Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File:                     7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier:          /PYc7SxvvuWzyHHGbZGDBH4ZwOWilpiRQchQbxWJGkE=
Subject key identifier:   7F:0F:49:5C:3B:DC:1A:87:11:8E:66:E0:A9:E4:1C:61:29:86:D2:D9
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer:       /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial:       01A0C9D8C3CB7E7288980F2A7FB31319067B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number:          11CE
Signing time:             Tue 22 Sep 2026 16:00:21 +0000
Manifest this update:     Tue 22 Sep 2026 16:00:21 +0000
Manifest next update:     Wed 23 Sep 2026 16:00:21 +0000
Files and hashes:         1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: phv1/niuYVY+fv1kw+3PjzHquW4eqzX57SMqjxr7YCQ=)
                          2: xWJAqfrPXr4KnkU7Qd4lSzlkp8o.roa (hash: ceeD+cwy4G4/W2RDlhQiQMMWpwCMIwxk/08X/W6eMjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d8:c3:cb:7e:72:88:98:0f:2a:7f:b3:13:19:06:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
        Validity
            Not Before: Sep 22 16:00:21 2026 GMT
            Not After : Sep 23 16:00:21 2026 GMT
        Subject: CN=7f0f495c3bdc1a87118e66e0a9e41c612986d2d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:05:d7:f1:b2:92:44:55:9f:ac:5f:bd:db:
                    88:67:24:99:1a:20:62:5d:b0:1e:95:8f:6d:83:17:
                    30:bb:0c:36:e8:6c:2b:47:32:c9:fb:e2:a7:01:db:
                    a4:f4:80:19:ee:14:01:f1:1a:72:7c:4d:11:1c:b5:
                    5a:b1:a6:d7:91:e4:ab:da:f5:b5:cf:e2:4c:6b:67:
                    60:24:06:3b:5e:95:bd:e6:e9:b2:e5:1b:ba:d5:d6:
                    e1:35:e6:45:b7:33:04:79:ad:f9:71:8a:a9:a8:98:
                    73:5c:d9:ec:13:e4:35:38:07:46:a6:16:4b:34:5d:
                    a8:15:9b:a4:2f:52:d9:68:23:6a:f1:d6:51:4d:33:
                    5c:73:d6:a5:f0:a1:c3:9b:d2:12:79:c9:a8:50:1a:
                    c7:cd:19:ba:62:93:c8:d8:98:d7:74:e1:5d:8e:ed:
                    be:45:35:51:23:3e:6e:05:0c:87:99:48:53:35:a9:
                    2c:66:5a:00:d0:59:50:1f:30:60:ee:f4:82:c3:01:
                    85:56:4d:48:84:5f:73:d0:36:ea:00:2e:7d:d6:95:
                    7d:3b:5d:e6:17:ee:1b:e4:19:e2:56:ec:c9:e5:fd:
                    e0:b7:17:f0:14:36:08:fe:c8:86:49:f6:1f:e8:ae:
                    34:57:3d:85:e0:f6:a4:ed:f0:b3:29:8e:37:2d:4f:
                    2a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0F:49:5C:3B:DC:1A:87:11:8E:66:E0:A9:E4:1C:61:29:86:D2:D9
            X509v3 Authority Key Identifier:
                keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fa:86:d4:39:75:ed:ef:18:a5:5d:1f:56:3d:80:9e:1e:50:
         51:79:22:36:06:8b:a6:b9:1b:27:18:eb:97:6c:40:ca:8d:91:
         4c:85:52:48:16:a8:b2:5f:32:28:ac:e3:ff:f4:75:cd:64:47:
         43:73:bc:5a:a1:0d:57:ba:01:d2:42:55:f5:0a:69:89:72:a3:
         28:b7:6a:ed:b9:c5:98:9d:4d:8d:3c:bb:d1:3a:d5:5c:ec:a4:
         4f:66:9b:28:a7:85:34:6d:58:e1:bf:6a:a2:cb:47:fc:88:b9:
         58:c3:1c:0c:cf:45:4f:da:ab:c9:20:7d:0d:b8:c0:82:96:04:
         14:f2:1f:0d:1e:b9:c8:c6:3c:76:62:ac:cc:40:15:f5:e8:5a:
         57:1c:a2:06:35:e1:eb:cd:be:8b:63:f5:3d:24:a3:08:2b:2f:
         d5:b2:42:2b:c3:ba:fa:f3:1b:02:03:dc:15:88:3a:bf:cc:26:
         7b:03:91:ab:ae:ad:ae:36:43:3f:22:43:d8:2a:da:c7:8b:29:
         27:98:2d:ad:9a:2d:3f:39:5a:7f:09:fb:f1:f4:05:7d:fc:56:
         c9:05:ab:9c:01:41:5b:d1:de:5a:0e:ae:e4:8d:d0:29:60:18:
         8e:8d:34:4b:c7:fe:0f:ab:10:c0:e0:83:ad:55:43:2e:f8:73:
         ff:02:21:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:35:57 2026 by rpki-client