Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
File:                     7E-wYalCbk-yiF2CKGdXKhtYpMA.mft (raw, json)
Hash identifier:          0fXpsDl6m8FED/KxqTUwd/RMh/jiOAHnY1Pcxq+tFpI=
Subject key identifier:   46:9D:AC:FD:08:68:D1:03:4E:2C:81:BF:AD:CF:68:0B:17:AE:B8:34
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Certificate issuer:       /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial:       01A0C96B84C76ADC43910D9019FA9A027ACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
Manifest number:          1A8D
Signing time:             Tue 22 Sep 2026 14:01:01 +0000
Manifest this update:     Tue 22 Sep 2026 14:01:01 +0000
Manifest next update:     Wed 23 Sep 2026 14:01:01 +0000
Files and hashes:         1: 0KUFbz0khMkDd6i1hVC0Gk78b8Q.roa (hash: e4QKXhdU4Y0/6TdXU9kKaC0Et/ZZz02AZrZMzhkrhqs=)
                          2: 4dbfLFgTwDYrqXnFB2f4xHMplQw.roa (hash: qdee12QBSfwV430rgWvKnONQnxAQwUpDJUc9sSl89Tk=)
                          3: 7E-wYalCbk-yiF2CKGdXKhtYpMA.crl (hash: afLbckXt+aE2VTEYLi70dPfJqHNOeKkUkpO6p23Cm/k=)
                          4: FQNKTNWujcNGigXV8pZHkAVMNZE.roa (hash: iC6zv08D3AEY5XiwSyy8m/zH3R4QBAh7AJZZ7JpPyI8=)
                          5: K2LNv1z48hNFFlzRSYowSy0Ha38.roa (hash: rgP0qv2b0VyfQUIaOOjPzTbyBIqlmlW8gSl7h4qofNM=)
                          6: QAfMhvFz23E5j-VZNuNUHJaS27A.roa (hash: 1c6wEWGOfe30pbIdsgVXmuoN1jcDboRJaqg+bTctZUo=)
                          7: fScuGoqudu5TxiE70DprlLcKYsM.roa (hash: Qna0Roz67B/VzCkvRv3pYKjnRZOrhXbgEhbWUZJL9So=)
                          8: hNasAoFXJpf84Bz1Xaihga7mO48.roa (hash: YsM4TPILzr8bjaSLtHnGErqmMAG4d1688MzxlR+p/sc=)
                          9: x_MESfhEqxOpfv7-RrmmKFZTQsM.roa (hash: CgnbbvmY6nJeIwGOkAE0qQBeAzVO6strLDPz3xd7ol8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:6b:84:c7:6a:dc:43:91:0d:90:19:fa:9a:02:7a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
        Validity
            Not Before: Sep 22 14:01:01 2026 GMT
            Not After : Sep 23 14:01:01 2026 GMT
        Subject: CN=469dacfd0868d1034e2c81bfadcf680b17aeb834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:6e:fe:70:78:55:50:24:12:a0:d6:0a:c0:
                    55:fb:60:5d:8a:d8:5b:40:52:42:c4:81:9e:af:40:
                    76:5f:93:fc:77:d9:48:87:58:57:e8:fa:9e:0a:f7:
                    05:ed:26:ae:b0:3f:16:0f:e6:1a:dc:d8:23:bc:5d:
                    50:f1:bb:bb:62:3b:e3:1d:3d:fa:10:96:79:53:11:
                    84:1f:6e:96:da:de:ac:d1:9e:08:70:ec:c4:77:1e:
                    4b:4e:96:b3:75:85:81:d1:51:3d:19:1a:c1:4c:45:
                    ae:52:f7:29:b7:70:ec:70:5d:b3:10:39:f7:d2:bb:
                    c1:da:02:af:f7:e9:b8:dd:89:8b:37:9b:fb:27:4e:
                    aa:aa:95:77:bf:5c:83:58:66:16:57:25:ba:b5:d5:
                    6b:94:b3:77:7d:e3:34:12:fe:77:18:6b:3d:31:e3:
                    eb:31:bf:f4:f3:0e:1d:2a:68:61:7c:ee:4e:2d:c1:
                    29:a5:f1:0c:d1:64:3b:1b:c6:82:2c:62:a7:0e:ae:
                    a2:cc:d4:33:21:bd:de:75:8c:12:30:63:ff:f1:9a:
                    69:22:b0:b7:de:a6:1d:13:40:1c:d9:44:3f:56:80:
                    ea:97:53:1f:e7:66:89:6d:d2:73:48:77:70:84:a5:
                    46:52:60:de:a5:98:7b:2a:04:4a:39:d4:46:17:5e:
                    88:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9D:AC:FD:08:68:D1:03:4E:2C:81:BF:AD:CF:68:0B:17:AE:B8:34
            X509v3 Authority Key Identifier:
                keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f8:3d:70:5f:71:88:9b:8c:47:84:bc:e7:d2:d1:b4:17:1d:
         32:76:84:8b:32:54:e2:3b:57:c4:a0:8c:ec:bf:45:77:25:80:
         b3:69:9a:cb:7d:5c:36:c5:e9:53:db:c8:7f:b3:84:ee:ee:09:
         81:5e:d5:8f:7b:b8:a4:8d:8e:49:f0:bb:60:3c:cd:fb:97:42:
         27:1e:00:a8:f2:4c:84:79:93:be:a2:54:5a:88:0b:e5:eb:60:
         ec:79:28:55:dc:38:e3:06:22:78:cf:e7:fc:e2:c6:9d:1a:46:
         b8:83:be:23:dd:ce:5e:9d:52:31:ee:97:72:ae:30:34:cb:7b:
         e0:12:bc:1d:e3:ae:bd:01:56:61:0c:e0:17:4b:56:7a:98:08:
         31:70:3c:31:6d:d4:35:e2:5d:25:2a:31:2c:14:98:14:96:df:
         9e:5b:e3:d5:12:7b:9a:be:05:0a:42:b7:8a:7e:35:47:33:58:
         0a:eb:ce:36:ab:04:10:ed:af:e4:55:25:6b:da:76:4e:db:ff:
         3c:29:61:1d:ef:25:06:c3:f6:51:1e:bc:e9:be:10:0a:45:a0:
         5b:a0:ec:a5:7c:2c:10:da:35:45:16:0e:1a:82:3c:f6:d8:a5:
         98:0f:c1:b4:8d:aa:b5:8b:dd:45:f0:f7:d9:2d:cd:52:0d:19:
         77:bf:54:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:39:37 2026 by rpki-client