Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
File:                     tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft (raw, json)
Hash identifier:          7mpC7hbob5cXhdIxbYBzfNMXATXE3lUATiAm1SMlzS4=
Subject key identifier:   79:90:C0:C9:94:A0:00:C8:28:BD:DA:6A:0A:0B:75:51:E4:1B:9D:67
Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
Certificate issuer:       /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Certificate serial:       01A0CD47ACE1B6DE7B5F9875196D3118EB4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 08:00:21 +0000
Manifest this update:     Wed 23 Sep 2026 08:00:21 +0000
Manifest next update:     Thu 24 Sep 2026 08:00:21 +0000
Files and hashes:         1: 4uSa1k9qPhTt7gCV8bgatCnF4QE.roa (hash: AebIBoqTns7X5qm7Et95omb7FUrUebB3Fnzu8mpT4eM=)
                          2: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl (hash: E0CLKtdzEEafCA2oTXHwcPONzf9jC1aY60rgg4ackqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:47:ac:e1:b6:de:7b:5f:98:75:19:6d:31:18:eb:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
        Validity
            Not Before: Sep 23 08:00:21 2026 GMT
            Not After : Sep 24 08:00:21 2026 GMT
        Subject: CN=7990c0c994a000c828bdda6a0a0b7551e41b9d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:15:4a:b4:b9:83:7f:36:c0:82:ef:88:f9:35:
                    28:b4:db:56:1e:66:07:e1:df:47:5c:a2:f7:e5:91:
                    6e:af:24:ed:c8:65:c1:ec:b2:44:f7:97:ee:6b:b8:
                    eb:85:28:c8:d9:fe:47:03:55:d2:a5:6c:ff:1a:1b:
                    6b:db:af:6f:41:c7:82:5d:1f:f7:34:9d:a5:64:23:
                    cb:e5:82:a8:73:68:db:29:47:4b:ca:3e:75:c6:f1:
                    3a:03:c6:d9:55:51:88:ce:23:4d:7c:e3:42:b0:36:
                    59:7c:0e:3d:fd:67:c1:b5:c0:25:5b:ad:d5:3f:cc:
                    c6:26:3d:4a:10:16:ca:a3:62:04:c9:0d:ae:32:54:
                    98:c1:5b:a7:6a:2e:cc:23:d1:1a:ad:ef:e6:18:1d:
                    d6:a3:d8:5d:db:65:48:f0:da:69:68:97:b7:fd:fa:
                    3f:70:28:fc:fd:aa:ce:44:bb:15:5a:e1:fe:3e:7f:
                    59:39:9e:3d:67:8e:f3:56:2f:0a:22:11:08:fc:58:
                    7a:0b:fc:8d:70:f0:5a:ef:f5:d0:71:3b:ce:ce:41:
                    40:4e:2b:25:3d:29:b3:34:5d:35:40:11:c7:e0:48:
                    8a:b2:43:d3:a6:06:ce:1b:05:95:7c:49:86:2a:03:
                    56:7a:03:b7:94:d5:03:66:2f:82:66:25:a3:f7:57:
                    99:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:90:C0:C9:94:A0:00:C8:28:BD:DA:6A:0A:0B:75:51:E4:1B:9D:67
            X509v3 Authority Key Identifier:
                keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:9f:a7:93:d0:64:e8:9d:77:6c:94:24:12:a6:e2:e3:7f:ea:
         d6:98:da:d0:ca:9b:f4:35:d7:75:51:39:cc:01:74:6c:55:11:
         8f:cd:e9:d3:40:c5:cc:eb:c4:1d:bf:b6:28:fa:67:65:23:7d:
         f2:cf:e4:8d:a7:b8:ba:88:ac:f9:b3:b8:ad:d7:7d:72:01:ea:
         4e:ea:b9:01:4f:3b:b2:c2:c6:1d:ba:9e:49:ba:59:19:e2:fc:
         27:bd:2d:27:7f:ab:3a:3f:9d:d0:34:0c:9a:67:34:8f:06:dd:
         56:06:84:1a:a4:aa:21:b9:bf:d2:6e:0d:fd:a4:a9:68:12:3a:
         6f:a9:9c:b0:7d:c2:02:20:4d:c7:b8:ef:f1:47:03:4e:6f:9c:
         c7:b5:e5:7f:a9:f3:7e:ec:12:9f:53:ef:30:96:8f:36:58:b8:
         24:6a:77:e1:7c:de:6f:0f:22:91:aa:74:04:aa:3c:3c:49:3a:
         b2:9c:14:f9:05:c0:9b:0d:45:f3:87:79:2b:01:0a:a0:ba:0e:
         d4:22:46:cf:12:a4:d9:df:b6:b0:d4:c3:39:74:ea:60:5b:b8:
         55:4b:a9:1c:32:f7:f3:ef:94:b9:90:ec:84:91:df:73:e8:27:
         f6:d9:d3:28:c8:16:f1:17:46:8f:b7:7e:8d:76:8e:f4:94:7c:
         71:87:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:47:37 2026 by rpki-client