Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
File:                     7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft (raw, json)
Hash identifier:          ILHNwWzYt7lULMv4ntP4JktmE2t3qIGs2zgEnQSTrXA=
Subject key identifier:   CC:F0:35:BD:ED:C3:38:D9:9C:35:63:6B:50:B0:5B:97:FA:17:52:17
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Certificate issuer:       /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial:       01A08D567B42CFEBE550ACF3C3C18E8D26EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
Manifest number:          17F9
Signing time:             Thu 10 Sep 2026 22:00:50 +0000
Manifest this update:     Thu 10 Sep 2026 22:00:50 +0000
Manifest next update:     Fri 11 Sep 2026 22:00:50 +0000
Files and hashes:         1: 1-eh-1pXGI5Cgf4EfxZ3-rrSgEiA.roa (hash: j6+XhxL67BgzWzBRQ/eSUIWdiMYbHn8AWKsJCtSBwfk=)
                          2: 37_Mpo8kOw79EXpvxmEdgx95bWA.roa (hash: 3Ie0/sSYF5mfuDXljxPC67Xbb19GtzfdgiOanTjeAis=)
                          3: 7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl (hash: AyawNfCoQTNz0r2fOB5KF5K3W83oN/mp8p/RWKvkvSk=)
                          4: DoUjRDq4f4RlSd01A91vUzIaXbc.roa (hash: WDggBQaa6iXBE9B1fTjOHIHynycu3WL+FvqiiQoyk0M=)
                          5: Ub5JBZXVKjE9Tp-yHvK7wsgxNaY.roa (hash: CJSj4176CqNLEYzKOcP2UmnT4AeroK2Iqsxrcvctjz0=)
                          6: jbel_872plfGoKA9YwYLfXTnbKA.roa (hash: uorV1dM+0LVUebt/LsRmXGvEIO0+6YrUmXE7E+mdUis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:56:7b:42:cf:eb:e5:50:ac:f3:c3:c1:8e:8d:26:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
        Validity
            Not Before: Sep 10 22:00:50 2026 GMT
            Not After : Sep 11 22:00:50 2026 GMT
        Subject: CN=ccf035bdedc338d99c35636b50b05b97fa175217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:b1:09:14:aa:b3:5d:ec:6b:84:bc:c7:d4:
                    44:bb:01:1c:5c:a5:41:6a:72:5e:2d:10:f4:75:ea:
                    37:80:5d:b3:84:e6:d8:5b:4a:20:50:42:30:b3:f7:
                    d8:c0:8a:4d:83:72:66:aa:88:ed:3b:8e:d4:a6:57:
                    65:ce:1f:56:e5:59:a1:b4:0f:ce:2a:f7:98:67:5d:
                    7c:15:4c:75:3d:a3:ce:fa:0b:f8:94:10:6b:3d:12:
                    1c:4c:43:ef:40:33:f6:80:47:5d:7e:9d:7e:16:fa:
                    e7:e6:ce:94:f3:88:dd:6b:0f:63:b9:61:ef:78:0a:
                    39:c8:6f:46:1e:41:f1:96:46:93:58:1e:9c:40:54:
                    2c:5c:d8:e2:34:a4:00:34:c2:c7:bc:e6:25:be:88:
                    a0:84:fb:d3:d2:20:2d:e3:2c:11:23:5c:8f:c2:be:
                    01:e7:16:da:5e:a2:4a:5d:5e:ec:95:31:f7:a1:16:
                    8a:ae:43:aa:f1:1d:3f:70:01:c1:ce:ab:7e:a6:74:
                    c0:85:b0:56:ea:9a:be:40:1b:75:3c:63:d0:98:f3:
                    97:06:a8:59:65:9e:36:19:d7:2b:c7:5d:d4:b5:37:
