Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
File:                     7BZ7trBh__pindKoTM99tExxo1E.mft (raw, json)
Hash identifier:          FZz2jE+vpE7e2Q3CMl56UQ2rg3wOxyf/HZ8sL2XlQIY=
Subject key identifier:   1D:EA:56:99:70:0C:DF:DC:21:CA:48:23:B3:FC:5A:8E:81:1A:3C:1E
Authority key identifier: EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
Certificate issuer:       /CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Certificate serial:       01A0CB593DF1D995C12BAD13D052AB06FF7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
Manifest number:          1A6A
Signing time:             Tue 22 Sep 2026 23:00:18 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:18 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:18 +0000
Files and hashes:         1: 7BZ7trBh__pindKoTM99tExxo1E.crl (hash: +z8CJCnq3l79u13g5QPrlSZZqsO8bPxY32ZdfE9nsjs=)
                          2: TE-zkB1WXTHRYrdiQgGmk6uSVdQ.roa (hash: eRgAHRTvSReUmr1Kc9vOCDCB9vNQ0s5lkzXZyGteC2Q=)
                          3: cE9z_vi7aIN7R1MRmejkUdogCNM.roa (hash: ErypDac6PMXFFeqxfqyYQBUhuGPwndIrMS3m77VeKJg=)
                          4: e9AyjlXwXBjeN_sQYf5sT7IZ60k.roa (hash: 5BeMkSTwe8lYH/6FFSl6JdJloHvDA2cuHQFyNcB8z8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:3d:f1:d9:95:c1:2b:ad:13:d0:52:ab:06:ff:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
        Validity
            Not Before: Sep 22 23:00:18 2026 GMT
            Not After : Sep 23 23:00:18 2026 GMT
        Subject: CN=1dea5699700cdfdc21ca4823b3fc5a8e811a3c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1a:c6:ba:dc:e7:92:2b:ef:94:ed:13:8d:81:
                    58:68:00:db:fb:d0:76:87:f7:cb:02:c8:86:76:73:
                    89:a2:c8:ce:76:93:b2:3a:bf:63:41:1c:96:d8:5b:
                    72:31:47:84:63:9b:2e:e6:87:fe:e7:9e:e7:cc:94:
                    e1:09:0e:e6:f4:86:10:3d:23:bf:b7:bc:ad:8b:bd:
                    f3:c8:85:06:6b:1c:f9:e6:eb:81:f2:4b:b5:3b:49:
                    8c:9e:17:bc:28:93:13:b4:eb:e0:4f:9c:27:2c:83:
                    48:6e:9c:7a:21:6d:e8:c5:d0:51:eb:9b:90:25:aa:
                    48:31:b3:d4:56:9c:12:9d:c4:ba:e7:08:62:46:45:
                    4e:be:00:cd:aa:a3:28:07:72:43:45:a5:a2:ac:cf:
                    be:5c:0d:a3:b0:1d:8b:1b:18:32:f2:ac:30:98:9c:
                    ff:ad:d0:f0:de:3b:5d:7d:63:b0:14:16:1f:39:39:
                    6f:67:d9:6e:1b:fe:24:7a:a2:7f:2e:5d:92:d5:9d:
                    d7:42:8f:2a:9a:fd:85:18:6e:22:80:eb:a3:a0:43:
                    87:2a:6a:17:da:56:62:70:c8:e4:b5:d8:e1:d9:80:
                    6f:53:b4:80:cc:4f:80:47:3d:3e:ae:8b:1f:ab:e8:
                    8c:d2:3b:51:0b:79:14:bd:73:3e:17:ca:68:46:8b:
