Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
File:                     7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json)
Hash identifier:          C8xeLPYIBWvf5wC0eBLXLMqxgbq3EXmKHz8L/XTAfDA=
Subject key identifier:   5C:67:4C:F2:1D:73:89:9C:5C:93:46:72:B8:30:A2:0E:28:1C:1E:AF
Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Certificate issuer:       /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Certificate serial:       01A0C9D93AB277B0E6EF2A6DE72487221A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
Manifest number:          0707
Signing time:             Tue 22 Sep 2026 16:00:51 +0000
Manifest this update:     Tue 22 Sep 2026 16:00:51 +0000
Manifest next update:     Wed 23 Sep 2026 16:00:51 +0000
Files and hashes:         1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: e4lVE0+EC2qpYej/2h0m3wy6j/XnWER3iYZx/2fD19E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d9:3a:b2:77:b0:e6:ef:2a:6d:e7:24:87:22:1a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
        Validity
            Not Before: Sep 22 16:00:51 2026 GMT
            Not After : Sep 23 16:00:51 2026 GMT
        Subject: CN=5c674cf21d73899c5c934672b830a20e281c1eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:9a:9e:ce:8f:32:a9:93:be:0c:12:e5:c6:
                    cd:ea:eb:31:38:6d:c2:50:40:5e:68:c3:a5:cd:ca:
                    c2:d6:35:9f:ae:a3:58:4b:a4:6e:81:04:9e:ff:4a:
                    0b:3b:e4:fc:03:f7:05:fe:91:37:a5:bc:8e:27:48:
                    72:a8:4f:af:82:c6:f5:3e:ed:59:33:0f:fc:aa:5b:
                    cb:0b:0f:d8:38:34:3b:7a:a1:e2:40:2f:cd:34:86:
                    cd:4a:c4:1d:20:39:92:50:a3:9d:a3:4f:6f:32:29:
                    84:cf:31:c1:8b:ee:f8:58:0a:e3:33:ac:7b:7a:f7:
                    53:a9:9c:a5:0e:61:77:f1:4a:77:a5:6e:69:ad:95:
                    03:1c:75:7c:cc:71:fb:cd:d7:e1:d9:25:00:26:98:
                    ed:62:8f:66:59:a5:5d:91:55:c2:8a:77:f1:44:a8:
                    fe:52:15:63:44:50:fd:13:20:57:99:ca:5f:97:74:
                    41:21:79:e1:98:90:f4:19:47:19:a7:fe:7b:f6:9e:
                    32:f1:ab:bf:2e:2f:d5:61:8b:2d:2c:97:92:ce:05:
                    c6:3c:2f:2f:f4:a3:c9:db:97:f6:70:da:b3:37:00:
                    df:f0:cd:ed:a0:d4:b7:fd:b9:ee:cd:24:b8:98:b2:
                    fa:ea:37:5a:f6:6b:07:ea:b7:96:32:90:b1:58:c4:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:67:4C:F2:1D:73:89:9C:5C:93:46:72:B8:30:A2:0E:28:1C:1E:AF
            X509v3 Authority Key Identifier:
                keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:06:06:9b:44:da:11:ef:5e:30:82:16:55:db:98:ce:85:94:
         7f:fc:ff:50:54:34:cc:66:83:9b:cc:54:1b:14:e4:a8:4f:6f:
         10:cc:19:ff:f6:c7:8b:0f:dc:ba:be:a7:d0:4a:35:40:2b:fb:
         6e:59:04:de:26:7c:82:f2:3a:ec:d2:38:9b:bd:70:65:06:f6:
         19:05:4c:8b:be:3f:ab:cd:5c:e6:16:8b:80:ab:61:5a:ca:85:
         68:7e:13:a6:00:5e:45:69:c1:7a:55:c2:37:3a:9e:c1:33:e5:
         7d:a8:d3:f2:d5:58:9c:18:6e:e3:d4:7b:3a:ce:79:81:9f:82:
         19:0a:49:b8:f4:ba:ad:60:ac:da:a2:67:51:60:81:46:09:13:
         8d:58:87:64:21:be:26:a8:b3:a4:94:9b:bc:d9:3e:11:2d:34:
         f7:93:0c:25:dc:bd:44:1f:17:f8:46:8b:55:29:66:10:ba:99:
         e0:99:22:34:ff:c3:7a:fe:ab:5b:9c:c7:fd:35:49:a4:07:f2:
         06:d2:5d:7c:78:44:39:2c:0d:35:ea:f6:65:b3:be:5f:29:36:
         e3:4e:be:31:c2:40:16:62:f4:1f:00:74:c2:72:e9:bb:a8:91:
         5d:02:ca:1d:b4:6b:b0:17:52:af:05:af:d2:01:75:6f:85:6f:
         cf:ca:a1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:28:48 2026 by rpki-client