Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
File:                     7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json)
Hash identifier:          17wpwchjUJ+0Ws8IEZkiSmYk+8efNe0z2Zt6ZSyMids=
Subject key identifier:   40:C5:6D:18:EC:99:4E:6A:C2:04:37:15:3B:01:E6:8D:FB:0E:05:43
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Certificate issuer:       /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial:       01A0E663FB065FB378B00AED2F2B058AE407
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
Manifest number:          1A83
Signing time:             Mon 28 Sep 2026 05:01:47 +0000
Manifest this update:     Mon 28 Sep 2026 05:01:47 +0000
Manifest next update:     Tue 29 Sep 2026 05:01:47 +0000
Files and hashes:         1: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: nrbye9lxqwf7Z0gBNlgddzUqV8Rs2EcCOYZZFDorOmw=)
                          2: gTtUHuAbAVNRdNoLuCsea2rCewQ.roa (hash: KFx9ZwsybGaJs1c7S9ushLUhbd0Pa2NdRnZ63vIrBQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 05:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e6:63:fb:06:5f:b3:78:b0:0a:ed:2f:2b:05:8a:e4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
        Validity
            Not Before: Sep 28 05:01:47 2026 GMT
            Not After : Sep 29 05:01:47 2026 GMT
        Subject: CN=40c56d18ec994e6ac20437153b01e68dfb0e0543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4c:8c:38:7c:1c:9d:e8:c7:6b:f8:85:04:80:
                    6a:b2:38:5c:6c:27:d3:00:82:6c:65:1f:3b:dd:3b:
                    4a:22:29:e9:47:6b:5a:7c:f4:5e:ce:6e:b3:3f:25:
                    d8:cd:40:b2:18:98:15:af:cc:cc:e3:53:20:ba:c1:
                    bd:1a:78:ab:ee:b8:d4:8a:15:0b:f5:d2:9d:38:57:
                    88:02:50:cf:ba:0a:f5:27:7b:e8:4c:48:d9:5c:32:
                    68:d6:f3:10:10:fa:7e:4a:41:c8:41:ab:90:6c:72:
                    b2:48:fe:93:52:d9:3d:b7:bb:d3:ca:85:4f:55:6a:
                    62:72:29:6f:fb:4d:e4:d1:9d:83:f9:4f:ad:5b:02:
                    45:11:80:77:11:7b:e5:90:89:c8:6e:a1:fc:74:93:
                    94:bb:ba:65:78:e6:74:02:50:66:2a:90:e5:12:70:
                    42:98:15:7c:a1:f1:4e:e1:c9:ce:5e:3e:d6:54:a3:
                    c3:3d:e9:a5:50:c3:ae:6e:2a:52:ee:29:07:05:09:
                    83:d9:e1:82:9b:ba:b3:bf:56:37:fa:8f:02:cc:aa:
                    15:c7:94:8b:04:51:c3:26:e6:b4:f9:c7:f7:c3:23:
                    3c:1f:ed:02:3d:e9:e3:3a:b9:78:dc:a8:ba:2c:ba:
                    a2:4c:7c:bf:b4:41:47:a4:55:74:ca:77:01:4d:be:
                    db:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C5:6D:18:EC:99:4E:6A:C2:04:37:15:3B:01:E6:8D:FB:0E:05:43
            X509v3 Authority Key Identifier:
                keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:ec:15:88:1d:f0:01:94:dc:14:28:08:6d:7e:d0:b6:01:11:
         95:42:97:47:5c:89:23:2a:d1:aa:b5:2a:1a:1c:d7:bd:3d:d0:
         3e:e7:2c:88:e7:ef:dd:cf:18:90:24:7b:98:33:6e:3b:6f:34:
         af:42:44:e6:ca:ee:5b:32:9f:a4:c0:89:81:77:4d:6b:cc:2e:
         01:dd:b6:7c:2f:58:23:39:8a:a9:f3:c2:8f:72:ca:4c:48:f7:
         bb:2f:9d:4b:69:f8:05:29:05:d5:42:a5:03:2f:8e:c2:56:21:
         2c:63:ae:8b:b1:bd:27:b5:33:5c:77:f4:6a:14:39:50:ed:5e:
         89:63:06:47:02:ab:20:28:d5:8d:52:8b:80:5f:3f:26:14:37:
         ad:66:9a:59:9e:5d:5f:4c:51:1d:45:76:69:3f:03:72:8c:6b:
         4a:27:b5:6f:94:04:c6:cc:14:fe:9c:82:c0:3e:87:13:d6:1e:
         c1:b7:ec:7e:b7:2f:bb:5a:6e:a9:ff:fa:3a:12:c7:6d:60:68:
         9d:cb:4d:32:71:f9:87:58:3d:4c:ff:2a:f8:2d:f1:45:54:a2:
         9a:51:ab:de:6a:02:00:ce:9a:6c:f4:87:c9:dc:4e:ed:1c:95:
         5b:77:75:9a:ba:65:90:66:03:35:c2:44:41:c6:c0:f5:ea:ba:
         7d:20:90:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:16:33 2026 by rpki-client