Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
File:                     e7M4LBagpWFZkNS85jTcUWgvLqo.mft (raw, json)
Hash identifier:          Ubr5wSKQxlTMqCsHhL1QYx6lMZH7TB7WtIAVF907OjA=
Subject key identifier:   13:C1:86:D1:92:36:BE:F7:DD:CC:D1:4E:BC:F5:8F:CB:FE:D8:D7:23
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Certificate issuer:       /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial:       01A0D2A651ADB84D3F140D09B181833D903E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
Manifest number:          0D64
Signing time:             Thu 24 Sep 2026 09:01:50 +0000
Manifest this update:     Thu 24 Sep 2026 09:01:50 +0000
Manifest next update:     Fri 25 Sep 2026 09:01:50 +0000
Files and hashes:         1: 0Kt7LiOyFuDuV2M_OzgTRHmb6LM.roa (hash: VPIlG57nzf4K1jRvgJYnV75pO4BokyTEgK0DgtYr3dc=)
                          2: aiWsvGSw7Tx1HHFVcQ2q4v91t-s.asa (hash: vhQw3HcJvJv/hspi8cM4cvq/y3wJEIeSiUvAciElZCU=)
                          3: e7M4LBagpWFZkNS85jTcUWgvLqo.crl (hash: 7HG3kj610FFeA0CQRLDZWfVde9jSxXmu3K0TQvQElZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:a6:51:ad:b8:4d:3f:14:0d:09:b1:81:83:3d:90:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
        Validity
            Not Before: Sep 24 09:01:50 2026 GMT
            Not After : Sep 25 09:01:50 2026 GMT
        Subject: CN=13c186d19236bef7ddccd14ebcf58fcbfed8d723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8d:39:5e:7b:1d:b5:89:3d:00:1a:a1:ac:f9:
                    de:5d:e7:24:15:f3:b9:51:73:13:70:bc:52:96:eb:
                    2f:9a:95:82:fc:df:d7:1c:71:67:ef:6f:2b:09:81:
                    5e:cc:02:bf:bb:ed:cd:1c:e4:0e:73:8a:ff:b5:e2:
                    55:24:91:3d:da:c0:2f:28:fe:3c:cd:85:ed:bd:7d:
                    41:53:2f:be:51:a9:85:2e:d0:96:8d:01:6c:ad:42:
                    cc:da:db:ed:f5:34:db:ac:70:8d:ce:5b:65:46:51:
                    60:03:a2:47:9c:a0:0b:f2:d4:b1:d7:bb:c5:70:9a:
                    e3:07:ec:cd:e0:7a:14:fe:8a:0a:62:6d:c1:69:8b:
                    ed:8d:0c:ea:7a:8c:cc:2e:06:89:50:e7:0f:5c:e5:
                    63:47:00:5e:71:ee:3f:40:fb:1b:42:24:51:5a:b7:
                    a0:43:60:aa:79:4f:e3:58:d8:39:c7:d1:4e:29:b2:
                    27:fa:13:f7:48:22:1b:18:4b:43:01:eb:6e:0c:a0:
                    18:e8:d9:93:cf:8b:a5:2d:8d:fb:38:ac:e0:16:78:
                    7d:cc:40:4a:5e:9d:db:83:d3:b5:88:8c:94:e8:4c:
                    c4:18:9a:39:f6:bb:f3:86:59:c7:c8:a7:9c:c3:b1:
                    01:55:ac:62:66:10:cf:4f:87:92:ab:fe:97:83:46:
                    ba:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C1:86:D1:92:36:BE:F7:DD:CC:D1:4E:BC:F5:8F:CB:FE:D8:D7:23
            X509v3 Authority Key Identifier:
                keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:04:2f:f6:c3:3f:5f:5c:9e:4f:11:d6:2b:70:8e:f9:49:d2:
         fd:ba:3d:78:72:5d:28:06:75:dd:c3:7e:97:af:4d:7e:46:c9:
         6d:f2:f1:ff:34:1e:22:7c:43:3f:7b:d3:0c:b5:ea:e3:64:37:
         97:0f:10:04:9c:26:1c:ae:a8:6a:75:d7:14:ee:b5:4c:54:ff:
         f2:1f:d6:6c:1a:bb:b5:bb:e3:bf:0a:c4:f5:19:87:6c:c0:ba:
         d2:ae:4d:ca:0a:0f:98:63:37:79:49:f6:52:e9:b8:a1:66:a3:
         f9:53:11:a1:c1:7a:7c:55:55:aa:50:7e:35:d3:cf:87:5e:1b:
         5a:07:c7:53:e1:3a:3f:49:83:0e:c7:24:1f:5b:40:b5:0b:f0:
         22:65:29:dd:63:c7:4c:2c:3d:06:2a:20:58:44:1b:7d:6d:9b:
         61:59:80:8b:61:01:be:f7:bc:32:c4:f2:16:80:63:e4:5c:f3:
         a9:96:f1:78:22:18:80:33:88:d3:af:ca:d6:0d:ef:dc:95:9a:
         40:b8:f0:3b:1a:e0:65:84:94:fc:81:41:ad:e9:c2:89:23:2d:
         86:c4:a0:f1:0e:1d:f3:2a:86:ef:4c:b6:d3:4d:fb:b6:74:95:
         b9:a2:62:2f:5b:fe:a1:b0:0d:6c:73:63:94:08:13:3e:21:43:
         81:e4:90:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:17:46 2026 by rpki-client