Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File:                     7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier:          3ImT0SPl+gvGt5XxSEqPKEhdYVnzwjREuLG91x9KkcA=
Subject key identifier:   F6:DF:44:A2:86:B0:B7:27:54:A4:D3:0D:39:ED:FF:7B:09:42:44:D6
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer:       /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial:       01A0CBC81B6BEAAC637DEAB259FC01C4C483
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number:          0E75
Signing time:             Wed 23 Sep 2026 01:01:24 +0000
Manifest this update:     Wed 23 Sep 2026 01:01:24 +0000
Manifest next update:     Thu 24 Sep 2026 01:01:24 +0000
Files and hashes:         1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: PbfCedXTGVGCDmXjFLoePNdgOYeiooufdz406BfxJ5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c8:1b:6b:ea:ac:63:7d:ea:b2:59:fc:01:c4:c4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
        Validity
            Not Before: Sep 23 01:01:24 2026 GMT
            Not After : Sep 24 01:01:24 2026 GMT
        Subject: CN=f6df44a286b0b72754a4d30d39edff7b094244d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:c6:64:96:44:c1:62:f1:42:df:a5:fa:dd:
                    d3:6e:49:20:42:c8:bc:37:64:fc:d2:25:d3:76:44:
                    a7:2d:d9:3f:12:96:aa:f6:ff:d0:4e:0f:b7:58:84:
                    8b:4c:c8:87:1d:e9:66:f0:e3:ae:b3:b3:7d:43:8c:
                    0f:89:7b:16:d1:c1:c0:a5:20:a6:9e:fe:89:8c:b8:
                    39:d8:21:21:67:ef:d0:38:69:39:be:fa:15:31:72:
                    87:b1:1c:9c:fa:1e:35:a5:47:80:68:8f:9d:4d:7e:
                    5f:67:7a:0c:7e:fa:0b:8e:7b:33:e6:83:28:1d:94:
                    b8:6a:8a:e2:87:45:dc:16:9c:6f:79:51:c2:36:3e:
                    44:e3:5d:56:2e:27:4d:2f:23:e6:a1:98:a9:1b:dc:
                    1c:89:8d:e7:82:70:fb:73:66:9a:62:0c:59:b3:8d:
                    3c:1b:2e:13:41:eb:df:f0:1f:f2:21:f4:06:4c:90:
                    4e:c9:e2:bb:00:e5:be:4f:c0:cc:38:69:62:3d:53:
                    06:22:19:54:b1:a7:86:d5:84:8b:5c:3c:c2:d9:6f:
                    69:2d:a3:3d:1f:12:5b:b9:1f:37:47:bb:22:bf:f3:
                    b1:d9:3b:7a:c5:29:ae:f2:cc:f5:54:0d:eb:97:c9:
                    e2:fc:f4:66:1b:07:e7:18:65:a5:88:b2:f2:ff:01:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DF:44:A2:86:B0:B7:27:54:A4:D3:0D:39:ED:FF:7B:09:42:44:D6
            X509v3 Authority Key Identifier:
                keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:df:cb:4b:82:37:b1:46:ef:49:ac:ef:26:44:fe:9b:ab:5e:
         2d:f0:33:cf:c2:19:6c:10:70:2d:d2:8b:d2:20:15:b4:2e:b7:
         0f:a9:82:68:69:23:d3:d8:2a:4d:45:e5:02:3c:3e:be:9d:15:
         ad:23:c7:f6:9c:78:de:e4:d0:bd:2d:de:67:22:c3:16:07:b8:
         f9:4c:d1:2e:cd:d6:ae:af:fe:6c:19:2b:90:75:40:90:f5:3a:
         53:f3:30:0f:12:f4:85:54:b2:94:d8:55:97:a1:c3:97:f4:14:
         f0:28:a1:83:47:13:62:17:0c:62:12:99:17:74:a6:2a:6b:4d:
         ed:8f:00:df:87:c3:20:90:15:39:d3:48:bf:e7:41:59:05:68:
         93:bf:8b:a7:72:42:41:b2:5f:94:db:28:2b:9b:6b:7f:e8:9a:
         14:63:65:49:c1:b3:31:0c:e8:28:e0:a2:53:00:28:9b:37:51:
         42:9f:74:04:47:55:24:98:52:8f:ef:44:25:4a:92:2b:18:18:
         24:70:73:60:76:3a:7c:74:4f:7d:58:b0:40:0a:9c:e6:56:88:
         16:c3:47:a0:41:d0:74:04:e4:f2:d2:18:09:a0:8b:7d:63:b5:
         85:45:bb:8f:34:4c:f8:9e:77:37:87:3e:fa:98:bd:5f:37:f7:
         4f:da:55:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:58:03 2026 by rpki-client