Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
File:                     7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft (raw, json)
Hash identifier:          23oGq0diNYVlowb2YOi3J+RvUbj0TyXr84UuCRcF8Ms=
Subject key identifier:   8A:73:9E:7F:86:9A:54:AE:14:C0:7F:07:C5:E7:EC:E1:F6:58:B1:BB
Authority key identifier: EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC
Certificate issuer:       /CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
Certificate serial:       01A0CB2263A2A9A87AF4205DCEDD0DD246B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
Manifest number:          1A66
Signing time:             Tue 22 Sep 2026 22:00:23 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:23 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:23 +0000
Files and hashes:         1: 7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl (hash: W2WLP36lfFA8QPwwMwvGkLsaBJlRp0v/XtJrRjVafSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:63:a2:a9:a8:7a:f4:20:5d:ce:dd:0d:d2:46:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
        Validity
            Not Before: Sep 22 22:00:23 2026 GMT
            Not After : Sep 23 22:00:23 2026 GMT
        Subject: CN=8a739e7f869a54ae14c07f07c5e7ece1f658b1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9b:1d:28:8d:d7:21:3d:27:68:b8:a8:86:a2:
                    c4:d8:99:db:53:48:16:ae:f7:dc:69:b1:34:dd:2c:
                    45:df:a4:8d:0d:2d:82:77:25:60:27:10:01:70:85:
                    17:7d:0f:b3:d5:a6:96:87:18:da:5e:75:b6:8f:70:
                    6e:2d:f0:55:e9:e6:2e:ff:8d:79:4a:5e:f3:b4:77:
                    89:c5:bb:cf:ba:2a:67:5e:3e:c3:ca:6f:fa:29:17:
                    58:e6:75:92:ac:be:d4:5a:b1:92:86:d4:54:65:49:
                    76:2b:9a:61:2b:fa:d7:48:38:9e:03:16:97:73:05:
                    bf:56:f8:03:56:ac:fa:72:50:c9:8e:cd:22:a3:f6:
                    c0:54:d3:74:d8:b2:a8:ef:96:fb:c0:b1:fc:17:32:
                    d5:e4:f0:86:0e:c9:88:8d:02:35:0f:6f:e8:9d:73:
                    c7:aa:61:9e:dc:f7:15:06:ad:71:58:52:9a:86:8a:
                    24:bb:a8:00:74:d7:e5:8b:8d:f4:53:6f:1b:cc:94:
                    4d:52:3c:3e:84:95:4e:ff:17:d8:d9:83:b0:43:ee:
                    1b:dc:5a:e0:7a:e4:26:72:f1:ed:ff:c3:94:ff:9a:
                    d4:ca:02:69:36:ea:00:92:61:ac:a7:2b:96:3a:08:
                    86:83:4c:d5:c7:a2:15:6e:16:3e:99:a8:7e:36:5c:
                    ef:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:73:9E:7F:86:9A:54:AE:14:C0:7F:07:C5:E7:EC:E1:F6:58:B1:BB
            X509v3 Authority Key Identifier:
                keyid:EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:05:94:c8:27:79:75:82:48:e1:69:c2:16:dd:51:46:f5:22:
         55:89:b8:30:32:3a:06:84:03:90:5a:48:8b:4b:95:de:c8:fe:
         02:f0:ae:4c:c4:95:91:10:44:23:e7:99:b8:27:cd:5d:5c:61:
         c9:3d:16:c2:0f:c3:4f:c2:a6:fc:5f:6a:9e:58:92:1b:35:f4:
         26:de:1e:5a:d7:72:6f:11:11:0d:6a:24:1a:19:dd:d9:fb:c7:
         ff:dd:2b:0e:a2:70:58:2f:45:c3:35:f7:9a:d3:62:01:9e:76:
         ed:10:b4:87:ca:81:25:6a:7b:37:fc:4a:61:6d:62:0b:59:11:
         59:9c:3f:8d:78:dd:de:61:c6:38:a0:f6:19:95:40:d7:1f:3e:
         fe:c6:0d:9b:29:5a:f4:76:52:7b:f9:f6:06:67:b6:97:36:5b:
         92:5f:99:20:cf:05:37:da:cd:ca:f9:2f:4d:0b:54:0d:ce:5b:
         d1:e0:59:68:fc:e7:2f:9c:b5:be:11:8c:e2:de:49:74:7a:c6:
         18:13:0e:58:19:69:8a:66:96:ec:fc:c6:9b:1e:05:23:f5:84:
         03:e9:f9:ca:96:3f:d6:d3:54:f1:5e:a2:9f:32:e6:fc:88:5c:
         39:d3:0b:d4:f4:10:77:b2:f8:68:42:48:24:46:34:63:c1:04:
         a3:9b:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:26:17 2026 by rpki-client