Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
File:                     7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json)
Hash identifier:          r0T4Y+xX1c6xpXUu4S9OvAtF0hk463hlUbQcnpUP3w8=
Subject key identifier:   EB:42:95:19:02:D1:F9:ED:34:F6:8A:A8:E7:78:D6:8D:43:A4:D7:F0
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       01A0B4D190E2D16DA3D1C7E2ACF91B883D45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
Manifest number:          1A74
Signing time:             Fri 18 Sep 2026 14:00:27 +0000
Manifest this update:     Fri 18 Sep 2026 14:00:27 +0000
Manifest next update:     Sat 19 Sep 2026 14:00:27 +0000
Files and hashes:         1: 03adZJbb-O1p_CXcQ_4M0jgNEFw.roa (hash: ew9gGSBHBbQPEdarHkUHaR6ktGIwejsj7yNx1KPoThQ=)
                          2: 1-AaYw2BfaY3XhYhRX7k0ikSXO9w.roa (hash: WyNldQk+XZoMO0b/C5jIYmrjIYQhy0dv0+KOkKWcQSE=)
                          3: 1P4VHJbsu8-KA_CDbuA3mLdiyQo.roa (hash: QETOSgaKr5YFSXBkowwoHjS2zVlXL1HHWJzh0UPdErQ=)
                          4: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: cGczsnhrvcXh/DdZ4CP7R6xSQQM+Cux3f4wYasZJYto=)
                          5: Fx8cnnhYnA6BH8cJUcV9Vz-n8OM.roa (hash: nBn8KMz1/qrlmEp5tnjRaNg0XQIu3L/8mlSSo9e/i1U=)
                          6: HsnhtW3Vo1ScMXDm_04rDrcrO8A.roa (hash: 5+GIeXFw3kg0H6nKxy1DPIUv8/Ly7H/qd2V/EdogjOk=)
                          7: JHDYQiALesWvByATRJ3bFGKf440.roa (hash: 4qi7uVDpfuqHxI2PwRXSylbhTlTDmB3nFH/RQRca9I4=)
                          8: M-xhOdJhOt1IVpAo6jVDD6VitCU.roa (hash: waOg7nDr7fSZGGvzIuGjBg6JCLXByvSxzjfTgEkG9Iw=)
                          9: RMbFoCYqNcmYffu8B7XKQZOpe9g.roa (hash: Bc8GrrG0ePgUPfQVi+zdsUsnCNOP4l8CwIx91Qrbgs8=)
                          10: RkJgzEGbgGQVpYMhyuLt_ciEWs0.roa (hash: s24XvC1lX1fQ9pY/tvq7aXzmmQIz7/1F7PGbhhoCpbM=)
                          11: YUZAH4o6lSlfa8V06bR-tRKZeJY.roa (hash: RWEnsTCPJnS0wvgpBfvSOdsOCDY+GRhBVGGh8MqvS3c=)
                          12: bKHn0qb-Jdo8C-QdUH0EoddC6R0.roa (hash: t7W3AEy6SZzLhzfSNb31m9y8L46P7EJQYuCD/DSTk0I=)
                          13: eidiHBPgQKzRSZT9OwGu9tKmDIg.roa (hash: wDu3wVyoIZQVKXQBVdzTm8+ss6XGOx6VqYvXUN2hobg=)
                          14: hO16bUk7sgMxRq4iY5R-8zAg_pw.roa (hash: muh9Cwq/x+krpQXeGbq5yotjMWT1VH8PKPWrvuCsuXA=)
                          15: k6jLYVH6C0z0KMYaezVQiNE4EPU.roa (hash: 7jskiw03SWhNj59VRgx4kkxZFbjnSw3URxMXrNwyUt0=)
                          16: ygT4_ge1ohdgPGNfdC3uMhbevTo.roa (hash: QzMQwc/7YDt82Fn8x4yXez6Z6w0QENNYIpCBlAJaBv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b4:d1:90:e2:d1:6d:a3:d1:c7:e2:ac:f9:1b:88:3d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: Sep 18 14:00:27 2026 GMT
