Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
File:                     7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft (raw, json)
Hash identifier:          2ItFNMUnttblt+5wYcUb80rFZsU8cNLVlBu5d1FgQiw=
Subject key identifier:   0F:14:B2:65:E2:BA:06:E8:31:EC:15:5E:A5:5C:2F:67:7D:41:DA:7E
Authority key identifier: EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66
Certificate issuer:       /CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
Certificate serial:       019F927F444C6D9E2EA15D138E7001577E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
Manifest number:          0822
Signing time:             Fri 24 Jul 2026 05:00:41 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:41 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:41 +0000
Files and hashes:         1: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl (hash: TA3tjZZdcXDTzy8AXlxBxJIQr1onIz8OHQZPRpfaGls=)
                          2: cFm6ye9YYzLfyOwoeW-SophEslI.roa (hash: wK5ZZbYjXfq8ZMAuBJ6aukKc/TCZu0uxRC1ZIPKuaL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:44:4c:6d:9e:2e:a1:5d:13:8e:70:01:57:7e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
        Validity
            Not Before: Jul 24 05:00:41 2026 GMT
            Not After : Jul 25 05:00:41 2026 GMT
        Subject: CN=0f14b265e2ba06e831ec155ea55c2f677d41da7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e5:d8:e9:17:ef:7a:44:40:d6:ba:0d:d9:0f:
                    89:ac:5a:67:2a:c4:fe:b9:f5:2c:5d:eb:73:45:cb:
                    b3:00:07:cd:ad:24:d0:62:a3:d1:7d:31:f4:28:e6:
                    45:89:21:68:59:66:45:ea:00:fc:9a:05:ad:95:aa:
                    c3:d2:c2:21:6e:57:17:d0:86:d8:8b:4c:a0:62:a5:
                    c8:c2:d7:7a:42:55:c4:5f:98:bb:4f:81:4e:19:44:
                    61:09:6b:c5:7e:54:1f:80:70:76:9e:76:2d:83:e7:
                    f8:57:d4:0c:fe:eb:c2:be:24:fc:05:93:58:89:2b:
                    48:a0:09:77:c7:28:02:64:21:89:eb:c6:87:16:a5:
                    b6:75:bb:f0:a8:c4:03:b5:d7:a9:5b:2e:84:2f:18:
                    54:a9:b7:56:6b:09:da:84:00:1b:6e:60:6e:da:48:
                    93:8a:58:cd:08:a5:31:a8:48:ac:93:99:a4:bd:1f:
                    34:5f:b5:ab:b2:9f:ba:1c:b0:47:a6:ab:bc:99:7b:
                    86:f7:4a:73:f1:b5:c0:88:29:58:82:f2:d8:03:4e:
                    e9:6a:62:5b:3f:b8:fa:0e:08:93:51:a3:8f:c8:79:
                    b8:ee:51:c9:83:39:bf:48:1b:a2:6e:1b:e4:63:2f:
                    52:3d:1d:fc:04:26:e5:23:4f:74:c6:48:5b:26:81:
                    b7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:14:B2:65:E2:BA:06:E8:31:EC:15:5E:A5:5C:2F:67:7D:41:DA:7E
            X509v3 Authority Key Identifier:
                keyid:EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8a:24:47:ef:95:e7:77:57:87:a3:77:aa:90:8d:0b:90:9a:
         d1:10:4c:60:14:a9:0a:db:47:d3:bc:10:d4:c7:0b:71:cb:06:
         74:a3:67:f7:b6:bd:b5:0c:03:2e:a5:d2:5c:0b:b6:90:90:54:
         08:5b:3b:51:c8:31:1a:ad:fd:12:ef:0c:8f:ff:0c:fe:70:84:
         4a:c7:a9:a9:2d:6d:22:bd:72:54:6e:db:06:f3:20:11:10:31:
         c4:e8:11:e1:54:2b:a0:e1:68:4a:ac:76:ce:b1:75:4d:dc:c5:
         86:5e:65:74:3c:a8:f0:cf:32:a1:6c:17:b1:d4:51:2f:90:dc:
         b4:c4:8b:8a:88:7c:8d:32:2b:40:ab:4e:41:94:99:80:e1:09:
         8a:29:a4:a5:92:c6:57:78:c3:ab:28:61:48:ee:85:a3:39:0c:
         1c:51:d6:b6:67:c5:fc:87:b8:73:91:83:8e:e0:5d:6b:29:aa:
         45:03:24:e1:c4:0e:97:11:ae:69:e8:a3:96:f7:5b:bf:a9:19:
         f2:5d:05:dd:6c:15:0d:fa:c5:3a:21:20:db:4f:5d:c0:bd:f7:
         8c:f9:9a:d8:cb:ff:ab:c8:88:d1:df:80:ba:fd:63:08:7b:cd:
         8b:64:93:b3:4f:32:d2:87:d4:df:74:c9:72:90:fe:bd:0b:4c:
         56:78:fe:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:30:35 2026 by rpki-client