Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File:                     7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier:          fZSWJuZXLXrXy5RqIfISu6v8M/5lEf2/D/jS5jzmxnQ=
Subject key identifier:   0E:30:2E:5C:80:35:BF:1F:1A:C8:F3:D6:54:EA:DA:94:DB:C2:7A:A5
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer:       /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial:       01A0D0804F9F2AFFED6AF0A0D2DD1A17196E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number:          1A6B
Signing time:             Wed 23 Sep 2026 23:01:04 +0000
Manifest this update:     Wed 23 Sep 2026 23:01:04 +0000
Manifest next update:     Thu 24 Sep 2026 23:01:04 +0000
Files and hashes:         1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: 2htmctcb7UsrP9vmiemS9wiNTGmnMJPUjAj6FaGvKOM=)
                          2: _osGDzZycVvwVO8jk7tST0-kMuc.roa (hash: V5At1uVjWkeBJy6WzVu631/zeJQGqErhpfeeQ5kY2uw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:80:4f:9f:2a:ff:ed:6a:f0:a0:d2:dd:1a:17:19:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
        Validity
            Not Before: Sep 23 23:01:04 2026 GMT
            Not After : Sep 24 23:01:04 2026 GMT
        Subject: CN=0e302e5c8035bf1f1ac8f3d654eada94dbc27aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:73:d6:e1:49:fb:e4:3a:0d:41:45:c7:8a:63:
                    af:86:0d:b0:b4:61:df:fa:3a:a0:5d:a6:8c:cd:7d:
                    e9:48:cf:57:36:46:59:b8:ac:3d:e6:29:b2:a2:09:
                    d5:a2:83:ae:99:40:da:56:2a:e7:ee:f6:b5:c9:24:
                    dd:ba:59:f4:ea:19:a7:ee:9c:62:ca:c2:57:33:c1:
                    37:13:45:f3:b9:66:a2:a7:42:b5:75:aa:83:cc:60:
                    56:03:1e:64:2b:e5:b2:b0:eb:74:a2:5e:fe:fc:91:
                    49:ba:17:bb:82:43:82:43:39:9b:ca:d9:6a:4f:58:
                    b3:42:5c:04:08:da:53:f9:6e:30:e2:20:2e:97:80:
                    ae:32:37:e0:d3:16:4b:10:91:63:e4:42:00:fb:7d:
                    b0:aa:95:1e:53:5e:6b:50:db:bc:af:6c:b4:e6:af:
                    9d:8b:d8:11:87:f2:47:71:d5:37:56:a6:55:f6:75:
                    6f:7d:14:00:8a:0a:15:fa:70:82:79:c8:63:f0:1f:
                    73:65:0e:07:1d:11:4d:c9:ba:80:7b:f8:76:05:97:
                    fd:8e:0f:a3:15:38:e2:9a:c2:54:ac:a1:de:d1:86:
                    dd:d1:aa:98:63:0b:da:fc:7d:d4:67:5f:09:52:67:
                    be:c3:01:d8:91:38:38:0f:86:59:08:2d:bc:1a:ae:
                    5c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:30:2E:5C:80:35:BF:1F:1A:C8:F3:D6:54:EA:DA:94:DB:C2:7A:A5
            X509v3 Authority Key Identifier:
                keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:5f:44:e8:8d:58:92:f3:fe:5a:5e:a7:e6:f2:ae:02:97:31:
         e0:e9:92:bf:a0:cc:07:d3:2f:d4:fc:26:a7:e4:2e:32:98:fd:
         16:23:60:ed:ed:6b:61:63:d1:ee:da:0c:4a:6b:d7:78:0d:0c:
         89:56:39:2a:d1:a0:c8:09:b2:3e:1e:84:8c:b4:7f:a1:5b:be:
         dd:3c:70:0b:79:9e:1d:b8:90:c1:8f:e0:24:22:05:82:52:9f:
         30:20:4d:5f:68:8f:fc:55:6a:fa:4b:6b:0b:c6:b8:fb:ee:7a:
         cd:c4:39:a0:40:7d:5c:11:7e:c0:7f:c4:5d:ca:a9:6f:fc:b3:
         39:91:5b:c1:d8:e9:b0:61:42:00:a5:d3:98:6e:24:1b:ec:5b:
         e2:f4:6d:43:1d:89:b1:d7:9a:73:a1:b5:0e:a0:2e:f0:aa:67:
         06:9a:6b:62:38:eb:52:33:87:5a:56:f2:90:1b:a5:b3:8b:df:
         47:34:a8:ea:6d:95:bd:41:cb:79:40:e7:85:0a:56:e1:a3:8a:
         32:58:0c:ae:9e:75:3f:81:56:c6:64:e9:aa:37:db:6a:4c:d4:
         84:a7:ac:01:d1:a3:4f:d2:ed:30:53:e6:96:fb:86:ea:17:25:
         dd:75:bd:51:34:ab:7c:99:ae:1a:75:fd:02:c1:da:57:23:a2:
         62:14:11:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:10:41 2026 by rpki-client