Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
File:                     EFQ6UZfrJUREfp02s-vxRFLHd-s.mft (raw, json)
Hash identifier:          nz233RerXPbFFwqN3h9n18dP3rt85qxw9TaxMBQlDxs=
Subject key identifier:   7E:C7:37:91:9B:FB:24:5F:42:59:D0:63:AE:29:D1:2E:12:98:1A:AC
Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
Certificate issuer:       /CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Certificate serial:       01A0D61509E5C09DC884B77C8281ED028669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
Manifest number:          1A77
Signing time:             Fri 25 Sep 2026 01:01:38 +0000
Manifest this update:     Fri 25 Sep 2026 01:01:38 +0000
Manifest next update:     Sat 26 Sep 2026 01:01:38 +0000
Files and hashes:         1: Bh3T0wrbLTJNrgrFw5i_pM5iRtQ.roa (hash: WA266Ck4o7dnRZpdhoDA7vpztTFIYRX6CCiGAbMsH1Q=)
                          2: EFQ6UZfrJUREfp02s-vxRFLHd-s.crl (hash: OQiaYqFtKjHvf1WQG5pooM8qYhxrKz5RDppT6MsLI7Q=)
                          3: ImpO7LSnSh8T-SAP2SuJNfFSJgE.roa (hash: dSmKjTB9FQy0lASiaAn8YI8srtKhdTfzJGvqm7f0pf4=)
                          4: k0ldwye2atdMGffynKmUvuUXgZU.roa (hash: JrwiTiu9NwMxULNngbCiKVNUte/YzwEe47fYqeH12rc=)
                          5: kWmdNWKi9Z8NkBJjIP6q2qnDIzE.roa (hash: IDZUcKyb2+KauUsdYDvGc0d+DoUPFNW0+bS0KsggXC0=)
                          6: w7i2bwt8IuX7uhkgM7L9p2j_aB8.roa (hash: YPB9yo2HV0ef3PXW3ThNALc491eUz66QPQXwpw48Na0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:15:09:e5:c0:9d:c8:84:b7:7c:82:81:ed:02:86:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb
        Validity
            Not Before: Sep 25 01:01:38 2026 GMT
            Not After : Sep 26 01:01:38 2026 GMT
        Subject: CN=7ec737919bfb245f4259d063ae29d12e12981aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5a:5b:f1:43:27:33:cc:18:18:d5:59:d7:b4:
                    a7:78:2b:2b:ad:e0:7f:c2:1e:44:b5:67:27:7c:f7:
                    e7:ee:1f:1b:e9:cf:d2:2d:63:29:78:4b:f2:0c:6a:
                    22:c7:a7:42:f8:82:68:2f:d3:40:52:da:9d:4b:33:
                    09:c1:c1:d7:98:34:18:bd:dc:2f:ec:da:bd:63:70:
                    33:a8:8b:43:ee:74:dd:8d:31:3c:e0:f4:5b:24:76:
                    a3:66:89:0c:f5:06:d9:de:60:b8:80:ba:ab:f9:4f:
                    c1:b3:68:f4:95:cd:e0:a8:9f:91:bd:0c:05:f3:1c:
                    35:97:9f:07:43:68:c3:b4:f7:f6:5f:ff:35:5c:a9:
                    a4:ad:5c:1d:fa:ef:e3:5a:16:97:10:68:c2:e9:e4:
                    a3:ab:45:59:49:50:f9:52:49:dc:c6:6c:7d:7b:09:
                    ec:32:a9:91:c2:22:66:a9:e2:a4:31:4c:8b:96:03:
                    ef:93:9a:0c:ac:68:dd:ff:f7:ce:d8:26:76:63:1a:
                    6b:a7:42:c9:5e:4c:16:34:44:45:63:d3:49:67:04:
                    85:8c:0a:ae:69:62:e3:7e:6d:35:44:0d:47:74:eb:
                    d8:55:2c:a9:3a:1d:64:14:4e:e5:7e:9f:ea:48:31:
                    14:d7:93:3e:57:e5:3b:8e:94:07:7f:91:ca:a1:c7:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C7:37:91:9B:FB:24:5F:42:59:D0:63:AE:29:D1:2E:12:98:1A:AC
            X509v3 Authority Key Identifier:
                keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:fd:b2:c0:32:7d:3a:c8:10:5e:d5:e6:0a:6b:17:71:86:b7:
         4e:a4:2b:81:d8:a2:61:7f:13:af:09:2d:fb:ae:a2:0f:a9:3b:
         de:f1:93:b1:65:89:96:7d:c3:0e:fa:e4:59:6e:49:f5:f3:7f:
         68:a1:bc:9d:7f:eb:0e:eb:04:79:5f:e3:54:8a:e1:a6:74:c2:
         13:23:52:c4:69:46:5b:19:f3:26:4f:5c:69:bd:de:d9:ce:9d:
         ce:86:05:f4:b4:b2:a8:54:70:50:45:af:4e:57:e8:f5:1e:db:
         86:02:3a:93:2c:0d:0c:c5:c6:ad:36:39:bb:65:0b:90:58:73:
         ac:4c:8e:ac:4d:5b:a8:9c:c0:82:bd:04:4e:5e:b9:b2:e6:50:
         e9:d3:b4:83:b6:96:eb:71:70:b9:77:76:32:59:cf:a9:dd:29:
         f8:ed:79:ec:52:e1:0d:b2:c7:94:4d:48:ea:b4:ac:22:0b:a6:
         6c:c8:e6:2c:da:db:43:ab:c5:05:ff:3a:d4:42:41:bb:3a:93:
         e6:f7:e9:b7:84:a5:3d:1f:6f:39:d2:1a:81:bf:df:87:e7:bd:
         3a:82:af:7d:c2:c3:2a:cb:ef:3b:38:a4:03:9d:c5:fc:f7:cb:
         cb:27:23:ea:cf:83:f0:3b:7d:f9:7b:fe:5c:fb:ad:32:64:f5:
         9d:cd:06:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:12:17 2026 by rpki-client