Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File:                     c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier:          kCRRc1JVgsLiovsug0cCuv/LxJQEv3ixC7J91mJWgZU=
Subject key identifier:   AC:F1:1C:67:39:06:B6:34:EC:2F:DE:E0:1C:2A:91:78:1C:4E:25:92
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer:       /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial:       01A0C7B3ED5FB2AF5927FB9E43DB03249C4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number:          0F1A
Signing time:             Tue 22 Sep 2026 06:00:52 +0000
Manifest this update:     Tue 22 Sep 2026 06:00:52 +0000
Manifest next update:     Wed 23 Sep 2026 06:00:52 +0000
Files and hashes:         1: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: rBSIj8O7mOtJtsQuV2DpJ1xHtbKpht3kxxxuD9W7azc=)
                          2: s7ALXCsQ6iydnmcMndLJwyBEVrA.roa (hash: 2KKTFrZRTTsfpxmpCTn5aGO1P1QcLn41Vrt2Tl7hzrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:b3:ed:5f:b2:af:59:27:fb:9e:43:db:03:24:9c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
        Validity
            Not Before: Sep 22 06:00:52 2026 GMT
            Not After : Sep 23 06:00:52 2026 GMT
        Subject: CN=acf11c673906b634ec2fdee01c2a91781c4e2592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:38:f4:d1:13:ab:aa:5d:3b:32:f1:7e:49:f6:
                    06:af:d9:3c:ff:9e:07:da:ce:86:fd:9f:42:05:9a:
                    94:44:ad:b3:73:89:e4:e1:a2:dd:98:47:07:42:15:
                    17:2b:53:ce:21:d5:70:d9:cd:87:77:cf:50:03:d6:
                    94:8e:e9:4c:8a:76:ed:54:0a:ed:94:9a:9f:0b:98:
                    65:15:cf:85:a4:62:84:ab:17:1f:3e:91:53:0e:0f:
                    25:a2:86:c0:ee:f6:bb:a9:02:d8:a2:79:71:71:2a:
                    13:63:3b:66:56:db:e3:29:9d:3b:c8:22:49:7e:58:
                    cb:bb:93:09:df:86:87:e1:af:a1:19:f6:34:b1:06:
                    f0:20:69:7f:ff:db:e8:29:a6:d0:1d:b8:82:24:3f:
                    e2:a1:ac:59:b7:d9:58:a2:e8:19:6b:21:09:5e:ed:
                    bd:7a:db:3f:bc:cc:38:70:8b:58:8e:3d:0e:6c:7e:
                    92:8d:a5:0d:fd:df:13:53:8b:d9:92:15:59:a1:75:
                    cf:31:3e:6f:ee:1e:68:4e:cd:40:60:2b:7b:99:00:
                    06:d6:85:1d:07:c5:eb:d7:9c:db:12:87:7c:b5:db:
                    f6:3d:cc:76:60:9a:b7:ec:fc:e6:67:aa:33:de:80:
                    ad:cb:c9:be:74:0b:0e:fb:d6:01:9f:4e:3a:6e:32:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F1:1C:67:39:06:B6:34:EC:2F:DE:E0:1C:2A:91:78:1C:4E:25:92
            X509v3 Authority Key Identifier:
                keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:3f:fd:00:ec:a5:f7:c7:b3:5c:ac:ca:b2:8c:e1:d8:f1:25:
         7a:c9:c5:4d:1d:49:94:04:83:fa:d3:ac:25:48:76:2b:d3:6d:
         6b:44:91:fd:6e:e3:dd:04:26:19:3b:4a:59:6e:b8:34:1e:eb:
         30:fa:1c:85:37:a7:7a:6a:ba:0f:a0:2c:61:f9:29:d3:30:18:
         73:f8:85:19:fb:34:4c:8d:0a:32:44:67:c8:2a:1b:d5:f6:23:
         1e:ca:43:98:db:2d:51:39:fa:71:0b:2d:8c:67:2d:74:65:5c:
         a9:c0:60:4a:42:76:7d:4e:6b:2a:4b:98:8d:78:f3:9f:6a:ee:
         3a:16:6e:fc:2f:04:3d:6c:e4:74:87:f5:c7:3d:a8:4b:c9:85:
         23:d6:b0:08:57:e6:a5:f9:25:0d:8c:d5:22:68:1e:98:19:72:
         71:5c:6c:77:54:30:ae:6d:6c:e5:a1:2a:cd:46:9f:06:43:50:
         39:2c:10:e0:f2:88:2c:bb:f3:ba:a4:49:b4:28:f4:f2:ac:76:
         70:41:19:c8:ef:c2:38:e9:8f:84:de:81:80:07:68:56:b2:dc:
         9c:38:92:1b:8f:d8:01:b0:04:ec:12:94:c3:17:29:5b:ac:c7:
         a3:c0:76:bf:88:c8:70:5b:fd:7f:34:e1:aa:f3:9c:dd:4a:07:
         de:2f:cc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:00:46 2026 by rpki-client