Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
File:                     7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json)
Hash identifier:          U7WP/iC5Ehf4TWlzPUR0f+PlAyGSWp1eUgbqMx+g/3w=
Subject key identifier:   96:33:59:42:7E:6A:61:BE:B6:36:C1:61:D9:69:54:AC:AB:87:3E:DA
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Certificate issuer:       /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial:       01A0CF3643D71B263DF4DE9EAFE944ECFB02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
Manifest number:          1153
Signing time:             Wed 23 Sep 2026 17:00:35 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:35 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:35 +0000
Files and hashes:         1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: UVi9TqtGSVc+kbZHHPVBPVyHF7iBUP5pNmVPsswf2EE=)
                          2: nl2woE4tEUQD3CSF7qKSvews-N8.roa (hash: L5p+cCQTpEMxnRlqVhomZChKjWD7GqqQzUPRzvLGeYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 17:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:36:43:d7:1b:26:3d:f4:de:9e:af:e9:44:ec:fb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
        Validity
            Not Before: Sep 23 17:00:35 2026 GMT
            Not After : Sep 24 17:00:35 2026 GMT
        Subject: CN=963359427e6a61beb636c161d96954acab873eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:26:ee:f9:5f:2d:83:6c:44:71:0c:52:fb:
                    39:21:1b:86:10:61:de:ac:22:a1:ff:78:67:8c:e2:
                    8a:9a:02:e1:ca:09:7e:95:be:c2:25:58:bc:74:3f:
                    9d:29:38:b6:3f:6d:33:5d:a7:4a:1e:34:a8:fa:78:
                    a8:0c:8b:c8:6c:96:d6:ee:e2:a8:76:79:98:cf:c6:
                    e3:06:ec:4c:6a:07:1f:0d:2c:b3:41:37:1d:af:65:
                    76:54:d0:79:b1:8d:19:74:7c:be:4e:52:33:c6:23:
                    f4:e4:6a:d0:fe:fe:f0:69:cc:8f:3b:2b:17:47:18:
                    f8:79:85:e0:9c:57:c2:e6:8f:ad:bc:59:e0:94:29:
                    6a:1d:84:1a:3c:08:3d:18:7c:2e:7c:56:01:09:5b:
                    ca:5f:af:ca:82:7a:20:03:ef:5e:05:b4:89:05:c3:
                    40:71:eb:9c:2a:76:ed:66:9f:dd:fd:24:02:d5:a0:
                    5f:aa:7a:7b:60:ec:e0:09:73:38:19:54:72:01:96:
                    d2:25:89:e6:b7:08:af:34:b4:4c:e0:94:05:4a:f2:
                    02:c8:d8:8d:87:22:7b:d3:c8:2f:19:34:cb:a2:66:
                    bf:0d:f6:52:48:63:5c:6c:f6:17:5e:5f:62:23:d0:
                    ef:be:cf:49:e2:39:e2:4a:48:34:46:f4:b2:39:47:
                    9c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:33:59:42:7E:6A:61:BE:B6:36:C1:61:D9:69:54:AC:AB:87:3E:DA
            X509v3 Authority Key Identifier:
                keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:60:49:89:96:b5:05:37:ef:e2:0a:5e:40:bd:f6:df:2a:02:
         76:0e:c8:df:40:a3:f3:af:4c:c9:bb:dc:b8:13:ec:8f:a4:69:
         bc:e0:41:f2:61:d5:bd:34:ce:ad:07:f2:a5:a9:b7:4f:18:0c:
         4b:84:ed:93:91:e1:95:5a:c0:c0:f7:19:cb:96:57:d5:da:52:
         e9:35:67:55:4c:3e:d0:f5:95:c4:f7:f1:d7:ac:57:3d:be:4c:
         10:b8:f0:98:fe:b5:9f:99:06:4d:ae:ee:52:2d:13:d0:5e:70:
         3a:64:64:b7:42:87:5f:fd:b0:08:90:b4:62:74:12:58:72:42:
         6c:31:cd:69:93:f0:e9:24:7d:76:58:e8:1f:51:e0:48:a9:e5:
         df:3d:f9:78:92:59:d6:56:96:1b:1f:f9:65:3f:0c:2b:1e:ae:
         41:da:58:1b:a3:18:81:f9:e0:91:b8:1b:54:3e:e8:66:f5:cc:
         f7:82:b8:cb:d6:26:23:f1:48:4c:2b:50:62:b2:51:0b:a2:a7:
         2a:2a:eb:6d:a2:c8:1a:ac:f6:36:96:de:d6:12:83:fa:f7:9d:
         6e:f1:0e:a3:2e:c3:49:dc:c3:d2:de:53:2b:ee:97:64:d0:71:
         bd:e9:d6:67:f5:81:ad:55:38:12:e8:5f:6d:76:dc:b4:99:23:
         b3:df:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:43:46 2026 by rpki-client