Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File:                     7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier:          D9Hz9k1Fqa+wkQ6UzeD3tH3PGepYlArGMNYPu9moTSg=
Subject key identifier:   85:86:BD:87:1C:8C:32:E8:42:86:2F:3C:D1:7F:ED:AE:A4:BB:97:F0
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer:       /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial:       019F8FEC345162ECD7E8C5D9818F96A8C30D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number:          0627
Signing time:             Thu 23 Jul 2026 17:00:49 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:49 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:49 +0000
Files and hashes:         1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: 9VFpPE+F3diZILEdP89NZfLHLdp6tfM9eW/5Bu9ybPc=)
                          2: 8PYO221ijm73GqludhO0afrN2sw.asa (hash: cTow358n5VSy6y4+z4cDy48Lusx/C9hmIjmQirPwShY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:34:51:62:ec:d7:e8:c5:d9:81:8f:96:a8:c3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
        Validity
            Not Before: Jul 23 17:00:49 2026 GMT
            Not After : Jul 24 17:00:49 2026 GMT
        Subject: CN=8586bd871c8c32e842862f3cd17fedaea4bb97f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:17:73:a1:ba:34:d3:ba:0b:da:d8:9d:35:d6:
                    da:33:28:cc:ca:c9:4e:12:51:16:33:d2:33:78:2f:
                    fd:11:03:8c:10:da:6e:87:53:a5:97:17:60:18:15:
                    34:b6:ae:1b:55:8e:e7:cf:30:04:cc:d6:e5:7b:ed:
                    85:8c:f8:11:78:a3:52:3c:46:e8:27:c3:e9:58:12:
                    78:f2:f0:1f:7c:5e:01:4f:7d:ab:0f:46:c1:43:6e:
                    e2:16:3a:e5:3d:b7:c1:c1:0d:7a:fb:bf:00:44:f8:
                    d6:ea:b1:25:73:e1:81:4b:af:7d:58:f7:93:17:85:
                    8f:3a:26:91:5c:28:6d:a7:7a:d9:e2:8e:a7:64:e7:
                    d7:b3:ae:72:99:38:ac:ef:a0:6d:fe:92:b8:e4:55:
                    e4:d1:99:d4:47:75:df:49:11:b2:d2:2f:24:ce:27:
                    9a:7d:4e:4e:1d:79:f3:bd:ee:5b:ce:fa:94:40:b0:
                    6f:75:11:53:d0:51:7a:e7:56:96:d1:27:b5:c1:fe:
                    7d:a8:74:11:77:39:15:5a:c1:eb:c8:93:a0:f7:27:
                    2c:69:e2:8a:10:c4:f8:ac:7d:f2:49:dd:1b:85:48:
                    d1:fe:e9:2f:19:4d:f7:ce:29:95:2f:2e:03:bc:10:
                    3f:14:bb:a3:e8:b6:81:44:93:bd:aa:e3:f8:51:f7:
                    72:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:86:BD:87:1C:8C:32:E8:42:86:2F:3C:D1:7F:ED:AE:A4:BB:97:F0
            X509v3 Authority Key Identifier:
                keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:66:05:83:60:4d:72:c3:0b:8a:a9:c2:8d:ae:57:f1:12:95:
         c3:e6:e8:58:0c:21:af:f0:a5:f8:97:ca:4e:51:9d:b3:4b:64:
         8a:65:60:c3:13:5c:1e:50:08:d9:3c:0e:1b:f2:62:74:f5:7f:
         14:57:e4:5a:3d:1a:ab:9b:ed:b9:36:95:8d:a6:59:11:ef:40:
         e2:11:33:16:a1:72:ad:59:65:c4:61:7f:ae:18:02:0f:8b:d7:
         9a:0d:00:37:87:9c:d7:db:ae:1d:dd:03:6e:b9:88:89:18:82:
         5f:6f:e1:8a:7a:2f:5e:80:58:0b:9f:fb:de:ee:3e:c6:bb:19:
         49:49:45:54:e0:b8:21:96:39:49:c7:f8:3f:a5:08:22:f8:d8:
         eb:68:b4:19:86:a2:8e:73:e0:f0:74:62:84:9d:6f:96:60:38:
         ef:c5:96:73:84:cc:61:dc:00:b6:09:8a:6c:e2:d1:4c:1e:5c:
         39:a4:1d:72:9e:7e:99:e6:9e:b7:69:45:f2:29:e9:35:94:a1:
         fe:a7:92:26:e6:38:d3:18:82:b6:2e:6d:5d:0c:8c:35:cb:89:
         61:2a:ad:1e:7e:39:93:21:23:6a:2d:dd:88:cd:c3:3e:ff:5f:
         e8:12:2f:06:53:fc:fa:22:b3:54:06:5b:9e:f0:66:df:7c:92:
         62:37:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:08 2026 by rpki-client