                    a7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EA:56:99:70:0C:DF:DC:21:CA:48:23:B3:FC:5A:8E:81:1A:3C:1E
            X509v3 Authority Key Identifier:
                keyid:EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:7c:b2:1a:d1:9c:a1:b1:7a:e7:5f:ea:90:1a:1c:88:58:48:
         ae:5d:9f:c4:2e:99:fd:39:88:ce:88:b9:1f:56:8a:8a:aa:4e:
         e7:2e:42:cd:d3:b9:ee:fa:ee:19:88:b8:1b:86:34:7e:82:44:
         5a:2c:47:55:2d:b0:a9:72:91:7b:38:b2:36:22:11:7b:e7:60:
         01:a4:37:5e:82:05:47:e1:68:2b:9e:15:66:2f:f7:f3:7f:c2:
         22:0b:d9:60:f1:d4:ad:9a:06:2b:a4:4a:d2:98:d8:a0:9a:4c:
         75:cd:3c:d9:80:bc:f8:89:e7:84:37:32:07:78:fe:c6:74:31:
         92:0d:d6:58:56:ff:fe:fb:99:86:68:a4:e7:e1:ce:90:b8:4c:
         41:95:a7:93:2a:ab:bb:28:0c:0f:39:7c:b7:f1:40:4a:64:7e:
         7f:19:64:5d:52:47:27:8d:35:8d:36:dd:c1:fc:05:e1:03:76:
         ef:9f:5b:b3:11:e4:ed:35:fb:63:f1:0f:67:aa:b8:79:b1:da:
         d7:42:d4:55:1a:c4:28:70:ca:90:e8:ed:8e:c3:74:c6:d2:9a:
         9f:ba:7f:2d:0e:ec:7d:67:bd:16:98:2f:6d:7a:af:31:cc:5c:
         19:c7:82:89:f1:44:0e:e9:d5:42:28:5c:64:4c:f7:cd:e4:15:
         19:e1:ac:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLWT3x2ZXBK60T0FKrBv9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMTY3YmI2YjA2MWZmZmE2MjlkZDJhODRjY2Y3ZGI0NGM3
MWEzNTEwHhcNMjYwOTIyMjMwMDE4WhcNMjYwOTIzMjMwMDE4WjAzMTEwLwYDVQQD
EygxZGVhNTY5OTcwMGNkZmRjMjFjYTQ4MjNiM2ZjNWE4ZTgxMWEzYzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BrGutznkivvlO0TjYFYaADb+9B2
h/fLAsiGdnOJosjOdpOyOr9jQRyW2FtyMUeEY5su5of+557nzJThCQ7m9IYQPSO/
t7yti73zyIUGaxz55uuB8ku1O0mMnhe8KJMTtOvgT5wnLINIbpx6IW3oxdBR65uQ
JapIMbPUVpwSncS65whiRkVOvgDNqqMoB3JDRaWirM++XA2jsB2LGxgy8qwwmJz/
rdDw3jtdfWOwFBYfOTlvZ9luG/4keqJ/Ll2S1Z3XQo8qmv2FGG4igOujoEOHKmoX
2lZicMjktdjh2YBvU7SAzE+ARz0+rosfq+iM0jtRC3kUvXM+F8poRounfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3qVplwDN/cIcpII7P8Wo6BGjweMB8GA1UdIwQY
MBaAFOwWe7awYf/6Yp3SqEzPfbRMcaNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0JaN3RyQmhfX3BpbmRLb1RNOTl0RXh4bzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9mNTVkNDQtNTg5My00YzIyLWIwYjct
YzY1NWFkNTk0MTkzLzEvN0JaN3RyQmhfX3BpbmRLb1RNOTl0RXh4bzFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9mNTVkNDQtNTg5My00YzIyLWIwYjctYzY1NWFkNTk0MTkz
LzEvN0JaN3RyQmhfX3BpbmRLb1RNOTl0RXh4bzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXyyGtGc
obF651/qkBociFhIrl2fxC6Z/TmIzoi5H1aKiqpO5y5CzdO57vruGYi4G4Y0foJE
WixHVS2wqXKReziyNiIRe+dgAaQ3XoIFR+FoK54VZi/383/CIgvZYPHUrZoGK6RK
0pjYoJpMdc082YC8+InnhDcyB3j+xnQxkg3WWFb//vuZhmik5+HOkLhMQZWnkyqr
uygMDzl8t/FASmR+fxlkXVJHJ401jTbdwfwF4QN2759bsxHk7TX7Y/EPZ6q4ebHa
10LUVRrEKHDKkOjtjsN0xtKan7p/LQ7sfWe9FpgvbXqvMcxcGceCifFEDunVQihc
ZEz3zeQVGeGs0w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 06:45:52 2026 by rpki-client