Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File:                     7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier:          YGVdQEQkfI7JEKtt3ST758JmXWgD7ODGKCezg0Lxz1c=
Subject key identifier:   C5:43:50:46:CD:CB:96:6B:82:53:C3:05:FE:DF:71:95:87:11:0E:DF
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer:       /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial:       01A0CB598D4585643AF79CC8A96667432FCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number:          07AC
Signing time:             Tue 22 Sep 2026 23:00:38 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:38 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:38 +0000
Files and hashes:         1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: GsV3Mr2Wgkg28YgXWPZIZXbFZaoI7ZZUU4T3yxLSovQ=)
                          2: s7LS5E2_BqhGC5kkRJyj8qADFIY.roa (hash: F29Cc0fGTR/n9/kt6ymI38j28/wC/Ug/3ed8suC1jpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:8d:45:85:64:3a:f7:9c:c8:a9:66:67:43:2f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
        Validity
            Not Before: Sep 22 23:00:38 2026 GMT
            Not After : Sep 23 23:00:38 2026 GMT
        Subject: CN=c5435046cdcb966b8253c305fedf719587110edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:40:d1:73:32:19:aa:70:ea:67:38:98:25:
                    74:93:2e:63:18:48:53:63:f6:2d:a0:94:0e:0c:e5:
                    a9:80:75:50:ec:14:13:e3:f2:e3:cb:50:51:0e:f9:
                    4f:35:d3:97:b2:66:7f:7c:4b:c6:b5:f9:37:8b:48:
                    66:c5:7e:1a:06:32:31:75:3c:ec:fb:ae:d1:58:dc:
                    68:f3:6f:81:96:95:f3:2b:45:c0:4e:1d:73:b7:c6:
                    55:86:86:8b:b8:50:b0:0d:bf:0f:80:95:f5:47:74:
                    3e:c1:e3:34:fd:f2:d7:2f:27:cf:80:96:17:87:87:
                    c9:df:64:ed:04:c2:26:b9:81:d6:43:78:55:ac:2e:
                    0d:49:13:e8:94:8f:55:4e:e1:e1:23:af:a3:7a:eb:
                    19:af:f3:02:54:cb:a4:16:a9:f3:b1:81:ed:46:f2:
                    69:00:d0:ce:b8:95:60:e0:aa:d5:28:81:06:19:8b:
                    f6:d4:d5:24:58:f7:a9:7a:2d:04:f3:1f:c6:a8:0d:
                    fe:b3:7a:9e:de:5c:61:83:85:a0:3e:32:a6:da:51:
                    11:82:99:c0:58:e5:30:ac:05:dd:b3:30:a4:99:65:
                    0a:1b:7d:ec:a3:08:3d:a6:7c:47:f7:61:f9:8e:70:
                    03:0f:41:99:42:cf:51:5f:d2:42:5a:14:23:2d:b7:
                    9b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:43:50:46:CD:CB:96:6B:82:53:C3:05:FE:DF:71:95:87:11:0E:DF
            X509v3 Authority Key Identifier:
                keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1c:b0:98:01:38:75:57:8b:55:ec:f2:8c:57:21:12:6d:f2:
         3b:80:66:25:31:26:2e:e8:d1:c7:bd:ad:59:3c:09:1f:da:1a:
         3b:67:22:f0:1d:93:f0:13:5c:f8:10:47:9a:2d:fd:d8:f1:9e:
         e6:9c:a4:d5:a2:c6:a0:54:19:b2:ab:9f:4d:60:04:df:46:5e:
         dd:c0:7e:22:45:4b:5d:76:ad:3c:f3:0f:57:2e:6f:0d:23:ec:
         59:65:f9:13:22:87:c4:b8:ac:d5:8e:76:d7:2b:05:03:ff:4c:
         fe:12:fe:8f:c1:a0:81:e8:91:07:c4:b0:b3:73:a6:ea:06:b3:
         11:25:a6:84:2c:e7:72:65:ab:c0:f2:c1:22:70:63:f0:06:83:
         b2:3f:44:d0:fc:36:9b:dc:a3:e5:e6:74:43:ff:1f:23:c1:83:
         1f:49:b5:c3:a9:5e:17:08:a0:d9:b7:64:64:46:3b:75:d5:99:
         e3:a0:7d:6d:1a:85:04:6a:95:3e:12:7b:ad:b8:0a:47:f3:ac:
         8e:e6:aa:db:50:22:aa:0a:58:f3:20:c8:18:8a:de:06:c3:46:
         8e:6a:c1:95:52:d5:d0:a6:c9:00:28:98:f7:74:71:d5:ce:79:
         3f:a0:09:5b:e8:9e:df:3b:2f:81:b0:7a:4e:d6:84:02:b2:48:
         d6:d2:ef:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:08:58 2026 by rpki-client