Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
File:                     7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft (raw, json)
Hash identifier:          uHeVPh4+EiSCGgWoY/2EiDqZFcnuWar2vf2rQyG9WqI=
Subject key identifier:   C8:93:A6:85:62:23:D0:41:00:0F:90:84:C5:BF:5E:AF:89:A4:07:F0
Authority key identifier: ED:86:11:91:5E:16:51:AF:17:E7:BF:1F:7C:AB:90:D5:5D:C1:DD:88
Certificate issuer:       /CN=ed8611915e1651af17e7bf1f7cab90d55dc1dd88
Certificate serial:       01A0CC3604C7D5D23D8B0166C4F9BDDE3D52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
Manifest number:          E3
Signing time:             Wed 23 Sep 2026 03:01:27 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:27 +0000
Manifest next update:     Thu 24 Sep 2026 03:01:27 +0000
Files and hashes:         1: 7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl (hash: dFD8ur045k7VrZYYOhAFp3QoGmelM4E/Lr87XMR6GdQ=)
                          2: Df_oTOu_EP4d50D-2XA0QPqfKjk.roa (hash: +VGVc2qalWbQy0rJrmFcx94atdweW3ZFDDwOq9nPIVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:36:04:c7:d5:d2:3d:8b:01:66:c4:f9:bd:de:3d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8611915e1651af17e7bf1f7cab90d55dc1dd88
        Validity
            Not Before: Sep 23 03:01:27 2026 GMT
            Not After : Sep 24 03:01:27 2026 GMT
        Subject: CN=c893a6856223d041000f9084c5bf5eaf89a407f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a9:5d:d5:c2:50:8c:49:1e:2a:46:ea:43:d2:
                    8f:5f:8a:75:ec:55:1e:92:71:cc:79:92:03:f7:a0:
                    0b:bb:be:f1:f0:dd:e8:6e:4c:74:49:9e:26:18:ee:
                    43:f1:af:19:3d:e4:e0:5c:9d:34:3a:ac:c9:63:6e:
                    b7:4a:af:54:79:8c:33:a1:47:65:b8:37:81:ea:33:
                    10:ac:dd:6a:02:df:d3:1a:6b:bd:47:7f:6e:64:20:
                    04:a7:4a:a6:39:88:3c:47:d6:a3:30:c9:26:ec:53:
                    da:dc:0d:18:da:45:41:58:a0:64:42:01:af:c5:5f:
                    36:80:70:93:05:43:f8:de:67:3a:cb:9e:19:c2:3c:
                    1a:8d:a9:bf:3f:5f:04:a0:22:d1:10:b4:82:c6:cc:
                    51:08:1b:ae:71:b6:79:91:70:bd:d1:a6:fe:ed:47:
                    bc:b1:a2:25:a7:91:20:ee:c0:e1:4b:e5:96:53:fa:
                    a5:16:66:1c:e0:5d:a2:6d:19:3c:34:16:fe:40:d7:
                    31:73:ac:35:e8:3f:95:dd:c3:cb:9f:ca:66:ef:36:
                    2b:1c:ee:9b:8a:75:81:60:30:d7:ae:89:34:54:61:
                    fb:68:41:33:5d:c4:98:aa:23:bb:4b:84:4d:e0:53:
                    65:cd:b9:89:02:21:7e:f5:5a:88:24:26:70:a5:f1:
                    86:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:93:A6:85:62:23:D0:41:00:0F:90:84:C5:BF:5E:AF:89:A4:07:F0
            X509v3 Authority Key Identifier:
                keyid:ED:86:11:91:5E:16:51:AF:17:E7:BF:1F:7C:AB:90:D5:5D:C1:DD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:71:ab:b1:83:c8:ed:4d:b5:28:43:60:43:a9:f3:fa:c7:f5:
         4b:bf:09:92:a9:36:3e:ab:d0:3d:41:80:37:af:77:20:c0:b0:
         fc:8c:00:6e:66:e7:6b:50:6a:10:8f:a1:41:7a:d0:c3:a3:b5:
         94:62:ae:dc:c0:bd:3c:b6:86:e6:b6:ca:d8:75:3c:f6:88:a4:
         de:8e:d5:95:63:fc:8f:bc:9e:f6:ed:94:ca:0a:57:f3:31:ba:
         a6:f4:7a:1b:e6:6a:cd:b7:83:d5:9e:f8:36:b6:37:80:65:37:
         c9:07:06:35:86:79:ec:c5:c7:87:3f:01:1f:c4:b4:f8:82:97:
         2d:7e:18:7f:6c:57:b0:5e:dd:2b:36:e1:ad:8d:67:0d:b8:39:
         a5:91:84:94:35:03:81:99:62:db:b1:fe:3c:87:31:e9:27:eb:
         1a:59:67:33:54:9e:90:04:23:16:2e:86:57:e8:04:42:96:07:
         f7:f9:13:18:52:41:c6:9f:73:48:e4:7e:a5:bc:ff:99:21:f0:
         eb:c1:34:42:0a:1d:2a:cc:72:e6:0f:4d:20:fe:62:e1:5e:c5:
         19:45:43:2a:06:70:30:3d:47:92:01:38:34:73:14:5b:b3:db:
         e6:3a:f5:5d:83:d0:43:9a:8f:77:4e:b2:7d:65:81:c2:a9:af:
         94:21:26:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:19:36 2026 by rpki-client