Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.mft
File:                     7RpXpPGG_CJ_LgHhycRthas77dw.mft (raw, json)
Hash identifier:          8nMsQAMuZMw+tAtvUPXVJWo5jECNqUpgI5Vsoq1Y2P0=
Subject key identifier:   E2:CA:80:A9:9F:3F:49:9C:A8:7E:46:B0:27:2B:DA:E0:79:74:A5:E2
Authority key identifier: ED:1A:57:A4:F1:86:FC:22:7F:2E:01:E1:C9:C4:6D:85:AB:3B:ED:DC
Certificate issuer:       /CN=ed1a57a4f186fc227f2e01e1c9c46d85ab3beddc
Certificate serial:       01A0EA09881CD2A5101ABF45B8D31AFA496B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7RpXpPGG_CJ_LgHhycRthas77dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.mft
Manifest number:          F3
Signing time:             Mon 28 Sep 2026 22:01:28 +0000
Manifest this update:     Mon 28 Sep 2026 22:01:28 +0000
Manifest next update:     Tue 29 Sep 2026 22:01:28 +0000
Files and hashes:         1: 7RpXpPGG_CJ_LgHhycRthas77dw.crl (hash: y8M0kRHXFy5IxeMn12efKujAyTrJJ0g7MI0gwlGTxcQ=)
                          2: dTd-s2kzr6zPGlBsSBhTqjjZxV4.asa (hash: g3rSCH17kTajNOiom6f2kvmwIPGfrWb06N4I32V9KxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7RpXpPGG_CJ_LgHhycRthas77dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:09:88:1c:d2:a5:10:1a:bf:45:b8:d3:1a:fa:49:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1a57a4f186fc227f2e01e1c9c46d85ab3beddc
        Validity
            Not Before: Sep 28 22:01:28 2026 GMT
            Not After : Sep 29 22:01:28 2026 GMT
        Subject: CN=e2ca80a99f3f499ca87e46b0272bdae07974a5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:68:9d:9e:11:2c:46:0e:34:0c:9d:67:89:
                    b3:ed:0c:5e:91:58:1b:90:01:91:38:11:ac:0c:fb:
                    0a:eb:89:fd:10:20:10:41:33:b8:ef:74:9a:ea:3c:
                    ef:79:a3:12:2c:e6:9e:fe:82:d3:5e:39:15:db:2e:
                    f3:d2:bd:dd:6b:cf:e2:14:6e:75:25:96:12:18:69:
                    07:43:4a:53:7e:c5:9f:58:09:0f:60:18:81:4c:15:
                    8f:c1:0a:bc:0c:b6:51:f0:ff:fa:f2:02:0c:3c:1e:
                    aa:e1:d7:71:f6:7d:06:2a:9e:d0:75:ca:88:c4:d8:
                    95:c0:7d:84:3e:71:64:a6:54:18:5b:9d:c6:55:75:
                    11:30:79:51:b8:c9:fb:ff:9e:2a:fd:11:5e:3f:72:
                    1b:04:40:a1:51:8a:f4:f2:2c:c4:5b:3c:9f:99:2a:
                    48:e9:89:ed:36:23:ed:08:f0:24:f0:8e:16:8f:3a:
                    c4:ee:d1:8e:42:89:7e:4c:cd:94:fa:e8:f6:09:f2:
                    0c:4a:15:d0:48:bf:2b:0c:69:e0:56:a1:f7:dd:45:
                    1b:7a:5d:68:26:47:16:05:83:62:46:8c:af:07:34:
                    d2:ff:18:30:ac:a3:35:fb:cc:f1:04:03:7b:ac:5a:
                    54:35:16:08:1c:8e:7b:28:ec:1c:fa:1a:1b:be:34:
                    27:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CA:80:A9:9F:3F:49:9C:A8:7E:46:B0:27:2B:DA:E0:79:74:A5:E2
            X509v3 Authority Key Identifier:
                keyid:ED:1A:57:A4:F1:86:FC:22:7F:2E:01:E1:C9:C4:6D:85:AB:3B:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RpXpPGG_CJ_LgHhycRthas77dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d9:b5:9b:68:5f:38:12:69:58:f4:e1:79:d5:00:ad:c7:91:
         3e:8f:9b:24:39:a2:18:c4:9b:65:9b:35:07:d6:77:b6:7e:2b:
         fc:dd:cd:4a:30:97:6e:16:b0:95:4f:2a:c7:5d:96:7d:a0:e4:
         c0:6c:df:da:a3:46:cf:ae:ca:13:fb:4a:ab:df:8c:36:8e:ee:
         38:a8:d9:19:96:a3:77:f2:88:42:11:0d:f2:9e:85:26:fe:91:
         35:41:78:c2:6d:de:f1:4d:4d:be:a3:de:fa:07:ec:e9:32:74:
         a6:0a:21:e1:3e:27:31:1a:f2:e1:b8:42:59:25:96:77:a0:03:
         a8:9c:7f:d0:ec:76:11:65:a1:7c:6d:94:dc:3a:9c:50:57:62:
         7f:b2:7f:e8:ba:4a:c7:9e:93:2b:45:77:81:7d:69:bf:8f:69:
         a9:a6:d0:7d:dc:54:ae:81:33:04:76:b1:29:f7:01:1b:b0:7e:
         4b:69:4f:50:9b:10:ad:a5:d2:ac:98:25:e4:b0:94:66:ea:ed:
         ab:48:10:01:d5:25:c4:da:47:8d:90:55:f7:63:75:74:25:3a:
         4f:e5:e9:c2:b6:4b:d3:ce:1f:03:1e:0f:d0:b1:2f:fe:48:da:
         21:f8:c4:03:7f:c7:f3:f7:e7:e2:a8:58:44:54:e7:8c:5d:a0:
         3c:91:3a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:29:48 2026 by rpki-client