Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File:                     elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier:          5v+Xtai7dxNAC0BFHmQglwSrOY47BAG+s3BcsEfTatQ=
Subject key identifier:   A7:D8:65:6E:E7:A6:13:FE:AD:0F:59:30:49:97:FE:B3:9B:71:6A:07
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer:       /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial:       01A0C66B20CA54A59EDA860094292CEFE869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number:          0A1F
Signing time:             Tue 22 Sep 2026 00:01:44 +0000
Manifest this update:     Tue 22 Sep 2026 00:01:44 +0000
Manifest next update:     Wed 23 Sep 2026 00:01:44 +0000
Files and hashes:         1: 1-uV7uXuf0A9RrE6AAeiKjQ4SbpA.roa (hash: MZz9ZW2Zi0k4HU9dqfp0ig+8Gbo1pNfmpBwGUkNoQpg=)
                          2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: v9EX1agB7dqbg7SFBL+spQ6wiTc3fSEdeizCc9IJf6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6b:20:ca:54:a5:9e:da:86:00:94:29:2c:ef:e8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
        Validity
            Not Before: Sep 22 00:01:44 2026 GMT
            Not After : Sep 23 00:01:44 2026 GMT
        Subject: CN=a7d8656ee7a613fead0f59304997feb39b716a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4b:57:66:68:51:86:e7:8b:3b:4e:53:b2:3e:
                    b3:e9:f3:1b:89:1c:90:f1:70:dd:12:6f:b5:6f:6b:
                    8e:c2:e7:6a:d0:47:71:7e:5c:02:77:5f:ed:07:b4:
                    50:15:8e:10:2f:b9:c8:45:28:45:c8:95:93:ba:2b:
                    80:4e:d6:9a:40:65:be:ce:94:bb:13:82:30:cc:bc:
                    71:0e:35:fb:51:d8:ab:c6:59:90:17:0e:61:c3:05:
                    9a:b0:0b:86:2a:6c:0f:8f:0f:7b:ff:84:c0:25:8c:
                    1b:c6:8a:0b:22:80:41:30:22:70:e3:97:d5:e0:9b:
                    aa:f1:0f:5e:a9:a8:b1:41:4b:a7:f3:13:e2:00:9d:
                    fb:28:a4:d3:24:1c:69:42:3b:b8:0f:24:60:9f:f6:
                    a6:14:04:b3:8b:42:be:b0:48:b0:09:66:73:d6:e5:
                    8c:ea:96:66:2a:88:dc:3e:d4:3a:90:22:7f:ec:98:
                    a1:65:84:21:1f:31:60:11:38:57:af:d8:f3:2c:4e:
                    73:32:73:11:a9:1f:59:f4:ee:b8:bf:3a:a8:09:d7:
                    30:7f:9c:fd:17:53:75:aa:ff:c2:65:26:6b:57:e4:
                    b9:d7:1e:78:2d:06:14:11:dc:27:c2:ff:d3:6f:33:
                    52:49:53:c5:02:fb:98:0a:dd:1a:f5:a9:bf:d1:83:
                    18:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D8:65:6E:E7:A6:13:FE:AD:0F:59:30:49:97:FE:B3:9B:71:6A:07
            X509v3 Authority Key Identifier:
                keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2f:bd:bf:1b:2a:75:e8:b0:f3:bb:6c:35:b9:46:60:51:24:
         a2:7a:79:2c:13:c4:e5:6b:1c:ae:42:d0:ec:a0:65:d3:bc:8f:
         49:fd:76:f0:c9:c2:54:f2:53:d9:f0:f3:a1:4a:47:24:0a:b6:
         aa:0a:ca:63:23:60:4f:90:15:8c:df:36:f3:a8:a2:18:f0:01:
         ce:1f:bf:c9:dc:cd:37:c7:78:58:df:5a:99:87:d6:79:4b:7b:
         5b:84:9c:0d:86:8c:43:62:21:c1:67:0f:e6:36:9f:2f:92:89:
         b4:75:b2:6e:8f:4a:42:0a:cd:a8:7d:b9:cd:0a:19:97:47:d1:
         8e:cf:6d:12:63:94:97:50:a5:81:a4:e5:c5:7e:f1:7a:82:a6:
         c2:1e:a3:97:b4:6c:28:fa:d5:10:59:f5:98:c2:6f:41:34:c2:
         68:c8:e8:73:9c:5b:c6:2c:b3:e4:b2:4a:da:9a:ef:6d:63:5b:
         13:31:a2:54:1c:b6:2d:f9:ad:3c:96:4e:fe:e3:14:de:78:32:
         49:d7:94:07:d2:de:b9:7c:c2:99:be:4e:4d:5b:3a:e6:21:c1:
         14:22:83:4c:0b:05:50:b0:81:66:ac:55:f5:6d:7e:74:7c:41:
         eb:39:4a:cd:05:e7:40:48:db:69:ac:f6:e3:1f:bc:6c:2c:46:
         1a:13:df:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:43:16 2026 by rpki-client