Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft
File:                     7f4_b22YcU4B8IxzsmRDaHdOhmA.mft (raw, json)
Hash identifier:          0RXKX41iAs0ePF4jKhlhu7uLps6mBXaXEDvKhukoVr0=
Subject key identifier:   53:D2:56:02:CB:BD:D0:A1:C9:57:E0:D1:F3:E1:C8:55:0A:70:10:A3
Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
Certificate issuer:       /CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Certificate serial:       01A0CFA4AFB7D363964C17B45A6716D5401B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft
Manifest number:          0DAF
Signing time:             Wed 23 Sep 2026 19:01:11 +0000
Manifest this update:     Wed 23 Sep 2026 19:01:11 +0000
Manifest next update:     Thu 24 Sep 2026 19:01:11 +0000
Files and hashes:         1: 7f4_b22YcU4B8IxzsmRDaHdOhmA.crl (hash: T9Nx1prRrnsBxCWAZdKtLp2sQFzvN4pBHVOZTLJU6R8=)
                          2: UaJdi4yPF0EhvU8zV1PC9f5Ue8E.roa (hash: mG0WlQRZYibTm0B2ULzDW8IxRPI12VkHc0J9pE9WBwk=)
                          3: UlALuQSonGHb83C6mCtDsKsISTs.roa (hash: z6SE+BCxoycaJSnwl42l4AOKUzdbwtgoMRZeUMft74U=)
                          4: _7Edq10OD9QbWJBY3SkRsX0q8U8.roa (hash: WtNpfxQFlDUZd5TaCCPM+uB4xhq8Bd/HVPfRbwRFTSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:af:b7:d3:63:96:4c:17:b4:5a:67:16:d5:40:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660
        Validity
            Not Before: Sep 23 19:01:11 2026 GMT
            Not After : Sep 24 19:01:11 2026 GMT
        Subject: CN=53d25602cbbdd0a1c957e0d1f3e1c8550a7010a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:ab:07:7a:82:74:44:a2:09:3f:88:2d:53:
                    0c:e7:01:b0:2a:ec:aa:91:33:c8:20:7b:f3:9d:55:
                    14:20:cf:3a:4a:f3:5d:50:ee:e9:25:52:4e:0e:2e:
                    4d:03:f6:93:e8:25:43:c4:4d:65:07:6b:7b:50:e3:
                    5e:2d:41:55:9f:cc:30:0d:34:a3:2f:a4:f2:9e:bb:
                    78:88:4a:00:ec:d1:c2:f9:37:88:9e:e7:c3:3d:f1:
                    66:c3:de:df:a7:f2:06:cf:55:67:4e:fb:58:76:1f:
                    7b:08:9a:1d:ab:d9:7a:ed:af:7b:3e:ca:9a:12:89:
                    c6:c1:80:82:e5:b0:5c:c1:07:fa:71:03:71:94:90:
                    de:b5:70:7f:81:41:a5:5a:1d:d3:d1:df:3e:17:26:
                    cf:83:a1:27:f2:45:f7:18:8b:33:04:47:54:8b:62:
                    6c:05:c4:91:ae:1e:fe:9a:ee:41:6b:8f:7b:cf:bc:
                    65:2e:19:95:95:ef:ef:2a:d5:de:df:7b:a0:23:86:
                    45:c1:e3:8f:00:25:7d:13:a8:39:51:5c:93:52:48:
                    5e:f4:a2:a1:2c:8b:7f:ac:a9:94:4e:7e:ef:1b:cb:
                    2b:c2:9e:0b:93:29:3c:b6:1b:5d:9b:79:c9:88:ee:
                    ab:b8:73:c3:5e:21:6c:e3:71:a0:63:65:e7:fa:91:
                    e1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D2:56:02:CB:BD:D0:A1:C9:57:E0:D1:F3:E1:C8:55:0A:70:10:A3
            X509v3 Authority Key Identifier:
                keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:00:fd:8e:d2:f1:97:40:81:e3:1d:4e:11:f7:4d:8e:7c:77:
         44:fe:83:ac:ab:dd:ff:2d:8f:9a:ea:ea:64:47:a3:c6:2d:86:
         0c:d3:68:d2:a0:2e:a1:0c:1a:99:20:f2:f4:89:6e:70:af:92:
         80:a3:0f:6c:f8:c1:bd:8b:ce:a1:fc:36:a4:39:a0:e0:5d:20:
         33:b3:44:a1:e4:90:ba:cb:c4:7e:68:2e:19:9f:ec:80:3c:23:
         db:f1:4b:a9:ce:93:01:83:1c:90:70:e4:85:a5:2f:e4:4f:09:
         ef:1b:40:65:76:12:5a:c5:40:ed:bc:35:78:76:d1:27:f1:ca:
         44:d5:7e:38:3f:46:1c:aa:df:21:de:67:82:ab:95:c7:8d:b5:
         7a:cd:4b:65:f9:1d:fa:e8:e1:8e:5a:33:81:da:bf:aa:89:1f:
         b3:9d:a4:57:e8:b2:4c:67:3b:18:b0:e6:d5:bf:02:e3:3a:e2:
         d7:ff:d0:0e:f7:1b:90:69:aa:80:b0:cf:c8:dc:55:4d:d9:32:
         45:4c:14:6a:ca:e5:86:ba:76:bc:3a:6f:7f:98:83:ab:a9:fc:
         19:33:1b:36:df:ae:a3:eb:b8:4d:b3:7f:a3:5f:72:a7:e8:dd:
         d3:83:2a:37:df:a3:32:89:95:c4:3e:1e:de:12:d1:a1:97:3d:
         57:9e:39:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:04:15 2026 by rpki-client