Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
File:                     7crL2itLMjHQi1HxbxsqfAgjetE.mft (raw, json)
Hash identifier:          5Me8OZJ12CYnd/y1dGqwibe/WMfaXqXkC3Kfg1FcKo8=
Subject key identifier:   D9:2C:B2:46:57:F2:65:43:2A:A5:A2:40:0B:45:8E:55:5D:FC:13:45
Authority key identifier: ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1
Certificate issuer:       /CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
Certificate serial:       01A0C66A1E3ACDFE901C302EEE2FEB996032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
Manifest number:          06D2
Signing time:             Tue 22 Sep 2026 00:00:38 +0000
Manifest this update:     Tue 22 Sep 2026 00:00:38 +0000
Manifest next update:     Wed 23 Sep 2026 00:00:38 +0000
Files and hashes:         1: 7crL2itLMjHQi1HxbxsqfAgjetE.crl (hash: rYURBF7QHZb2C+l67dRE9Ku02p+eZIMlwCEGrGiE8qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:1e:3a:cd:fe:90:1c:30:2e:ee:2f:eb:99:60:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edcacbda2b4b3231d08b51f16f1b2a7c08237ad1
        Validity
            Not Before: Sep 22 00:00:38 2026 GMT
            Not After : Sep 23 00:00:38 2026 GMT
        Subject: CN=d92cb24657f265432aa5a2400b458e555dfc1345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:43:e6:1a:25:f3:2a:e5:b4:b2:af:08:82:
                    a0:f1:f0:7c:31:eb:0f:1e:0f:cb:8a:1c:59:37:fc:
                    d7:63:06:2d:01:87:31:f2:64:dd:f6:2f:91:1c:c2:
                    bf:fb:7e:4e:6e:0a:b1:45:ed:94:d1:62:4c:09:5e:
                    1f:ff:20:1e:1b:dd:c2:e0:00:f0:b3:a1:9a:6a:54:
                    b7:4a:77:27:8f:cc:97:ff:52:57:a0:d0:8e:f1:0a:
                    20:53:59:36:84:0f:65:39:42:f2:cf:6f:63:86:d9:
                    da:6a:d4:81:31:25:44:9e:2f:47:35:78:c7:95:3a:
                    e0:24:50:db:10:95:e3:ce:f6:6f:d6:89:35:55:bf:
                    cc:95:90:ad:79:60:95:7e:c6:d4:c4:86:67:1c:60:
                    cc:37:03:dd:b9:2f:e1:77:f2:74:3a:bc:a7:93:c1:
                    97:68:15:b6:b8:6e:b7:65:77:fd:22:62:ee:3c:5a:
                    92:cf:ed:a0:5f:be:8d:1d:bd:b7:1b:5d:43:00:f4:
                    25:7d:f4:4c:73:b8:7b:cf:69:27:df:27:9b:7b:11:
                    0a:54:10:f9:dc:f5:1f:b4:58:b4:e4:7c:e0:df:dd:
                    dc:1e:54:36:c3:17:3f:58:4a:64:76:4e:ea:93:65:
                    8c:a3:11:9c:dc:74:b7:2c:4b:1b:dc:82:76:eb:76:
                    28:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2C:B2:46:57:F2:65:43:2A:A5:A2:40:0B:45:8E:55:5D:FC:13:45
            X509v3 Authority Key Identifier:
                keyid:ED:CA:CB:DA:2B:4B:32:31:D0:8B:51:F1:6F:1B:2A:7C:08:23:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7crL2itLMjHQi1HxbxsqfAgjetE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a3ebf9-4f2d-4ac1-b922-1bdaa1a69815/1/7crL2itLMjHQi1HxbxsqfAgjetE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:bf:8c:b2:c4:a6:53:aa:64:47:83:1e:f7:fc:8a:95:5e:76:
         ec:b1:d2:b3:b4:c1:f0:0f:92:e3:76:59:9b:ef:5e:7c:0e:86:
         51:2d:cb:04:e9:18:3f:5e:30:bf:8b:7d:0a:1e:f9:ea:11:27:
         ce:ac:04:8c:94:38:2e:2e:ca:f1:0c:2d:7c:18:6a:92:c1:c1:
         ab:bc:32:cd:c1:94:ac:a7:2a:e4:71:96:12:d9:15:d3:43:d0:
         02:e6:e0:0f:b6:6a:4c:67:a2:68:02:f0:86:d5:8e:79:5e:f3:
         0e:f1:ed:e4:fa:bb:18:f0:91:e0:89:98:58:ee:e0:c2:65:0d:
         6a:f9:af:29:1e:16:8a:a6:9d:a6:00:fa:97:70:39:55:37:f3:
         41:77:d6:e3:1b:43:ec:99:23:7f:4f:de:0b:13:fb:e6:d3:43:
         9c:e5:aa:3f:40:c2:9d:ab:6b:6b:64:b5:fc:18:41:8d:ab:ff:
         98:46:62:41:35:d2:a8:16:a3:e6:c7:5b:96:d1:d8:53:db:bb:
         0e:c7:f5:e6:5e:59:b6:be:49:80:93:86:cd:7d:27:3e:d7:fb:
         90:27:ad:e5:67:23:de:25:51:82:f6:1c:5f:de:11:3f:5e:82:
         9f:7b:f5:df:03:88:f0:2d:03:bc:c1:d4:a5:57:31:ea:74:9a:
         41:90:8a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:27:05 2026 by rpki-client