Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
File:                     7JezJx8tLSwHdy-q0BM8VG5JdAg.mft (raw, json)
Hash identifier:          tpVbIRVpB0Vur+omjpPitzWE7rRyyv2blwZQ15BRpAQ=
Subject key identifier:   07:D2:CC:4D:86:A2:B5:DA:5D:15:0E:5C:68:8C:E4:0A:96:68:05:C7
Authority key identifier: EC:97:B3:27:1F:2D:2D:2C:07:77:2F:AA:D0:13:3C:54:6E:49:74:08
Certificate issuer:       /CN=ec97b3271f2d2d2c07772faad0133c546e497408
Certificate serial:       01A08B9F0E7E00504529470F78EE8382DB07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
Manifest number:          0238
Signing time:             Thu 10 Sep 2026 14:00:51 +0000
Manifest this update:     Thu 10 Sep 2026 14:00:51 +0000
Manifest next update:     Fri 11 Sep 2026 14:00:51 +0000
Files and hashes:         1: 7JezJx8tLSwHdy-q0BM8VG5JdAg.crl (hash: 8ipyQS1p5d054GXQLDOa/MKxoFRn0ZRZJBd+/jt9SHM=)
                          2: tZzd-4vJwTNaHI1mDTSbAye9aUg.roa (hash: WUVxikPavSYyUIB2ehZCr1awJETbczoTgfaX/AVFzSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9f:0e:7e:00:50:45:29:47:0f:78:ee:83:82:db:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec97b3271f2d2d2c07772faad0133c546e497408
        Validity
            Not Before: Sep 10 14:00:51 2026 GMT
            Not After : Sep 11 14:00:51 2026 GMT
        Subject: CN=07d2cc4d86a2b5da5d150e5c688ce40a966805c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:9c:60:0a:d7:28:4e:d9:e2:1a:d3:a2:b2:
                    e1:d4:2f:8b:42:d5:f0:80:77:0b:4b:5b:55:dc:02:
                    4e:ae:30:21:51:79:19:26:95:6d:b7:3e:cb:68:53:
                    65:f9:0a:d3:a1:7f:da:0e:2a:fb:75:48:88:28:c8:
                    58:36:ba:17:a0:16:89:c4:58:68:23:5c:cd:51:85:
                    d6:de:64:6b:e1:b4:39:62:a5:7f:09:34:5a:5d:5e:
                    ac:7d:fd:45:55:6d:d6:35:ae:84:36:d1:8f:8d:21:
                    5e:ae:55:2e:93:f3:c7:cc:c7:40:79:36:b8:d4:43:
                    f2:72:f4:3e:df:01:30:0b:59:a8:23:10:14:36:52:
                    08:50:fa:a8:78:f1:a4:f3:ac:20:7a:90:bb:c2:b4:
                    d4:4d:d3:04:52:d4:a9:8d:53:c2:dc:52:09:f2:c9:
                    c3:d0:57:7f:6d:4c:5c:f1:c2:0b:5d:0a:d6:63:31:
                    9d:25:80:2d:f9:84:bf:2d:d7:21:99:1c:0c:cc:ca:
                    e4:7d:c6:51:b7:41:c7:e1:8b:b8:2e:04:41:2c:68:
                    94:cd:ee:da:8e:55:75:5a:13:74:d8:49:32:56:b3:
                    1f:77:99:41:8d:e9:61:18:9e:f7:7a:04:1b:fd:fa:
                    8a:83:53:50:6d:46:52:01:20:9e:b8:b8:5d:09:15:
                    90:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D2:CC:4D:86:A2:B5:DA:5D:15:0E:5C:68:8C:E4:0A:96:68:05:C7
            X509v3 Authority Key Identifier:
                keyid:EC:97:B3:27:1F:2D:2D:2C:07:77:2F:AA:D0:13:3C:54:6E:49:74:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:53:ce:bc:1a:59:2d:d3:42:21:86:c7:86:1f:85:bc:e4:bb:
         54:e0:1e:67:a1:8c:0f:8c:5a:53:d2:0f:b7:44:0a:ac:98:6b:
         21:3b:26:26:93:51:d9:95:f0:ea:bb:ef:2e:30:9e:3d:ef:a8:
         b4:cc:ba:b2:2f:c7:72:e4:f7:89:14:f4:a3:9f:2a:2a:e2:03:
         7d:4a:b4:a6:e6:16:a4:46:dd:6c:38:fc:03:cc:78:2e:d8:68:
         6f:03:16:e1:07:d1:12:24:44:14:65:0b:83:56:fb:81:67:39:
         26:ec:59:bc:6e:13:ab:8c:e9:e2:73:b4:14:eb:3a:0f:30:90:
         6c:9b:80:02:9f:3f:70:7a:bf:d9:ab:63:4e:54:97:a9:26:b1:
         34:33:25:4c:dd:a4:66:70:8d:b5:45:f5:32:5e:16:4f:e8:db:
         42:10:f0:40:62:47:23:51:78:c3:30:67:da:bc:dc:17:94:9f:
         31:d0:cb:86:90:a9:f7:7f:f2:bc:59:be:26:f5:a0:c8:f5:57:
         b8:a1:04:21:d0:38:7f:3d:0d:0e:54:38:8f:c8:5b:fb:6f:d9:
         4a:cf:1f:58:e8:ef:b5:5a:d8:c0:17:8e:37:a1:d0:f7:45:14:
         7a:58:af:60:52:51:f3:dd:00:9f:51:5b:6e:c8:27:36:63:dd:
         0f:3b:24:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:35:11 2026 by rpki-client