Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
File:                     ijndHRPq-YwAdGPZWosv_eojbOM.mft (raw, json)
Hash identifier:          Jyw0r7JfDq9LqyZe2fXGCRDVvUFZ8w5D8WQQOtey7qw=
Subject key identifier:   7F:F8:4A:2D:B1:23:E6:E5:26:F9:06:D3:EA:B7:D5:23:03:87:76:20
Authority key identifier: 8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3
Certificate issuer:       /CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
Certificate serial:       01A0D1251193CEC09AB4E6E8FCAF7741FE5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
Manifest number:          E7
Signing time:             Thu 24 Sep 2026 02:01:02 +0000
Manifest this update:     Thu 24 Sep 2026 02:01:02 +0000
Manifest next update:     Fri 25 Sep 2026 02:01:02 +0000
Files and hashes:         1: 6rv05GtLZsXL9J9Y6iVnWISfLLc.roa (hash: GAnhNVg8nqzeI7Ci7ArjFVVwDPu5FHycG1EQRRYdOSs=)
                          2: FdICOUOUZECuZrYTF0rlnSSQfSg.roa (hash: UxVhHcCRrdLBmXzhpiCm6r/fpPjHyB3h0v03x9mBzNo=)
                          3: _2bBQtFU643Ua_XDUBQXnI5_hL0.roa (hash: o1RrXnEGdNnf+Cc7zxGHA3KTxxkiPiJd3UQspAymEfg=)
                          4: ijndHRPq-YwAdGPZWosv_eojbOM.crl (hash: aeoJMjKTcgZoxYJ5ERRqIxZIH/KamyDaVAode5CquxU=)
                          5: qEVDrxw8lXCl8aRODSA_1SPziJA.roa (hash: Q8I9Y/Qx/205GtVMmvPcisKl71EAafMgAUaQkhvO3XY=)
                          6: w5AS2KGdDReJzcd8Ht55gZO1pE4.roa (hash: ytd5KWe3NLPZnEwsv+SGbVXQdd/O7rHivZ3d1JF1Ww0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:25:11:93:ce:c0:9a:b4:e6:e8:fc:af:77:41:fe:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
        Validity
            Not Before: Sep 24 02:01:02 2026 GMT
            Not After : Sep 25 02:01:02 2026 GMT
        Subject: CN=7ff84a2db123e6e526f906d3eab7d52303877620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7f:2b:74:b7:43:59:97:0b:63:88:0e:d0:c0:
                    a0:f9:c7:e5:f7:b6:10:60:01:44:cc:06:e1:ca:a9:
                    73:70:fd:9a:2e:6d:9e:7a:7a:ec:c3:16:7f:1c:c2:
                    8c:a0:51:0a:39:6f:b9:a0:bd:34:cd:65:5e:f8:ca:
                    2a:df:b9:b5:95:8e:5a:c7:33:db:67:0b:1b:c5:3c:
                    15:19:c6:cd:96:75:f0:8e:dd:2a:29:47:ab:d9:45:
                    13:72:0b:c5:05:20:5d:aa:5a:46:47:9c:b9:a2:ad:
                    c8:e0:34:59:a5:c7:23:07:03:b0:48:cf:ec:d1:09:
                    90:a2:dc:09:2b:3c:4a:bc:24:a2:7a:a6:2d:b4:73:
                    b6:74:38:73:53:dc:f7:f2:d9:3f:b0:b9:bb:e2:8c:
                    a2:c8:57:e3:a5:ce:d5:80:18:18:ec:ac:0d:e2:cf:
                    4d:30:15:37:56:e2:8d:d0:45:f0:0b:53:9c:61:2f:
                    ab:53:2f:31:02:c2:97:a6:4e:ee:3e:3d:61:95:c3:
                    de:5b:94:be:c9:11:0d:fd:52:4e:81:da:81:9b:a2:
                    ea:c7:93:cb:c6:dc:4a:a0:35:a2:b6:4c:3b:21:a9:
                    f0:e3:7e:ec:26:fb:91:68:26:27:05:43:28:59:88:
