Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
File:                     7enwFkj2hDY4I6bY7srOV5unt_8.mft (raw, json)
Hash identifier:          ZOPntVP6zcmygVTK79/FVqw8Qun/ZWKNb9085iB4inA=
Subject key identifier:   DB:0D:5A:E1:A1:A5:87:08:8C:1C:DC:FC:23:20:B2:A7:44:9D:55:E2
Authority key identifier: ED:E9:F0:16:48:F6:84:36:38:23:A6:D8:EE:CA:CE:57:9B:A7:B7:FF
Certificate issuer:       /CN=ede9f01648f684363823a6d8eecace579ba7b7ff
Certificate serial:       019F8F7F2444279E0B23D8617856ABCE3B77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:41 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:41 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:41 +0000
Files and hashes:         1: 7enwFkj2hDY4I6bY7srOV5unt_8.crl (hash: QFDY15pt7t+C8LkJYqt6WOA7ELeUXHbOze9JQ8eS2AE=)
                          2: N0pj_XAkmpu_lY4emTSafGvqA94.asa (hash: Uuz9QFe+O+ehHKa3uQpLvcHnBTIPRP4id7lgGYmUWlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:24:44:27:9e:0b:23:d8:61:78:56:ab:ce:3b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede9f01648f684363823a6d8eecace579ba7b7ff
        Validity
            Not Before: Jul 23 15:01:41 2026 GMT
            Not After : Jul 24 15:01:41 2026 GMT
        Subject: CN=db0d5ae1a1a587088c1cdcfc2320b2a7449d55e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4d:21:2f:02:38:ff:f1:88:f0:2e:86:4d:f4:
                    38:50:03:dd:4a:b1:86:46:e1:bd:9c:70:51:9a:ff:
                    8c:6e:86:6e:71:6f:54:33:32:90:74:89:f0:09:37:
                    29:43:9e:56:eb:99:69:a5:7a:1e:91:b7:a3:d8:48:
                    17:64:9d:12:5e:41:0d:4a:f7:0b:da:3b:d4:68:cb:
                    d8:57:e0:e7:4b:01:69:a2:37:45:d8:8e:85:46:62:
                    ce:d4:fa:5b:7c:c3:61:73:4a:19:87:75:1e:cf:cf:
                    08:e1:58:ba:d0:da:d6:39:09:09:1d:39:74:ee:83:
                    53:bc:7c:c7:12:43:23:41:77:5f:84:fc:34:54:67:
                    b3:a2:49:65:dc:1b:65:ca:b3:19:e9:d3:d8:35:df:
                    52:e9:b6:93:c0:95:a5:06:bd:eb:5a:ad:c0:e8:5c:
                    50:d3:e3:0c:95:bd:c8:d8:4a:32:60:a8:3e:24:35:
                    29:9c:52:ef:d1:d4:d4:b3:69:99:5f:59:08:c6:38:
                    80:9a:60:5c:5f:4c:45:00:3a:36:dd:6b:68:41:ac:
                    a3:17:40:dc:27:2c:f6:7b:e8:33:24:a9:46:c1:38:
                    90:c2:45:b0:e2:e0:fc:1b:a4:39:c8:eb:66:20:74:
                    f7:8e:a6:e4:e4:6e:db:39:0e:69:16:13:37:70:ba:
                    ce:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0D:5A:E1:A1:A5:87:08:8C:1C:DC:FC:23:20:B2:A7:44:9D:55:E2
            X509v3 Authority Key Identifier:
                keyid:ED:E9:F0:16:48:F6:84:36:38:23:A6:D8:EE:CA:CE:57:9B:A7:B7:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7e:c2:17:9b:49:57:18:cd:bd:1f:02:7e:2d:63:6a:e3:9d:
         db:46:c2:88:54:84:23:d0:b5:f6:f0:5d:cb:db:27:70:cd:c6:
         cf:38:9a:da:c1:e8:4c:96:6a:84:bf:bb:52:7e:56:22:ac:f3:
         e6:93:52:bb:01:a0:5b:c1:8b:fa:90:c5:e2:1a:96:48:3a:67:
         0b:dd:52:27:ec:16:ce:5f:52:c6:56:f2:07:56:fb:7f:80:e0:
         43:a9:a6:53:7c:86:f6:3e:4b:3d:01:09:63:79:07:cf:88:e2:
         06:86:e4:07:3a:e9:c8:02:d2:ce:82:c8:67:50:be:2f:7f:07:
         fc:a6:d8:2e:12:e4:1d:51:a9:54:b1:97:b1:ad:55:df:fa:f4:
         aa:33:db:a8:6f:26:a1:97:51:55:e2:66:52:bf:95:31:76:70:
         0c:1e:1a:c4:ef:80:d6:5a:b7:8c:86:b9:02:f6:7d:91:71:3a:
         b7:2c:91:9d:25:8a:ed:61:7b:5f:c3:69:83:9f:66:e4:e2:22:
         73:66:a5:5e:3d:8f:04:af:ec:96:b7:cc:c4:6c:d2:32:5f:94:
         56:20:d5:e9:e4:6c:31:65:e2:f7:25:23:e1:67:40:23:00:b7:
         66:6b:05:06:3a:ab:55:5a:80:5b:49:80:d5:17:11:04:a5:1b:
         3c:40:73:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:18 2026 by rpki-client