Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
File:                     7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft (raw, json)
Hash identifier:          K4d+EsTotJJK0Zo/VfjFOUeBa/3gctPDv0lcFDrbuGw=
Subject key identifier:   FA:4C:42:10:3F:C1:B2:0A:DD:86:ED:B9:DC:B3:3C:23:5A:19:8A:9C
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Certificate issuer:       /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial:       01A0D83BD242F47ABCBAF50DC9AEAD4F368C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
Manifest number:          1A73
Signing time:             Fri 25 Sep 2026 11:03:14 +0000
Manifest this update:     Fri 25 Sep 2026 11:03:14 +0000
Manifest next update:     Sat 26 Sep 2026 11:03:14 +0000
Files and hashes:         1: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl (hash: duem/1zonxK9fsU8FnUQQ0PRUafOG7Si5mez6Pgi3Do=)
                          2: a7s6-pLwoiyrezAHz-CEXmLAi28.roa (hash: nhlHfUNEeKi77QockWWhGxaJn7C3J9whAR6snvDoVtM=)
                          3: ds5dJRDzI4acHa9XOzintQa8R70.roa (hash: NSHUOHDDYeCqlj4/tHZIL/eLYAJljLX9kfG+BuqGIqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:3b:d2:42:f4:7a:bc:ba:f5:0d:c9:ae:ad:4f:36:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
        Validity
            Not Before: Sep 25 11:03:14 2026 GMT
            Not After : Sep 26 11:03:14 2026 GMT
        Subject: CN=fa4c42103fc1b20add86edb9dcb33c235a198a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:8d:f8:04:ad:bf:a4:e0:ee:43:69:6e:15:
                    fd:8f:e3:6a:b1:93:4c:12:81:66:a3:58:4a:24:b5:
                    75:3d:6b:18:15:af:c5:25:c0:86:f3:63:2e:5e:99:
                    01:05:3e:58:d9:32:0f:a9:86:c7:7e:2f:b9:fd:4a:
                    cf:52:8a:19:59:c6:fb:5e:0f:67:89:a8:dd:17:f9:
                    c7:14:49:f9:a2:46:d7:7f:ef:62:15:3f:01:fc:a2:
                    13:42:ff:e3:f5:fd:2c:65:8f:2b:6b:64:06:c3:39:
                    6c:be:b4:27:e4:b1:a8:c7:ff:62:a5:d1:86:ae:0b:
                    43:7a:fb:d1:e4:bf:74:5c:06:f8:fb:dd:f4:69:38:
                    58:07:e2:6d:76:1f:38:2f:92:33:f0:2d:9a:10:37:
                    a8:34:6c:6c:b0:fa:93:29:23:f4:72:ae:84:86:a0:
                    77:6b:0e:b7:7c:a3:60:c0:00:9e:c9:99:8a:5e:e7:
                    54:05:bf:84:9d:fd:b1:3a:f3:83:03:23:d8:a9:83:
                    cf:3e:26:05:9b:3e:0b:b5:71:95:4a:08:a9:c2:4c:
                    59:0c:e0:d8:e0:b4:25:bc:f5:1f:32:c5:55:4d:dd:
                    75:2a:b7:70:53:77:f6:2c:32:12:06:9e:ab:6c:b0:
                    27:4c:64:85:66:23:99:3b:a7:5a:25:71:8f:91:f1:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4C:42:10:3F:C1:B2:0A:DD:86:ED:B9:DC:B3:3C:23:5A:19:8A:9C
            X509v3 Authority Key Identifier:
                keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:51:20:3c:9a:d6:b6:fa:4a:11:19:5c:8e:ff:3b:65:1e:0d:
         75:c5:4b:52:01:84:e5:69:62:1a:3a:13:76:a2:ee:2c:d1:70:
         c5:da:11:a3:ca:f9:d1:81:82:c0:b4:fc:58:f5:23:90:53:29:
         cd:a1:18:31:23:8f:fc:80:39:d1:bd:fa:41:9d:a8:54:9e:a7:
         1b:44:4c:9e:29:fd:d2:4a:ef:5f:d2:ff:5e:46:1f:2f:3c:7d:
         e5:9a:07:c3:fc:42:64:8a:5f:0c:cc:2d:e4:d2:ee:72:09:b2:
         d5:7e:19:3f:24:3c:0b:65:dd:bc:53:6e:5a:b1:42:0c:9c:54:
         09:eb:b0:26:38:fa:da:ef:6b:74:d4:6e:53:1d:30:b5:ff:af:
         3f:98:be:ee:16:0b:2d:b5:a3:fd:7f:4c:87:f4:92:a2:0e:2e:
         a2:0d:fb:47:5a:7f:73:a9:75:1e:75:87:1f:ff:a7:81:ba:08:
         9b:71:d6:6c:19:52:07:2c:4a:82:e5:33:63:32:1d:35:ca:1d:
         ad:0e:d9:d3:20:ff:94:ec:28:14:eb:76:5a:34:b8:75:26:1b:
         87:df:0e:90:ec:71:c6:8b:be:18:17:f6:82:63:9a:c3:14:98:
         e0:e0:d9:a8:e8:b1:34:a5:f3:c3:93:f0:3e:16:35:1a:ee:98:
         4c:07:08:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:19:49 2026 by rpki-client