Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
File:                     7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json)
Hash identifier:          MogdMRLp5cIcVaq4+ExAY03R5KwfL6iOV7cbXZlSdmw=
Subject key identifier:   61:66:5F:F4:FA:57:03:4D:E8:90:F5:F3:A6:2D:CB:5E:00:AC:31:FE
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Certificate issuer:       /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial:       01A0C858A3904323E51A7E05A59DE4BF68B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
Manifest number:          0AAC
Signing time:             Tue 22 Sep 2026 09:00:47 +0000
Manifest this update:     Tue 22 Sep 2026 09:00:47 +0000
Manifest next update:     Wed 23 Sep 2026 09:00:47 +0000
Files and hashes:         1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: o0Ds6M/mFG80H2/oTUpf4yk143nIQ9T2YiIWVuFut4c=)
                          2: sMDnDS7b5WQ5D-JoFss-D-9gaX4.roa (hash: UIum8I7uAuNske5DioiLLh5KWIejx8PVPwTt3WKIKnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:a3:90:43:23:e5:1a:7e:05:a5:9d:e4:bf:68:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
        Validity
            Not Before: Sep 22 09:00:47 2026 GMT
            Not After : Sep 23 09:00:47 2026 GMT
        Subject: CN=61665ff4fa57034de890f5f3a62dcb5e00ac31fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c8:38:42:ac:bf:85:ec:5c:cb:a0:eb:49:45:
                    3f:42:f7:5b:4c:11:bf:2a:7b:b4:61:9b:23:42:25:
                    2f:ff:b2:f8:36:9e:21:f3:c3:91:7b:cd:95:78:2f:
                    d0:62:d3:91:50:51:fb:05:b3:36:42:13:af:06:5b:
                    e6:f4:e0:74:83:0c:9e:ef:73:6d:95:ff:50:ac:7f:
                    8a:b4:9e:79:ae:db:3e:2d:c9:b9:71:a3:a5:77:a1:
                    d0:17:25:ee:55:7e:65:a9:8f:3b:fb:47:99:27:41:
                    95:c2:7b:e9:6b:53:c3:bb:65:2f:7a:60:54:3f:fd:
                    a6:20:79:98:cc:be:79:27:d6:7c:41:29:f4:2e:a4:
                    1a:9a:24:08:17:fa:44:1a:84:7e:8c:a4:ec:9a:a5:
                    53:35:e3:1d:f4:aa:34:e2:a1:54:a0:73:33:a2:34:
                    66:5b:ca:41:68:3e:ad:17:06:4d:91:42:14:51:53:
                    91:98:68:cf:e4:c1:5f:b6:7a:67:b5:5a:ff:41:bc:
                    bf:7f:cf:68:6b:8c:76:d1:d0:c1:40:69:54:a4:1b:
                    76:92:86:a0:0f:c9:88:53:aa:65:42:a8:92:00:2a:
                    bb:d1:10:6d:40:8f:32:73:84:05:56:6c:41:be:26:
                    44:48:e7:1c:da:55:ea:fb:b6:03:49:52:d9:76:50:
                    a5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:66:5F:F4:FA:57:03:4D:E8:90:F5:F3:A6:2D:CB:5E:00:AC:31:FE
            X509v3 Authority Key Identifier:
                keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:3b:d2:57:24:0f:2b:59:03:45:33:d2:04:67:bf:52:8a:fa:
         d4:1a:c6:e1:e1:2f:a0:a0:9d:66:20:15:93:a7:0a:11:4e:89:
         00:2d:ee:12:68:f3:30:3a:b7:9b:b7:00:73:1f:01:ec:87:36:
         89:c5:1b:7a:e5:ae:74:7a:65:f5:f8:f4:0d:97:c5:c2:bc:ec:
         b0:3e:c0:7c:21:3c:f5:fc:24:85:15:f0:8e:84:44:57:4d:75:
         f7:bd:f9:06:cd:51:b4:50:78:a4:42:14:7f:05:47:b9:88:6b:
         f4:74:fe:d2:8e:1e:a3:35:82:76:d6:29:6e:24:78:31:29:9f:
         79:f4:6e:1e:7c:06:00:1a:3a:71:4d:6a:f3:2b:27:c9:22:07:
         3a:35:fb:1d:12:d0:ec:97:07:c6:3f:f8:a9:fe:ba:18:5a:4e:
         22:e2:26:af:24:44:a0:ab:24:f8:16:61:bd:47:ed:4a:7b:c2:
         f3:05:91:8c:6c:cc:8f:ac:79:78:76:dc:8d:7e:1e:3d:b5:d3:
         da:6c:9b:41:28:e1:02:73:16:4b:6d:12:96:a9:44:e2:06:8c:
         71:36:34:8e:32:91:ea:25:ab:85:d6:37:6f:7d:3c:d5:bc:dd:
         a6:e1:c2:79:32:24:07:7f:b9:44:7e:a6:bd:1c:21:07:a9:26:
         2f:58:69:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:39:58 2026 by rpki-client