Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft
File:                     7zAIudH6IIoVT1hcruy7UsGyXOQ.mft (raw, json)
Hash identifier:          c7B7z5CnLDUJjKfV59LujCJjsiDbTyDnKAQLSVQbGbc=
Subject key identifier:   AD:B5:9C:9A:EB:D9:6D:9B:5F:63:1A:13:A7:CA:0A:90:CE:65:14:2A
Authority key identifier: EF:30:08:B9:D1:FA:20:8A:15:4F:58:5C:AE:EC:BB:52:C1:B2:5C:E4
Certificate issuer:       /CN=ef3008b9d1fa208a154f585caeecbb52c1b25ce4
Certificate serial:       01A0CB593F7DF7C6BD893B2CD8F47B04074C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zAIudH6IIoVT1hcruy7UsGyXOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft
Manifest number:          021A
Signing time:             Tue 22 Sep 2026 23:00:18 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:18 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:18 +0000
Files and hashes:         1: 7zAIudH6IIoVT1hcruy7UsGyXOQ.crl (hash: EnvAOlTfLpQEUyFaEoJbfsmS4Y71kLKWeViQCBpHUmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7zAIudH6IIoVT1hcruy7UsGyXOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:3f:7d:f7:c6:bd:89:3b:2c:d8:f4:7b:04:07:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3008b9d1fa208a154f585caeecbb52c1b25ce4
        Validity
            Not Before: Sep 22 23:00:18 2026 GMT
            Not After : Sep 23 23:00:18 2026 GMT
        Subject: CN=adb59c9aebd96d9b5f631a13a7ca0a90ce65142a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ef:bb:50:84:6a:e4:4d:5b:48:9a:0d:aa:d4:
                    e8:df:bc:ca:40:a2:ad:a7:10:78:9d:c5:cf:a0:ca:
                    39:95:77:8c:82:50:9b:41:29:ee:8d:bf:34:a1:07:
                    8e:00:04:1f:f2:d7:5f:ee:a6:09:9e:9e:ce:1f:98:
                    f5:66:e4:bb:26:29:7a:b6:3c:ac:5e:b3:10:a7:d0:
                    04:5c:af:af:66:00:1a:36:fb:ed:b9:3d:6f:c2:e3:
                    78:da:a7:de:aa:d2:46:cf:88:af:52:bf:69:fd:70:
                    73:7b:3a:9e:28:0f:9d:42:e3:be:21:45:a6:57:97:
                    e0:fc:09:f8:92:1b:07:96:91:b1:b6:06:41:4e:72:
                    7f:48:6e:cd:20:98:bc:75:b7:f8:5d:4f:4b:79:15:
                    8f:40:2a:5c:02:35:39:fe:e7:e3:30:45:66:c6:cb:
                    68:9b:72:0f:39:a5:99:2b:a1:06:ac:e8:b0:f6:f5:
                    e4:50:3d:f5:d3:68:82:fa:ca:4b:0e:1c:a2:11:fc:
                    1e:2e:ee:f9:14:be:4f:b0:7c:ac:f4:56:d3:dd:6e:
                    10:4d:18:ff:cc:35:3d:93:61:62:58:a0:10:f0:1b:
                    ee:7b:f3:48:83:d4:ca:c5:26:44:ce:61:48:9c:7f:
                    73:b7:28:04:d0:ee:75:9c:89:75:5f:b4:62:f0:77:
                    e5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B5:9C:9A:EB:D9:6D:9B:5F:63:1A:13:A7:CA:0A:90:CE:65:14:2A
            X509v3 Authority Key Identifier:
                keyid:EF:30:08:B9:D1:FA:20:8A:15:4F:58:5C:AE:EC:BB:52:C1:B2:5C:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zAIudH6IIoVT1hcruy7UsGyXOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/4089cd-5ba0-483c-883d-c8c0ff55f52d/1/7zAIudH6IIoVT1hcruy7UsGyXOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ab:b5:f1:c5:dc:ac:94:35:1c:e9:4c:98:c2:8b:3a:ab:7c:
         7f:67:d7:02:03:d9:eb:88:cf:ed:69:25:b2:b3:81:c8:c3:4b:
         b5:8c:28:9e:22:cc:59:99:86:df:b4:3a:9a:84:df:1f:c1:b5:
         f7:1f:14:88:10:1c:f8:f2:a8:05:d5:61:7d:96:a3:36:34:38:
         bc:f2:70:9b:6a:b7:fe:aa:48:d5:b4:ba:80:21:9b:58:6a:d9:
         cb:01:16:61:b8:c6:a1:bd:ae:70:75:53:62:ba:d5:65:39:08:
         ff:53:bd:8d:d2:1b:24:76:c4:5a:4b:1a:e4:db:fc:c5:1c:5c:
         5d:3e:42:c9:50:fc:22:d6:f3:5a:4a:13:de:31:79:db:55:8a:
         e9:11:7f:0d:56:44:d4:23:3e:32:4e:39:75:03:96:15:f7:de:
         35:5a:ea:c1:4d:3d:7a:f5:7a:05:d0:23:2d:a4:19:b4:a0:9b:
         a6:14:8b:58:fe:0b:34:19:50:83:63:61:ec:fe:c2:fb:42:6a:
         5b:0c:f2:fa:ad:ec:f2:9c:77:0c:d7:c8:ef:0f:40:27:14:bd:
         a6:4f:8e:dc:4f:1f:a0:b7:9a:12:2c:43:bf:5c:97:ce:d9:4a:
         f1:ea:5e:71:f1:a8:fb:d2:b5:9f:57:78:e5:09:4c:a9:df:9a:
         d1:62:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----