Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.mft
File:                     7faT5RwdXUqyFH9yNDIP9k9Rg1Q.mft (raw, json)
Hash identifier:          cHWowjdw1FCbkyscAUFnjSnlyVv/VWkLYwug62GJvfA=
Subject key identifier:   D2:50:F7:01:F7:09:DD:5F:22:C5:F8:90:A1:CF:4D:3C:EE:12:80:EF
Authority key identifier: ED:F6:93:E5:1C:1D:5D:4A:B2:14:7F:72:34:32:0F:F6:4F:51:83:54
Certificate issuer:       /CN=edf693e51c1d5d4ab2147f7234320ff64f518354
Certificate serial:       01A0D6F0EB8E4DE3A4D551A219A0E45BB749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.mft
Manifest number:          E8
Signing time:             Fri 25 Sep 2026 05:01:48 +0000
Manifest this update:     Fri 25 Sep 2026 05:01:48 +0000
Manifest next update:     Sat 26 Sep 2026 05:01:48 +0000
Files and hashes:         1: 7faT5RwdXUqyFH9yNDIP9k9Rg1Q.crl (hash: aI39684HFEO1/z0VqbPIWV1SoOqAUSj8QgEEHm0x8m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:f0:eb:8e:4d:e3:a4:d5:51:a2:19:a0:e4:5b:b7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf693e51c1d5d4ab2147f7234320ff64f518354
        Validity
            Not Before: Sep 25 05:01:48 2026 GMT
            Not After : Sep 26 05:01:48 2026 GMT
        Subject: CN=d250f701f709dd5f22c5f890a1cf4d3cee1280ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4c:66:7d:9f:66:60:81:f6:d0:31:7d:43:75:
                    16:b7:48:5a:02:40:ee:2c:f4:76:e0:ae:aa:a7:4f:
                    a2:ad:a0:72:8a:c2:7d:a2:c4:84:f0:a0:a3:9d:9a:
                    94:61:b0:fa:43:ef:86:8f:2e:3b:6f:d9:8e:d9:45:
                    c4:c1:bf:f8:8c:3e:85:fa:54:ea:4f:66:c7:05:ac:
                    d8:51:71:6f:08:c0:d3:34:88:d9:ef:17:20:2c:39:
                    89:b3:d8:75:e5:d7:96:46:2c:f7:ba:e7:fd:29:c6:
                    72:66:90:f7:1a:6d:39:0d:8e:7d:d3:ad:ff:61:75:
                    0b:a6:78:06:75:81:2e:60:37:02:c0:d3:ef:3e:52:
                    c5:5c:ad:20:c9:d7:b0:09:62:49:67:05:d5:e4:fe:
                    b6:6f:d3:fd:db:97:9a:1e:dc:f3:28:60:0d:7f:f3:
                    7d:89:23:ce:30:9e:69:da:2b:fc:7d:4f:a3:36:e9:
                    6d:08:41:91:66:92:e0:31:33:ff:85:5a:40:9d:d0:
                    5e:02:3f:8c:98:09:a5:50:3d:d5:be:b4:85:6a:eb:
                    3b:4e:64:87:b6:0c:26:24:31:c4:83:ff:c8:2f:98:
                    2e:34:f9:50:17:a6:19:d6:18:29:e1:8d:ed:f3:27:
                    3e:22:7a:30:87:3a:1c:bb:be:65:63:a6:b8:85:5f:
                    e7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:50:F7:01:F7:09:DD:5F:22:C5:F8:90:A1:CF:4D:3C:EE:12:80:EF
            X509v3 Authority Key Identifier:
                keyid:ED:F6:93:E5:1C:1D:5D:4A:B2:14:7F:72:34:32:0F:F6:4F:51:83:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9baae0-52fe-4253-89bb-e361bbeaf786/1/7faT5RwdXUqyFH9yNDIP9k9Rg1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:18:35:57:b4:a5:c5:26:2b:1a:0c:06:b0:2c:92:0d:71:00:
         47:92:45:a3:c5:f3:72:2f:fc:af:fa:00:9e:79:f1:82:86:87:
         ce:37:9a:4c:8e:5f:3d:ad:71:5c:4d:7e:d6:9b:6a:96:27:24:
         4a:be:b6:3a:b2:15:a6:90:1e:ee:ff:6d:02:09:2b:8c:29:21:
         d7:39:b6:03:65:93:19:0e:84:bd:1a:7e:df:37:ab:f8:17:c9:
         cf:a2:dc:56:ec:e2:54:5c:2c:11:ce:d9:ee:a5:ae:69:58:c6:
         56:09:5a:9d:3d:93:5f:df:75:b1:81:6d:0b:e9:14:b2:02:37:
         18:58:be:d2:04:e2:28:cb:a6:88:35:2c:92:46:a7:a7:c5:53:
         39:39:d9:e8:54:62:1d:99:da:a4:4b:11:96:8b:1a:a2:c0:53:
         c6:82:71:b6:bf:9f:45:50:57:34:36:61:45:e7:52:bf:d8:3a:
         31:54:93:c4:c4:e0:2a:ad:8b:f0:a2:2c:16:8e:6f:fa:b7:19:
         b1:f0:f4:40:8c:85:26:05:45:e3:36:06:58:cc:a8:cf:81:d1:
         43:27:1b:e5:ef:a6:86:b7:e1:a0:5e:7d:86:b2:c7:28:46:d3:
         ff:89:b3:38:9e:64:ad:3b:19:9a:aa:e6:d8:15:61:f2:25:53:
         30:5a:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:05:33 2026 by rpki-client