Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
File:                     7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft (raw, json)
Hash identifier:          nVkkCDJYrJRipFceytI+lzPWBgOdNcqyIceVoVa8cYY=
Subject key identifier:   C2:9B:38:EE:4E:BD:45:97:53:1B:3B:23:0D:4A:0C:40:F9:A6:1F:5A
Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
Certificate issuer:       /CN=ed32ef0caf0a057529fb928f76962a7425390dba
Certificate serial:       01A0CAB4A4CF58E421EA32ECD09CF3A50678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
Manifest number:          051E
Signing time:             Tue 22 Sep 2026 20:00:31 +0000
Manifest this update:     Tue 22 Sep 2026 20:00:31 +0000
Manifest next update:     Wed 23 Sep 2026 20:00:31 +0000
Files and hashes:         1: 4ck5stj-Nruh5mOMgR2qNBplGK4.roa (hash: pnWvPZcJH3rubSBQDARfPzyblV+Aac+zG4Cuud9DAE8=)
                          2: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl (hash: qn1wGfruuP3BUKDuAw9Gwq1eQMTxcT7O2IunMZaJu5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:b4:a4:cf:58:e4:21:ea:32:ec:d0:9c:f3:a5:06:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba
        Validity
            Not Before: Sep 22 20:00:31 2026 GMT
            Not After : Sep 23 20:00:31 2026 GMT
        Subject: CN=c29b38ee4ebd4597531b3b230d4a0c40f9a61f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5a:22:c0:26:75:db:bf:84:92:fa:b2:01:de:
                    e2:bd:8f:7a:d8:a5:6e:68:b0:b5:1f:40:59:d1:66:
                    47:21:da:46:cd:07:68:26:75:e4:0f:6e:c1:84:02:
                    75:73:d3:d4:c2:b3:d6:54:10:8a:a6:a5:45:9c:75:
                    c6:7b:3e:da:90:31:31:26:82:31:d1:e9:bd:03:c9:
                    da:f4:e2:0e:46:38:8a:68:af:ee:83:32:57:3f:29:
                    34:2b:ab:3f:6c:98:ce:ea:fe:c3:bf:08:1c:5c:b9:
                    b1:6c:6a:3e:10:57:36:5d:1d:32:ea:b5:6b:29:e2:
                    20:1a:aa:38:fc:1d:19:91:aa:84:18:33:64:ad:ad:
                    a2:3d:a1:88:bf:f4:63:b9:38:a4:1a:65:f2:e9:40:
                    84:b2:89:09:e9:69:b8:68:61:7e:ba:5e:b6:a0:7e:
                    08:e5:eb:0a:42:ca:1b:04:39:17:52:af:89:88:81:
                    e5:4b:b8:03:96:f4:30:bf:2f:79:3e:f8:81:b7:83:
                    e2:57:66:8e:c4:e5:98:78:f5:31:30:17:cc:00:89:
                    42:f3:39:38:53:39:07:eb:44:f2:4e:f9:04:93:05:
                    70:3b:ce:d4:5e:73:4f:e8:82:e4:6c:6e:1d:81:b9:
                    9f:8d:ae:aa:31:a0:b4:e4:e7:c5:f3:a3:98:bf:2c:
                    40:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9B:38:EE:4E:BD:45:97:53:1B:3B:23:0D:4A:0C:40:F9:A6:1F:5A
            X509v3 Authority Key Identifier:
                keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7e:43:99:00:66:19:77:c3:0f:1e:22:60:ef:2b:c8:58:b7:
         a4:82:e5:a3:ff:c1:85:05:e6:1f:dd:65:d1:32:ca:65:39:3c:
         3f:3f:13:c2:4a:f4:89:34:1f:45:76:4d:cb:f4:a6:ed:01:c9:
         54:8e:3c:e2:6c:7a:08:82:0c:d6:d1:da:c6:50:13:af:42:33:
         71:87:af:90:2d:3b:ed:81:ef:66:f9:df:78:ea:d8:31:0f:4b:
         e4:b3:07:ba:75:4d:9c:a1:48:f1:0b:f0:35:f8:de:4d:6e:7d:
         6c:a4:dd:44:50:48:be:c0:76:3b:9a:4c:84:e3:d4:b2:6a:8f:
         af:95:af:9e:a5:34:6c:17:2f:99:23:f4:9e:fc:57:3a:79:d7:
         45:f0:3e:ab:8a:79:d9:04:8a:ea:f4:c5:14:b5:91:83:94:b4:
         e6:4a:32:8b:95:0f:1e:48:b1:a4:1b:94:16:9d:27:9d:26:a3:
         da:3f:71:91:7e:f1:71:a8:68:00:a6:b2:0d:b6:32:59:60:22:
         72:fa:fd:7b:b7:04:02:13:91:b4:4b:d8:8c:3e:46:cd:61:9c:
         d9:ad:a1:ab:db:02:44:67:7e:2b:96:0a:ab:55:25:bf:ff:d4:
         b6:41:f0:a5:e4:7a:34:0f:33:b6:6d:f5:b5:2c:72:a9:65:53:
         2a:23:0e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:28 2026 by rpki-client