Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
File:                     7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json)
Hash identifier:          1FMxpQKpd1+0h+/mt1QBo5CmlVhpzzJ9CX8FBxvT0zY=
Subject key identifier:   A6:88:45:0D:3F:7E:9B:A9:74:14:A7:1E:61:44:AC:B1:E1:0B:FC:D6
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       01A0CBFE195CD98F0A64EA8A6079FE26F8C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
Manifest number:          1A80
Signing time:             Wed 23 Sep 2026 02:00:22 +0000
Manifest this update:     Wed 23 Sep 2026 02:00:22 +0000
Manifest next update:     Thu 24 Sep 2026 02:00:22 +0000
Files and hashes:         1: 03adZJbb-O1p_CXcQ_4M0jgNEFw.roa (hash: ew9gGSBHBbQPEdarHkUHaR6ktGIwejsj7yNx1KPoThQ=)
                          2: 1-AaYw2BfaY3XhYhRX7k0ikSXO9w.roa (hash: WyNldQk+XZoMO0b/C5jIYmrjIYQhy0dv0+KOkKWcQSE=)
                          3: 1P4VHJbsu8-KA_CDbuA3mLdiyQo.roa (hash: QETOSgaKr5YFSXBkowwoHjS2zVlXL1HHWJzh0UPdErQ=)
                          4: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: e7/aEVmZGGhC41wzOUu9ftx85EaYQZp5Yjcv3i+D4ns=)
                          5: Fx8cnnhYnA6BH8cJUcV9Vz-n8OM.roa (hash: nBn8KMz1/qrlmEp5tnjRaNg0XQIu3L/8mlSSo9e/i1U=)
                          6: HsnhtW3Vo1ScMXDm_04rDrcrO8A.roa (hash: 5+GIeXFw3kg0H6nKxy1DPIUv8/Ly7H/qd2V/EdogjOk=)
                          7: JHDYQiALesWvByATRJ3bFGKf440.roa (hash: 4qi7uVDpfuqHxI2PwRXSylbhTlTDmB3nFH/RQRca9I4=)
                          8: M-xhOdJhOt1IVpAo6jVDD6VitCU.roa (hash: waOg7nDr7fSZGGvzIuGjBg6JCLXByvSxzjfTgEkG9Iw=)
                          9: RMbFoCYqNcmYffu8B7XKQZOpe9g.roa (hash: Bc8GrrG0ePgUPfQVi+zdsUsnCNOP4l8CwIx91Qrbgs8=)
                          10: RkJgzEGbgGQVpYMhyuLt_ciEWs0.roa (hash: s24XvC1lX1fQ9pY/tvq7aXzmmQIz7/1F7PGbhhoCpbM=)
                          11: YUZAH4o6lSlfa8V06bR-tRKZeJY.roa (hash: RWEnsTCPJnS0wvgpBfvSOdsOCDY+GRhBVGGh8MqvS3c=)
                          12: bKHn0qb-Jdo8C-QdUH0EoddC6R0.roa (hash: t7W3AEy6SZzLhzfSNb31m9y8L46P7EJQYuCD/DSTk0I=)
                          13: eidiHBPgQKzRSZT9OwGu9tKmDIg.roa (hash: wDu3wVyoIZQVKXQBVdzTm8+ss6XGOx6VqYvXUN2hobg=)
                          14: hO16bUk7sgMxRq4iY5R-8zAg_pw.roa (hash: muh9Cwq/x+krpQXeGbq5yotjMWT1VH8PKPWrvuCsuXA=)
                          15: k6jLYVH6C0z0KMYaezVQiNE4EPU.roa (hash: 7jskiw03SWhNj59VRgx4kkxZFbjnSw3URxMXrNwyUt0=)
                          16: ygT4_ge1ohdgPGNfdC3uMhbevTo.roa (hash: QzMQwc/7YDt82Fn8x4yXez6Z6w0QENNYIpCBlAJaBv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:fe:19:5c:d9:8f:0a:64:ea:8a:60:79:fe:26:f8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: Sep 23 02:00:22 2026 GMT
