Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File:                     A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier:          vFYsydR6+WbLc5J9QPNZNpGUB4MdlyCytA88p6gEbYA=
Subject key identifier:   A6:CE:47:2A:FE:BB:0F:5D:D2:0E:97:17:42:95:38:86:00:60:F3:CB
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer:       /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial:       01A0C6331AA99C0210B1EC577CD62C298BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number:          0722
Signing time:             Mon 21 Sep 2026 23:00:32 +0000
Manifest this update:     Mon 21 Sep 2026 23:00:32 +0000
Manifest next update:     Tue 22 Sep 2026 23:00:32 +0000
Files and hashes:         1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: 7UI93S+d0GaoW6UFEhwp+03K7QbNFdJsQTeP/HG5yic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:33:1a:a9:9c:02:10:b1:ec:57:7c:d6:2c:29:8b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
        Validity
            Not Before: Sep 21 23:00:32 2026 GMT
            Not After : Sep 22 23:00:32 2026 GMT
        Subject: CN=a6ce472afebb0f5dd20e9717429538860060f3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:f4:90:9d:24:b8:86:5c:14:d0:d0:79:ab:
                    fb:08:e3:07:f3:a2:43:e5:ba:38:b1:3d:39:8b:d4:
                    f4:69:e6:f5:fa:ba:62:0a:45:95:f9:fe:17:46:20:
                    2b:bb:69:a6:91:f6:37:9b:3a:b5:6c:a3:67:54:82:
                    4b:8d:6f:5e:30:a1:42:8d:6c:e5:7a:a4:6f:2d:06:
                    df:54:db:da:e9:01:dd:aa:14:76:06:f2:39:11:8f:
                    75:13:86:4e:78:91:31:5f:cb:bf:30:cd:f9:cb:21:
                    dc:5a:35:ac:82:fe:43:be:bc:ef:69:88:f1:d7:b9:
                    78:c5:0d:4e:6a:83:0e:7c:3e:70:cc:2a:ce:bb:e9:
                    10:13:0d:04:ed:dc:dc:e7:5c:4a:27:b0:22:68:f6:
                    a7:78:99:98:8c:8c:da:b8:2e:f9:b1:c9:47:43:a1:
                    df:64:1c:c0:d3:97:8d:63:58:3d:3c:89:25:e7:2e:
                    bf:45:9b:b2:64:50:f2:a0:a7:8e:d7:83:dd:65:18:
                    ac:4c:02:eb:7e:1a:b5:94:c6:1d:6f:a3:cf:2b:fe:
                    bd:18:7b:39:01:80:61:32:ac:c8:39:b7:bc:0b:e6:
                    7f:db:f3:3b:2f:a7:55:91:40:a3:a9:d3:46:9b:3f:
                    4e:5d:85:10:c6:4a:e9:b3:d2:fa:25:5b:37:79:f0:
                    ed:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CE:47:2A:FE:BB:0F:5D:D2:0E:97:17:42:95:38:86:00:60:F3:CB
            X509v3 Authority Key Identifier:
                keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:fd:10:b8:26:dd:8c:e1:60:c5:7d:c5:54:db:2c:b6:b8:a2:
         08:45:dd:2b:af:20:ae:40:2b:ce:d6:92:8d:54:34:90:37:2f:
         0d:62:f3:bc:b0:d3:52:76:4a:20:61:08:d3:4b:5b:7f:2c:93:
         27:e1:92:96:93:ad:d7:52:3c:8a:2a:c4:ed:33:e5:d8:5b:29:
         26:a8:9b:c4:f3:0b:1e:95:0b:f5:d6:8d:2b:09:b5:1c:72:43:
         47:df:74:a9:ee:45:a9:63:b7:43:3d:e5:a7:8b:21:f9:39:57:
         43:0a:75:86:d9:f1:b4:91:30:bc:20:f3:7a:58:cb:ab:a0:b6:
         f4:5a:7d:b8:ac:b7:de:89:97:56:9b:7a:c3:e6:ec:a1:76:40:
         7a:4f:47:e4:1a:76:ea:ba:cf:5c:1a:eb:f1:3e:53:b6:7f:e7:
         7e:79:02:2b:a2:8d:3d:fb:1a:3b:1f:28:66:51:07:ec:3c:7e:
         1e:27:16:6b:27:9a:36:7e:b2:75:cf:6a:0b:0f:39:b1:9d:26:
         76:3e:cc:53:d2:81:01:84:b1:92:03:38:53:18:6a:04:6e:be:
         04:87:21:78:c3:50:60:df:7a:d4:25:57:fb:70:e6:f4:f0:a1:
         03:c6:af:0e:bf:81:74:13:17:f4:48:e9:e5:cc:df:61:29:f3:
         ea:45:40:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:44:16 2026 by rpki-client