Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
File:                     7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft (raw, json)
Hash identifier:          GR6yNUc27RWO+RGzQeVjBBv/QWgDzK9pwX7Vs8PKPDY=
Subject key identifier:   A6:20:F8:88:00:41:A0:21:5E:EC:87:35:1E:2F:30:6B:81:EC:2A:5A
Authority key identifier: EE:A7:09:FE:AA:0A:9F:A0:88:6D:7A:B1:20:68:AA:7F:DA:97:9F:88
Certificate issuer:       /CN=eea709feaa0a9fa0886d7ab12068aa7fda979f88
Certificate serial:       01A0E55130DEBF8185B07255BC4C1D509EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
Manifest number:          024F
Signing time:             Mon 28 Sep 2026 00:01:38 +0000
Manifest this update:     Mon 28 Sep 2026 00:01:38 +0000
Manifest next update:     Tue 29 Sep 2026 00:01:38 +0000
Files and hashes:         1: 7qcJ_qoKn6CIbXqxIGiqf9qXn4g.crl (hash: SHAgxhzn8vepL3axOy6r49wQtobzjmnoDc8wvG/+9sA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:51:30:de:bf:81:85:b0:72:55:bc:4c:1d:50:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea709feaa0a9fa0886d7ab12068aa7fda979f88
        Validity
            Not Before: Sep 28 00:01:38 2026 GMT
            Not After : Sep 29 00:01:38 2026 GMT
        Subject: CN=a620f8880041a0215eec87351e2f306b81ec2a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:3c:9d:33:92:cd:cb:ff:75:f6:3d:78:78:
                    7c:ac:b9:1f:34:5a:ae:b1:7a:0e:76:dc:ef:d9:a3:
                    fe:3a:7d:88:4a:67:19:1d:d2:f3:0c:f3:55:c5:dc:
                    8d:ba:92:6f:7f:bd:38:16:bf:ef:c8:a5:60:d9:ab:
                    b0:f2:52:8c:78:8b:34:b0:ce:39:36:ca:30:f0:e7:
                    8b:39:f6:0c:34:c5:6c:ab:14:de:8f:90:ba:07:f3:
                    28:7f:00:53:65:7c:6a:c3:d8:d1:f8:c1:8d:c5:1b:
                    a3:de:51:37:ea:ba:e6:78:f1:b8:75:f2:8f:f8:a2:
                    61:73:c8:2a:ee:d2:3c:59:9e:79:d1:42:74:8b:63:
                    fb:37:82:13:c9:b7:64:e3:22:f8:98:7f:ec:bc:b1:
                    0e:e8:e9:76:da:a5:a8:ae:e6:62:98:06:5a:4e:11:
                    18:d2:e7:67:ba:eb:ac:87:39:f4:3d:0a:30:6e:df:
                    df:e8:8e:47:1a:e9:53:92:00:90:6a:ef:15:62:e6:
                    3a:46:97:b0:f2:e9:2a:bb:ce:c9:5f:e5:bc:16:ed:
                    bf:22:43:81:57:7c:45:67:96:bc:38:3c:1d:69:7b:
                    d1:2f:00:91:97:95:4b:f1:de:17:a9:f2:2a:bf:61:
                    33:96:1d:06:c0:52:64:f6:77:47:2a:86:fc:2e:02:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:20:F8:88:00:41:A0:21:5E:EC:87:35:1E:2F:30:6B:81:EC:2A:5A
            X509v3 Authority Key Identifier:
                keyid:EE:A7:09:FE:AA:0A:9F:A0:88:6D:7A:B1:20:68:AA:7F:DA:97:9F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ea:49:87:63:95:03:04:bd:81:12:2f:d2:98:6a:e9:82:0d:
         31:6b:fa:8d:46:05:04:e8:67:83:e9:51:66:52:a4:fe:b9:0c:
         04:b8:a2:49:3e:cd:0d:55:20:2f:a3:c5:ee:52:52:98:2f:23:
         de:66:76:bd:65:b3:38:f6:6a:5d:88:0c:dc:7a:af:7a:09:be:
         18:64:79:9f:53:48:9c:34:6d:f6:f6:8f:21:d4:d7:1e:e3:cb:
         92:ac:84:6b:10:03:bc:f5:58:eb:a8:fc:c0:46:e1:3e:a4:44:
         1f:b2:cc:11:e6:65:4a:2d:d0:64:56:d9:f5:ca:0b:ca:6a:e1:
         7c:a6:00:9d:53:2f:e6:bc:59:60:f4:f3:1e:1b:cc:bb:28:f8:
         7d:f5:0c:44:ae:fd:85:e6:ed:b9:d3:99:d5:e5:34:2e:b7:6b:
         88:e6:9a:d4:35:96:0d:e6:2b:10:14:f5:4b:7f:b3:3d:5f:e3:
         be:03:34:09:38:41:e0:2d:d3:08:67:45:f5:ba:22:dc:f3:38:
         20:72:77:3a:90:5f:a0:6d:90:3e:02:02:2e:85:e0:35:77:a6:
         eb:48:7f:52:54:95:20:c1:20:ed:62:bc:e2:2f:30:56:ff:dc:
         bd:9b:35:d5:2b:71:b3:a8:71:44:c4:04:e0:e0:b0:46:48:2c:
         af:b6:f3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:56:36 2026 by rpki-client