Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
File:                     7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft (raw, json)
Hash identifier:          24MvniCUvgMxH2Dhr3xKvomAenKjEp+HOuTwWuP+Npk=
Subject key identifier:   ED:83:FD:8C:DA:F5:41:CD:B6:66:4B:9C:44:81:96:65:6D:A5:9E:BC
Authority key identifier: EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40
Certificate issuer:       /CN=ee0abba552f46b94edf22394feec1d0459f20140
Certificate serial:       01A0DC4DC915FE78487205BE41BEADB1AAE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
Manifest number:          0948
Signing time:             Sat 26 Sep 2026 06:01:20 +0000
Manifest this update:     Sat 26 Sep 2026 06:01:20 +0000
Manifest next update:     Sun 27 Sep 2026 06:01:20 +0000
Files and hashes:         1: 7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl (hash: +y+EnqAyEE00zQHDwHnTWoBadsSL2ETV/L4reuEOiKU=)
                          2: eIWcz11n1PjQmKMq28yQMraoei4.roa (hash: l+JkKmb9S4y5YrSkGvH0iejPgNSj/cfbPp9hnVGEH1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4d:c9:15:fe:78:48:72:05:be:41:be:ad:b1:aa:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0abba552f46b94edf22394feec1d0459f20140
        Validity
            Not Before: Sep 26 06:01:20 2026 GMT
            Not After : Sep 27 06:01:20 2026 GMT
        Subject: CN=ed83fd8cdaf541cdb6664b9c448196656da59ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:5f:83:66:2e:2c:ec:ff:68:3d:d7:8a:3a:
                    94:65:86:cd:aa:9a:10:6e:f4:a5:82:e0:13:f7:d9:
                    aa:d5:ac:57:6b:8c:07:18:fb:17:ad:35:59:86:7c:
                    9b:0e:f3:e6:05:4e:38:47:f2:e7:61:c1:4f:33:df:
                    cf:4a:de:55:7e:f3:92:08:62:e2:ec:b6:12:55:1b:
                    b5:b9:8e:67:7c:3c:eb:d2:2f:90:8e:fd:43:57:a9:
                    5a:9b:10:e9:a1:96:79:3a:28:92:82:0a:7c:3e:b5:
                    a0:ab:b2:32:2c:f1:cb:a2:d4:4d:63:af:df:e6:0e:
                    73:93:10:c6:ac:89:a1:5e:f5:43:b2:5b:a2:82:09:
                    e1:12:5f:ef:b3:86:64:3e:a7:11:a1:0f:ed:f7:f0:
                    f7:f8:43:67:e3:cd:91:f5:14:ee:0d:e7:56:f2:a5:
                    de:9c:a4:12:a5:4d:7e:28:06:4d:f8:8e:90:41:1a:
                    b7:4a:9e:96:5b:87:b7:d0:dc:c2:61:12:75:f4:d5:
                    10:60:c8:55:7b:04:fc:91:c2:72:12:86:ad:76:42:
                    d8:d5:55:3b:01:71:12:2e:36:47:2c:db:54:ee:5a:
                    1c:b1:57:0c:a6:49:80:fc:77:68:43:c6:79:30:d4:
                    34:c4:34:7d:b4:de:98:83:5a:a1:8b:63:e7:84:02:
                    c3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:83:FD:8C:DA:F5:41:CD:B6:66:4B:9C:44:81:96:65:6D:A5:9E:BC
            X509v3 Authority Key Identifier:
                keyid:EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:99:86:cc:bf:71:6d:be:b0:17:26:84:b5:82:f2:f9:15:56:
         7a:2c:5c:a0:14:c6:70:3d:98:55:97:7e:26:6c:83:32:27:78:
         c0:ff:0b:2f:5c:29:4c:62:58:4f:83:5e:5c:79:53:b8:ea:14:
         3d:ba:2f:33:e4:83:50:59:8b:cc:85:3d:bc:c4:9a:b7:a6:ea:
         c5:2e:18:49:bb:72:35:f5:bd:44:bb:c4:9c:23:a0:27:ae:a1:
         b1:a3:a0:d6:fe:f9:be:cc:00:89:4e:fc:2b:ba:d1:dd:18:6b:
         be:c0:03:5a:15:a8:c2:23:b1:78:65:5b:bd:bf:21:09:71:61:
         8b:71:3e:ab:88:c2:29:db:ca:a9:08:ee:f9:d3:9e:62:20:db:
         9f:80:c8:cb:24:c3:42:b8:83:23:87:82:0d:5b:db:94:bd:91:
         8f:4e:de:be:89:1e:95:c2:af:0a:18:28:71:15:39:80:c6:dd:
         cc:06:7e:01:75:ac:3c:91:8c:ff:bb:86:b5:4b:b8:b8:47:8b:
         bf:58:08:e3:45:a6:3c:c0:3c:78:35:97:43:ad:a9:bb:1e:7e:
         6f:9e:23:ea:bf:2e:f4:e7:2f:40:36:eb:4b:90:2e:eb:cc:0e:
         36:93:7b:b9:92:3b:d8:6c:8c:fd:4e:4e:79:ed:93:ae:ba:bc:
         24:f7:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:20:04 2026 by rpki-client