Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File:                     7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier:          KUA78HD33ygrgBi+nIBRL6RrHCG1eR8gKFmLMRIBk1c=
Subject key identifier:   F1:75:3A:61:FB:04:93:00:D3:05:2C:D2:C9:19:AF:9D:F8:0E:66:D5
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer:       /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial:       01A0D0803301B99126D4977C7A538AA417AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number:          13D6
Signing time:             Wed 23 Sep 2026 23:00:57 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:57 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:57 +0000
Files and hashes:         1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: b1jwapOdpqwBjrxX1NThxRTrFO8EyNUWvUyaVdQY7U4=)
                          2: ROD76SwfYB6C6gAmh6ocy7RmvzY.roa (hash: 8kz9BVZL6aAIte+oXvcJlqrJDsa6yWdXpOPNdQQYCKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:80:33:01:b9:91:26:d4:97:7c:7a:53:8a:a4:17:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
        Validity
            Not Before: Sep 23 23:00:57 2026 GMT
            Not After : Sep 24 23:00:57 2026 GMT
        Subject: CN=f1753a61fb049300d3052cd2c919af9df80e66d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:fc:5c:6c:ad:15:b6:8d:61:32:ea:9f:9d:
                    b8:e7:2f:fd:55:f5:84:fd:36:35:a3:ba:12:df:b9:
                    8b:5b:94:76:00:71:f7:9e:95:47:d6:0d:18:52:b7:
                    f3:15:86:26:76:ef:10:02:31:31:0d:9d:cf:e4:ea:
                    08:16:21:e6:e1:23:60:75:92:cf:46:b0:66:19:88:
                    53:88:a9:c7:f6:2f:65:fe:f8:2f:f7:b9:8c:65:6d:
                    26:12:f2:73:fd:dc:12:f7:70:de:40:d4:8a:7c:df:
                    4f:b2:37:fe:62:5b:c4:f1:72:08:d9:ec:a8:63:36:
                    7d:19:24:91:a2:0c:b6:16:c0:51:ac:1b:db:f5:24:
                    97:39:05:06:9f:fb:1d:90:80:f3:89:6a:94:3a:4d:
                    5a:57:2f:06:33:6d:07:5c:af:9d:69:cd:b8:69:6c:
                    0a:36:07:d3:c9:02:46:95:73:8c:3a:7a:2e:24:64:
                    e0:07:ee:71:16:af:00:fa:7b:fe:37:55:55:d2:24:
                    fd:15:15:7f:f4:44:ab:bf:59:e8:c5:fb:dd:84:75:
                    43:18:e6:08:fa:f9:84:de:70:b2:8b:a1:71:22:9c:
                    e2:15:5e:5e:f4:af:a4:8b:4d:77:42:6c:b9:26:3e:
                    70:76:7a:5b:f8:65:b0:e4:71:1a:3e:dd:15:83:19:
                    06:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:75:3A:61:FB:04:93:00:D3:05:2C:D2:C9:19:AF:9D:F8:0E:66:D5
            X509v3 Authority Key Identifier:
                keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1b:03:a0:b6:83:1f:bd:3a:a2:07:c0:3f:42:95:9a:c5:ce:
         f3:d8:ae:db:2b:03:41:0b:78:7e:95:26:c1:84:d0:0f:1c:ad:
         fd:ae:2a:c3:cb:76:89:ed:24:49:82:0f:1f:03:22:cc:41:aa:
         34:50:21:a3:51:2a:64:be:0d:40:01:59:75:09:04:9f:63:1d:
         ea:74:0b:89:0a:9b:ba:e3:b7:60:a2:a7:32:2d:7d:f0:bf:54:
         eb:f1:ac:3f:8b:ba:d3:65:26:4a:11:dd:da:bd:a7:24:62:e9:
         a2:ae:08:e7:a4:a5:b5:99:79:63:8e:65:6c:82:28:a7:53:a5:
         2c:86:7c:16:d7:e6:a9:40:28:53:e5:3c:cb:9a:72:73:6b:69:
         4c:cb:f2:23:27:f1:b4:bb:d2:7e:68:a0:c8:9f:29:b8:6b:03:
         9d:34:ed:8b:4f:47:54:03:91:2d:cf:38:26:1d:32:2a:2b:d6:
         b1:7b:82:58:99:0f:9b:8b:d9:0c:b4:5c:19:41:0c:08:64:74:
         3d:36:a2:0a:15:3a:ef:5a:a8:f3:0d:0a:b6:db:62:fd:e7:3b:
         01:0e:d0:5b:4b:f9:48:b2:1f:6e:a7:f0:a8:ed:83:ea:4e:1d:
         bc:0c:80:31:af:77:64:d6:d4:ff:c2:60:c0:51:68:11:ba:9f:
         d1:bb:29:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:05:25 2026 by rpki-client