Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
File:                     mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft (raw, json)
Hash identifier:          zJ600m1ShM+dM3IM6136uur92ibHEZPfwrdrwBjN2Ik=
Subject key identifier:   AE:C7:C3:D2:1E:E9:57:BA:B6:A8:06:92:66:82:D1:76:EE:7D:14:A8
Authority key identifier: 98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
Certificate issuer:       /CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Certificate serial:       019F8F477D8E9AAB10067EC81155963ED814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
Manifest number:          03A7
Signing time:             Thu 23 Jul 2026 14:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:54 +0000
Files and hashes:         1: mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl (hash: Jd/v9PfHgBmAVggRMls5J77U9Ekuml46QA+X2DpNEYQ=)
                          2: nXPV6vL9Myf87iwdt8oMBUpIgzI.asa (hash: jq25H7X+5Q2wBhKdDZk+7MpbH+S6ejGtNRjeRxPO9HA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:7d:8e:9a:ab:10:06:7e:c8:11:55:96:3e:d8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98466aec752928b6d4865b99e8608c4aec4b78ac
        Validity
            Not Before: Jul 23 14:00:54 2026 GMT
            Not After : Jul 24 14:00:54 2026 GMT
        Subject: CN=aec7c3d21ee957bab6a806926682d176ee7d14a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5e:7a:a2:ad:aa:e9:29:0c:e6:9b:04:9a:33:
                    2e:2a:3e:3b:2c:7c:12:4c:92:f8:cf:96:aa:7d:58:
                    03:9d:ed:4e:7e:12:ef:5a:84:77:0a:57:13:67:02:
                    8e:bc:e6:9c:d0:89:2e:1f:68:fb:a6:2b:eb:3a:77:
                    a1:ff:23:df:ee:86:3d:44:31:9c:af:39:04:1a:8c:
                    f7:cb:03:75:ba:5f:a5:51:c2:d5:40:18:b3:db:81:
                    be:55:7b:b6:88:fc:4e:a2:d8:00:87:77:aa:7f:7f:
                    8e:84:29:4f:47:83:2e:e3:6c:c3:31:5b:30:05:2a:
                    46:b5:ef:87:1e:a8:2c:71:36:fd:08:7a:1b:ea:14:
                    c3:51:29:92:9d:61:68:54:46:ad:63:6a:10:76:5e:
                    29:70:38:dc:ee:11:ce:05:15:06:b8:d4:8c:ce:68:
                    52:19:3c:fe:3f:f0:74:c9:af:6d:59:ff:e7:81:89:
                    91:95:65:c1:b8:68:db:c4:49:40:7e:f9:f1:4d:d0:
                    74:a8:e5:06:1d:e1:1f:01:c8:e8:be:2b:71:2e:af:
                    a1:7b:15:e8:db:55:3e:70:30:be:38:dc:50:8a:ed:
                    fe:87:25:7d:39:6c:07:5e:e2:b0:8f:af:9f:a3:45:
                    75:77:35:42:08:07:9a:fc:c5:66:7f:c1:48:26:84:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C7:C3:D2:1E:E9:57:BA:B6:A8:06:92:66:82:D1:76:EE:7D:14:A8
            X509v3 Authority Key Identifier:
                keyid:98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:64:2a:63:83:38:5b:9e:69:c6:c6:69:7e:82:00:38:07:cb:
         3d:84:7a:85:26:a4:b8:1d:6c:25:12:47:3d:3e:8f:63:45:42:
         67:57:64:36:ca:47:e3:54:83:b4:aa:7b:3b:0c:cd:85:db:57:
         fc:c0:10:59:ef:10:10:67:1a:6e:ca:d0:47:49:59:08:ca:31:
         2a:cc:14:75:f2:2c:52:26:f8:ad:5e:1b:cf:fb:99:05:45:44:
         d0:0f:87:03:c3:60:f7:b6:a9:3f:dd:1c:9c:12:cb:ce:96:73:
         36:ce:c8:0b:d8:72:09:56:8d:bf:4f:25:10:57:6b:74:bb:a3:
         7a:b8:d2:93:a3:f7:3f:01:11:6a:1b:4f:64:ed:32:dc:6f:7b:
         99:78:f3:f3:c5:0d:9a:71:68:68:58:54:8d:5f:0d:28:b9:f7:
         1c:e5:48:77:c9:2e:13:75:e6:bf:5d:3c:fa:3f:24:a9:f7:4e:
         f0:28:b2:e3:50:93:17:12:39:c8:85:a2:21:60:6c:0c:8d:c5:
         8f:6b:c8:cc:ef:da:c9:0c:68:9f:a4:83:95:3b:1a:e3:e3:a4:
         13:69:9b:18:2d:f1:75:67:6d:cd:e6:e7:bb:c9:5d:d0:f3:ef:
         ec:b4:d9:d6:4e:f4:30:74:b0:ba:d7:7e:1d:6f:c7:0b:08:a0:
         53:fd:00:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:13:28 2026 by rpki-client