            Not After : Sep 19 14:00:27 2026 GMT
        Subject: CN=eb42951902d1f9ed34f68aa8e778d68d43a4d7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ea:61:52:f3:ed:88:f6:c1:89:6f:85:32:21:
                    49:4b:58:db:11:20:81:25:5c:9b:f8:da:ef:16:f0:
                    c7:c2:ac:38:66:ba:61:71:75:8f:60:d5:f6:4e:64:
                    c9:7d:a4:07:52:4c:2b:ce:62:43:19:75:88:5a:96:
                    6b:2f:82:52:f1:e9:66:0c:7e:9b:01:96:9f:02:4c:
                    97:7a:cf:89:3c:07:e3:70:cf:cd:f8:54:73:b3:5d:
                    7b:f1:1b:91:68:0c:de:ac:35:8d:7e:59:20:23:ed:
                    a5:3e:1e:ea:f4:67:28:cf:f7:5e:0b:a0:6b:f8:c0:
                    d8:7a:a0:14:01:df:0f:9e:ba:c3:ae:2a:83:66:15:
                    17:98:21:66:65:45:1f:e1:2e:dc:6c:47:3c:5d:4b:
                    34:b1:ae:2f:b3:f0:a5:36:4a:f8:33:3f:fa:37:0f:
                    42:a6:a5:5c:5e:df:9f:d5:fd:a6:cb:51:fe:64:37:
                    97:e1:65:98:cb:70:35:a3:3e:d6:b6:c0:b4:d3:83:
                    6b:18:11:70:f8:7a:3d:8d:e3:0c:59:ee:b2:c6:c1:
                    72:42:4f:8a:23:d6:23:e8:e7:0a:a2:28:e3:a1:7d:
                    b9:dd:10:87:25:2a:40:35:48:d3:da:0e:96:2b:34:
                    85:d7:89:b1:ef:da:08:53:93:a9:e5:3d:78:0b:62:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:42:95:19:02:D1:F9:ED:34:F6:8A:A8:E7:78:D6:8D:43:A4:D7:F0
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:ca:de:ce:93:9b:a8:6c:6c:a3:1f:87:5c:51:5d:a4:30:d2:
         b1:c5:1e:ec:20:03:fa:2a:36:aa:34:0c:01:1c:07:03:fc:da:
         3d:7b:63:12:eb:45:2c:d6:dc:ec:15:cc:36:dc:ad:7f:02:e1:
         f8:43:a4:de:58:80:15:e0:9e:2b:84:fd:11:a4:70:ca:c9:b1:
         29:ef:a1:d2:e1:08:6e:1f:dc:77:ff:75:32:07:2f:19:19:2b:
         20:fc:89:b2:e3:c7:4c:dd:55:7d:3d:98:9f:07:7b:97:ec:cb:
         85:f5:a5:a6:0e:17:fa:42:5c:12:87:9a:5e:51:dc:0f:68:41:
         b2:b4:13:e3:5b:a5:76:e5:43:4c:2f:1b:1e:96:b7:46:5d:33:
         39:5f:4b:99:d1:ee:81:59:eb:e9:42:c7:87:db:f9:d4:b6:cf:
         6c:ae:0d:dc:23:f5:18:dc:21:c3:f0:18:32:c9:73:16:50:80:
         b9:71:16:cf:95:fb:6a:61:e4:c1:a1:84:3f:5a:10:f4:aa:d9:
         5a:e7:86:77:28:41:22:5e:fe:01:e0:a9:70:fd:06:71:8e:28:
         de:a9:57:95:98:d9:96:c4:3f:f5:8b:2b:7c:81:41:4e:06:4f:
         40:0d:a9:6c:0e:db:44:a1:f1:e4:da:a3:c7:35:4e:2f:f3:d3:
         a4:41:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:58:37 2026 by rpki-client