Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File:                     7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier:          1eilxDaDBIuE1F2yXa1Ujmos8uVoy4lMzDWFnF3HYk0=
Subject key identifier:   6C:3F:21:81:26:D8:D3:CE:EE:8D:21:03:67:71:C5:B3:67:09:C6:F8
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer:       /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial:       01A0C4E9E1FEB06176B91F06BBC58F1E1C66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number:          0925
Signing time:             Mon 21 Sep 2026 17:00:56 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:56 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:56 +0000
Files and hashes:         1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: OfxSyE9P7bX0FMbQHLt21V9LlrKEaMxj2H2vYwuJY+k=)
                          2: BWIZr-nud-sEKOoW3DCRA8EhEvc.roa (hash: 6TCqPkoGCc+2S8ZxG8MXnHCO6YpDnBpJUoZP1mlGMlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:e1:fe:b0:61:76:b9:1f:06:bb:c5:8f:1e:1c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
        Validity
            Not Before: Sep 21 17:00:56 2026 GMT
            Not After : Sep 22 17:00:56 2026 GMT
        Subject: CN=6c3f218126d8d3ceee8d21036771c5b36709c6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:57:6e:db:b9:ba:3f:41:36:ad:3e:ba:d6:
                    62:40:82:12:f9:c3:8e:d0:37:87:ac:c2:3e:19:9b:
                    4b:47:80:20:e2:f2:38:dc:03:1c:7a:44:96:45:3d:
                    48:e2:b2:66:17:0f:38:f3:38:b6:38:e8:1f:8b:2c:
                    eb:62:9b:ef:14:35:70:b0:da:7d:cc:2a:06:f6:e0:
                    30:ec:1a:16:6d:87:e5:ef:21:d9:9e:f5:75:74:70:
                    c8:82:d4:b2:14:94:09:93:b3:98:0c:32:55:d4:f1:
                    db:b2:da:60:f8:ea:8c:b2:0e:2b:a0:f0:d4:f0:e2:
                    82:ae:45:44:16:b3:ab:66:47:bc:40:82:eb:0b:8c:
                    ae:a5:20:1f:64:bc:5f:21:9b:9f:e3:1c:c3:32:9e:
                    6a:4d:c4:10:44:57:9d:f3:a1:01:42:26:d1:95:cf:
                    23:26:e5:6e:50:97:b9:e5:49:ef:74:70:b4:d6:83:
                    83:ab:af:b4:95:4a:55:b8:aa:9f:c4:f4:47:69:22:
                    eb:49:17:04:e2:f1:a5:54:bd:dd:d1:cf:6f:1a:ee:
                    24:c0:27:f2:20:f4:83:0b:ed:85:62:e7:14:ab:34:
                    d7:5e:94:df:6d:17:b4:db:b8:75:f8:07:41:cb:1c:
                    28:64:30:4d:9c:3f:fe:08:de:f0:07:d7:2b:b8:2a:
                    b1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3F:21:81:26:D8:D3:CE:EE:8D:21:03:67:71:C5:B3:67:09:C6:F8
            X509v3 Authority Key Identifier:
                keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:60:30:1a:39:75:7a:8e:cc:ad:36:80:f7:b5:c4:87:2f:22:
         7c:6d:b1:83:5f:6f:46:8f:e6:a8:ea:b8:61:17:14:93:64:81:
         19:43:f9:27:e3:d3:61:0a:97:38:c9:42:77:8b:2f:c9:0a:6b:
         5d:68:75:66:16:d0:16:c1:47:f2:5a:6e:e5:a3:96:d7:06:86:
         ec:ed:d1:9a:77:f9:a6:c3:e3:06:25:71:b1:af:ce:62:b9:7c:
         b1:03:0f:6d:a9:48:50:5c:46:2d:24:1f:f6:84:5b:aa:e0:03:
         5f:3c:39:e8:47:5f:f3:c6:f8:19:01:2a:96:5a:1b:3c:5d:5c:
         f0:9e:02:37:56:41:3e:37:6b:66:f3:d7:d9:bb:cc:07:6f:36:
         44:61:b2:39:85:1f:89:32:9b:6f:76:89:6a:b1:7e:59:06:ed:
         1f:47:a9:4e:de:cc:8c:5b:62:1a:2c:c4:7f:22:a9:6c:5f:9a:
         99:3b:19:3d:cc:32:30:9f:83:0c:0a:d5:f5:f3:a0:80:24:57:
         59:d8:40:de:0c:c0:8a:05:44:f9:60:83:19:df:d7:f9:c1:fb:
         38:63:f0:be:09:4e:38:c2:3e:74:a3:79:7d:f9:98:60:30:52:
         e2:7c:d3:5e:26:98:1f:45:6c:4b:d0:45:8e:ce:e3:ad:87:c9:
         9d:2e:0e:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDE6eH+sGF2uR8Gu8WPHhxmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmZmYjNjNjYxZTJmNzhhNTc4NWJlOTU5MTYwNDRiMDZh
ZjUxZDIwHhcNMjYwOTIxMTcwMDU2WhcNMjYwOTIyMTcwMDU2WjAzMTEwLwYDVQQD
Eyg2YzNmMjE4MTI2ZDhkM2NlZWU4ZDIxMDM2NzcxYzViMzY3MDljNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZdXbtu5uj9BNq0+utZiQIIS+cOO
0DeHrMI+GZtLR4Ag4vI43AMcekSWRT1I4rJmFw848zi2OOgfiyzrYpvvFDVwsNp9
zCoG9uAw7BoWbYfl7yHZnvV1dHDIgtSyFJQJk7OYDDJV1PHbstpg+OqMsg4roPDU
8OKCrkVEFrOrZke8QILrC4yupSAfZLxfIZuf4xzDMp5qTcQQRFed86EBQibRlc8j
JuVuUJe55UnvdHC01oODq6+0lUpVuKqfxPRHaSLrSRcE4vGlVL3d0c9vGu4kwCfy
IPSDC+2FYucUqzTXXpTfbRe027h1+AdByxwoZDBNnD/+CN7wB9cruCqxlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGw/IYEm2NPO7o0hA2dxxbNnCcb4MB8GA1UdIwQY
MBaAFO3/+zxmHi94pXhb6VkWBEsGr1HSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYt
YTk4OTM1NDVjM2M1LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYtYTk4OTM1NDVjM2M1
LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGAwGjl1
eo7MrTaA97XEhy8ifG2xg19vRo/mqOq4YRcUk2SBGUP5J+PTYQqXOMlCd4svyQpr
XWh1ZhbQFsFH8lpu5aOW1waG7O3Rmnf5psPjBiVxsa/OYrl8sQMPbalIUFxGLSQf
9oRbquADXzw56Edf88b4GQEqllobPF1c8J4CN1ZBPjdrZvPX2bvMB282RGGyOYUf
iTKbb3aJarF+WQbtH0epTt7MjFtiGizEfyKpbF+amTsZPcwyMJ+DDArV9fOggCRX
WdhA3gzAigVE+WCDGd/X+cH7OGPwvglOOMI+dKN5ffmYYDBS4nzTXiaYH0VsS9BF
js7jrYfJnS4OiQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:24:33 2026 by rpki-client