Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
File:                     x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft (raw, json)
Hash identifier:          PnWiNy0Gee3QWGFbPBc6UP60UmC2/6YqOQOtg9kzbuY=
Subject key identifier:   71:F6:47:32:91:B5:13:45:81:EC:90:7D:DD:D9:3C:19:02:B5:32:E3
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Certificate issuer:       /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial:       01A12B441EFB11DFE5BC3CD592F622DAE120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
Manifest number:          1A9A
Signing time:             Sun 11 Oct 2026 14:00:46 +0000
Manifest this update:     Sun 11 Oct 2026 14:00:46 +0000
Manifest next update:     Mon 12 Oct 2026 14:00:46 +0000
Files and hashes:         1: wWaQX5rvrS24Hznd7N3fDWXJd9I.roa (hash: fT4yvetY/MA9WwLBmvhYQk4S1AH3yU1r+ty6ON2yEVY=)
                          2: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl (hash: Ps90ZaVctLj/1bh5XwLWp3JjES3okefsY/zH1k9tpcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:44:1e:fb:11:df:e5:bc:3c:d5:92:f6:22:da:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
        Validity
            Not Before: Oct 11 14:00:46 2026 GMT
            Not After : Oct 12 14:00:46 2026 GMT
        Subject: CN=71f6473291b5134581ec907dddd93c1902b532e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:96:05:93:af:38:91:8f:be:32:9f:c8:47:
                    69:d4:93:31:e5:45:13:2b:e8:b7:25:85:c7:1b:2e:
                    c0:65:40:f7:77:4c:e2:1d:fc:93:f6:73:da:64:4e:
                    99:46:a8:3e:aa:0b:5e:20:34:ef:19:ab:d3:09:e0:
                    cd:5f:59:73:64:ae:03:4c:9d:9b:81:af:00:62:16:
                    f1:df:dd:5e:26:1c:68:9f:34:ac:5c:99:b0:84:01:
                    73:a0:d4:d8:40:9b:5c:26:c0:e4:6a:55:74:96:1a:
                    d1:5a:79:ef:89:33:53:16:95:94:0e:4f:81:7f:bf:
                    9b:a5:46:16:ef:3b:f4:fb:73:7f:f3:a3:3e:8d:1d:
                    45:fe:00:8b:8d:49:72:2f:74:52:46:d8:37:78:cc:
                    b2:d0:06:b5:77:a4:f7:a2:be:17:6b:e6:37:ae:fa:
                    a5:7b:f9:98:9c:7c:06:67:11:52:af:f8:af:14:10:
                    8c:15:6d:93:17:da:10:e4:80:a3:7a:89:e8:ed:a4:
                    0a:6a:85:cb:98:23:91:34:cd:d6:9f:23:a0:7f:f9:
                    44:63:bc:72:c3:c2:c0:1b:52:0c:6a:fa:d5:30:75:
                    21:23:b5:c8:69:b5:e2:b1:6f:d3:5b:85:31:cf:37:
                    f5:a4:54:4b:56:64:07:ae:9c:e9:ca:06:2f:54:4b:
                    dd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F6:47:32:91:B5:13:45:81:EC:90:7D:DD:D9:3C:19:02:B5:32:E3
            X509v3 Authority Key Identifier:
                keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1f:05:07:a5:f0:a7:0b:2a:66:ca:b9:49:f8:7c:88:af:79:
         0a:3f:53:ba:1e:92:09:7f:b1:61:0d:cf:0b:58:27:24:04:82:
         10:08:a2:cb:5f:9f:4e:ca:e8:9a:2a:16:28:28:0a:fb:a7:9b:
         84:a0:8d:9e:d1:e1:c8:e8:3e:fa:ac:e4:96:05:8f:df:1a:cf:
         0d:44:a4:43:48:74:8f:82:1b:a2:ce:38:98:ce:bc:57:69:b1:
         98:fc:63:d9:38:9e:69:f1:7f:42:ff:0d:ad:a0:59:bc:79:e6:
         8f:08:3d:0f:0a:85:89:99:39:3d:f0:a2:8a:93:4a:52:bd:dd:
         bb:32:0f:c7:35:9b:03:7b:40:ef:81:1b:b3:44:3f:28:bf:37:
         a0:d8:80:45:33:5c:f4:ce:7e:6e:42:af:98:8e:27:78:6d:f7:
         c8:c8:7b:91:d7:d5:27:08:6f:09:21:4e:03:cc:c5:d3:ef:93:
         31:fa:d7:73:dc:e5:9a:60:93:01:49:13:f7:c3:65:66:d7:66:
         dd:51:be:09:e7:43:b7:46:81:ab:8e:b7:6b:e7:7d:08:24:40:
         33:d5:45:f9:c8:94:60:70:92:0b:ce:4c:ab:0b:f6:fd:ab:39:
         4d:a2:31:47:41:fc:32:9c:fa:49:91:ee:72:01:bd:4b:d8:da:
         38:bc:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:24:07 2026 by rpki-client