Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File:                     d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier:          GVMmccXntA4aEZYmX9rRy1o6kAwFxI4A9KfoFmwFhhc=
Subject key identifier:   25:0B:86:66:50:B6:F2:0B:F3:F5:97:AB:F7:19:32:E0:89:B1:2E:4A
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer:       /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial:       01A0E06174B1D68369A87F675294E6B2D5F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number:          07EA
Signing time:             Sun 27 Sep 2026 01:01:18 +0000
Manifest this update:     Sun 27 Sep 2026 01:01:18 +0000
Manifest next update:     Mon 28 Sep 2026 01:01:18 +0000
Files and hashes:         1: 1uDiO66z4_GJhppKD5iOYZne4xo.roa (hash: njjChOiFqIrX1FbvslTiBWjd0QGU3XMKBcIu3VrqVf0=)
                          2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: 3xn/Lh4jYHetH+mR78AE0Eqjte9X4GQj/ngNieEMa+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:61:74:b1:d6:83:69:a8:7f:67:52:94:e6:b2:d5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
        Validity
            Not Before: Sep 27 01:01:18 2026 GMT
            Not After : Sep 28 01:01:18 2026 GMT
        Subject: CN=250b866650b6f20bf3f597abf71932e089b12e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7e:1f:2b:ac:db:0e:b8:b2:30:d3:77:35:f5:
                    9a:7b:fe:2f:62:01:db:11:c4:b0:d8:f7:e0:b0:2d:
                    65:a1:1e:ff:de:85:98:9f:b1:4a:e6:ec:ab:cf:83:
                    0e:9d:b1:9e:1d:e5:5a:bb:74:54:53:79:31:b4:e8:
                    5c:9c:31:03:f7:09:75:c1:57:e2:20:d3:8d:7a:13:
                    a0:75:ef:25:fa:4b:ba:62:44:61:fe:7a:e7:80:ec:
                    74:42:0d:0e:4a:c7:ea:5c:37:ea:09:63:1c:09:82:
                    f2:c2:45:cc:c9:81:08:d9:de:56:60:b0:90:c5:4f:
                    b5:cb:73:09:96:96:0f:47:7e:ef:6f:3a:e1:63:51:
                    71:69:71:68:af:0f:c6:7a:13:11:55:99:b6:1a:26:
                    f2:d5:d9:09:27:ec:62:28:48:9f:a4:e0:06:da:15:
                    6c:7e:c7:e6:d0:48:88:88:1b:a0:4e:a0:0a:d0:7f:
                    f9:c4:1c:8a:dc:ea:4e:d1:2d:1e:b6:f8:d4:fb:b4:
                    8e:4d:c6:4c:f7:e2:02:23:01:40:70:28:86:46:6e:
                    c2:54:e7:33:74:7a:51:d9:85:7f:08:97:4b:64:a3:
                    a8:e9:91:84:62:4f:19:d8:ac:d4:29:3a:63:16:c6:
                    41:29:eb:66:c1:60:ba:84:28:fd:a2:52:cb:f8:ec:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0B:86:66:50:B6:F2:0B:F3:F5:97:AB:F7:19:32:E0:89:B1:2E:4A
            X509v3 Authority Key Identifier:
                keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:44:09:07:a5:0b:0d:b5:44:9b:14:97:de:51:08:ae:7e:c8:
         42:62:04:81:c1:1d:3a:90:4b:87:79:22:1e:7e:65:8e:8a:fc:
         03:09:ca:66:b9:b7:c8:96:86:5a:5a:7f:88:41:29:bb:b7:b8:
         09:b3:f3:6d:87:40:6d:9f:72:21:81:e5:38:30:31:0d:a5:4d:
         2e:b5:3e:5c:90:bd:54:6d:19:66:c4:8b:73:a3:b9:5c:e6:ad:
         b9:2f:3b:06:20:3c:2c:90:5b:41:16:c9:e7:80:e0:49:3e:90:
         1a:d9:74:00:36:fc:f5:a6:eb:67:92:77:03:aa:97:90:3b:b4:
         69:7f:c8:f4:b9:f9:97:3e:85:36:25:13:49:57:47:78:24:80:
         3d:cd:5e:6a:0c:21:a3:73:b3:f5:b1:02:58:d5:94:84:04:9d:
         9e:a2:9f:85:2f:65:58:ac:31:d6:1e:5a:51:38:44:a1:a5:f8:
         df:b5:a3:03:60:14:f4:95:72:f1:98:28:74:b2:4f:7e:b6:aa:
         fc:d3:1d:4a:8f:8a:c9:05:6d:ef:94:65:ad:2d:85:eb:34:f4:
         ce:26:c7:23:17:9d:96:de:b5:7e:9f:21:9f:a9:19:81:98:f2:
         44:74:06:ce:2e:23:82:74:3b:0a:eb:6b:e6:1a:ff:5b:7e:7f:
         53:c1:f0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:06:58 2026 by rpki-client