Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
File:                     7v_0DYu0okhy4Bun9C465j7ghfU.mft (raw, json)
Hash identifier:          a+Ll8a6JdnGFCblaMM3pXUiRKKMAnVcU/RlJNErZDDU=
Subject key identifier:   23:92:A1:58:7C:81:C2:4C:04:19:D9:47:81:C1:C3:D6:57:DF:00:90
Authority key identifier: EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5
Certificate issuer:       /CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
Certificate serial:       01A0D5394CAB49264EEFA7129CCF8D42E198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
Manifest number:          034E
Signing time:             Thu 24 Sep 2026 21:01:37 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:37 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:37 +0000
Files and hashes:         1: 0ZqH99V57Xuf54z1hwypjXXPfTk.roa (hash: a/D66uiFnK78JnobNYVCxo0xT6Yj6YVtDbbQ8ijoyQo=)
                          2: 7v_0DYu0okhy4Bun9C465j7ghfU.crl (hash: HIxMKlNQF5TXozE2sAyMNzQk9QqlDE8aMQg5LMkkvI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:39:4c:ab:49:26:4e:ef:a7:12:9c:cf:8d:42:e1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
        Validity
            Not Before: Sep 24 21:01:37 2026 GMT
            Not After : Sep 25 21:01:37 2026 GMT
        Subject: CN=2392a1587c81c24c0419d94781c1c3d657df0090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ae:13:46:2e:d3:e3:80:5e:dd:cc:cc:51:67:
                    4c:c2:b2:39:cf:49:82:5c:ad:e8:b8:0e:c6:ac:e4:
                    44:a6:6c:5d:50:e2:67:fd:1d:95:71:da:e9:f0:a0:
                    64:c8:62:89:91:11:a6:e2:72:b3:1d:45:a5:81:cd:
                    d7:10:c2:d6:6e:e0:ba:ed:86:3d:0b:eb:8f:f5:64:
                    38:57:7d:8d:1c:22:f8:35:d1:a4:c2:81:f5:4b:35:
                    80:2c:76:e0:e9:7e:3f:da:5c:d9:0e:e4:36:98:12:
                    39:8b:f9:3a:32:71:c0:96:70:97:99:88:fc:d2:d8:
                    5e:b6:05:53:77:64:04:40:81:36:01:76:af:20:e9:
                    97:48:bf:1e:b9:a0:0b:33:4a:b3:c2:42:5d:8e:c0:
                    89:b8:42:4d:51:7e:e5:f5:19:e4:2c:0a:89:1e:29:
                    ca:22:e1:a6:6d:a6:a6:ae:9a:5b:a1:fc:5d:3d:d5:
                    cf:6d:13:54:ac:c8:de:d2:6a:2d:ca:b4:b8:e0:8a:
                    b0:17:3f:46:a5:46:e1:f1:9e:14:f1:9c:1e:8a:2d:
                    0d:4a:d4:e6:91:e9:5d:7e:bf:fd:71:ac:cd:f5:6e:
                    8e:92:cf:1c:ca:e6:61:96:da:e9:4d:79:f2:c3:ad:
                    b2:14:ed:46:1f:d1:44:dd:e0:9a:62:1b:00:41:7c:
                    4b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:92:A1:58:7C:81:C2:4C:04:19:D9:47:81:C1:C3:D6:57:DF:00:90
            X509v3 Authority Key Identifier:
                keyid:EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:93:17:23:ae:70:d1:9d:5d:44:67:3e:16:2b:49:f1:5c:55:
         d3:ee:8e:5c:10:e4:d1:a2:ad:56:f9:f0:f4:0f:82:e5:0c:b5:
         1e:25:cb:ff:16:34:da:80:aa:26:03:d7:40:70:ab:6f:2b:e5:
         19:21:fa:bb:cf:72:ac:98:9b:8f:b3:13:2a:5f:02:78:72:f9:
         f7:89:98:0b:eb:59:9b:3b:82:a5:c0:0e:6f:c1:12:6e:e4:c8:
         79:12:ac:25:48:01:c2:00:1f:72:d0:66:31:40:61:6e:8c:d0:
         2e:d7:ef:d7:7f:b8:b2:19:7c:c0:1d:c8:22:34:5c:0e:22:cf:
         05:06:cb:6c:ac:b6:71:b7:a7:dc:bf:e7:21:6b:ee:e1:3d:3e:
         db:36:ac:bf:96:a3:09:a7:b4:0a:87:01:2a:07:3f:e4:3d:14:
         5e:08:60:8f:21:d2:e5:3d:66:8c:1e:8b:9e:ef:f3:89:c4:de:
         96:70:22:65:11:e7:30:cd:5c:d4:7f:af:08:ec:77:09:e0:87:
         f6:99:34:58:ab:85:9c:66:36:20:00:bf:0c:96:31:99:29:83:
         b0:f7:e0:eb:5d:d2:fd:e4:20:f8:17:f9:11:6d:b6:e7:b4:dd:
         2f:16:74:01:34:c8:01:de:60:5c:64:d0:0f:65:8e:62:bd:47:
         64:01:ef:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:45:42 2026 by rpki-client