Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
File:                     7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft (raw, json)
Hash identifier:          AG4rz5cb4WStbLUcawP15SvphzLi7Kv+DgrnHyRH9rg=
Subject key identifier:   29:AC:5C:36:5B:74:74:71:20:1F:EC:3C:F6:A7:4E:73:72:0B:D3:BE
Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
Certificate issuer:       /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Certificate serial:       01A0CBFE2DE43B53D9DF484BEF30FA7A29F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
Manifest number:          11B0
Signing time:             Wed 23 Sep 2026 02:00:27 +0000
Manifest this update:     Wed 23 Sep 2026 02:00:27 +0000
Manifest next update:     Thu 24 Sep 2026 02:00:27 +0000
Files and hashes:         1: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl (hash: Il/S2DrWwLE7CJNUHJAKo8F4Zb2TnEKNN24z/i/Y2ak=)
                          2: yc7G-ROKb-E3Qa_pTySk_r80ExA.roa (hash: Oq1bVdBMV8pMHPuNlBGQjQUpA0Eb9NSaz7n09Cauln4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 02:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:fe:2d:e4:3b:53:d9:df:48:4b:ef:30:fa:7a:29:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
        Validity
            Not Before: Sep 23 02:00:27 2026 GMT
            Not After : Sep 24 02:00:27 2026 GMT
        Subject: CN=29ac5c365b747471201fec3cf6a74e73720bd3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:2b:36:4e:66:cf:94:80:aa:23:ea:ce:f1:
                    20:40:46:04:4e:a7:ea:c7:ff:e8:8c:5c:83:70:5b:
                    c9:78:0d:a3:2b:47:e2:b3:ea:01:45:9b:b7:4d:be:
                    fb:bb:e7:d4:01:b7:e2:73:ba:69:4e:94:8b:50:20:
                    27:56:50:39:c4:10:18:d8:92:5c:18:eb:6f:a1:eb:
                    63:c0:b4:85:a6:f6:59:a9:0f:ab:04:18:c8:25:b0:
                    8b:bf:b2:b5:33:fd:a0:a3:17:a5:1d:a0:b8:2f:ae:
                    ff:6a:7d:23:1d:d3:5c:54:74:a3:29:11:59:f3:25:
                    93:7a:f1:5e:79:11:22:59:3a:73:71:d7:e3:25:ba:
                    34:b1:b2:12:c8:04:74:e6:b1:c3:d0:72:73:25:b5:
                    3d:5e:1e:32:f8:31:1d:4f:4f:51:7a:b1:e6:f5:4a:
                    f3:16:9f:e1:69:37:c4:18:69:60:8b:04:36:b6:96:
                    27:e8:56:cd:c4:92:de:3e:3e:12:a7:66:fa:fd:1e:
                    85:b4:cc:81:70:31:01:2f:12:97:d8:46:c3:f5:52:
                    2f:ae:8d:d8:3e:95:8e:8a:b9:cf:e2:63:80:f6:9f:
                    d6:81:cd:74:73:12:49:db:cc:fb:ad:eb:4c:99:83:
                    1f:03:e7:6c:ca:8b:f7:2d:15:83:b0:35:b0:95:f5:
                    73:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AC:5C:36:5B:74:74:71:20:1F:EC:3C:F6:A7:4E:73:72:0B:D3:BE
            X509v3 Authority Key Identifier:
                keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e2:da:20:ca:b9:19:2c:45:7e:ab:59:13:2a:39:d8:0b:eb:
         a3:4c:a0:8b:ec:eb:af:c4:a8:34:cd:2f:f3:d1:56:0d:88:4c:
         97:59:ee:26:6d:77:da:3c:9c:c2:3b:57:bd:81:ed:8c:fe:81:
         d4:9c:fc:85:3e:eb:5e:a3:c5:1e:a8:d4:d0:0e:24:18:dc:b1:
         d2:1a:87:07:ff:1d:53:c9:e6:50:bb:dc:56:e7:40:7d:7b:7b:
         fa:be:33:bd:f5:a8:75:ba:f1:6d:97:55:e9:1b:5a:54:d6:7d:
         a5:7b:70:29:79:52:e1:b8:18:35:a6:4f:dc:f0:84:07:2b:96:
         38:01:41:a1:08:8b:b0:47:2d:83:1a:c5:e1:1a:6e:55:fa:a8:
         75:8f:9e:12:f5:dd:8a:f3:fc:2a:1d:dd:fa:fc:0e:0e:4a:8b:
         f8:3d:cd:2c:14:22:65:02:fe:58:57:5a:48:aa:52:92:04:45:
         3c:10:f6:0e:17:ee:13:88:3f:87:79:c2:2c:37:72:09:b2:52:
         2e:8d:a9:2d:c1:73:7f:5c:7e:37:e7:53:36:f5:d0:3d:1c:cc:
         aa:21:8e:6d:65:cb:2a:37:32:ed:a9:4f:48:9e:2b:0c:f9:21:
         93:63:8c:e0:17:6f:b5:59:f9:c7:ff:bd:6f:0c:ae:ed:d5:af:
         a4:fa:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:51:27 2026 by rpki-client