Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
File:                     7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json)
Hash identifier:          NVf5gLW8M1ZC+iU3T/T01ZY0IEhh8utK5TBXSWFuc0o=
Subject key identifier:   7A:38:68:F2:FC:12:09:F5:72:14:39:00:35:BB:84:49:50:41:2C:57
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Certificate issuer:       /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial:       01A0CEC8C4153DCF13418E83CD9EA06C78CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
Manifest number:          1A79
Signing time:             Wed 23 Sep 2026 15:00:58 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:58 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:58 +0000
Files and hashes:         1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: Q3Mdx1kE3cpW621FIvbyeQlqv+UI4qyT6gm1qBuqXnc=)
                          2: Q7NY4EuKh73yFJKmMgChWTXBirE.roa (hash: 9Iy6hZU4K15U+TrOsDJ5y2e1gzxrEUFWmnU91YlaOBQ=)
                          3: iOS5vBgglGKoAyIuTlk00yBupTw.roa (hash: fNX0sG9X1/c+S73jxlwNV//c2xpiWXgbC9SCAgMtlMM=)
                          4: kC0XjTRvVTMNVCz_-oosCISvjVg.roa (hash: J4jOxS7kdGhXEFl4JYTJOpbh2muE4HF0FfSXnK3e23s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:c4:15:3d:cf:13:41:8e:83:cd:9e:a0:6c:78:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
        Validity
            Not Before: Sep 23 15:00:58 2026 GMT
            Not After : Sep 24 15:00:58 2026 GMT
        Subject: CN=7a3868f2fc1209f57214390035bb844950412c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ac:69:aa:cc:93:45:4b:79:0c:9b:28:30:51:
                    6c:a3:32:73:53:36:9d:73:34:ec:1e:c0:f3:73:70:
                    97:59:c7:aa:05:e0:5d:9e:5f:32:62:b1:56:0c:80:
                    28:64:a8:5a:f9:fc:32:b7:15:d7:cd:fb:af:2a:d2:
                    e9:21:ca:fd:0f:28:4f:3c:e1:e0:a4:7a:2d:4a:c7:
                    58:48:be:56:fa:be:23:4a:51:77:fd:0c:9b:e8:6c:
                    7f:25:fb:cf:54:eb:91:ef:ec:2c:f2:51:e5:b0:67:
                    fe:7d:5f:f3:03:3a:91:13:97:0f:f8:3d:c5:a5:72:
                    98:06:23:25:dc:9b:56:ac:50:b7:5b:d5:60:1c:05:
                    92:f6:de:83:58:88:76:11:a1:1e:18:3f:cd:52:d5:
                    9e:c7:8a:fc:fb:b5:95:c7:20:8d:2b:1a:00:d4:9d:
                    af:d4:14:7e:3c:7f:86:ce:e3:d4:13:ce:72:43:57:
                    98:d9:79:64:1c:14:4b:4f:4e:0f:95:23:fe:71:0a:
                    65:48:42:14:58:ab:fa:23:37:0e:94:ee:86:67:a4:
                    09:1b:2f:85:e7:cd:a8:6c:a2:de:23:39:70:94:f6:
                    a9:3e:7d:4a:1f:a6:6f:98:07:bb:87:86:80:f0:59:
                    44:3e:96:c6:1b:fa:6d:1c:e9:2d:39:d1:a4:e0:fb:
                    4a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:38:68:F2:FC:12:09:F5:72:14:39:00:35:BB:84:49:50:41:2C:57
            X509v3 Authority Key Identifier:
                keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ca:80:6e:c0:c5:c8:1e:b8:64:be:6d:ea:f8:7a:91:ed:e4:
         7e:a2:8f:9b:24:17:db:cd:30:6e:ba:af:5a:eb:77:e7:0d:48:
         21:29:53:81:4a:c5:fc:09:7b:b1:63:9f:bd:a7:af:32:da:b5:
         70:53:03:28:eb:eb:87:5f:3c:25:80:1b:8d:89:d9:77:f3:69:
         17:e9:dc:70:a2:8e:59:81:e4:b0:b1:91:af:e5:b2:c8:90:65:
         95:ed:af:23:52:af:5f:07:31:27:4f:ed:4b:bb:12:00:cf:39:
         e5:21:5b:e3:ec:dd:32:c8:e7:56:5a:b3:be:76:d2:3f:79:91:
         7c:e7:f2:f1:6e:fd:25:c6:cd:d6:94:67:b2:f6:d1:a5:49:8c:
         45:df:db:6a:9e:c2:e9:4a:be:55:72:cb:5d:ae:72:36:c4:4c:
         fc:a4:62:0e:8b:c0:39:16:61:77:99:12:d3:a2:9b:ba:f5:9b:
         38:08:16:6d:ce:1e:6c:de:68:ab:06:1b:c1:55:90:90:07:f4:
         2e:e4:39:22:4a:36:da:7c:90:93:ae:51:4a:7a:9b:dd:fb:fa:
         74:15:e0:3b:bc:c9:6d:fc:fc:ec:a5:4d:dc:16:c4:58:18:cc:
         5e:e7:aa:dd:8a:ef:29:01:51:22:65:58:bb:06:53:61:51:39:
         aa:fb:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:06:18 2026 by rpki-client