Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
File:                     97nZe5f9TLrO2oHEQG50rW1TkyY.mft (raw, json)
Hash identifier:          wmQafZ6ttnsxWpFLQTgYIke8PVr6zHue7tRLZygpAJg=
Subject key identifier:   37:D6:2A:65:09:31:15:BC:56:C2:DA:1B:EE:0A:2B:31:C2:C8:D2:4B
Authority key identifier: F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
Certificate issuer:       /CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Certificate serial:       01A0CDEC9BBB7F353838AC3F14E120064E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
Manifest number:          07B2
Signing time:             Wed 23 Sep 2026 11:00:30 +0000
Manifest this update:     Wed 23 Sep 2026 11:00:30 +0000
Manifest next update:     Thu 24 Sep 2026 11:00:30 +0000
Files and hashes:         1: 97nZe5f9TLrO2oHEQG50rW1TkyY.crl (hash: 7g/yp4yPg1H3hVvx6EqZE1N+XvE0gA+IdLx1b0aP0IU=)
                          2: iz9gbVygmSBHL3t3PdATnT2zJmk.roa (hash: mrKo3a/hS44Co32MTqj4k1lL3E23S3iMQm9u18Qtexo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:ec:9b:bb:7f:35:38:38:ac:3f:14:e1:20:06:4e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
        Validity
            Not Before: Sep 23 11:00:30 2026 GMT
            Not After : Sep 24 11:00:30 2026 GMT
        Subject: CN=37d62a65093115bc56c2da1bee0a2b31c2c8d24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:b6:b6:7d:b0:91:23:86:17:ae:75:be:60:
                    74:96:30:fe:f7:38:c2:51:f3:77:c5:2d:2c:0e:7c:
                    7d:75:44:8d:e0:bc:c1:a9:ff:ea:fb:4c:f6:2e:91:
                    6b:a8:2f:f7:1b:75:1e:e4:71:17:87:88:a9:89:9e:
                    4e:87:98:2c:01:68:4f:13:95:57:28:48:4e:14:e8:
                    14:fd:a7:c6:5a:a4:45:66:45:4b:a4:44:36:2c:9b:
                    3f:79:b1:65:e1:6b:9a:a1:40:5d:ac:c8:1f:9b:a9:
                    dc:76:f1:58:90:ed:a3:db:b2:41:60:ba:b0:c9:f1:
                    49:4d:01:b2:03:62:49:ff:75:9b:40:9b:b9:0f:3d:
                    cf:b3:23:3b:d6:92:bd:5f:ed:c7:db:bf:dc:fd:97:
                    e7:a0:94:06:71:29:0b:2c:7e:ba:dc:71:03:ea:d2:
                    69:89:d4:b0:04:67:a1:4d:4b:2d:64:d9:80:6d:4a:
                    70:6a:bf:11:d2:0c:1c:31:bb:ec:ba:cf:22:9f:d5:
                    cd:40:5f:49:f9:b1:87:4c:d4:1f:17:0b:f1:1e:59:
                    d5:ad:06:fc:2f:ee:ab:bf:ad:9c:29:23:53:39:11:
                    ae:f3:f1:46:4b:24:25:a7:de:e1:f2:35:4e:55:69:
                    dd:4c:3d:26:cb:cf:c0:e5:84:11:93:49:f1:33:9a:
                    be:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D6:2A:65:09:31:15:BC:56:C2:DA:1B:EE:0A:2B:31:C2:C8:D2:4B
            X509v3 Authority Key Identifier:
                keyid:F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e2:32:df:68:1a:49:b8:02:6e:88:bd:cd:05:52:90:39:8a:
         e4:3f:d2:94:b4:d8:00:01:6e:13:92:8c:bb:ba:8b:57:55:4f:
         a9:06:d9:02:a2:18:81:7a:10:40:4b:0e:d3:86:e7:f4:bd:06:
         ad:73:7c:73:52:9d:83:8d:d6:59:d5:c9:66:2c:97:63:7e:6a:
         ae:9a:ee:61:80:2b:15:23:ea:66:03:ea:c6:70:a7:29:f2:36:
         07:f5:7b:3a:03:56:cc:29:81:ee:b8:c1:af:01:8f:89:57:82:
         e7:74:cf:53:4f:b4:9f:b5:7b:ae:9f:7a:04:d0:0e:b7:01:68:
         38:cc:40:87:8d:46:70:4a:95:50:8c:8f:97:6b:11:61:cc:8b:
         39:94:87:96:5f:2f:c7:d8:af:35:48:1b:f0:b4:5a:76:b2:af:
         df:b9:08:b4:5c:8f:78:bb:51:3f:8a:a1:2c:c5:f0:21:60:e9:
         69:25:da:4a:92:9b:dc:06:1e:1f:f1:5e:12:a0:cb:67:9f:f9:
         fb:c6:ef:6b:2f:b3:58:6d:8e:25:cd:df:ae:bb:9e:c6:32:ac:
         fe:c1:e1:5f:38:39:5a:be:72:56:6e:27:9c:a3:4c:bf:c9:09:
         d7:de:33:84:84:43:e1:82:b5:4c:b4:68:d3:f8:e3:64:be:6b:
         37:f8:da:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:17:20 2026 by rpki-client