Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
File:                     Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft (raw, json)
Hash identifier:          QdHfAz5gwMG+iBaua4h4F7s3RLNBWkU2lc5OKk5J4+8=
Subject key identifier:   ED:69:40:05:6A:C9:8C:1D:60:0C:7E:C0:85:96:00:97:A8:73:94:EC
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Certificate issuer:       /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial:       01A0D872377CD1878218B7B11015E8D1F473
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
Manifest number:          1A7B
Signing time:             Fri 25 Sep 2026 12:02:38 +0000
Manifest this update:     Fri 25 Sep 2026 12:02:38 +0000
Manifest next update:     Sat 26 Sep 2026 12:02:38 +0000
Files and hashes:         1: Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl (hash: UiWoAwMqLek0B5F+2DwNV7nXwP2tB/QzTZ/7vI39aDo=)
                          2: NhO_IDsun1DhSJC0nOwiJzZ6IyY.roa (hash: UE/nLkMq9esL2M39yDKTuiYBOgv6z8tQHjDR2GXbU1s=)
                          3: PpfIHCD22AUayAWPFxeE0m6hL9o.roa (hash: tEQKGH709CVuan0YOwHt1iqyxRmhemh2Iabk8KfvabM=)
                          4: _Sd1irv3SLkzWu_oWkUu1MU3I_A.roa (hash: TWJWK/sBOL9QSILupXX65npBLxxyu5RqaTrMAD2mTbI=)
                          5: dueCXYNcF-POwww1SeqmkvTvQfE.roa (hash: r+0QIl7pa6dXrtrsAw/kbZCUtrWjLzE48etRrYzcEK8=)
                          6: pR8icRPbtmxZyLYy7ClhNlyoP3I.roa (hash: hJET2JInI9K0Hd2BzAqq/nSPxKB057Gd1PzyTDZKZpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:37:7c:d1:87:82:18:b7:b1:10:15:e8:d1:f4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
        Validity
            Not Before: Sep 25 12:02:38 2026 GMT
            Not After : Sep 26 12:02:38 2026 GMT
        Subject: CN=ed6940056ac98c1d600c7ec085960097a87394ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:1e:d8:df:6b:2f:5a:31:63:99:53:7e:5f:
                    67:3a:44:43:26:d4:ec:80:5a:73:10:b4:56:7b:23:
                    16:c3:46:b1:75:21:60:4e:26:3a:6e:fd:87:a1:6c:
                    e8:c3:52:f4:e8:d8:dd:5c:f2:07:8b:b6:a0:7f:db:
                    ab:5f:b8:e2:04:7c:00:4b:9a:53:27:65:5e:b3:7b:
                    17:d3:d1:5d:8f:2c:23:68:1c:c6:12:24:fd:9e:93:
                    86:43:42:db:e0:99:2d:09:ee:a8:87:c5:ac:82:99:
                    84:e9:24:fb:1b:b1:1a:77:c7:e8:6e:93:7f:7e:7e:
                    01:e5:ef:28:37:f3:6b:c5:57:1a:cd:3d:76:fb:fe:
                    f7:e5:92:a7:00:cb:d0:98:85:09:a7:69:f0:60:b3:
                    90:43:70:de:e7:aa:4b:bc:4a:f6:a9:66:57:2f:74:
                    1b:eb:78:85:25:a9:ea:dd:12:1e:01:17:c5:eb:b8:
                    2a:70:0e:0b:1d:0e:97:1b:83:9c:3b:61:87:3b:8d:
                    04:c8:df:2f:61:51:ef:7b:59:fa:b0:8a:5c:75:d6:
                    e3:ed:28:20:c7:a6:34:aa:ed:40:38:c2:7c:d6:57:
                    36:36:a8:e8:20:50:6b:a2:f3:28:77:87:14:86:b8:
                    e3:ec:df:bf:cb:27:c4:40:7d:1f:5e:77:bf:e9:a5:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:69:40:05:6A:C9:8C:1D:60:0C:7E:C0:85:96:00:97:A8:73:94:EC
            X509v3 Authority Key Identifier:
                keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d4:75:d0:b5:3d:1e:81:17:dc:d9:48:c2:c8:4f:39:8a:ba:
         f7:a5:20:ee:67:e3:44:17:6f:ea:35:b7:9f:a9:68:81:a9:b4:
         87:fc:cb:45:33:68:70:d4:bb:10:03:08:a8:9b:0f:94:ef:19:
         e1:78:d9:ef:58:bc:da:72:cb:a0:93:ba:da:c3:eb:64:bd:b3:
         52:0c:2c:1c:da:c3:75:06:48:35:ad:a4:93:7b:6c:71:22:c8:
         51:fc:e0:11:51:c2:d5:12:23:f0:bf:35:6a:61:83:89:21:e9:
         3c:64:48:bf:7c:cd:1b:ad:ab:61:db:7a:31:60:bc:54:bb:59:
         7f:37:a5:83:f0:b8:ab:f8:b7:03:c2:c5:6f:f1:1b:ba:8d:a3:
         82:d4:6b:7d:a8:5b:b1:2a:48:91:5e:2a:0c:34:c3:b0:b7:b7:
         5d:6b:ef:a9:d4:8c:71:d9:50:c6:31:41:95:5d:62:36:fa:5b:
         ec:f2:22:e8:71:5a:62:b1:b9:45:9e:39:00:d5:a5:13:be:63:
         88:5a:e3:0f:26:14:60:b5:b5:19:be:2b:da:78:22:27:e3:41:
         a4:d8:9b:cf:3f:59:8a:31:06:86:59:2b:41:c3:cf:ca:90:d6:
         6a:2c:0f:c5:76:db:98:34:56:f9:fe:1e:bd:11:59:1b:f8:7e:
         27:01:e9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:31:01 2026 by rpki-client