Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
File:                     7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json)
Hash identifier:          OJGn5qFPuvMFtzbT2HK2233hFFe1Cp80P6eH7hI/6VA=
Subject key identifier:   BF:16:9B:46:26:3A:56:30:1E:11:93:F5:99:DC:15:5A:F2:83:71:4A
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Certificate issuer:       /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial:       01A08BD67EF3A15B0788D5FBE6C66F0234AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
Manifest number:          18B2
Signing time:             Thu 10 Sep 2026 15:01:25 +0000
Manifest this update:     Thu 10 Sep 2026 15:01:25 +0000
Manifest next update:     Fri 11 Sep 2026 15:01:25 +0000
Files and hashes:         1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: O/2NUgpqDt/jVx158Fg0uTQUNvrYlBJ8wc84aBWf6zM=)
                          2: JKtuYAZj6V_iBv09WZvX1K5boYU.roa (hash: cKfPg8sNS79bgJa5PrvUDPTVTEFYtl+oJ3wNQ/Dq8wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:7e:f3:a1:5b:07:88:d5:fb:e6:c6:6f:02:34:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
        Validity
            Not Before: Sep 10 15:01:25 2026 GMT
            Not After : Sep 11 15:01:25 2026 GMT
        Subject: CN=bf169b46263a56301e1193f599dc155af283714a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:44:62:b0:f0:44:bd:f1:8c:51:82:64:a5:
                    7b:4e:19:2c:24:a2:70:15:1d:c8:36:1c:4c:1d:16:
                    b5:a5:cb:46:8f:4d:17:44:f1:99:3d:f7:85:f8:e1:
                    1a:ba:30:a7:49:e1:79:1d:a7:44:cc:e1:d0:a3:80:
                    92:8b:9e:95:de:30:e6:09:77:b9:99:7e:f4:e4:c0:
                    8d:ef:13:62:8d:ce:5c:46:52:47:2e:ba:f0:95:fd:
                    86:3a:e7:63:e3:9a:37:76:f6:e5:1a:0c:5b:01:e5:
                    24:96:22:2e:cd:2f:ab:15:83:f5:98:00:40:d2:32:
                    60:40:11:7f:24:53:fb:1a:ed:54:54:e2:e0:68:64:
                    cc:5b:13:c6:0f:26:1f:30:ad:34:34:a7:c9:bc:fb:
                    49:a3:0a:40:c7:db:13:29:d3:bd:7b:55:47:d2:1c:
                    a6:04:39:ad:34:a8:d9:4f:a5:83:85:37:7e:4b:e8:
                    55:0c:52:19:41:a1:2e:1c:1f:e2:1d:19:1d:68:9c:
                    72:8a:39:06:36:d1:8f:28:3d:d9:50:22:c1:2b:cf:
                    47:ea:d9:77:1f:c7:0d:4f:3a:31:1c:39:c1:b0:4f:
                    cb:57:b5:3c:6d:fc:91:e0:6e:b1:b3:14:b3:a6:66:
                    e8:09:44:80:7a:78:d4:ea:73:b7:48:b1:b0:77:47:
                    b9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:16:9B:46:26:3A:56:30:1E:11:93:F5:99:DC:15:5A:F2:83:71:4A
            X509v3 Authority Key Identifier:
                keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c5:d6:70:ba:5f:5f:6f:58:35:75:46:a8:e3:35:4b:ba:49:
         b3:35:2f:77:eb:33:69:2f:a0:34:c2:66:d7:46:fb:06:a9:4b:
         53:f7:f3:2c:7f:9c:26:bf:85:25:91:78:4e:04:ad:07:40:ab:
         1f:57:6c:a4:ad:33:c1:bb:80:4a:09:85:50:5f:ce:5b:f4:04:
         ac:2f:41:2b:27:2d:35:76:8b:41:b0:0a:e8:20:af:bc:fe:0c:
         64:e9:7e:8d:a4:90:2a:78:a8:2a:a5:9c:c2:1b:39:42:f9:ef:
         e9:1c:3f:d3:2f:5f:4c:57:82:21:5f:08:7a:e9:25:f0:71:2a:
         6d:20:1a:cd:f4:3a:d3:f6:bc:69:59:de:e4:03:3a:eb:f5:af:
         c1:d3:71:60:b1:2f:2f:d6:d6:5e:ff:a8:3e:5f:a7:f7:26:c9:
         0f:a0:19:b5:d9:a4:59:13:36:ed:0f:77:68:4c:e4:b7:21:0e:
         7e:b5:b6:69:f3:33:1d:22:7f:e0:0f:71:64:38:66:21:c4:75:
         ae:55:cc:2f:f8:8c:d1:b3:85:a0:aa:f2:7d:3a:89:bd:61:b1:
         4b:60:8f:a0:62:ee:f4:cc:ce:87:88:b5:c8:68:f1:91:7e:bc:
         97:a6:7f:5b:91:53:4a:d1:03:a7:65:23:df:88:53:39:92:d7:
         98:25:57:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:20:08 2026 by rpki-client