Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
File:                     7xxmWwOGkrk7310djzzqPphpegM.mft (raw, json)
Hash identifier:          ImNvq2I0wmf6AvkvKlrQbEFgaewd9fSf23K+n5cxgEQ=
Subject key identifier:   69:69:C4:33:6D:57:3B:05:D1:1E:F1:25:37:8D:6B:1C:93:F8:39:97
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Certificate issuer:       /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial:       01A0CBC73FE6E751A8B27A4E0DABF7682E6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
Manifest number:          1ACF
Signing time:             Wed 23 Sep 2026 01:00:27 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:27 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:27 +0000
Files and hashes:         1: 1Uo76hmvh5FzNDo276Zm4m_BT0s.roa (hash: N6dkUQu86zvoRHT3ompLiDGklhcKWt0L+DfJn/M9Ues=)
                          2: 60PmQRc6KqumCF_7Z7zTsYcdYaY.roa (hash: y1QSPcuJ+pW6ofu1/70Fq1yGPon+kU5iDXnDLtw/Cpo=)
                          3: 7xxmWwOGkrk7310djzzqPphpegM.crl (hash: L9TFgKz3wEjqSg2dkwGUPIO+APxpsx3iA6VQ0Kz7aF0=)
                          4: C2bNUeB_0zECbd22GOKk7y57b7g.roa (hash: l0IvAbIHaEOPaTPBP3rxLmVfNAJqlgTHUbxhQD/Bm6M=)
                          5: D5NkL44tDna5iq5TxBiDoayyR7w.roa (hash: xpIWln43hlWk8qKWLoKR9JJ/noHx7dA0xrLy34N2PV8=)
                          6: I96PBjrYup8aPv2pR7TdLFEHJHk.roa (hash: WYpW9pgQH+tfWd38rRUvQVayJbzQqdLy/3DGSA3PmaA=)
                          7: IzuhPSU32UBjVKA2bk0v7_QU1uE.roa (hash: Hv1nXeZ09K6FcuDi7GWgb1nfVre9Ok5EpyqMWBjT5zg=)
                          8: Na_ozAcWu6ZVRTfzNvM2ICtye2Y.roa (hash: 6MBrxW0BKA+vioWFxO1PZaS20qgrgGxGwFg9B23P52o=)
                          9: QM8VI98PqlANgb9tPw2FAs0LwAM.roa (hash: JeUyAKH1L4usZx4jxBTMv0q5gpiSUok50P68tyWxjhI=)
                          10: RMSbReZxAHoFg9QhadNO9TahUm8.roa (hash: f0AnUWtxhrAYYQTYCZDIqQ5s08RCO7RTaWlG1CYAjZ0=)
                          11: SdJxhz3Z45rZQ2vRK_J4CkNgTHM.roa (hash: h00bQB9oTUE+4PsAJHu/xyixXuN3G9fmaTv9iiJ4iOw=)
                          12: U4jYXa33eK2_Y2WdmHCAOH75bvM.roa (hash: ejTGELQ7zjtDoNb9o1n2deFNC4+qkFo4zCvOGfp57X4=)
                          13: YPjsb2BZZVlwkheQ4-BXMyYUx8A.roa (hash: BuSmPU+cmorFIW2mrVOPHrLfL0dn0EfxJIzzSyE9HX4=)
                          14: ZYExCDXlMvLvbu9PyCtvwKVx1wg.roa (hash: 80JMqq0F0tUOvFwE2Iz/kNdGxy/t5IdoU4H7dyp6pDI=)
                          15: aW3M8On5MmS81nR314v2KAMjhWo.roa (hash: 9ZW0rFhmByfJbfB+yP9UIWPM/yI+swsdrl4gzJqco04=)
                          16: bjFSQtRF34AqVafFJtFqhxgWQZc.roa (hash: yES7m7w5zSaR30emDz0+YUk1mwW3sg3fxIM0I4pVGRw=)
                          17: c7IXsqmxdhAG_jJYtud9EP72qOw.roa (hash: Mym9yT5oPGpT2N2HtTmvnEaPNnpQ4t08pH6QuUqEjls=)
                          18: dO3ondwwLGbrI_vEcsL_cnUVyk4.roa (hash: zcZPr9SNFN/r/TTxtdIr0uKIimZwXcjbyUmDYN6jAtY=)
                          19: k9qT9L4oiwVVutgZqw2789sZSpM.roa (hash: 4bUe/2Ktq9Rh6ybQkPrFIzkqDQmO7L4EaOmWWLO3Ybw=)
                          20: ljwpW_MXZm-BJRwn1Jjte3DRq38.roa (hash: AJnLn/P5WqYS8NOh6UP6VDDKHZJB50IROKVNlFo2134=)
                          21: mQzPBCn1hTNY_P5P3NAP55RL3q0.roa (hash: fdbEqDu36Rjky4ca8NsPiqNhPV42pvLHrVrMOmAlRy4=)
