Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
File:                     7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json)
Hash identifier:          2Xhhm677YKHZ1LYz0vNG5GtXnj2dSn8L/JhNBesVfz4=
Subject key identifier:   F4:5B:C4:E6:56:A7:20:2B:78:68:09:4B:05:5D:D9:D5:D7:88:0C:F5
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Certificate issuer:       /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial:       01A0D1249CE6F15C9E13268DEB2470D46B3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
Manifest number:          1154
Signing time:             Thu 24 Sep 2026 02:00:32 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:32 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:32 +0000
Files and hashes:         1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: T6OVk/Bv3l/PFV6Gfh90nTqhgDGuXlafNCnXH+F8fjQ=)
                          2: nl2woE4tEUQD3CSF7qKSvews-N8.roa (hash: L5p+cCQTpEMxnRlqVhomZChKjWD7GqqQzUPRzvLGeYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 02:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:9c:e6:f1:5c:9e:13:26:8d:eb:24:70:d4:6b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
        Validity
            Not Before: Sep 24 02:00:32 2026 GMT
            Not After : Sep 25 02:00:32 2026 GMT
        Subject: CN=f45bc4e656a7202b7868094b055dd9d5d7880cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f9:f7:f9:0a:65:5e:03:9d:1b:43:61:2f:d7:
                    35:c9:dd:67:95:6f:6a:35:c2:93:dd:f5:18:cc:b0:
                    83:fd:e1:f4:65:8f:1d:11:58:ec:72:c3:4b:2e:cc:
                    33:ca:88:d2:c6:61:86:81:b6:dc:cb:e6:8a:ce:65:
                    0e:f7:8a:11:4f:d5:9d:fa:3b:7f:c2:29:3a:10:95:
                    aa:5e:eb:08:9e:ed:56:e8:c0:b4:96:74:bd:ed:3e:
                    46:0c:1c:01:37:07:28:72:2a:9a:9b:4a:93:95:73:
                    4e:6c:93:04:4d:7f:3c:10:74:2e:43:ed:3d:44:fb:
                    e2:a3:64:0c:81:40:52:09:aa:a9:20:12:b5:c7:db:
                    fb:c8:ce:19:4c:3d:00:68:0e:1b:e3:f5:29:38:7a:
                    80:0c:7c:9a:32:e0:fc:39:09:14:d4:83:9f:38:8a:
                    96:63:18:72:47:3f:8b:e8:2b:87:4d:40:82:73:e2:
                    69:09:40:22:43:0c:6f:dd:f6:b0:59:75:93:97:ad:
                    d5:2f:5c:9e:84:13:0b:50:32:21:b8:16:32:42:3f:
                    9c:c1:fa:6d:94:00:4d:6b:d0:84:ce:44:f4:93:91:
                    98:f2:a7:5e:d0:e3:8c:0e:18:67:55:04:08:60:47:
                    b2:e3:4b:32:6d:51:94:c4:a4:97:47:78:a6:f7:f0:
                    c5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5B:C4:E6:56:A7:20:2B:78:68:09:4B:05:5D:D9:D5:D7:88:0C:F5
            X509v3 Authority Key Identifier:
                keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:83:6b:ac:21:42:5b:01:86:9c:c5:7f:4c:f7:e2:ea:c7:c6:
         59:61:32:50:c3:7c:03:17:15:6d:a9:97:b4:a9:22:1a:22:f8:
         0c:e2:89:1a:0d:6c:57:ac:de:2a:77:66:21:d2:8a:2b:71:ce:
         95:45:5c:b2:10:13:24:68:4d:99:9c:67:50:84:fe:22:03:2d:
         34:49:72:1d:41:20:f2:f8:f8:0c:eb:95:7d:56:0f:bc:1d:ac:
         bf:8b:39:ce:68:35:8e:26:02:8a:7c:95:bf:e3:60:34:be:40:
         54:fc:c2:ae:f8:44:4a:27:75:8a:1a:6f:ea:58:86:61:3a:6f:
         fc:d4:65:46:0e:af:6d:e0:be:c6:7a:db:0d:47:de:e4:ac:6d:
         60:01:3d:d5:89:20:97:7c:91:0f:8b:e8:17:48:a9:93:6a:19:
         e5:6a:b4:3a:b2:65:d0:4d:91:9a:1b:df:74:97:2e:06:d0:6f:
         00:a4:30:f0:54:42:93:0b:62:1e:9a:f7:8c:02:43:ec:80:2a:
         23:9c:6d:c2:a7:c3:39:02:6a:82:d4:d3:da:10:dc:3d:c6:1a:
         19:7e:d1:f4:af:87:6a:1f:45:45:a1:a1:60:92:2b:00:3c:00:
         fa:c9:52:46:28:de:58:c8:7d:55:19:69:e2:f3:d4:68:82:7c:
         f7:f2:9a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:11:53 2026 by rpki-client