Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File:                     7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier:          VPEHK08eMps2nSRDYQ5jXXlTknGRav2geN9Pm4ZhU/A=
Subject key identifier:   B7:9E:A8:2B:ED:01:CC:0A:28:70:95:D4:C2:55:EA:63:C9:F3:90:5E
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer:       /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial:       01A111BBBDA62502D5D32A38AF8ABE251BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number:          17D8
Signing time:             Tue 06 Oct 2026 15:01:18 +0000
Manifest this update:     Tue 06 Oct 2026 15:01:18 +0000
Manifest next update:     Wed 07 Oct 2026 15:01:18 +0000
Files and hashes:         1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: TL38Cs1NV8awwKDES/k6yMa5dCAiDTEBho//OgeBfo8=)
                          2: Qy_dYjktdWTMwKlvlGZGCPvqukk.roa (hash: HyB9pQQ7gH7LCMcZGQN6Qp3fcmCpTOcafmUokwLnbLM=)
                          3: knZABU6A8bvYatZnGIApuHOdxF8.roa (hash: ZG17hdxOoYWoARbjcCtZd2S+SWHd1m7LFGZzi15/I2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:bb:bd:a6:25:02:d5:d3:2a:38:af:8a:be:25:1b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
        Validity
            Not Before: Oct  6 15:01:18 2026 GMT
            Not After : Oct  7 15:01:18 2026 GMT
        Subject: CN=b79ea82bed01cc0a287095d4c255ea63c9f3905e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6a:1a:d5:e9:4b:9f:30:67:70:40:b7:ba:61:
                    4f:22:ff:60:5a:c6:75:7c:17:32:ab:c1:de:4b:a3:
                    09:2e:2d:1b:5a:0c:2a:d6:fd:81:30:09:2a:18:b7:
                    68:9a:ea:fd:23:3f:4b:3d:d1:7f:ad:88:f7:79:19:
                    8f:24:93:40:5c:0b:09:6f:7b:d4:9d:c6:40:52:f7:
                    77:b9:1c:71:fc:d4:7a:ed:d0:2f:00:45:95:66:7c:
                    7f:68:6f:06:16:93:6d:a8:cf:01:0a:bb:9b:66:ca:
                    2e:fd:38:7f:ee:a5:74:ce:83:99:71:31:12:23:f2:
                    ef:07:9c:e9:39:7b:bf:b9:dd:4a:79:c1:ed:97:d8:
                    ba:61:18:30:69:e0:3c:a8:9b:70:bb:82:bc:53:de:
                    71:85:fb:9f:87:91:6e:15:74:2b:32:68:43:62:38:
                    9c:2a:0d:c3:41:7e:ce:d0:4c:a2:4c:47:e0:fc:f8:
                    6f:09:78:d5:0c:04:8f:59:62:bb:ef:b7:f9:d8:c4:
                    e7:f6:4a:f3:29:73:c5:1e:cc:e0:41:0b:40:a4:6b:
                    b9:9c:1d:24:02:c8:54:a6:5e:8f:a2:33:e4:c2:59:
                    d0:62:99:83:07:a0:6d:53:45:ee:9f:b1:2f:53:00:
                    9a:a3:98:86:4e:6a:1f:37:13:b0:4f:5b:ce:02:c0:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9E:A8:2B:ED:01:CC:0A:28:70:95:D4:C2:55:EA:63:C9:F3:90:5E
            X509v3 Authority Key Identifier:
                keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ea:c3:66:e9:a5:1e:ce:46:b1:97:34:e9:93:99:b3:a3:04:
         27:9e:10:2f:b3:61:63:d9:da:6c:b7:c2:ef:32:14:c8:55:0a:
         5c:59:3b:d4:52:89:a1:c5:df:ee:ea:77:70:54:d5:9d:60:dd:
         bd:af:1f:27:fb:b4:71:fd:6b:d5:cb:c6:1a:a4:55:18:71:d3:
         6d:4b:bf:00:33:74:8d:4a:62:d3:9c:1f:fa:b4:3e:8b:23:df:
         7d:ef:94:17:fb:11:da:29:e0:6d:fc:67:3e:d0:cc:70:4b:cf:
         e8:08:09:01:5d:9d:70:8d:10:e5:88:1c:ab:6f:90:ab:a1:77:
         05:b5:38:68:f6:9e:c3:81:05:44:fc:00:ce:10:65:e2:48:5e:
         06:33:ad:ae:b7:00:bf:1b:f9:6d:9f:11:c9:03:86:b2:25:91:
         87:3f:1a:f6:26:ea:34:b3:2e:27:e9:fc:47:80:31:c6:44:fa:
         48:4e:1a:d2:79:17:1d:af:cb:86:84:1c:b0:bb:ba:c3:f1:f7:
         cc:d4:0f:9f:78:84:18:08:71:2d:18:7e:a4:dd:7a:4c:f0:5a:
         4b:3d:55:ec:b7:89:42:25:1f:47:08:dd:0a:d2:dd:0f:de:fe:
         aa:06:c7:37:43:ed:35:9b:3b:1c:c9:c5:b2:e7:ef:d0:14:d1:
         61:2d:d3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:38:23 2026 by rpki-client