                    10:7c:84:34:5d:c6:64:ca:6b:38:41:70:ae:41:13:
                    00:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F8:4A:2D:B1:23:E6:E5:26:F9:06:D3:EA:B7:D5:23:03:87:76:20
            X509v3 Authority Key Identifier:
                keyid:8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:cf:52:03:f5:e8:b7:b2:a7:fc:6f:99:53:bd:a3:18:42:b7:
         67:e4:6e:53:b5:60:d4:d1:80:53:67:d6:a8:9f:05:39:4a:7c:
         58:be:d6:3d:88:39:85:f2:ef:99:76:16:2b:72:3e:bf:bf:2d:
         b3:62:02:e2:11:49:9e:14:3e:b3:9a:72:ca:46:43:6e:ea:7d:
         70:a8:2c:35:20:e7:5c:5d:ce:a8:02:02:f0:e9:d2:df:73:ec:
         57:46:b2:8d:6c:05:fc:64:91:c5:d3:8d:8f:10:5c:a8:b0:2c:
         4f:1a:16:50:45:5c:a8:6e:94:30:3b:7f:a4:3d:6c:8b:04:ef:
         85:67:ea:b4:33:90:38:63:1f:db:62:64:0a:b6:09:56:2b:27:
         c2:56:7c:43:49:58:e3:45:9b:d2:42:63:29:86:bb:9e:cd:41:
         72:b1:df:99:7a:01:c6:20:ca:d0:83:9d:72:3c:95:6a:ca:ba:
         ac:b0:b3:1d:71:bf:4c:26:6d:7b:ca:d6:65:00:f0:8b:08:2d:
         ec:ff:39:1f:1f:35:57:5b:8c:ac:a4:ec:72:f1:84:b4:57:79:
         bc:94:f7:fe:7b:83:29:a7:b5:5f:a6:9f:cf:79:fc:3e:ec:e4:
         4f:20:aa:6b:ce:0c:4e:1c:96:da:ee:7d:55:96:e6:b8:2f:78:
         91:bb:b9:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJRGTzsCatObo/K93Qf5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMzlkZDFkMTNlYWY5OGMwMDc0NjNkOTVhOGIyZmZkZWEy
MzZjZTMwHhcNMjYwOTI0MDIwMTAyWhcNMjYwOTI1MDIwMTAyWjAzMTEwLwYDVQQD
Eyg3ZmY4NGEyZGIxMjNlNmU1MjZmOTA2ZDNlYWI3ZDUyMzAzODc3NjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH8rdLdDWZcLY4gO0MCg+cfl97YQ
YAFEzAbhyqlzcP2aLm2eenrswxZ/HMKMoFEKOW+5oL00zWVe+Moq37m1lY5axzPb
ZwsbxTwVGcbNlnXwjt0qKUer2UUTcgvFBSBdqlpGR5y5oq3I4DRZpccjBwOwSM/s
0QmQotwJKzxKvCSieqYttHO2dDhzU9z38tk/sLm74oyiyFfjpc7VgBgY7KwN4s9N
MBU3VuKN0EXwC1OcYS+rUy8xAsKXpk7uPj1hlcPeW5S+yREN/VJOgdqBm6Lqx5PL
xtxKoDWitkw7Ianw437sJvuRaCYnBUMoWYgQfIQ0XcZkyms4QXCuQRMA5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/4Si2xI+blJvkG0+q31SMDh3YgMB8GA1UdIwQY
MBaAFIo53R0T6vmMAHRj2VqLL/3qI2zjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWpuZEhSUHEtWXdBZEdQWldvc3ZfZW9qYk9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYt
ZWQ0ZjA2NDNiZjI1LzEvaWpuZEhSUHEtWXdBZEdQWldvc3ZfZW9qYk9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYtZWQ0ZjA2NDNiZjI1
LzEvaWpuZEhSUHEtWXdBZEdQWldvc3ZfZW9qYk9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP89SA/Xo
t7Kn/G+ZU72jGEK3Z+RuU7Vg1NGAU2fWqJ8FOUp8WL7WPYg5hfLvmXYWK3I+v78t
s2IC4hFJnhQ+s5pyykZDbup9cKgsNSDnXF3OqAIC8OnS33PsV0ayjWwF/GSRxdON
jxBcqLAsTxoWUEVcqG6UMDt/pD1siwTvhWfqtDOQOGMf22JkCrYJVisnwlZ8Q0lY
40Wb0kJjKYa7ns1BcrHfmXoBxiDK0IOdcjyVasq6rLCzHXG/TCZte8rWZQDwiwgt
7P85Hx81V1uMrKTscvGEtFd5vJT3/nuDKae1X6afz3n8PuzkTyCqa84MThyW2u59
VZbmuC94kbu51Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:41:41 2026 by rpki-client