Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.mft
File:                     7-DrSwEUGfhPh2kuTLRvZgsAPIE.mft (raw, json)
Hash identifier:          kO1dxWyoXhrqAEpEepuFon5OhGIpxLrGcABZaY6mFy0=
Subject key identifier:   82:AF:96:52:93:C5:3C:90:25:D5:C6:1A:7C:B4:70:2B:84:7B:AF:4E
Authority key identifier: EF:E0:EB:4B:01:14:19:F8:4F:87:69:2E:4C:B4:6F:66:0B:00:3C:81
Certificate issuer:       /CN=efe0eb4b011419f84f87692e4cb46f660b003c81
Certificate serial:       01A0C66AFAB6FF556D8F049F2348297247BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-DrSwEUGfhPh2kuTLRvZgsAPIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.mft
Manifest number:          E0
Signing time:             Tue 22 Sep 2026 00:01:34 +0000
Manifest this update:     Tue 22 Sep 2026 00:01:34 +0000
Manifest next update:     Wed 23 Sep 2026 00:01:34 +0000
Files and hashes:         1: 7-DrSwEUGfhPh2kuTLRvZgsAPIE.crl (hash: ycVJy1+trAZAtEVYIyDg45ALQzYQS8xny3nHT2jbo+Y=)
                          2: XfXKJkxPG06sw6h0P3SlK66eCuw.roa (hash: O3XiKqUB1dU7QPT/bz3OAjXUnuYby2LWoaEHC76J3tY=)
                          3: u6PBAFOdsBFAZRaMYmhuAYBCw3s.roa (hash: AwxT7UyPMX5wEE4yK7hkSv3T75Lk6d5jT46lBhEBIUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-DrSwEUGfhPh2kuTLRvZgsAPIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:fa:b6:ff:55:6d:8f:04:9f:23:48:29:72:47:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe0eb4b011419f84f87692e4cb46f660b003c81
        Validity
            Not Before: Sep 22 00:01:34 2026 GMT
            Not After : Sep 23 00:01:34 2026 GMT
        Subject: CN=82af965293c53c9025d5c61a7cb4702b847baf4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:25:04:02:1f:da:3d:2c:66:eb:55:8c:29:
                    9d:89:ea:44:e4:11:0a:e6:2f:fa:4a:d6:70:d9:91:
                    10:54:89:33:85:aa:50:23:93:ef:ba:e0:f0:26:47:
                    2b:0e:6a:ca:7f:0f:a9:d0:08:21:41:9f:61:98:09:
                    3d:f4:40:4f:5a:e6:34:d4:ab:09:4e:af:1c:c0:ad:
                    0b:6f:df:13:8a:44:c6:e8:8e:42:1f:26:91:74:b2:
                    3e:3a:5a:bf:69:2c:af:b0:a6:aa:a6:47:bb:de:f2:
                    53:84:e9:5b:e9:fe:17:73:18:1b:5e:61:4c:36:e3:
                    aa:06:06:8c:76:6d:9e:f7:43:ff:2c:35:ae:45:c9:
                    93:8b:aa:15:ac:d8:86:b7:af:12:39:6a:67:26:34:
                    67:e2:d6:1d:98:55:59:c4:31:0d:64:fc:7f:f1:48:
                    57:d4:0a:b8:f1:9c:3b:d8:1f:a1:17:f8:02:46:a4:
                    ad:ab:d1:d2:4e:2d:e9:89:ab:e2:c2:cb:c2:b9:8a:
                    15:4b:3c:ab:69:c6:e8:94:bb:f5:cb:ee:9a:3b:21:
                    a3:ae:02:ec:73:5e:57:d8:b7:69:ee:c5:a3:21:ae:
                    35:0e:e8:14:25:46:2e:93:a3:eb:2f:af:5c:c8:07:
                    db:48:ba:a8:83:c7:e3:71:87:a7:3e:3c:e3:ee:34:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AF:96:52:93:C5:3C:90:25:D5:C6:1A:7C:B4:70:2B:84:7B:AF:4E
            X509v3 Authority Key Identifier:
                keyid:EF:E0:EB:4B:01:14:19:F8:4F:87:69:2E:4C:B4:6F:66:0B:00:3C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-DrSwEUGfhPh2kuTLRvZgsAPIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/7-DrSwEUGfhPh2kuTLRvZgsAPIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:00:79:e7:19:f7:eb:99:8e:dc:0f:73:08:74:67:2a:cf:f9:
         9f:33:3d:70:a5:0f:44:a5:db:09:1f:d6:67:e2:58:20:06:a6:
         23:d3:91:21:4f:b3:76:b7:9c:ef:c6:7e:35:4b:86:b8:2b:26:
         14:a1:8d:7c:fb:2e:66:ce:1e:67:f4:b9:24:ca:71:49:54:69:
         3c:d0:82:4b:27:0e:11:16:48:89:5e:66:14:40:19:f4:ef:c8:
         1d:7c:3e:99:ad:ef:e9:75:fc:8a:95:c2:ef:30:1f:48:b9:0f:
         a3:00:6c:c8:cf:64:19:b6:af:68:83:96:64:27:fb:48:f8:2a:
         3d:26:fe:e7:3c:7b:da:7d:9d:31:8a:5f:b1:e2:fb:c4:79:e2:
         96:c0:6a:39:1b:93:69:13:79:2b:b0:83:f6:49:f9:bd:30:ae:
         70:36:fe:cc:08:c8:c3:b0:ab:63:f9:71:bf:4f:32:5c:f5:5b:
         88:d9:20:74:9d:e3:cd:1b:48:a6:44:0e:80:ee:6e:d9:30:88:
         14:0d:60:25:01:88:5b:a6:89:59:98:fe:1f:0a:30:13:31:8a:
         f1:08:80:c4:cd:22:6f:5c:d4:38:ff:d8:f5:58:88:ab:b2:18:
         a2:86:39:6a:22:f4:74:0c:93:41:91:10:bb:e0:85:4c:21:98:
         90:16:f6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:54:12 2026 by rpki-client