Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File:                     7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier:          ik3S4mqShi/+kuhFuTf7CZrQ00hpgyHXZTYXSY9mm78=
Subject key identifier:   5C:82:F1:69:1B:00:F5:2B:2B:33:73:F9:96:6C:40:9E:91:DA:E7:D8
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer:       /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial:       01A0DC171BF07F74B1D2EC2070D7889F07DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number:          1151
Signing time:             Sat 26 Sep 2026 05:01:37 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:37 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:37 +0000
Files and hashes:         1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: 59o6X3lU4APxwd8Y1mtfLN+ZyHoXf3VMn9ne+Mu83TM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:1b:f0:7f:74:b1:d2:ec:20:70:d7:88:9f:07:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
        Validity
            Not Before: Sep 26 05:01:37 2026 GMT
            Not After : Sep 27 05:01:37 2026 GMT
        Subject: CN=5c82f1691b00f52b2b3373f9966c409e91dae7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:f5:0c:0b:99:bf:54:dd:68:c9:15:f3:a9:
                    e2:9f:b0:61:8f:f6:a4:45:4b:cf:89:5b:26:d8:2a:
                    db:ad:fb:27:cb:e4:65:61:50:27:eb:df:bc:59:fe:
                    42:f6:63:0c:df:fe:99:36:8e:79:ff:8e:fd:6e:49:
                    d1:12:72:53:74:0b:31:2a:e2:ed:b8:23:f3:fa:bd:
                    08:05:1d:11:ed:d3:11:b6:08:c5:5f:9f:fb:75:30:
                    e9:42:1b:a3:0c:c5:8c:5d:da:b6:18:f3:4f:80:d6:
                    4c:2c:5c:ee:f0:6b:ff:53:d9:61:99:bb:83:2a:63:
                    e7:ea:e2:49:8b:f8:9a:7e:29:ad:ff:9a:94:9c:6c:
                    33:2b:06:0c:9b:46:56:c0:8a:bc:77:b8:22:b3:94:
                    61:73:73:36:21:59:90:0b:fc:35:da:ee:3a:a8:f8:
                    c2:e7:d0:50:0a:f5:a4:90:c1:73:dc:cb:50:78:32:
                    c9:4e:68:b7:7d:0c:70:ab:c4:dc:2a:6b:9d:ca:54:
                    91:3e:55:07:ef:2d:56:67:28:90:02:85:94:88:92:
                    e0:08:c5:ba:32:5f:57:ed:52:fb:75:51:6d:b6:82:
                    70:91:a4:c7:d9:57:ce:39:a1:32:0b:b2:9f:57:34:
                    32:50:c1:1e:ac:36:c0:e2:ea:b6:73:5e:25:7e:37:
                    8b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:82:F1:69:1B:00:F5:2B:2B:33:73:F9:96:6C:40:9E:91:DA:E7:D8
            X509v3 Authority Key Identifier:
                keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:95:0f:e2:b9:29:f4:06:3d:c0:9d:23:ea:2e:65:53:2e:b4:
         bd:7f:1f:aa:9c:5e:85:da:76:fd:7e:2e:e3:ca:dc:c4:97:aa:
         3e:a3:eb:0e:c4:12:b1:3e:43:47:65:c6:e0:07:3c:db:64:c7:
         77:c0:66:c3:85:4c:34:c7:22:dc:2c:73:78:0c:a5:ca:3f:93:
         76:91:98:67:7c:22:d9:27:9e:68:47:e8:8d:ff:0b:2a:31:75:
         70:6c:b7:a8:60:c4:6d:54:81:8d:a5:e6:b5:8d:78:bc:2c:85:
         a9:37:57:fb:71:b3:c5:87:e5:eb:d9:f8:f4:91:5d:20:e2:a5:
         e7:4e:b9:48:1e:8b:f3:76:a1:2e:b4:95:9b:9b:e8:5a:38:4e:
         37:ef:08:da:9c:66:b4:16:66:9b:a0:3a:88:09:ef:c7:08:f4:
         b1:31:77:b3:ce:a2:0b:31:f5:c7:d4:6c:eb:19:84:f0:96:6f:
         e9:d3:be:7c:30:f3:96:9d:0b:33:e3:c5:62:76:98:88:cf:6e:
         10:39:87:bb:33:7f:10:79:81:57:90:aa:f0:b0:df:1e:06:b1:
         10:be:93:3e:f6:e0:24:c8:4c:65:8a:1c:8d:41:af:48:66:02:
         9c:a7:5a:34:93:67:84:86:c2:7c:7d:62:9a:60:09:7c:85:86:
         11:b0:33:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcFxvwf3Sx0uwgcNeInwfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDNkZjgyOWFmZDZhMWYyNTkwZTQyNDQ1MjJlMWIzNmMw
ODZhOTQwHhcNMjYwOTI2MDUwMTM3WhcNMjYwOTI3MDUwMTM3WjAzMTEwLwYDVQQD
Eyg1YzgyZjE2OTFiMDBmNTJiMmIzMzczZjk5NjZjNDA5ZTkxZGFlN2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI31DAuZv1TdaMkV86nin7Bhj/ak
RUvPiVsm2Crbrfsny+RlYVAn69+8Wf5C9mMM3/6ZNo55/479bknREnJTdAsxKuLt
uCPz+r0IBR0R7dMRtgjFX5/7dTDpQhujDMWMXdq2GPNPgNZMLFzu8Gv/U9lhmbuD
KmPn6uJJi/iafimt/5qUnGwzKwYMm0ZWwIq8d7gis5Rhc3M2IVmQC/w12u46qPjC
59BQCvWkkMFz3MtQeDLJTmi3fQxwq8TcKmudylSRPlUH7y1WZyiQAoWUiJLgCMW6
Ml9X7VL7dVFttoJwkaTH2VfOOaEyC7KfVzQyUMEerDbA4uq2c14lfjeLlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyC8WkbAPUrKzNz+ZZsQJ6R2ufYMB8GA1UdIwQY
MBaAFO4D34Ka/WofJZDkJEUi4bNsCGqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dQZmdwcjlhaDhsa09Ra1JTTGhzMndJYXBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hYWFjZjctYmZkYS00MDNlLWJmNjIt
YTFhNDZhODBjMWRhLzEvN2dQZmdwcjlhaDhsa09Ra1JTTGhzMndJYXBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hYWFjZjctYmZkYS00MDNlLWJmNjItYTFhNDZhODBjMWRh
LzEvN2dQZmdwcjlhaDhsa09Ra1JTTGhzMndJYXBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5UP4rkp
9AY9wJ0j6i5lUy60vX8fqpxehdp2/X4u48rcxJeqPqPrDsQSsT5DR2XG4Ac822TH
d8Bmw4VMNMci3CxzeAylyj+TdpGYZ3wi2SeeaEfojf8LKjF1cGy3qGDEbVSBjaXm
tY14vCyFqTdX+3GzxYfl69n49JFdIOKl5065SB6L83ahLrSVm5voWjhON+8I2pxm
tBZmm6A6iAnvxwj0sTF3s86iCzH1x9Rs6xmE8JZv6dO+fDDzlp0LM+PFYnaYiM9u
EDmHuzN/EHmBV5Cq8LDfHgaxEL6TPvbgJMhMZYocjUGvSGYCnKdaNJNnhIbCfH1i
mmAJfIWGEbAzSg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:44:08 2026 by rpki-client