                    c9:fd:eb:cd:db:28:7f:79:e1:31:86:bc:31:9e:3b:
                    93:1c:ab:98:56:0e:e0:ae:7b:bb:41:be:bc:0b:2c:
                    a6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F0:35:BD:ED:C3:38:D9:9C:35:63:6B:50:B0:5B:97:FA:17:52:17
            X509v3 Authority Key Identifier:
                keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:af:3b:c1:db:5f:56:6e:b2:18:82:3a:92:d9:4b:79:2a:db:
         30:00:8b:5d:38:b8:6d:34:a7:7a:4f:25:37:cd:a4:25:dd:f4:
         a9:ca:0c:01:0a:f5:f3:ea:af:37:d8:5a:d8:1b:8f:82:e2:65:
         b8:5a:a8:ee:b1:d9:72:c3:ae:c3:54:c7:ba:38:af:63:1d:95:
         2c:dd:34:4c:7d:34:ea:3f:64:90:af:46:be:db:cf:d5:b8:ed:
         77:e9:cd:ba:b2:92:1f:07:69:ee:32:86:1f:d5:c1:89:87:ba:
         f9:9d:d3:0f:af:f2:b6:40:b1:c0:27:2f:d9:54:17:c1:c7:ff:
         39:fe:87:39:b7:0e:be:4d:b0:86:ea:aa:76:0e:cd:c3:cf:cf:
         96:a6:19:34:55:fc:19:49:17:7d:de:db:f1:83:21:9c:8e:26:
         aa:47:c3:85:95:54:31:08:89:84:81:29:4d:ec:3f:9a:ca:5d:
         95:3b:84:c8:31:eb:3b:b4:4b:73:e2:72:7a:2c:94:61:3e:8d:
         5e:de:fc:2a:34:c6:99:f7:aa:a5:9c:77:d3:91:87:24:fc:e2:
         2f:d7:7d:92:7a:3e:fe:4d:a4:d2:91:05:30:8f:35:80:f0:0c:
         32:87:c9:95:c3:ff:e8:43:df:4d:20:19:a3:10:18:57:06:4d:
         94:dd:24:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNVntCz+vlUKzzw8GOjSbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYmE3NzRiYTgyZmIwNDI3Zjc2NmU3ODNlNzcwZjRiZDk2
NDE2ZjkwHhcNMjYwOTEwMjIwMDUwWhcNMjYwOTExMjIwMDUwWjAzMTEwLwYDVQQD
EyhjY2YwMzViZGVkYzMzOGQ5OWMzNTYzNmI1MGIwNWI5N2ZhMTc1MjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjKxCRSqs13sa4S8x9REuwEcXKVB
anJeLRD0deo3gF2zhObYW0ogUEIws/fYwIpNg3JmqojtO47Upldlzh9W5VmhtA/O
KveYZ118FUx1PaPO+gv4lBBrPRIcTEPvQDP2gEddfp1+Fvrn5s6U84jdaw9juWHv
eAo5yG9GHkHxlkaTWB6cQFQsXNjiNKQANMLHvOYlvoighPvT0iAt4ywRI1yPwr4B
5xbaXqJKXV7slTH3oRaKrkOq8R0/cAHBzqt+pnTAhbBW6pq+QBt1PGPQmPOXBqhZ
ZZ42Gdcrx13UtTfJ/evN2yh/eeExhrwxnjuTHKuYVg7grnu7Qb68CyymNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzwNb3twzjZnDVja1CwW5f6F1IXMB8GA1UdIwQY
MBaAFOy6d0uoL7BCf3ZueD53D0vZZBb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUt
MzkyYjg2M2M5ZjAzLzEvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUtMzkyYjg2M2M5ZjAz
LzEvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArK87wdtf
Vm6yGII6ktlLeSrbMACLXTi4bTSnek8lN82kJd30qcoMAQr18+qvN9ha2BuPguJl
uFqo7rHZcsOuw1THujivYx2VLN00TH006j9kkK9GvtvP1bjtd+nNurKSHwdp7jKG
H9XBiYe6+Z3TD6/ytkCxwCcv2VQXwcf/Of6HObcOvk2whuqqdg7Nw8/PlqYZNFX8
GUkXfd7b8YMhnI4mqkfDhZVUMQiJhIEpTew/mspdlTuEyDHrO7RLc+JyeiyUYT6N
Xt78KjTGmfeqpZx305GHJPziL9d9kno+/k2k0pEFMI81gPAMMofJlcP/6EPfTSAZ
oxAYVwZNlN0k4A==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:45 2026 by rpki-client