Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
File:                     7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json)
Hash identifier:          EagaPsUOKpMST2TqGPWU8G4ckrsoA5o9vKZmcHAU4Jk=
Subject key identifier:   71:68:34:5D:15:24:20:E5:7A:53:C7:98:46:AC:51:EC:C5:E9:0B:F4
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Certificate issuer:       /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial:       01A0D8DF4DF79CF48D6A7F6B4CD202EE9072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
Manifest number:          1A7C
Signing time:             Fri 25 Sep 2026 14:01:48 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:48 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:48 +0000
Files and hashes:         1: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: 2CkSFj4UFOUR3JuKEZS50OcxGmoWMNKTcAaFC2KMgV8=)
                          2: gTtUHuAbAVNRdNoLuCsea2rCewQ.roa (hash: KFx9ZwsybGaJs1c7S9ushLUhbd0Pa2NdRnZ63vIrBQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:df:4d:f7:9c:f4:8d:6a:7f:6b:4c:d2:02:ee:90:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
        Validity
            Not Before: Sep 25 14:01:48 2026 GMT
            Not After : Sep 26 14:01:48 2026 GMT
        Subject: CN=7168345d152420e57a53c79846ac51ecc5e90bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:e3:75:42:17:a0:9c:f0:2b:2a:4c:bf:0c:
                    be:a8:99:60:9e:e2:7d:59:2b:20:eb:72:8d:06:f2:
                    16:46:af:28:45:b2:36:9e:7e:c0:87:1e:0d:be:4b:
                    90:66:29:7f:5f:f9:8e:72:db:5a:ba:5b:47:65:4d:
                    55:27:21:ac:72:a6:a6:ef:14:6f:f7:fb:72:cb:2d:
                    7f:72:ec:15:5b:5d:3a:58:de:21:40:ef:a0:a4:db:
                    86:91:a9:24:9c:c4:d8:3d:cf:ad:24:cd:f1:b1:e3:
                    03:c4:32:5c:72:4b:96:ed:d8:8f:b6:75:f5:99:96:
                    09:69:84:df:48:ee:9f:53:51:a2:15:ad:e5:39:6e:
                    37:4f:99:51:df:89:bc:c0:7e:60:81:0d:22:d2:29:
                    c4:ee:1a:0a:49:58:06:a1:a3:88:c1:da:48:73:f8:
                    84:0d:ed:ea:15:ee:a9:97:40:1f:f3:12:14:5c:13:
                    95:00:af:d3:38:32:44:a2:05:c7:2d:32:22:ae:33:
                    ee:e4:6a:5e:a2:49:ce:7a:5f:c0:4e:1b:52:3c:8d:
                    16:cb:0f:95:3a:8f:1f:ae:be:4f:42:38:1e:15:cc:
                    4d:a2:15:94:53:58:17:09:c7:81:3c:3b:9b:ca:4d:
                    58:fa:9f:4e:88:5e:1d:16:8c:45:ca:d6:0f:5e:59:
                    ff:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:68:34:5D:15:24:20:E5:7A:53:C7:98:46:AC:51:EC:C5:E9:0B:F4
            X509v3 Authority Key Identifier:
                keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2d:9a:52:a4:08:f7:b8:4e:c9:73:6d:0c:71:c7:9a:1e:74:
         fa:9a:ec:42:85:57:28:06:a2:c2:b8:75:dd:d1:d4:ae:5f:ca:
         ed:42:b4:10:d2:53:4d:7d:e2:c1:e5:e8:3f:73:b9:9b:71:a4:
         c3:c8:fe:0f:1d:69:76:9a:98:f7:62:f9:47:ce:ce:2e:be:79:
         3c:91:00:ad:5a:e5:07:38:18:6d:8c:f7:fd:67:fa:ee:dd:39:
         04:d3:7d:91:e7:d2:36:d0:a5:e2:e0:f8:31:67:18:1c:82:87:
         b4:33:5c:38:50:82:49:ef:23:aa:00:0a:19:28:ed:13:ce:24:
         33:c3:37:18:ba:ef:8f:2f:53:83:a1:70:82:02:30:de:16:53:
         d1:bf:b2:de:96:10:83:73:08:16:7d:22:7f:12:88:7d:3c:b1:
         cd:7f:5b:07:1e:43:f3:0d:49:41:18:aa:c3:61:26:0e:71:bf:
         ad:46:69:1c:f5:a3:74:d2:64:56:9e:86:f2:c7:73:62:04:e4:
         85:55:e2:6b:02:e1:d9:45:02:a3:a8:a0:90:e4:7c:f1:e6:b7:
         14:d8:84:21:e9:7f:2c:70:75:62:f9:e2:8f:aa:46:ee:c0:10:
         97:38:0f:52:2f:e2:14:cc:c9:e9:a0:c4:bb:95:36:a6:af:c6:
         6e:b9:0b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:13:31 2026 by rpki-client