Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
File:                     7enwFkj2hDY4I6bY7srOV5unt_8.mft (raw, json)
Hash identifier:          ILSq7rbS+IkQjjAPCxMdyWX8d6UxMvNSFhdpTwjBkB8=
Subject key identifier:   9A:17:01:D0:AB:74:EE:37:58:2C:45:4F:9B:A8:8A:88:DA:F3:7A:62
Authority key identifier: ED:E9:F0:16:48:F6:84:36:38:23:A6:D8:EE:CA:CE:57:9B:A7:B7:FF
Certificate issuer:       /CN=ede9f01648f684363823a6d8eecace579ba7b7ff
Certificate serial:       01A0D01192CBBA92A3912533FF7D1ACEAD1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
Manifest number:          E5
Signing time:             Wed 23 Sep 2026 21:00:07 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:07 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:07 +0000
Files and hashes:         1: 7enwFkj2hDY4I6bY7srOV5unt_8.crl (hash: qC/vYi+HgOWoi/v6Wsl2DSCP948FvyT0Y+zYNfQH/r4=)
                          2: N0pj_XAkmpu_lY4emTSafGvqA94.asa (hash: Uuz9QFe+O+ehHKa3uQpLvcHnBTIPRP4id7lgGYmUWlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:11:92:cb:ba:92:a3:91:25:33:ff:7d:1a:ce:ad:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede9f01648f684363823a6d8eecace579ba7b7ff
        Validity
            Not Before: Sep 23 21:00:07 2026 GMT
            Not After : Sep 24 21:00:07 2026 GMT
        Subject: CN=9a1701d0ab74ee37582c454f9ba88a88daf37a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:1e:0b:32:26:45:08:7b:87:bf:fe:e7:c3:
                    2d:e0:57:e4:b1:9d:87:af:5f:4b:4e:1d:3f:0e:bd:
                    5d:70:81:36:ee:4c:31:cf:db:fe:5c:91:c9:b8:c6:
                    92:1f:9c:f0:ed:e0:85:d5:92:c7:c7:6a:f9:71:10:
                    07:10:a6:91:60:ea:94:b1:0d:2b:c8:5c:12:ea:49:
                    8c:2c:8a:b7:1a:52:74:8c:9d:76:d2:2b:22:23:5e:
                    4b:1f:00:2c:f4:3d:54:b2:2a:d8:6f:0e:07:bc:28:
                    e6:32:d7:ee:c1:42:0a:82:b6:aa:df:92:7a:17:35:
                    2c:79:5d:b3:fc:e2:49:c8:bc:5d:d8:73:76:0e:32:
                    40:f3:a1:23:18:dd:79:22:62:cb:c5:8d:f1:88:75:
                    16:72:44:e6:d7:de:27:73:89:3b:be:fc:c4:b3:d1:
                    8e:fe:73:a0:ae:48:51:4d:34:83:97:e2:bc:8a:48:
                    14:48:6d:6f:db:40:d9:83:4b:c5:3b:26:6d:0a:8c:
                    74:b6:a6:3e:f5:70:b0:4c:99:88:1f:48:86:0c:20:
                    da:58:9b:5c:51:79:c2:58:e3:4d:65:7f:03:f9:49:
                    fa:86:9e:13:4a:d7:07:36:ab:b7:4e:fc:b0:0f:9e:
                    b3:b2:51:f8:7c:53:bc:a4:4d:42:7b:09:a3:32:66:
                    3e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:17:01:D0:AB:74:EE:37:58:2C:45:4F:9B:A8:8A:88:DA:F3:7A:62
            X509v3 Authority Key Identifier:
                keyid:ED:E9:F0:16:48:F6:84:36:38:23:A6:D8:EE:CA:CE:57:9B:A7:B7:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:66:8a:c9:d0:90:31:9d:ea:6c:57:3c:69:24:a5:8c:df:4f:
         7f:da:62:49:7b:ff:3c:ff:15:30:c3:47:8b:b3:17:b5:13:6b:
         8e:16:d9:18:45:ee:55:ce:87:82:b1:7a:31:42:16:7e:00:3e:
         79:1b:fa:ff:97:6c:36:56:ea:ea:65:af:7d:32:92:0d:ec:ca:
         b8:c5:08:69:bb:1c:63:cd:e6:d6:82:33:99:2f:17:be:b4:16:
         28:79:44:6e:7e:5c:13:7d:84:a0:00:59:98:a5:13:9f:c6:08:
         cb:a5:d9:18:27:e5:2c:46:c3:89:5b:4d:05:c7:b1:a0:1c:42:
         69:3a:38:5f:a4:d6:54:cc:99:80:34:8d:c9:47:bf:42:df:be:
         08:e9:31:c8:30:a0:08:7c:31:2f:86:5e:80:b9:f4:01:d2:94:
         c5:f2:92:05:40:b8:80:a4:1e:16:c2:22:79:be:1b:ba:e4:bd:
         3c:44:67:f7:28:96:14:53:d2:f7:9d:39:65:97:a5:94:8d:3c:
         03:ce:40:08:25:cd:0d:8d:8e:a3:c1:38:d3:2a:ea:d2:d7:6e:
         ad:fa:17:05:a9:0a:57:33:09:f2:3c:e7:52:04:64:49:0e:7c:
         38:02:e2:7a:84:87:98:3f:71:d8:c9:c1:45:46:ca:e7:1d:0d:
         ab:f5:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:58:04 2026 by rpki-client