Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
File:                     7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft (raw, json)
Hash identifier:          FCckg3gaNnQfB4jQ+pUG+UpzlBGk1erRCWK7y51cm5k=
Subject key identifier:   D7:C1:21:83:B0:EB:E0:A9:DE:79:29:87:0E:27:B2:8A:9E:06:83:5B
Authority key identifier: EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
Certificate issuer:       /CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Certificate serial:       01A0D42602D03CBEFDAE74AEC795FFB7B84D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
Manifest number:          0DF7
Signing time:             Thu 24 Sep 2026 16:00:55 +0000
Manifest this update:     Thu 24 Sep 2026 16:00:55 +0000
Manifest next update:     Fri 25 Sep 2026 16:00:55 +0000
Files and hashes:         1: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl (hash: HQZcWu/DpN0EHfcDFD62rEzTuL6xynRvZ7UOAIBLDFI=)
                          2: 7LE1DEYT1ICWfMHoKNZXPCeUJQo.roa (hash: 6GDVwV7rQonMcBZu/ABynfjZj1iMGkNFh4pVQikYnrw=)
                          3: QxJ6dEmDHiw3lmS5PxMFumYPnck.roa (hash: aqxNNZjWenyXEE3qtSl1nU9WOF/JQO83RlkjXS7clZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:02:d0:3c:be:fd:ae:74:ae:c7:95:ff:b7:b8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
        Validity
            Not Before: Sep 24 16:00:55 2026 GMT
            Not After : Sep 25 16:00:55 2026 GMT
        Subject: CN=d7c12183b0ebe0a9de7929870e27b28a9e06835b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:30:85:aa:0b:84:e6:c8:19:7f:37:19:17:79:
                    4a:2d:93:b2:b4:61:d0:1b:36:fa:02:95:3e:7a:22:
                    ca:44:43:a2:c4:c0:15:a5:10:f4:dc:07:4f:db:11:
                    b7:e6:4f:21:02:1c:e8:57:2d:19:8a:ca:de:10:d9:
                    42:ea:0c:0a:96:9a:c4:24:d6:f8:a8:16:b8:aa:12:
                    d0:1a:ca:11:06:66:8d:91:8a:3a:78:9b:3f:f6:8e:
                    e1:b0:59:80:1a:40:56:7e:42:8e:f0:bd:20:db:7b:
                    ac:76:db:a1:85:2e:8c:18:0f:ab:0a:49:bc:10:63:
                    89:b7:bf:99:d4:50:cd:34:69:06:c4:8a:ed:02:ee:
                    3b:dd:62:8b:6f:bc:e9:e7:b1:da:95:7a:d4:76:e1:
                    2d:24:c2:b0:f2:32:ef:5d:ff:97:5d:b5:c7:d5:29:
                    19:5c:9a:49:f3:52:a3:2c:30:bb:d7:ff:de:f4:59:
                    ef:8b:99:0b:e4:f9:17:06:1e:f1:ec:12:6a:02:ee:
                    2c:05:51:94:f4:d7:50:e7:4d:e7:15:57:2b:fb:55:
                    e5:02:44:69:b3:29:2e:56:15:ba:2e:8e:a2:81:c1:
                    26:74:7f:f7:77:9e:73:69:1e:0a:3b:be:ab:1c:52:
                    05:16:54:ef:ea:a7:b2:aa:06:1b:25:d2:0d:6d:37:
                    c7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C1:21:83:B0:EB:E0:A9:DE:79:29:87:0E:27:B2:8A:9E:06:83:5B
            X509v3 Authority Key Identifier:
                keyid:EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5f:05:56:9c:9c:eb:c7:3f:b0:72:1f:4f:fc:8b:c8:9c:a3:
         f4:55:38:11:92:b9:bf:1e:8e:89:b1:b7:a8:a4:98:ba:e3:50:
         f4:19:e3:dc:77:0d:7c:46:08:41:7e:5c:47:ef:62:36:a7:d3:
         d8:c9:08:24:e7:4a:f8:8f:12:58:c7:40:92:f6:f5:bf:a7:3b:
         88:f1:db:02:0d:1d:05:9e:d2:8d:8d:0c:50:f2:83:de:37:ae:
         66:20:44:1a:ce:9f:bc:01:47:35:34:5b:9e:00:06:79:8e:a3:
         1d:87:d0:e7:7f:48:24:65:c1:29:24:b3:c4:13:81:c0:b9:36:
         79:a2:cd:85:c4:f4:f0:8d:c3:d4:16:92:e3:c4:ba:d4:af:bc:
         e4:5f:6f:6e:84:74:b1:d1:50:16:0e:66:2c:ce:cc:30:71:2a:
         95:4c:42:75:fd:d9:67:5b:5b:bb:89:f2:b4:be:dc:68:86:fc:
         17:e1:29:2f:5a:9b:b4:f5:92:73:81:a0:62:88:b4:dc:68:e1:
         07:bb:ed:f6:55:96:af:7f:49:e4:7b:f5:74:28:65:4c:59:c3:
         f4:e7:71:88:f4:87:69:e8:58:ee:c1:3f:e1:aa:c1:ac:a0:12:
         87:49:e2:a5:78:18:61:bc:75:28:06:2b:df:64:30:df:4e:b6:
         35:1e:e4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:12:52 2026 by rpki-client