Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
File:                     7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json)
Hash identifier:          /bsMZhb+Zs6VGDTLvrQBMxL/C8K4oMvAo0DFxJJI9Jo=
Subject key identifier:   53:89:C2:F8:C9:18:E4:AD:ED:8E:B3:D6:B6:39:05:F9:A4:75:97:D8
Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Certificate issuer:       /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Certificate serial:       01A0E286F5B63B9A77BC5EE493D57B2DB67F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
Manifest number:          0F54
Signing time:             Sun 27 Sep 2026 11:01:30 +0000
Manifest this update:     Sun 27 Sep 2026 11:01:30 +0000
Manifest next update:     Mon 28 Sep 2026 11:01:30 +0000
Files and hashes:         1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: AO3cXwR1urC+B/scrouP5FOO9AfeCI4iSglOQ/RpsUE=)
                          2: IqhV71F7TO-uufaDi-3V7cOA8v4.roa (hash: ujk4NKl8mbgWsjNbR+1EId5G7vMy3PlJJL6cjMfDFaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 11:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:86:f5:b6:3b:9a:77:bc:5e:e4:93:d5:7b:2d:b6:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
        Validity
            Not Before: Sep 27 11:01:30 2026 GMT
            Not After : Sep 28 11:01:30 2026 GMT
        Subject: CN=5389c2f8c918e4aded8eb3d6b63905f9a47597d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:ae:24:ab:ea:0b:48:ef:e0:61:ac:bb:19:
                    3a:26:e9:51:1f:88:cb:96:dd:ee:56:ff:9e:8b:c1:
                    cd:2a:5e:22:ce:70:51:f1:c4:d1:c1:d2:55:05:66:
                    29:0d:40:fb:06:9a:aa:d1:8a:00:ce:69:30:e4:0a:
                    9f:dd:84:d2:e6:fb:e1:de:3c:27:e6:2d:08:f8:be:
                    75:45:6e:67:0e:a9:05:1d:cb:e4:9e:d1:78:0f:c8:
                    d3:d4:ec:d1:76:4e:25:c7:f3:4f:21:0f:a3:4c:9b:
                    bb:d0:bd:f9:ca:54:77:ed:81:72:ec:dc:84:58:19:
                    61:c2:b8:bd:7b:df:d8:dd:ae:47:8c:40:c2:1b:ba:
                    99:98:f4:82:bc:e5:d4:62:a4:78:a8:50:4f:0b:f1:
                    a7:bf:9a:fd:18:41:79:c8:12:74:ab:30:5b:ef:ae:
                    94:64:a7:b7:15:01:b0:30:0a:34:e6:88:76:ef:fa:
                    7d:4d:7a:a5:4e:a2:b8:c4:c2:ec:93:52:5d:a7:b2:
                    3c:d0:55:69:15:fc:ce:b9:1b:48:ba:2d:43:c1:25:
                    a5:89:cb:d8:68:31:ce:31:d5:64:6f:e5:72:9f:7f:
                    c8:b1:2e:e6:46:be:1b:63:a7:64:0e:f8:5d:3e:4e:
                    c2:ba:1e:c4:eb:38:e0:f9:55:45:da:ef:d2:e9:e7:
                    e6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:89:C2:F8:C9:18:E4:AD:ED:8E:B3:D6:B6:39:05:F9:A4:75:97:D8
            X509v3 Authority Key Identifier:
                keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:51:a5:a2:60:f0:2d:eb:1f:c9:a8:b2:59:0c:6a:f2:e0:55:
         d8:02:75:86:c6:4c:05:43:94:2a:15:c7:19:f7:56:aa:c2:d3:
         32:ed:60:65:ed:b0:4e:cf:61:ef:ea:3d:42:e1:00:91:66:e7:
         70:d1:e9:a9:ca:99:6c:9b:2b:c7:e9:da:00:51:a4:03:de:07:
         5d:0e:6a:8e:f1:e6:2b:e5:23:fa:cd:11:de:72:06:12:c3:25:
         4a:18:eb:66:d6:47:f0:34:c9:99:27:5e:c7:a3:e2:20:fa:45:
         8f:8e:ce:28:21:54:a7:65:cb:29:a9:24:e0:d1:cf:98:3a:47:
         16:6b:f0:38:59:00:7a:a4:ae:03:48:79:77:8c:3c:93:13:0e:
         78:84:0d:ec:72:86:c8:aa:39:a3:4d:0a:13:4b:28:12:55:f9:
         25:c2:8e:16:4e:90:c2:98:82:cd:da:da:48:fd:ec:aa:e8:60:
         8d:2f:15:04:0e:0b:35:d3:af:9f:e1:db:ec:a5:fa:2c:a3:8b:
         b8:71:df:0b:dc:61:95:8d:b6:fe:a5:ee:c9:e2:5b:7f:c0:80:
         42:e5:d5:a9:f8:f6:a4:4a:ab:71:d6:9b:3e:64:ec:0f:51:b4:
         18:e0:4c:59:d9:61:2b:ae:34:27:de:28:f2:37:39:ff:ea:5e:
         ad:7c:73:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:19:08 2026 by rpki-client