Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
File:                     7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft (raw, json)
Hash identifier:          ylqr3C/gwksMmNCkIqjcoGO/t8Xs9+YeO5rzPDSpR/8=
Subject key identifier:   39:DD:ED:8F:CE:1B:A3:23:75:3B:F9:DB:8F:83:0C:FF:54:23:D8:06
Authority key identifier: EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
Certificate issuer:       /CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Certificate serial:       01A0D79654B431B9DFEE2DD7214DFAB6183C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
Manifest number:          1A6F
Signing time:             Fri 25 Sep 2026 08:02:28 +0000
Manifest this update:     Fri 25 Sep 2026 08:02:28 +0000
Manifest next update:     Sat 26 Sep 2026 08:02:28 +0000
Files and hashes:         1: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl (hash: EcvEDlu8x/KVT2zelDgw+y2bTfT2UIwqQgjmToKvhEo=)
                          2: BOGoFgwnR582QadwWvkqHAe6qVI.roa (hash: oircMKRintaHw6lUQ07pz+tVKLYa1YRVcLBCoNJ37p0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:96:54:b4:31:b9:df:ee:2d:d7:21:4d:fa:b6:18:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
        Validity
            Not Before: Sep 25 08:02:28 2026 GMT
            Not After : Sep 26 08:02:28 2026 GMT
        Subject: CN=39dded8fce1ba323753bf9db8f830cff5423d806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:b7:c6:bc:67:f0:f1:c9:a9:74:5e:19:c2:
                    e9:2b:66:5d:8c:2d:d0:6b:f2:c1:2f:e3:57:51:c1:
                    3a:c7:4d:a2:b5:0c:25:19:b5:d5:20:27:ca:ca:f0:
                    9e:8e:0c:c9:2f:0f:a5:d6:28:6d:5b:25:be:e9:0e:
                    99:bf:84:4e:f5:e3:06:c2:01:b7:22:fa:80:70:64:
                    e9:09:eb:1f:1c:b9:77:44:bf:d5:bc:70:f6:37:b2:
                    ae:cc:a2:0b:da:66:b7:7a:5b:ae:5b:03:1b:41:78:
                    f3:f0:04:28:c4:fc:cd:e8:29:87:db:7d:53:4a:39:
                    df:20:49:ba:06:25:21:41:38:b2:24:17:3b:17:95:
                    6f:3f:33:ba:c2:5a:d4:7d:28:16:6b:b1:69:41:f6:
                    4c:bc:07:de:34:e3:1e:a6:33:18:79:10:f7:b7:d1:
                    80:fd:cb:fa:50:5d:47:28:dd:1f:68:46:e6:2e:bd:
                    85:85:a1:69:60:ad:2c:fd:7d:29:38:c1:10:94:fc:
                    04:ae:c3:72:21:ec:d8:f3:a2:90:f9:73:28:51:36:
                    c7:35:47:61:48:53:1c:17:c0:cc:da:14:74:95:bc:
                    ce:6d:c0:2e:06:64:2d:ef:51:6b:d3:80:fd:58:7a:
                    36:2e:aa:5f:28:ff:5d:ea:0c:ee:58:01:eb:b2:5b:
                    9e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DD:ED:8F:CE:1B:A3:23:75:3B:F9:DB:8F:83:0C:FF:54:23:D8:06
            X509v3 Authority Key Identifier:
                keyid:EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:29:c6:6a:25:94:e6:b0:3e:09:16:b9:da:bd:01:cb:ee:86:
         79:76:fd:50:bf:a9:58:48:c6:cc:c1:3c:60:c1:e2:e4:09:e1:
         ae:9a:30:89:61:98:5c:06:6b:09:65:52:1e:e9:d4:8c:b5:fc:
         43:52:06:14:98:60:4f:0f:5f:5a:04:1c:a9:77:f2:a5:fc:35:
         a1:a0:b5:9b:a9:6c:cf:9f:29:64:6a:aa:fa:69:64:d9:ef:20:
         a5:64:46:d9:2e:c8:89:a0:95:f9:c1:a9:72:2c:e4:f3:60:5a:
         15:80:3c:a6:1d:2c:d1:24:59:a4:24:d1:16:05:12:ad:03:84:
         30:2f:e0:01:9e:87:ee:2a:21:1f:54:78:18:00:54:61:f6:87:
         61:3a:ff:f9:b4:5f:d7:97:a0:69:e4:e2:41:d8:b4:b6:87:80:
         49:83:78:e9:29:1e:b4:c6:ea:11:d3:42:58:53:e1:4e:02:ce:
         62:0e:9a:86:de:5c:7b:fb:9c:bb:76:85:76:64:b3:76:6a:0d:
         3f:20:32:b8:89:f9:c1:45:42:0f:9b:15:d1:0c:e0:93:67:65:
         bf:83:19:6a:81:17:02:f2:9a:34:d4:fe:6d:86:ac:af:27:a5:
         31:e3:98:f0:81:61:bb:f9:65:ed:c5:3e:09:de:2f:92:19:5e:
         9c:40:36:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:46:08 2026 by rpki-client