Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.mft
File:                     obGOy3zMmQgi1GDAcnLouA5oqtU.mft (raw, json)
Hash identifier:          HBa1asS4366u4qX3Vc11rAyXQjDYIXN49bKSuN2yNEE=
Subject key identifier:   EB:72:33:95:B8:65:E3:EC:8C:AE:89:D6:21:74:CB:10:44:D1:1C:D4
Authority key identifier: A1:B1:8E:CB:7C:CC:99:08:22:D4:60:C0:72:72:E8:B8:0E:68:AA:D5
Certificate issuer:       /CN=a1b18ecb7ccc990822d460c07272e8b80e68aad5
Certificate serial:       01A0D8DEEC206F816F67663F06DEDDBBE312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obGOy3zMmQgi1GDAcnLouA5oqtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.mft
Manifest number:          E7
Signing time:             Fri 25 Sep 2026 14:01:23 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:23 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:23 +0000
Files and hashes:         1: obGOy3zMmQgi1GDAcnLouA5oqtU.crl (hash: mCKo2n3l2oYYPsACIWd0AVN0mETon/CaFFEOPjNRzhs=)
                          2: tKtlnLh_jJ4Ft0VNwZIQ8ii0knY.asa (hash: rIFQcwq54sm+OWU45RtHX+x/+ABv5r01Jq2zsHkmECE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/obGOy3zMmQgi1GDAcnLouA5oqtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:de:ec:20:6f:81:6f:67:66:3f:06:de:dd:bb:e3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b18ecb7ccc990822d460c07272e8b80e68aad5
        Validity
            Not Before: Sep 25 14:01:23 2026 GMT
            Not After : Sep 26 14:01:23 2026 GMT
        Subject: CN=eb723395b865e3ec8cae89d62174cb1044d11cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2a:c3:6a:3a:d9:21:22:95:d8:8f:5f:b1:47:
                    f8:d4:3c:c2:c1:c1:19:b2:51:67:3a:87:56:88:68:
                    a4:34:b0:35:db:c7:7c:fd:d7:99:b0:d5:5b:42:5e:
                    d4:1d:8a:e4:3e:d5:05:92:39:b4:57:b1:98:84:d7:
                    cd:a3:aa:20:c9:7c:68:f9:cc:9b:7f:27:da:ff:dc:
                    04:da:2d:79:12:0c:e3:36:93:68:df:80:79:40:b4:
                    70:9d:62:21:a6:1a:ed:06:94:39:22:64:1b:ad:7f:
                    d0:dc:4e:50:81:71:2d:78:1b:6a:59:f8:d7:b4:13:
                    7e:28:af:53:4a:0e:18:cf:e1:1a:df:d0:c3:57:4d:
                    1b:1c:c6:42:8a:48:92:a0:49:7d:35:2d:41:f2:0c:
                    95:88:07:e2:48:21:2d:15:55:24:77:d1:05:0e:48:
                    9b:8a:a9:2c:8d:36:8f:59:cb:a2:a0:d8:51:59:cd:
                    0a:46:7c:60:f0:6d:f1:8a:b6:86:f0:6a:d4:77:f4:
                    cf:83:18:22:ac:c9:3a:4a:e8:16:2b:ce:da:40:82:
                    be:95:08:40:28:3b:73:ef:08:e0:66:15:ca:61:5e:
                    53:a6:a2:39:7f:07:16:d6:90:93:4a:7b:f9:97:a7:
                    c0:9e:81:32:2b:30:2b:8e:f6:d5:47:f0:16:80:b3:
                    5d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:72:33:95:B8:65:E3:EC:8C:AE:89:D6:21:74:CB:10:44:D1:1C:D4
            X509v3 Authority Key Identifier:
                keyid:A1:B1:8E:CB:7C:CC:99:08:22:D4:60:C0:72:72:E8:B8:0E:68:AA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obGOy3zMmQgi1GDAcnLouA5oqtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/791751-f5c8-4839-8db3-d1cbdb47cc4b/1/obGOy3zMmQgi1GDAcnLouA5oqtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:da:30:06:f7:e9:44:5a:41:04:49:1e:97:60:36:52:5f:5b:
         f2:8a:66:1c:d3:d1:12:a9:af:3a:2e:81:07:a4:3f:c0:ae:d5:
         18:2e:91:29:fd:f3:be:9a:ef:bb:ad:37:82:bf:9f:61:5e:8b:
         b2:1b:9d:0d:63:15:16:e2:2d:88:56:01:a7:83:05:91:35:04:
         0c:26:f0:71:58:57:1f:8b:c2:69:19:7b:92:9c:48:b5:72:44:
         7b:8d:dc:bb:97:a7:cc:db:75:4d:dc:82:e0:dd:b4:d5:6f:15:
         34:b6:9a:d2:46:4d:5b:a9:03:e2:21:47:b4:cb:b4:5c:1d:1b:
         b2:5d:2b:83:55:07:19:a0:0b:01:66:92:08:ff:21:27:e3:d6:
         63:2e:32:ca:0b:04:a2:5c:db:b5:ba:27:99:06:ca:cd:9f:36:
         ad:4c:44:55:0c:a8:54:3e:25:16:7f:ee:02:91:e0:9d:66:f0:
         a5:ed:4b:e0:63:3f:96:8f:9a:8f:c4:c0:45:f0:15:2b:d7:fc:
         40:b5:dc:8b:ed:59:d4:4a:75:b4:2b:a1:25:78:c7:5c:1e:e5:
         86:11:e3:82:f6:7f:56:ae:d1:ff:a9:23:40:57:7a:3e:69:a7:
         b2:35:e0:e8:b1:42:14:4b:c5:7f:c1:0c:ea:19:71:f5:73:82:
         25:0e:99:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY3uwgb4FvZ2Y/Bt7du+MSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYjE4ZWNiN2NjYzk5MDgyMmQ0NjBjMDcyNzJlOGI4MGU2
OGFhZDUwHhcNMjYwOTI1MTQwMTIzWhcNMjYwOTI2MTQwMTIzWjAzMTEwLwYDVQQD
EyhlYjcyMzM5NWI4NjVlM2VjOGNhZTg5ZDYyMTc0Y2IxMDQ0ZDExY2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CrDajrZISKV2I9fsUf41DzCwcEZ
slFnOodWiGikNLA128d8/deZsNVbQl7UHYrkPtUFkjm0V7GYhNfNo6ogyXxo+cyb
fyfa/9wE2i15EgzjNpNo34B5QLRwnWIhphrtBpQ5ImQbrX/Q3E5QgXEteBtqWfjX
tBN+KK9TSg4Yz+Ea39DDV00bHMZCikiSoEl9NS1B8gyViAfiSCEtFVUkd9EFDkib
iqksjTaPWcuioNhRWc0KRnxg8G3xiraG8GrUd/TPgxgirMk6SugWK87aQIK+lQhA
KDtz7wjgZhXKYV5TpqI5fwcW1pCTSnv5l6fAnoEyKzArjvbVR/AWgLNdHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtyM5W4ZePsjK6J1iF0yxBE0RzUMB8GA1UdIwQY
MBaAFKGxjst8zJkIItRgwHJy6LgOaKrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2JHT3kzek1tUWdpMUdEQWNuTG91QTVvcXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83OTE3NTEtZjVjOC00ODM5LThkYjMt
ZDFjYmRiNDdjYzRiLzEvb2JHT3kzek1tUWdpMUdEQWNuTG91QTVvcXRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS83OTE3NTEtZjVjOC00ODM5LThkYjMtZDFjYmRiNDdjYzRi
LzEvb2JHT3kzek1tUWdpMUdEQWNuTG91QTVvcXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtowBvfp
RFpBBEkel2A2Ul9b8opmHNPREqmvOi6BB6Q/wK7VGC6RKf3zvprvu603gr+fYV6L
shudDWMVFuItiFYBp4MFkTUEDCbwcVhXH4vCaRl7kpxItXJEe43cu5enzNt1TdyC
4N201W8VNLaa0kZNW6kD4iFHtMu0XB0bsl0rg1UHGaALAWaSCP8hJ+PWYy4yygsE
olzbtbonmQbKzZ82rUxEVQyoVD4lFn/uApHgnWbwpe1L4GM/lo+aj8TARfAVK9f8
QLXci+1Z1Ep1tCuhJXjHXB7lhhHjgvZ/Vq7R/6kjQFd6PmmnsjXg6LFCFEvFf8EM
6hlx9XOCJQ6ZGA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:01:27 2026 by rpki-client