Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
File:                     0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft (raw, json)
Hash identifier:          7gTY9FHZM2tdt3LvrhxtYgOx/O0EAUxTIkb32dUkUTA=
Subject key identifier:   AD:1C:F0:A2:C7:A9:9B:16:2B:30:8D:DA:98:7D:C2:24:F8:2C:92:D1
Authority key identifier: D1:C1:7D:17:07:72:FA:B1:E6:03:33:A6:39:A3:0F:6F:FA:98:DB:FD
Certificate issuer:       /CN=d1c17d170772fab1e60333a639a30f6ffa98dbfd
Certificate serial:       01A0D3F0BD074645E75001395219122EA628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
Manifest number:          E7
Signing time:             Thu 24 Sep 2026 15:02:44 +0000
Manifest this update:     Thu 24 Sep 2026 15:02:44 +0000
Manifest next update:     Fri 25 Sep 2026 15:02:44 +0000
Files and hashes:         1: 0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl (hash: YiCY/F2nu0uZgBShNqp9Vz9D0r1ZREpQaN1wO9GM2OM=)
                          2: qNxJXDtUTiT_RtW1GUJYB5Tbk8I.roa (hash: 3FmXs9BuOt1Pjw7qiwT6Cdmaqxnd0jXH41KNLGc1iSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:f0:bd:07:46:45:e7:50:01:39:52:19:12:2e:a6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c17d170772fab1e60333a639a30f6ffa98dbfd
        Validity
            Not Before: Sep 24 15:02:44 2026 GMT
            Not After : Sep 25 15:02:44 2026 GMT
        Subject: CN=ad1cf0a2c7a99b162b308dda987dc224f82c92d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:e0:4b:d3:15:bd:a9:f1:de:25:f1:d7:3b:
                    58:d1:ce:ff:50:a6:07:d8:a3:c4:66:c8:87:11:cc:
                    0a:d9:ca:18:01:ba:85:9f:05:8f:00:c0:79:56:29:
                    a3:c9:c2:1e:26:6e:a3:9c:58:16:e5:b0:00:cf:81:
                    2a:c6:87:af:fd:90:8e:c3:e9:9d:f4:09:87:0f:80:
                    00:f0:ce:00:36:2d:eb:80:ef:96:5f:04:05:fe:23:
                    10:0d:b6:d9:21:76:aa:de:08:48:09:4a:66:3e:73:
                    2d:eb:70:7f:1c:7d:11:58:51:9e:a8:fc:fa:dc:8b:
                    38:88:1c:7b:31:48:db:5f:c6:3c:ba:91:61:5a:29:
                    75:f6:d5:6b:27:f1:b0:d4:e7:f5:47:af:58:79:5a:
                    e6:c1:8d:29:d3:e0:aa:1c:ed:94:fd:fb:80:ab:ce:
                    a9:4e:6e:7f:d9:dd:d7:e3:9d:10:2a:04:5b:b1:56:
                    2a:03:06:e1:ae:9d:05:cf:07:84:27:61:76:b6:7d:
                    26:31:da:b2:8a:bb:23:9d:d7:be:24:78:50:3e:29:
                    bb:68:cc:e5:e3:e7:b1:48:21:b7:a7:30:5b:8c:cd:
                    6f:90:cd:d2:3f:2d:8a:d3:1f:c5:c8:8f:12:6e:df:
                    f3:eb:a9:e3:3b:bf:42:5d:21:84:b5:95:db:ac:38:
                    c8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1C:F0:A2:C7:A9:9B:16:2B:30:8D:DA:98:7D:C2:24:F8:2C:92:D1
            X509v3 Authority Key Identifier:
                keyid:D1:C1:7D:17:07:72:FA:B1:E6:03:33:A6:39:A3:0F:6F:FA:98:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:6b:2c:f6:c2:d3:09:45:7d:98:a7:b7:ad:30:bf:bc:43:c4:
         ae:98:6e:aa:9e:e6:13:6e:71:eb:76:ed:c9:35:32:67:8a:b0:
         7c:fd:cb:43:1b:fb:33:13:95:8c:78:d3:05:16:4c:8a:04:04:
         2c:f6:db:5f:4f:c5:7e:54:ff:5c:e5:48:68:49:5a:30:fb:da:
         9b:96:6c:0c:b5:41:2f:83:5e:da:f4:49:16:3f:04:2d:8b:82:
         72:2f:0f:fd:ce:10:b2:53:36:4d:e4:9b:80:5c:c5:03:9f:74:
         b9:76:2f:ec:4c:b8:ff:be:81:d7:c1:4b:6f:79:81:46:fd:86:
         24:43:aa:04:9c:38:23:7b:d4:cb:4a:7c:06:63:d5:df:55:b1:
         78:f8:38:3c:6a:5e:56:0e:c6:e4:b7:1c:72:0f:a4:9f:4e:c8:
         99:13:05:ed:bb:79:0e:00:fa:12:04:2f:3e:18:02:b9:0b:c8:
         6d:ce:95:63:42:3d:fe:f7:76:5f:af:09:e9:1b:9e:92:19:80:
         c0:cf:ea:82:ab:3b:b3:c3:92:f3:61:7d:ce:97:42:ec:6b:11:
         d8:28:d2:2f:a5:82:58:ec:36:20:20:9a:43:c5:3c:ab:fd:db:
         e5:66:0e:c7:91:2a:f7:a4:b3:36:40:bf:23:c9:48:7c:2e:b7:
         bd:90:32:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:36:18 2026 by rpki-client