            Not After : Sep 24 02:00:22 2026 GMT
        Subject: CN=a688450d3f7e9ba97414a71e6144acb1e10bfcd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bb:18:5d:ea:1f:c0:61:cf:bb:4f:fe:87:5b:
                    15:31:0a:a6:8e:81:3c:2e:c0:79:a2:58:82:13:85:
                    9d:0d:47:dd:c0:11:18:9f:b5:2e:eb:a4:f4:76:04:
                    43:fa:82:01:db:fd:ce:93:c6:20:cf:b4:5e:5a:39:
                    cf:59:92:80:86:5d:1d:ba:a8:62:ed:3d:70:85:cb:
                    74:46:dd:36:4b:21:2a:e8:49:b6:e5:cb:bf:1b:e2:
                    9a:3a:79:1e:6a:1a:b0:65:04:5c:12:2d:d2:29:b2:
                    bc:79:cc:56:d2:ef:39:70:12:70:ad:f4:ef:30:f1:
                    28:9a:f0:31:57:60:eb:0e:e1:2f:8e:7d:4b:d4:a7:
                    0f:59:b8:3f:6d:27:6b:8f:6a:9a:e4:c5:52:8c:b2:
                    4a:e6:fc:44:46:bf:3d:7a:7c:17:9a:90:21:6b:c8:
                    f4:17:03:58:51:6c:a2:b2:f2:cb:f8:51:56:8d:21:
                    fb:ab:4c:39:6c:43:14:9f:24:c2:9b:49:e1:5c:1b:
                    2d:4b:5e:34:33:c5:9c:88:80:94:df:26:f8:51:02:
                    59:e2:5d:68:f8:2a:88:d5:8d:72:30:0f:1d:db:10:
                    14:02:f6:a8:91:af:37:1c:c8:e9:62:46:f1:f9:8c:
                    5c:0e:bf:8a:fe:a3:a2:08:ce:80:40:bd:57:bd:0d:
                    bc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:88:45:0D:3F:7E:9B:A9:74:14:A7:1E:61:44:AC:B1:E1:0B:FC:D6
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:88:ba:50:8a:c7:bf:95:a4:3e:7e:f4:c9:4a:03:73:78:53:
         0f:61:e0:cf:25:93:c1:50:d6:75:15:be:95:0f:ba:23:8f:e6:
         13:0d:b6:cc:ac:59:ff:30:33:4b:d0:76:b9:0c:58:04:b7:80:
         db:3f:1a:d4:38:35:99:7d:8d:31:77:e9:4f:78:6e:43:89:1c:
         31:76:d9:c8:46:b5:c9:ff:72:04:8f:2b:5f:eb:92:8a:dc:a2:
         7f:10:71:a8:3f:d6:eb:e4:96:54:22:26:00:79:4e:54:e1:23:
         8c:3f:45:f3:85:28:45:b1:f4:59:cb:1c:ac:88:98:d6:53:05:
         5c:ff:72:02:1b:3b:ec:f7:c8:bf:f0:3c:56:a0:ac:86:69:7c:
         0f:44:b1:ba:6c:15:da:82:38:16:e3:13:41:eb:7a:da:d7:81:
         dc:76:61:06:a5:f2:5e:a4:8c:50:85:fb:77:03:ca:03:2b:07:
         d0:70:eb:79:9f:cc:cf:31:e8:cf:34:3a:2b:0c:33:1f:cc:5a:
         c8:89:10:c6:34:e1:8a:2a:09:c9:9b:bb:13:04:c7:fd:4b:d7:
         d3:25:53:c8:d3:8d:84:31:97:1e:67:f0:fc:f6:b9:d6:09:51:
         c2:1a:62:02:38:34:69:c6:7f:f7:03:6f:06:0f:76:a0:0a:c0:
         8e:2e:43:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:59:04 2026 by rpki-client