Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
File:                     7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft (raw, json)
Hash identifier:          jfNIRxKxD+w++gZo/eaxEK58f2D/tRHIPi1UotNCpj8=
Subject key identifier:   8B:31:46:1B:77:B4:35:70:3D:DF:12:2D:35:4E:3D:81:D2:62:77:04
Authority key identifier: EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35
Certificate issuer:       /CN=ee9f79ab1d59847ff1f2e961218c159af264d835
Certificate serial:       01A0F8334AF0881AC0B15C56AF96AD2E08D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
Manifest number:          139F
Signing time:             Thu 01 Oct 2026 16:01:46 +0000
Manifest this update:     Thu 01 Oct 2026 16:01:46 +0000
Manifest next update:     Fri 02 Oct 2026 16:01:46 +0000
Files and hashes:         1: 7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl (hash: IOZYfdCpPwiRBvvnaQnsCxrIZ6j2EKpsmCHYDHBt6qs=)
                          2: srZUUGDlWtNFxGr6_i87D_AeupI.roa (hash: HDXgxF2evGxQOPaC9Ztutyp90BmjyDMAfjNNqDMFf4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f8:33:4a:f0:88:1a:c0:b1:5c:56:af:96:ad:2e:08:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee9f79ab1d59847ff1f2e961218c159af264d835
        Validity
            Not Before: Oct  1 16:01:46 2026 GMT
            Not After : Oct  2 16:01:46 2026 GMT
        Subject: CN=8b31461b77b435703ddf122d354e3d81d2627704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f2:82:71:44:fb:17:49:06:16:4e:b0:a9:02:
                    37:99:83:ee:f9:e4:91:c1:80:02:68:b0:3b:44:f7:
                    3f:ad:ba:82:fe:a3:73:bd:dd:8a:54:26:d0:a0:2a:
                    3c:2c:86:fe:f5:f7:96:5e:2c:80:83:2f:a3:f3:fa:
                    a2:b1:ba:82:2a:4e:4a:ae:ee:6d:2a:f6:7a:f3:37:
                    60:33:96:c7:13:07:a9:b7:25:ea:2d:b4:a3:5f:8a:
                    17:8d:bc:0d:98:9e:de:88:d8:6f:1b:09:42:9a:93:
                    da:a6:bc:76:35:85:59:cd:16:48:db:01:46:b1:8a:
                    09:f5:15:9f:6b:71:68:6a:ea:7c:32:cb:8e:1b:76:
                    30:09:28:de:85:ee:96:17:83:21:41:e1:72:9c:ac:
                    bf:30:a7:f4:67:4c:d2:2c:c6:0c:5d:7d:e1:7d:37:
                    05:1e:b0:09:1a:77:7e:f8:30:3b:45:0f:7c:d4:25:
                    f4:38:cc:5f:b8:f3:a9:b8:ac:f1:d5:a1:00:fe:3b:
                    2c:d2:56:b3:5e:6d:46:7a:35:c6:9a:95:30:b5:f2:
                    59:01:08:72:4a:7d:d4:57:d2:57:a4:50:2a:18:56:
                    b4:49:7f:0c:ab:ee:01:70:5d:a7:9c:4a:5b:86:b9:
                    05:d4:44:ec:e8:44:ad:88:e5:22:7a:ba:d5:37:6e:
                    1a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:31:46:1B:77:B4:35:70:3D:DF:12:2D:35:4E:3D:81:D2:62:77:04
            X509v3 Authority Key Identifier:
                keyid:EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:bb:f3:ac:54:e0:09:24:f4:ae:c6:b5:98:a7:70:5a:a6:ba:
         d6:89:04:f6:d0:30:45:19:72:5f:42:3e:59:77:ac:86:5f:f1:
         a4:7c:25:29:1c:ab:79:66:3b:9f:30:4f:93:b4:12:6f:61:c6:
         5c:8f:23:45:b5:39:a5:f4:99:0a:d6:e5:70:73:e0:21:a1:08:
         07:12:3e:3a:95:89:74:a5:96:b3:4d:e7:59:4a:68:19:b7:83:
         04:bb:51:ba:f1:ed:88:b2:89:be:67:f1:a6:f0:af:1f:a9:17:
         54:b1:cb:83:c2:de:9b:8b:df:bc:46:a0:5a:f2:80:f3:a6:85:
         b2:4d:60:0d:55:69:92:2b:a5:c8:de:de:13:59:50:ca:ad:63:
         f4:cb:35:5a:7f:dd:40:70:90:ab:0f:c0:44:ec:64:ff:22:3f:
         d6:75:96:49:d3:93:64:b2:a9:6c:be:fb:e9:d2:b9:f1:b3:bc:
         86:09:95:d5:2e:92:e8:7e:1b:3c:3e:b9:63:50:66:a4:80:4f:
         0c:24:83:f2:05:83:87:fd:0c:a6:ab:6a:94:1e:d1:d2:54:d8:
         a3:40:88:a3:c6:26:d2:c9:8a:e7:a7:ad:e9:26:a0:11:c6:8c:
         eb:29:db:43:22:0a:b9:ab:f9:b0:e0:99:99:31:5e:81:36:18:
         08:0f:4e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:01:59 2026 by rpki-client