Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
File:                     7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft (raw, json)
Hash identifier:          m/umYCwWaGZURRMVnH1kn1cY6KQXyowfA7hrnGy8tc0=
Subject key identifier:   17:B0:E7:8B:2F:E2:48:4D:52:48:91:E5:2D:1B:CD:1E:72:3E:74:CF
Authority key identifier: ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97
Certificate issuer:       /CN=edd482c2bee8460048d82902cec9867205222997
Certificate serial:       01A0D6BA00C1CCF3777DBDF73E869F2DF3AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
Manifest number:          1A01
Signing time:             Fri 25 Sep 2026 04:01:49 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:49 +0000
Manifest next update:     Sat 26 Sep 2026 04:01:49 +0000
Files and hashes:         1: 7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl (hash: /oLaZ7fcIGiERcvfNGOHk9Kc0GBKNyJ59VWpxWb6pzE=)
                          2: kZTziAa0DgXcVz_jjt8ocyWshEA.roa (hash: k50z4fUJByZtjEgPsuwfKj4Iy/ObhXOJlHABsB/DwCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 04:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:ba:00:c1:cc:f3:77:7d:bd:f7:3e:86:9f:2d:f3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd482c2bee8460048d82902cec9867205222997
        Validity
            Not Before: Sep 25 04:01:49 2026 GMT
            Not After : Sep 26 04:01:49 2026 GMT
        Subject: CN=17b0e78b2fe2484d524891e52d1bcd1e723e74cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:e4:3b:83:25:29:06:b6:9e:29:71:0b:05:
                    8c:1f:ba:bb:c7:50:d7:e8:72:d8:78:7d:3e:07:b6:
                    31:a3:0d:33:d4:8e:1a:ea:16:6a:2c:35:08:7f:6f:
                    21:d5:4d:84:5f:59:f4:87:31:55:63:70:95:ad:53:
                    cb:44:4a:8c:1f:9f:15:7a:e0:33:e5:37:8d:29:b7:
                    96:e1:67:61:6e:a8:52:90:bc:4c:dd:e5:8f:27:6e:
                    26:b1:92:c6:cd:56:b5:1a:ff:f2:f3:1a:aa:7a:9d:
                    33:9a:c4:33:e5:f3:8e:3c:32:ce:91:88:a4:33:18:
                    ad:65:fa:60:81:ac:2d:18:83:b0:7b:fa:0c:8b:1e:
                    3d:ae:16:9d:99:7b:6c:16:fa:48:6d:8a:65:83:a9:
                    1c:40:47:bc:a8:9e:5f:17:a9:b7:5a:74:8f:ae:02:
                    a4:ae:2a:33:2b:ed:c5:83:4a:a3:a3:e6:a3:59:12:
                    0d:32:ee:af:23:7f:df:4c:78:4d:f0:b3:6c:22:90:
                    7b:0e:1f:4e:b6:34:8d:31:5c:9a:8e:4f:56:08:a0:
                    ee:36:ae:ba:35:4f:a8:a4:c3:e9:01:5c:52:13:70:
                    d7:37:1e:17:cd:1a:ca:86:9e:b2:44:1c:11:cf:f9:
                    18:19:34:00:3d:02:5d:37:0e:7f:cc:30:ad:c1:ab:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B0:E7:8B:2F:E2:48:4D:52:48:91:E5:2D:1B:CD:1E:72:3E:74:CF
            X509v3 Authority Key Identifier:
                keyid:ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a4:ab:4b:d0:e6:73:2f:8f:30:1d:cc:6b:66:00:11:7e:3b:
         56:3f:2f:70:9c:6f:1c:e1:e5:01:91:f1:2e:87:16:ab:03:ea:
         c5:49:9a:eb:66:ce:d3:2d:89:78:e7:d9:b0:6d:43:54:8b:49:
         6b:90:20:29:dc:6a:8b:4b:e0:41:71:3e:42:5a:71:ca:6b:33:
         9b:0c:9b:97:48:6b:5e:24:19:8c:91:5a:70:b3:8b:87:cf:e4:
         c1:01:01:75:9b:27:42:c2:3a:c9:df:20:62:44:ba:fa:5d:14:
         9c:b9:a5:81:ae:76:a2:2e:74:3e:a6:8f:2b:6f:12:9b:cf:50:
         68:4c:23:b3:28:aa:db:e3:6d:62:87:00:e7:fd:f4:bb:1a:ca:
         c7:51:99:73:16:2e:8c:df:c2:3d:95:fb:c0:29:50:0b:ce:93:
         c3:e7:f3:9d:b9:a5:a7:56:91:33:65:10:8f:d0:b2:4d:7f:be:
         26:87:11:8f:aa:6b:b5:2a:27:68:65:2b:a9:e5:b8:5c:51:80:
         07:45:83:fd:cd:9a:ee:c7:ea:ec:86:67:65:44:76:e9:29:d6:
         c2:f8:15:bd:54:86:e7:a0:c4:ff:f9:3f:44:e7:39:1f:ca:99:
         da:28:50:11:11:9b:ca:5e:4c:b1:87:72:b6:f3:8d:a1:be:52:
         2f:9e:e3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:02:06 2026 by rpki-client