Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File:                     7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier:          44YV8ldxh5Doiobv2UTFcVkAH/pMM1LmMTeauxE1Syk=
Subject key identifier:   45:24:57:63:B9:79:35:32:A7:D7:48:82:85:75:FA:02:52:F2:9F:D3
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer:       /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial:       01A0C58E0191EA1CF55482352E9A4F99969B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number:          091D
Signing time:             Mon 21 Sep 2026 20:00:13 +0000
Manifest this update:     Mon 21 Sep 2026 20:00:13 +0000
Manifest next update:     Tue 22 Sep 2026 20:00:13 +0000
Files and hashes:         1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: pXU/5C/6OybuxtcbyPrzKF91gjoOnNc6XGuz1HL5lqA=)
                          2: nIgfPArQS9tv1SFmbcff1iaV-ac.roa (hash: LmX0nAZ4dVW7pJ2OY2bERveF61BobTLkyj91uEdpXzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:8e:01:91:ea:1c:f5:54:82:35:2e:9a:4f:99:96:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
        Validity
            Not Before: Sep 21 20:00:13 2026 GMT
            Not After : Sep 22 20:00:13 2026 GMT
        Subject: CN=45245763b9793532a7d748828575fa0252f29fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9b:dc:c9:ca:f5:17:b0:40:7f:03:16:d2:35:
                    e4:2d:ad:3b:2f:c5:6f:39:47:66:02:15:bb:0a:5b:
                    a7:cb:b3:fb:b9:08:dd:1b:25:57:2e:95:86:6b:1f:
                    29:16:d7:8a:75:61:49:5c:f4:08:8b:cb:87:8f:8f:
                    1a:06:c2:60:82:c8:f3:0c:51:c2:af:b2:a7:55:a6:
                    8e:71:2f:6b:ef:99:b1:5b:ad:68:00:d9:5c:fb:2b:
                    91:e1:99:01:fd:2f:4d:53:aa:2c:b5:b4:cf:be:25:
                    f3:c5:5e:13:d3:8f:48:81:96:81:8b:d3:26:1a:73:
                    b4:cc:77:34:56:eb:77:67:94:71:e1:bf:c0:31:95:
                    37:04:f5:6a:58:69:75:b1:c6:fd:ac:21:d7:c7:f2:
                    bd:72:68:e9:d3:ab:3f:00:f9:7b:ea:48:de:4d:73:
                    e6:87:6d:b8:05:8b:78:58:9a:27:d8:38:5b:f0:51:
                    9a:02:96:62:79:16:6d:98:42:09:5c:7c:db:aa:48:
                    a1:20:8b:a5:39:21:9c:ad:a8:2b:d5:dc:3f:3a:4a:
                    c2:51:ca:6c:85:4f:d5:bb:74:25:66:05:c7:1c:55:
                    85:40:5a:c6:70:72:ff:21:b1:5b:a3:88:76:12:23:
                    ab:c5:e7:68:df:ef:49:18:35:6c:a3:c9:76:ac:bc:
                    37:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:24:57:63:B9:79:35:32:A7:D7:48:82:85:75:FA:02:52:F2:9F:D3
            X509v3 Authority Key Identifier:
                keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a8:81:47:09:a8:05:56:7b:16:2c:e7:db:bc:e8:3a:34:f0:
         de:07:f6:20:3d:aa:b0:b5:82:90:c3:47:01:6e:c8:d0:b2:35:
         f1:be:b4:0e:64:0b:77:bb:f4:ac:32:a1:48:58:ae:67:e4:21:
         d9:8a:dc:95:08:2b:70:f2:d6:5b:25:35:54:95:8e:b4:c3:b2:
         6f:40:99:9e:75:ed:d5:16:3b:20:ea:a0:8a:94:56:62:61:95:
         38:40:21:83:46:52:e1:96:e7:82:24:73:52:e3:ba:39:13:03:
         d5:07:b4:72:3b:68:4e:d5:4b:2b:80:a2:7f:c6:d4:1f:89:5b:
         9d:02:68:18:2b:79:2a:00:01:ab:a2:f2:2a:a2:60:d3:f0:45:
         ee:50:29:1b:18:01:d4:ff:71:69:d8:39:7c:98:29:3f:71:24:
         d3:b0:06:f6:94:d6:ec:1b:90:d1:f1:20:48:13:6a:38:72:9e:
         4f:d5:7c:3a:ba:a0:39:6e:ad:fc:2e:0a:ae:43:7d:55:5f:6e:
         f8:68:1d:0a:2c:86:95:60:e4:2a:d9:0e:f0:78:a6:02:85:1e:
         c4:01:9a:cd:0d:ed:c6:55:fa:3f:87:91:d8:9f:2a:7f:25:21:
         5d:b6:31:22:fe:4d:a6:6b:49:35:ea:73:b3:88:46:57:05:4e:
         22:ee:3f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:34:38 2026 by rpki-client