Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
File:                     E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json)
Hash identifier:          gjiLTfQN9AOoWsI+E3BdPMYlkY8hhNlJjNOvUDAm6OA=
Subject key identifier:   53:7A:1C:F4:71:D1:B0:15:8B:7C:04:7D:52:E7:08:55:19:56:E5:DE
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Certificate issuer:       /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial:       01A0C70EC1ECF939A7256B7CD7652067A527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
Manifest number:          179A
Signing time:             Tue 22 Sep 2026 03:00:28 +0000
Manifest this update:     Tue 22 Sep 2026 03:00:28 +0000
Manifest next update:     Wed 23 Sep 2026 03:00:28 +0000
Files and hashes:         1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: VVczjd3OYXhp3UKVwIBPL3i2nztK3Gi4ZLByz1Z7P/o=)
                          2: ng9Xwpw4kTndq_afGB7nkkVST_Q.roa (hash: EnVisylVrMLRpq23iMqP/krYezkyFTHOer8sFdAaBdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:0e:c1:ec:f9:39:a7:25:6b:7c:d7:65:20:67:a5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
        Validity
            Not Before: Sep 22 03:00:28 2026 GMT
            Not After : Sep 23 03:00:28 2026 GMT
        Subject: CN=537a1cf471d1b0158b7c047d52e708551956e5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c0:f0:66:ec:8f:02:75:22:dd:55:9b:9a:6f:
                    79:57:27:ac:99:eb:fb:c6:bb:43:b6:24:8c:e2:11:
                    3f:ff:f6:1f:81:99:36:e4:5a:d9:da:ec:98:dd:5b:
                    26:d2:fc:76:f7:3e:a7:62:05:c1:3e:de:09:62:b5:
                    12:e5:d0:8e:50:43:a1:9f:7c:5d:63:c5:8c:cf:c5:
                    23:8d:5b:c8:64:a2:d4:3f:c3:e3:6f:11:e6:5f:ce:
                    6f:5f:f1:60:d8:56:de:e0:2f:af:5e:0d:f5:34:2f:
                    fc:e6:31:14:4c:f7:ef:f7:18:2e:0d:35:d7:73:a4:
                    7c:c4:e8:dc:91:ac:67:0b:95:f7:9e:62:0a:5c:6e:
                    d0:6d:c6:49:de:05:7f:4a:a2:93:89:24:40:27:c5:
                    f4:46:17:92:d7:c9:f3:11:41:7a:9b:be:d5:0c:b8:
                    0e:1b:e7:c1:a8:38:bb:2c:14:d6:27:9c:a9:3b:ef:
                    03:d6:a5:be:26:c9:22:d9:08:a3:95:7b:ee:15:7f:
                    52:1a:a8:52:19:b1:0a:60:81:2a:5a:b2:f6:85:b0:
                    0d:29:07:de:1d:37:8d:f3:23:bc:cc:55:23:63:c1:
                    2b:66:f1:a5:3e:55:3c:38:d3:49:d9:01:98:50:5f:
                    df:f9:d4:bc:14:21:3f:84:22:a9:4f:44:e8:d5:bf:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7A:1C:F4:71:D1:B0:15:8B:7C:04:7D:52:E7:08:55:19:56:E5:DE
            X509v3 Authority Key Identifier:
                keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7b:82:4e:19:e1:2f:f5:a8:95:b2:28:ae:56:d8:f9:d6:ba:
         66:3c:a0:ba:5f:1f:96:67:fc:20:7d:69:98:14:ff:e5:78:24:
         0f:11:32:ec:d3:ff:3d:c8:12:2a:f4:2a:1c:40:5a:4c:8f:f7:
         50:b5:e5:cd:00:16:3b:0e:bd:de:21:04:68:43:d7:a6:d4:b0:
         59:fc:f4:0a:d9:61:01:0e:82:32:f5:45:cb:ac:f7:c6:1a:bf:
         e1:55:66:a1:59:05:30:0b:37:ea:fe:36:22:c0:dc:6b:cd:f7:
         83:16:8f:36:c7:85:ab:c7:89:53:b1:f4:14:1d:79:66:c8:3b:
         30:21:22:6e:42:21:01:9a:9e:65:75:c0:b8:fc:a0:74:87:51:
         12:2a:44:f7:f5:5a:a2:05:55:41:b1:95:a5:5a:27:af:ef:27:
         b1:c3:f3:3d:9c:a2:19:3f:c3:e6:92:ff:9d:41:6e:bb:cc:6a:
         c6:4e:bb:8c:f7:32:d6:3a:03:7b:6c:a1:f7:6b:84:39:29:82:
         60:75:2a:7f:c1:b6:09:1b:35:ad:f1:63:aa:da:eb:38:19:68:
         4d:e0:d2:88:04:5d:c9:68:1b:80:b1:42:20:7b:65:fd:41:38:
         a2:8d:04:45:96:6a:12:8b:34:b9:0f:8a:7e:9b:64:0f:9d:06:
         b1:8c:3b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:54:40 2026 by rpki-client