Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
File:                     7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft (raw, json)
Hash identifier:          sOfvFKXzpDSsSXU2gaZTdMcHz6J5CFD2iN4yD3yGQmo=
Subject key identifier:   79:C2:53:14:6C:28:E5:D2:F1:E8:06:BA:51:BA:88:C3:BA:02:5E:A9
Authority key identifier: EC:1D:72:90:BF:D1:BE:12:3F:BE:0B:07:5F:D5:0D:CF:64:6C:4F:76
Certificate issuer:       /CN=ec1d7290bfd1be123fbe0b075fd50dcf646c4f76
Certificate serial:       01A0C96ADBA3EC4EFFA09828E1BB6B02680A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
Manifest number:          0BE5
Signing time:             Tue 22 Sep 2026 14:00:18 +0000
Manifest this update:     Tue 22 Sep 2026 14:00:18 +0000
Manifest next update:     Wed 23 Sep 2026 14:00:18 +0000
Files and hashes:         1: 7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl (hash: rfajbh1+Go+8kDjprpQNQ2kk3AD21InafAvtp4a4sB4=)
                          2: 7R0KMEDBzBiG-gwWxqL3ap95Tkg.asa (hash: 592gBxhDCiVzB3YFsIoN3WQGZ1tcTFUQSdepB9YadmA=)
                          3: fgHkP2YUSzuNyvGW8zK9eGXNEYY.roa (hash: SUqfyWSJbDnWk7tr9aXaMYt6tAtE7VJWtQ/R4/BKvSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:6a:db:a3:ec:4e:ff:a0:98:28:e1:bb:6b:02:68:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec1d7290bfd1be123fbe0b075fd50dcf646c4f76
        Validity
            Not Before: Sep 22 14:00:18 2026 GMT
            Not After : Sep 23 14:00:18 2026 GMT
        Subject: CN=79c253146c28e5d2f1e806ba51ba88c3ba025ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:91:32:ec:69:ce:57:2a:ca:7f:49:2c:35:fb:
                    c2:98:45:9f:5a:a0:ff:53:a0:1c:17:4e:13:f9:a8:
                    fe:e2:c6:41:ce:4a:28:f9:b9:d8:a2:76:ea:a2:b4:
                    cd:42:43:59:7c:9c:76:54:e8:91:05:54:ab:ca:24:
                    36:5c:5a:51:64:60:86:d8:d3:6d:4d:23:95:84:df:
                    4b:62:fd:82:c4:df:74:7e:52:14:d0:ac:79:1f:f4:
                    d5:a3:b0:3e:4c:36:d3:f2:9b:4f:26:86:df:4a:ef:
                    cb:41:31:ac:c0:14:02:ba:b7:82:ab:4a:09:83:36:
                    ef:9a:63:7c:64:d3:94:bd:59:31:50:ba:23:48:d8:
                    fd:db:3d:f5:08:fb:85:23:e3:ac:18:85:b4:6f:b9:
                    f6:ea:e3:ac:62:3d:be:ad:a8:48:7b:9a:3c:d3:da:
                    62:7f:b0:5d:6c:24:32:fe:e4:4a:f6:02:9f:9b:ec:
                    88:c7:fd:8c:80:ee:01:3c:94:19:0a:4c:04:98:ff:
                    b8:6b:9e:2f:35:17:3d:c7:6b:12:d7:03:6c:4f:f4:
                    58:7b:32:33:8e:35:13:ed:2b:e2:46:37:c2:27:bf:
                    b9:fa:c1:7e:1e:5e:c1:4c:39:d7:ab:da:c4:0b:85:
                    17:45:c2:53:a4:3a:dc:84:ee:1e:e8:69:2d:6b:9b:
                    16:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C2:53:14:6C:28:E5:D2:F1:E8:06:BA:51:BA:88:C3:BA:02:5E:A9
            X509v3 Authority Key Identifier:
                keyid:EC:1D:72:90:BF:D1:BE:12:3F:BE:0B:07:5F:D5:0D:CF:64:6C:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:47:52:9b:68:ec:cf:d3:39:95:62:78:3b:4c:b5:73:38:72:
         9a:b1:65:e4:ac:a3:a1:6a:5a:5a:bd:1a:2b:2d:09:0d:16:11:
         72:d7:d3:43:35:b0:da:55:52:7a:20:2f:cb:f9:23:22:b2:d8:
         93:d7:e4:24:0d:c9:db:7a:98:69:49:fd:33:90:d0:71:96:2b:
         c0:c1:8d:ce:68:c9:ba:ae:08:b1:24:1b:79:2e:aa:d6:a2:dc:
         cb:3c:67:f6:b0:f5:7c:d3:e2:53:82:7b:dd:70:42:e2:73:89:
         ce:75:86:1b:b9:d4:ea:98:bb:0d:bd:98:79:61:09:de:a6:0a:
         ac:26:b4:20:34:f3:b6:6a:b1:58:e5:ec:b1:a7:c8:4d:82:bd:
         69:51:33:93:e8:cd:75:8b:9c:8a:05:87:88:de:8f:a0:69:c2:
         80:68:fa:54:66:76:19:4b:31:9a:0c:9f:df:83:3f:06:ed:58:
         9b:90:2f:28:61:73:55:64:4a:f0:84:c6:7b:7c:a2:fd:e4:8a:
         5f:3e:e0:f5:39:f2:0e:f0:c8:4d:5d:a7:3c:e9:41:cc:47:ba:
         ad:31:18:7a:7a:5c:d2:d5:ef:a4:db:54:57:e3:6b:6c:83:09:
         5c:a0:f9:ac:62:a4:13:f1:aa:21:34:94:bd:7f:b7:a8:7b:99:
         8a:11:f2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:16:54 2026 by rpki-client