Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File:                     7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier:          G2XkaMX2jMmj02AYo8utLmvuVlDX2BOHR1hdlG4wK4E=
Subject key identifier:   60:77:02:2A:24:25:4D:F3:C2:03:B6:04:87:FC:EC:0D:A1:60:9A:EF
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer:       /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial:       01A13E26AE428B127D6CD1CBCCE8B9F3A39E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number:          1171
Signing time:             Thu 15 Oct 2026 06:01:24 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:24 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:24 +0000
Files and hashes:         1: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: orRaf2I5u9WzkXhMfLApdOoEowrA+azQnL4crkF+kJY=)
                          2: rkOQVmNrUrdY7_BGJo06hjnXKUQ.roa (hash: KQFoNA+jPIAj7lXy7/IWWZc0S9NISU/38W2iXUYI9HI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:ae:42:8b:12:7d:6c:d1:cb:cc:e8:b9:f3:a3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
        Validity
            Not Before: Oct 15 06:01:24 2026 GMT
            Not After : Oct 16 06:01:24 2026 GMT
        Subject: CN=6077022a24254df3c203b60487fcec0da1609aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:cb:7f:19:95:25:b5:06:6c:88:5d:26:8f:
                    04:64:ed:9e:e4:ef:4a:cd:5d:4b:25:a6:c7:83:e2:
                    b6:52:b5:99:28:06:03:d0:a9:38:ed:2f:2d:40:6e:
                    86:14:44:9c:ad:79:a4:06:c0:38:2e:25:94:7d:d1:
                    1c:e3:c5:eb:1e:78:19:ea:c9:87:d6:6b:f8:1f:af:
                    e4:2f:3a:fc:9c:8b:5f:78:bc:92:ee:05:e2:b1:59:
                    b7:ea:26:1e:76:8d:17:9f:59:35:ab:3f:91:85:e6:
                    16:30:6b:13:c6:f5:80:36:f7:21:ff:6f:06:52:56:
                    bf:b9:09:32:1c:07:fd:64:fa:21:93:5b:c5:fb:2a:
                    82:04:2a:1f:76:60:08:4b:97:bd:b8:01:bd:38:6c:
                    d4:ed:a1:86:91:1e:4a:35:d4:02:9d:c0:12:22:a5:
                    b9:7d:ad:0e:1b:f2:c1:bc:71:41:e7:c3:f7:c6:77:
                    3e:bd:a1:d5:d8:53:85:06:01:36:e4:d0:a9:ed:9f:
                    78:45:30:91:7a:7d:c1:b3:5c:de:fb:34:ef:e8:46:
                    bf:b8:4d:0b:f5:b6:b5:89:8c:6a:76:85:a0:83:ce:
                    02:f5:b7:e5:80:16:3d:eb:d2:5c:16:c3:ff:bc:fa:
                    12:ee:f4:e1:98:fe:8e:0e:81:70:dd:4e:4b:52:d0:
                    45:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:77:02:2A:24:25:4D:F3:C2:03:B6:04:87:FC:EC:0D:A1:60:9A:EF
            X509v3 Authority Key Identifier:
                keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:66:e0:41:9a:66:3f:a2:d6:fd:1d:24:d4:98:76:52:79:27:
         b9:da:20:90:8c:66:44:2e:82:f3:44:f8:18:8f:f5:e1:bb:6a:
         c4:87:f2:6b:8f:37:7f:21:65:9b:f0:bb:e9:55:5d:0b:ef:97:
         4a:4b:b1:ba:29:6f:3b:96:bd:b9:8e:c4:e3:72:5e:01:ee:8c:
         14:40:1e:74:09:6b:0c:e4:28:81:b6:6d:e9:24:d8:13:eb:a4:
         4f:13:39:74:a4:77:79:d2:00:4d:0a:e5:2c:40:53:ea:ca:0d:
         58:7a:58:bb:23:f0:c5:84:f3:ff:fb:44:3e:88:4d:5e:c0:14:
         4e:64:fd:d8:eb:2d:a7:1e:61:38:9d:ca:57:49:5e:24:8e:d9:
         a0:2b:da:8b:b4:09:46:c0:ed:14:46:9b:2d:5a:20:9a:88:d7:
         4d:e1:86:b1:ac:4d:37:79:22:cc:05:a0:e2:77:63:f7:ac:05:
         41:d2:71:f6:b0:2e:12:72:bf:83:ea:ce:74:20:6e:38:8b:37:
         a4:f5:2a:b5:21:3a:7c:63:b0:1c:da:64:12:f9:80:f9:a7:50:
         62:a4:bd:5a:38:86:3e:ee:7d:14:2a:d9:c5:22:d3:ea:44:46:
         50:86:2a:eb:dd:ca:d7:03:9d:5e:1d:1e:ee:28:5f:66:7e:66:
         f0:6d:b5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:32 2026 by rpki-client