Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
File:                     7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft (raw, json)
Hash identifier:          67iU160ZncT4gHlW0LnpsY8QGzkFGE7fJvoL+P1BV9w=
Subject key identifier:   AF:C8:39:D0:38:E3:60:4E:E3:F4:56:E8:2A:57:E8:90:59:53:18:14
Authority key identifier: ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05
Certificate issuer:       /CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
Certificate serial:       01A0C7463E6E1BAE41A5B98E68171458AA13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
Manifest number:          0386
Signing time:             Tue 22 Sep 2026 04:01:04 +0000
Manifest this update:     Tue 22 Sep 2026 04:01:04 +0000
Manifest next update:     Wed 23 Sep 2026 04:01:04 +0000
Files and hashes:         1: 7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl (hash: gHmnrpqxRtcgahkA8aX82fiN6UJm15xP/0OltPsp/r0=)
                          2: TalCKAxab_gMMHeJvcq48KPYlOs.roa (hash: yPK8jifbQaBLYT5U8Ae5k9YG7IJ/bOiLPK0w75h7kpk=)
                          3: mglUegYtWaUyDz_-mcfoeZK3iuc.roa (hash: 35GBN0aP6FdxTviok26NqcLKHwN12VPItzfJaY9sv8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:3e:6e:1b:ae:41:a5:b9:8e:68:17:14:58:aa:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
        Validity
            Not Before: Sep 22 04:01:04 2026 GMT
            Not After : Sep 23 04:01:04 2026 GMT
        Subject: CN=afc839d038e3604ee3f456e82a57e89059531814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5e:2a:39:bd:a8:e2:60:da:a1:12:cc:b2:a7:
                    2d:68:39:9c:db:0d:79:10:34:33:59:3a:20:c6:3e:
                    02:1e:08:5a:ef:4e:91:51:3f:0f:76:d0:8c:14:e2:
                    74:7d:8c:d7:47:93:3f:ec:08:37:28:68:43:4f:ee:
                    c8:3f:7f:f0:47:53:bf:fc:61:00:30:c6:f9:91:41:
                    8a:c8:56:c9:45:f8:24:1e:ae:7b:64:2f:a0:a7:5f:
                    47:d5:d5:e3:9b:e4:3c:e1:5b:2f:1a:55:df:a6:4f:
                    62:d7:9d:d5:8d:67:c6:df:25:ed:91:1b:e4:58:84:
                    38:9a:8d:e6:6e:12:7a:13:48:7a:41:d4:d5:3a:69:
                    b8:37:0d:0c:42:f0:41:c3:55:8c:52:0f:06:0a:32:
                    87:56:75:a6:fb:88:32:1b:93:1d:bf:4d:01:8f:ad:
                    c3:64:ec:c0:fa:34:b5:1a:03:5e:be:1b:88:21:50:
                    af:03:99:98:c7:5b:10:6b:b1:42:8f:5f:18:a0:e9:
                    f5:08:f5:ad:a6:e4:92:10:d3:03:ad:03:9a:86:29:
                    44:27:92:c0:ad:fa:99:63:cc:97:4b:b7:7d:ee:6d:
                    e6:5e:a4:6b:21:c7:58:a3:b6:87:27:89:1b:51:d5:
                    6a:f8:ff:73:b6:db:e6:bc:35:25:89:3f:4c:c5:a5:
                    02:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C8:39:D0:38:E3:60:4E:E3:F4:56:E8:2A:57:E8:90:59:53:18:14
            X509v3 Authority Key Identifier:
                keyid:ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:34:85:be:cc:63:e8:10:5b:35:96:94:47:74:5c:93:d8:65:
         85:b2:27:37:f9:b8:7f:0f:46:da:2a:da:7a:82:03:40:15:90:
         a5:98:8d:d0:32:e5:23:15:bc:50:89:b2:4f:84:ca:af:3d:0d:
         d3:fa:70:46:49:7f:b2:1c:77:5a:9a:cb:a6:42:e3:a4:82:57:
         74:8e:de:28:82:ea:be:fe:1a:b3:a8:f0:40:6e:25:e3:ec:09:
         07:e6:40:84:88:98:e3:b7:2d:33:19:d4:a5:d8:13:7c:b7:80:
         a0:d5:d6:f2:5e:a6:97:16:be:d4:10:a9:ad:9c:48:2d:d6:85:
         7e:28:fd:5d:cf:25:b7:da:e2:d9:60:e8:ad:fa:70:cf:2a:e6:
         99:12:45:5b:41:83:dd:bc:8e:57:fd:bd:c7:65:81:81:8f:64:
         e7:92:65:cb:1b:16:c5:a2:a3:8e:4d:0a:bc:c1:ad:6b:b3:8d:
         a8:d7:cd:0a:47:4e:b8:c3:99:e1:1c:53:f7:8e:67:e3:fa:dc:
         00:d5:d1:77:ff:d5:86:bb:43:ce:a2:aa:1d:85:09:64:ad:97:
         7b:c4:4b:e9:66:9c:d9:6f:02:3d:57:e5:1e:57:4b:f5:c4:60:
         bb:af:4e:f3:c5:f0:e3:4c:38:4a:8a:63:c0:80:40:13:f0:1d:
         aa:51:05:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:21:42 2026 by rpki-client