b:e8:82:86:2d:2b:d9:ef:0d:46:e5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
        Validity
            Not Before: Sep 24 17:01:38 2026 GMT
            Not After : Sep 25 17:01:38 2026 GMT
        Subject: CN=c7adde4734285e093b61697540eb334f4f691dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:bc:78:cd:99:7a:89:59:71:22:7e:3f:3f:
                    a0:96:e3:e6:bf:0a:c6:8d:b0:cf:03:58:91:11:7c:
                    0a:ac:c1:09:f6:08:15:52:2a:f4:8a:a2:7e:9f:2c:
                    a4:19:24:73:83:35:3a:36:6b:71:bf:10:7d:27:36:
                    c4:16:7c:36:08:e5:43:cd:52:d4:58:f5:68:5f:67:
                    31:80:46:f7:0e:f0:f5:e0:b6:a4:ae:72:69:50:d7:
                    ef:7c:fd:89:de:94:6c:dc:65:f6:f6:83:7f:1a:ac:
                    2b:00:35:2c:18:6e:31:97:8c:83:fb:51:85:b3:1e:
                    85:9b:a9:de:6b:a5:90:fc:27:69:e0:22:73:cf:65:
                    6b:a5:6a:ab:61:71:ba:18:b6:1e:68:82:89:7e:9e:
                    59:5d:93:00:2f:14:a6:42:7f:96:9e:0f:d3:a9:eb:
                    f2:d0:af:f6:e1:6c:91:fa:fb:e9:2b:4d:d9:b7:67:
                    69:de:66:11:f4:d0:c8:e6:cb:73:53:ce:58:71:46:
                    08:cf:81:73:26:f9:a1:c2:5d:3b:d3:ea:b0:54:7a:
                    ad:e7:ad:49:b0:2f:05:75:ae:48:3c:26:52:cd:c6:
                    cc:8f:f4:6d:6a:ae:e7:4a:d4:55:9f:04:c5:f0:e2:
                    9a:3c:00:ba:c1:02:7d:e4:3d:59:1d:66:b3:a5:57:
                    2c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AD:DE:47:34:28:5E:09:3B:61:69:75:40:EB:33:4F:4F:69:1D:BB
            X509v3 Authority Key Identifier:
                keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0a:57:0d:24:50:8d:94:f4:0a:36:c2:dd:81:c1:05:20:c9:
         78:e2:0f:cb:b5:35:8e:11:50:98:65:87:74:8a:87:e1:fd:8e:
         61:f6:b5:0a:a1:12:86:0d:73:56:9a:aa:2d:a9:14:d6:cb:33:
         aa:74:4e:65:d4:cd:c8:aa:a8:49:80:2d:cd:f3:04:23:27:ec:
         4e:18:c4:ef:e7:10:1d:34:5e:f4:be:e0:a5:30:37:7d:65:a4:
         11:4d:18:21:05:38:bc:0c:7d:70:b4:b6:b6:31:76:b7:78:6a:
         a0:c0:90:17:28:f1:93:ae:04:62:70:b5:b3:fe:70:49:77:f2:
         51:b4:8e:36:fa:88:92:9d:06:a6:0f:68:da:9f:b1:72:ca:3a:
         e7:e6:eb:50:ea:dc:7d:33:99:af:2e:db:bd:8d:a1:f5:b2:ab:
         9e:9c:3f:4e:72:3b:70:5e:24:b3:01:87:36:5a:8e:2c:0d:e0:
         1c:ed:53:2c:20:ed:72:27:1e:4b:47:db:af:20:3c:97:b0:c6:
         75:29:30:15:ed:f5:90:75:18:e8:80:8e:51:60:6d:62:c7:54:
         a1:fe:b6:5a:01:df:69:5a:96:3d:37:6e:fe:91:af:00:4a:05:
         c2:80:04:4b:b9:95:27:83:c7:f2:ca:34:ff:ed:a6:08:3f:94:
         e7:f0:5c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:53:41 2026 by rpki-client