Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
File:                     7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft (raw, json)
Hash identifier:          8FEZyfxnH6O6GFgZ3XGVzkvtnDrNXZuKau/bfptxMck=
Subject key identifier:   72:63:3C:18:FD:0C:2E:D3:78:49:F7:5E:72:39:B5:8E:24:4D:D7:7E
Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
Certificate issuer:       /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Certificate serial:       019F9135FBB64FE2C4129D5D60CD7087505F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
Manifest number:          110D
Signing time:             Thu 23 Jul 2026 23:01:01 +0000
Manifest this update:     Thu 23 Jul 2026 23:01:01 +0000
Manifest next update:     Fri 24 Jul 2026 23:01:01 +0000
Files and hashes:         1: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl (hash: X4TeWANGGleRu2FeV5L5nR3XmrAMQor6OwmonTgvAtA=)
                          2: yc7G-ROKb-E3Qa_pTySk_r80ExA.roa (hash: Oq1bVdBMV8pMHPuNlBGQjQUpA0Eb9NSaz7n09Cauln4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:fb:b6:4f:e2:c4:12:9d:5d:60:cd:70:87:50:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
        Validity
            Not Before: Jul 23 23:01:01 2026 GMT
            Not After : Jul 24 23:01:01 2026 GMT
        Subject: CN=72633c18fd0c2ed37849f75e7239b58e244dd77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a8:1d:89:27:70:c2:91:81:77:97:55:16:49:
                    46:bf:e2:05:50:2a:4c:0e:61:d0:81:f6:8b:21:b4:
                    f6:ba:a1:44:a6:27:38:ab:2b:68:ce:e9:80:72:30:
                    6e:82:dd:95:01:f2:ab:d4:1f:18:93:81:1e:a6:43:
                    bf:26:6b:6a:d0:be:a6:67:b9:09:82:d3:86:69:50:
                    8d:11:f3:e7:d3:65:33:98:81:5f:ca:07:e9:ed:92:
                    41:0f:7c:d2:d8:59:d2:b2:b1:6f:b1:34:1d:86:05:
                    f2:26:62:44:51:53:9c:19:36:6d:fe:a4:0b:94:c9:
                    8b:52:9b:bf:fd:42:18:e0:c7:fa:50:85:59:4d:fb:
                    32:bd:1f:b2:76:49:b4:6e:05:0f:6a:cb:eb:e4:91:
                    14:48:be:da:fa:c7:d9:42:b4:fa:62:c9:39:c7:14:
                    85:33:55:e0:e4:cc:00:c0:60:47:70:ef:b1:d5:99:
                    4b:00:fd:c0:c2:29:80:ad:30:4a:16:57:39:a7:4b:
                    4e:bd:9f:fb:2a:0a:5c:b7:8d:1a:f1:40:0e:a4:57:
                    3b:8b:4d:62:d5:eb:a4:d4:46:62:68:7e:38:56:70:
                    a2:3f:54:3b:35:1d:6c:21:ac:db:51:3c:4c:2b:52:
                    27:3b:51:60:4f:14:31:4e:40:c4:e1:3c:0e:38:3a:
                    55:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:63:3C:18:FD:0C:2E:D3:78:49:F7:5E:72:39:B5:8E:24:4D:D7:7E
            X509v3 Authority Key Identifier:
                keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b0:3c:18:dc:dc:08:a5:82:ca:c5:bc:42:23:55:4c:c0:82:
         a2:76:29:7c:82:9e:c7:6b:57:6c:08:d4:f8:35:c0:a6:5e:68:
         e2:2e:03:2a:ac:c2:9b:51:f4:d8:3a:3a:2c:c1:9b:26:18:20:
         99:dd:b2:28:e1:8c:0a:c6:90:55:48:e6:70:0e:5c:3f:55:2a:
         f7:44:6b:a8:bf:bf:b0:2e:c6:90:cc:c1:be:b4:ae:c1:1c:29:
         4a:c6:69:19:98:d4:a4:f6:41:32:3d:91:b7:32:b7:61:a7:f2:
         7e:7c:75:20:52:84:e1:17:c9:dd:b5:72:83:be:27:b4:31:2f:
         ac:95:91:1f:f6:c0:c3:8d:8a:3d:18:c6:1d:43:6c:48:06:18:
         9b:1e:63:2f:bd:01:31:29:9d:be:75:de:b9:06:4d:1f:dc:d5:
         17:f6:66:a6:c0:1d:5a:c2:ae:00:96:ee:cc:8d:1b:8d:31:ff:
         8b:a4:72:e2:89:2d:e4:ae:a4:1c:c8:13:d2:96:87:01:46:99:
         e4:f0:b9:f8:c5:b2:84:9e:62:43:ca:1c:c8:9e:5d:b1:89:22:
         07:59:00:33:22:da:20:4c:ee:02:8f:3f:02:76:07:4e:90:70:
         be:bc:19:72:ff:a8:33:80:ac:54:b4:ac:66:66:1d:6c:21:fc:
         0d:09:2b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:09 2026 by rpki-client