                          22: pWknCXIQAFv1BFVjsRmSr0NGTn4.roa (hash: Uq48b0jv4rRLlijsx/raaenPXKpfmSHTN+zFN1ZqwHY=)
                          23: ttIN0dK-vkiZEEVxS7zN-l-YIWU.roa (hash: pmsUMrDunD1RvHFcRwlzCPpXmeKSZLU5QXkWjwxD7RM=)
                          24: yyxSxrF4ZcFyCTbbapEmZHvC14M.roa (hash: 9k1t3MVGGwaihFQgwuGr+VC3Y19Wd6fj+le41WnzZYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:3f:e6:e7:51:a8:b2:7a:4e:0d:ab:f7:68:2e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
        Validity
            Not Before: Sep 23 01:00:27 2026 GMT
            Not After : Sep 24 01:00:27 2026 GMT
        Subject: CN=6969c4336d573b05d11ef125378d6b1c93f83997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:3e:a6:88:5b:64:dd:d0:ba:9d:5b:5f:f1:
                    13:ac:ae:43:ef:d3:02:3d:69:72:75:83:b8:c4:8e:
                    f9:b9:7f:82:8c:3a:3e:27:f0:04:ce:72:26:52:83:
                    12:ad:19:b6:d1:c2:78:25:ad:d7:13:e3:62:fc:d1:
                    af:4d:dd:77:0a:6f:49:6c:f0:76:64:31:d4:1d:70:
                    be:c1:73:14:80:93:e2:db:ae:85:07:4b:e5:0b:20:
                    fc:ef:03:c9:94:1d:5d:a2:64:97:9b:3b:c2:31:5e:
                    bb:a4:3f:44:59:56:f1:21:87:67:25:6b:8c:83:ff:
                    9c:e9:fa:a7:b7:ae:c8:df:e1:78:cb:09:4c:32:ef:
                    70:e9:9b:9d:ec:f3:c0:41:7f:70:c3:8f:da:25:c9:
                    16:4a:88:dc:05:23:bb:6d:3a:ec:a0:e0:a1:47:f5:
                    a2:23:f0:a2:4d:af:3b:b1:20:0f:29:b4:70:88:14:
                    f4:6e:31:17:a9:ae:26:2a:4a:66:78:09:f4:f3:1d:
                    58:d7:ba:f8:72:35:ae:25:b4:e8:97:0c:54:3a:b6:
                    1e:d1:07:c6:96:7d:ad:4d:52:5d:b0:6e:95:98:67:
                    50:23:ae:75:f9:63:c3:87:ea:61:7e:83:fa:71:a7:
                    e5:fb:00:9b:02:f7:9f:13:f7:25:c4:36:f3:f7:90:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:69:C4:33:6D:57:3B:05:D1:1E:F1:25:37:8D:6B:1C:93:F8:39:97
            X509v3 Authority Key Identifier:
                keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a2:c7:5a:e0:53:b1:80:3f:ad:22:7b:7b:03:66:fa:71:38:
         dd:38:86:97:06:89:af:44:23:27:ea:6e:be:3a:11:73:03:65:
         11:d3:7c:95:67:5e:9a:21:a8:5f:0a:f4:8f:cd:e8:3b:f2:c2:
         a2:8a:a7:2b:13:34:4b:82:94:44:b4:ba:fa:bd:cd:cf:1e:6c:
         2c:7b:53:49:7c:a1:5d:9b:30:4f:62:b4:12:b4:8b:39:f9:cb:
         94:b9:67:2f:30:5f:0f:b6:56:47:eb:f8:26:c5:a0:d6:83:0e:
         fc:1c:6a:a4:a2:8b:a8:d7:b1:d9:dd:bc:cf:28:1b:31:e5:1d:
         c9:a4:b9:18:6f:5b:41:fe:e9:e1:cd:c6:ca:57:3a:43:98:90:
         0a:a0:94:d5:8a:3f:c8:38:19:c1:31:7e:dd:99:52:8c:92:94:
         10:04:ba:c6:f9:be:7d:41:7e:ef:e2:6f:79:f0:1c:8e:45:25:
         b1:27:b7:8e:cf:97:10:97:1c:84:56:74:37:70:3c:68:c4:3d:
         2a:4d:79:ad:5d:f3:4e:3a:24:29:c9:c3:99:e6:51:7c:22:5e:
         91:3e:81:cf:37:7b:fb:55:3d:b5:36:20:a2:d2:23:6f:64:d0:
         f5:16:4d:e0:a8:ad:88:c2:cd:18:2c:b3:cf:e2:63:75:d5:cc:
         c3:37:4c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:47:39 2026 by rpki-client