Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
File:                     7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft (raw, json)
Hash identifier:          LrF0ZAsK07idU9WTHGllISKD8FSTRc2L3l8sXavoaTg=
Subject key identifier:   4B:4D:33:BB:99:19:36:3C:A0:41:79:33:56:87:DD:F0:17:67:85:7C
Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
Certificate issuer:       /CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Certificate serial:       01A0CEFFB0DCB32F42DA33D3D2C6004730AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
Manifest number:          10F7
Signing time:             Wed 23 Sep 2026 16:00:58 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:58 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:58 +0000
Files and hashes:         1: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl (hash: tOl5tx16AyZvF8/q4g/kALG3ILR1qMlFsUBiQA7Iejc=)
                          2: rC0spcl-pdrTbDRKzG5ofIHYKcI.roa (hash: lCBqHzXRs9Yu91X4wPPiBVftfQRsm2XGgS23G8xgYj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:b0:dc:b3:2f:42:da:33:d3:d2:c6:00:47:30:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36
        Validity
            Not Before: Sep 23 16:00:58 2026 GMT
            Not After : Sep 24 16:00:58 2026 GMT
        Subject: CN=4b4d33bb9919363ca04179335687ddf01767857c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:51:a8:b3:c0:43:d2:02:07:ed:65:21:32:04:
                    a6:42:f4:c7:0b:fb:b9:ab:c5:88:06:60:81:55:fc:
                    12:13:84:e7:f0:65:07:58:a5:c1:68:38:1e:c7:81:
                    3f:96:d4:72:71:80:39:31:8a:e5:cf:2a:9d:b2:d1:
                    37:e0:09:69:a6:1e:fc:8c:fc:31:18:ed:2a:00:66:
                    11:6f:64:c6:f2:63:23:e4:ed:ef:d6:0a:76:56:58:
                    c6:bc:c9:04:5b:67:9f:ba:fe:71:58:c8:a8:a3:0c:
                    c3:f4:af:2d:08:ee:56:22:ba:40:21:d0:81:ff:ec:
                    a1:ff:5c:b2:82:e6:04:4a:09:08:bf:51:e8:a1:28:
                    65:2c:fe:49:80:5a:89:1b:18:21:a3:b6:18:fb:02:
                    85:70:da:d0:df:44:50:f0:bf:6a:ac:7d:64:22:be:
                    53:d3:0f:bb:9e:f1:83:57:7a:fa:d0:5e:cb:81:f6:
                    a6:c9:02:6b:c1:eb:5f:64:d1:23:09:a9:5b:a3:53:
                    34:9d:d4:de:c3:f1:d5:95:5f:74:26:12:ca:c2:05:
                    78:d1:09:f0:15:32:e8:14:ca:8c:25:07:5a:39:a1:
                    ad:7d:7b:ab:41:d2:35:82:75:45:5a:39:c3:07:3d:
                    5a:81:d8:70:16:97:c0:9a:a6:84:f4:fd:e0:f9:b5:
                    7c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4D:33:BB:99:19:36:3C:A0:41:79:33:56:87:DD:F0:17:67:85:7C
            X509v3 Authority Key Identifier:
                keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:12:d1:45:34:68:a8:91:2e:28:72:c2:c9:7c:0c:0d:45:4f:
         88:b6:66:01:3c:52:87:b3:be:94:6a:f4:1d:a2:ea:53:79:ac:
         78:0c:13:26:8d:11:7a:2a:ec:ab:ae:66:5e:39:06:81:20:48:
         5c:97:cf:7b:db:5c:c2:ff:c7:cd:b5:08:0f:2e:f5:fc:ef:aa:
         fd:da:75:69:9b:13:9d:ea:ea:5e:db:60:fe:38:f3:3b:f8:7a:
         da:e3:a3:b0:04:62:4b:a6:40:31:cd:b3:e6:55:cc:92:f8:78:
         b8:b9:83:1d:da:71:53:9c:ee:18:8d:c2:9d:b9:5f:1d:cb:83:
         a3:76:63:a1:8a:e8:83:c2:8b:07:ab:49:d4:f6:18:3e:d1:cd:
         6a:81:4a:ea:79:a5:c0:88:63:67:3d:eb:a0:4d:27:62:8a:7b:
         26:9d:48:2e:74:91:64:ed:14:2e:cb:e1:21:ba:31:d3:ff:88:
         e2:6f:21:00:d6:6c:94:3d:94:67:0f:26:58:c9:92:3b:35:87:
         46:1c:62:e8:ae:78:58:cb:ae:e3:02:60:ed:16:55:a9:35:f2:
         0c:70:45:41:6d:7b:08:e1:68:f8:1f:f9:da:10:13:47:e0:ae:
         9a:f1:39:6f:14:36:79:2a:4a:f2:4e:d3:e0:1c:e4:13:bc:c3:
         6b:de:b1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:50:01 2026 by rpki-client