Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
File:                     7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft (raw, json)
Hash identifier:          AqS4vY9tIjg9/fH3JH5tjsvCQP3SKhL8zdbQKlvEtgE=
Subject key identifier:   C5:2C:25:5A:DA:12:9B:35:C9:6A:C2:EA:B4:79:EF:CF:83:BF:B5:60
Authority key identifier: EE:8C:A3:B0:DC:4F:0D:97:5A:E0:FA:83:27:49:6F:4B:0C:E4:56:DE
Certificate issuer:       /CN=ee8ca3b0dc4f0d975ae0fa8327496f4b0ce456de
Certificate serial:       01A08E3205549FC5897969331E0B82FE8AAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
Manifest number:          01BA
Signing time:             Fri 11 Sep 2026 02:00:37 +0000
Manifest this update:     Fri 11 Sep 2026 02:00:37 +0000
Manifest next update:     Sat 12 Sep 2026 02:00:37 +0000
Files and hashes:         1: 7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl (hash: 4CtxUxJY8T+3ZmK1l6gnVGvyROx8KVidw0jAQIoaId0=)
                          2: hYcOltYQ3coRzHfHtwK1cUy8X-c.asa (hash: GLuGjxVic7tB9lRTvZboOAKtaGC1m0nPNnwMd0FZxG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:32:05:54:9f:c5:89:79:69:33:1e:0b:82:fe:8a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ca3b0dc4f0d975ae0fa8327496f4b0ce456de
        Validity
            Not Before: Sep 11 02:00:37 2026 GMT
            Not After : Sep 12 02:00:37 2026 GMT
        Subject: CN=c52c255ada129b35c96ac2eab479efcf83bfb560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ae:b4:21:68:1d:f1:bf:aa:25:b8:1a:8d:c6:
                    78:cb:50:86:49:89:5f:b1:d7:a9:1b:b7:2a:18:cd:
                    c8:82:95:7b:f6:47:b2:25:f6:f8:23:66:15:c5:27:
                    02:d5:13:9f:2b:67:5b:5e:38:7c:5f:50:dd:93:d8:
                    52:34:89:89:39:60:53:2e:5e:d2:1f:4c:53:65:41:
                    ab:ca:07:74:a8:46:f6:0c:4a:e9:83:fc:39:17:dd:
                    28:b1:b9:a1:09:1d:e1:34:64:36:ed:d1:37:f8:22:
                    81:5b:bf:c5:38:29:d6:92:19:2d:df:e0:a3:c8:fc:
                    df:9e:0e:8a:45:d3:50:09:c3:c9:2c:18:0e:68:be:
                    56:5d:64:4d:60:4e:d4:98:14:8a:b2:ae:21:05:d5:
                    3c:2f:49:14:21:4c:6e:d4:47:71:05:86:fd:37:cb:
                    81:29:fe:34:8d:9f:24:78:5d:11:0c:af:43:2f:a2:
                    32:ab:7d:3e:f7:eb:0d:f2:b3:90:01:83:81:22:b2:
                    12:4a:8d:89:75:68:a7:05:b6:a8:ce:9d:37:2e:d2:
                    8e:80:c6:00:fc:2f:c0:4f:df:b8:f1:b1:65:5e:c5:
                    8f:97:a2:f2:a5:07:d3:bf:26:17:17:11:3a:ba:c1:
                    0a:06:d1:b8:a8:18:af:8e:72:b5:72:70:89:a6:c5:
                    2c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2C:25:5A:DA:12:9B:35:C9:6A:C2:EA:B4:79:EF:CF:83:BF:B5:60
            X509v3 Authority Key Identifier:
                keyid:EE:8C:A3:B0:DC:4F:0D:97:5A:E0:FA:83:27:49:6F:4B:0C:E4:56:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a9:e3:49:67:25:a9:b6:e8:20:ef:0e:c0:cb:35:1b:09:3a:
         43:eb:a2:bb:cb:35:31:77:80:82:6f:9b:ef:ab:90:03:61:08:
         5d:dc:37:8f:99:22:b9:dd:b2:04:8d:ab:0a:7e:ce:7d:9f:ed:
         90:31:24:f7:16:53:b8:57:ec:f5:63:f7:24:d1:fa:ef:49:1c:
         05:e3:3b:de:b0:37:f5:53:e3:6c:5c:08:26:ed:57:97:d9:c5:
         99:a3:2e:b7:83:74:8a:bf:c9:6d:89:ad:6c:ac:36:e4:41:50:
         19:35:1d:d4:ec:7f:f2:9d:b8:22:8b:68:98:5a:a1:51:36:06:
         4d:44:04:4f:30:df:98:c3:7c:22:c5:e6:a3:dc:e3:4f:44:78:
         f7:e2:dc:be:40:7c:f9:8f:59:bc:e8:0c:95:0a:8c:ba:85:f8:
         4e:f9:cf:4f:69:a3:c3:d5:8e:db:d6:e2:a3:dd:53:9f:2d:18:
         1b:ca:36:76:4d:72:f7:a2:f9:6b:e0:84:e6:5f:86:55:6d:b6:
         59:ec:c2:c9:20:86:3a:01:3f:8f:fd:11:3c:c3:8d:1a:80:f1:
         d5:12:99:50:0e:54:38:7a:5c:06:e9:f8:64:ae:48:65:0d:8d:
         e8:cb:49:c2:f6:9c:43:1b:b0:3d:5a:b9:20:98:1d:a4:01:42:
         17:86:ab:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:24:59 2026 by rpki-client