Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
File:                     7YUEg8zhM3scbC_d6pxdu0p-GRo.mft (raw, json)
Hash identifier:          VZ+Aup/oOHv1LohnCEeKnVau3rTPGvt9z1DVMW7l364=
Subject key identifier:   D4:24:01:07:17:12:45:74:4B:BE:DA:F6:48:F8:38:38:6A:DF:7D:B1
Authority key identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
Certificate issuer:       /CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Certificate serial:       01A0D8DE93A3603E35B4EB92C807B66F4769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
Manifest number:          1A6E
Signing time:             Fri 25 Sep 2026 14:01:00 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:00 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:00 +0000
Files and hashes:         1: 7YUEg8zhM3scbC_d6pxdu0p-GRo.crl (hash: Ku1J1GhqSuBnlo7Y0iw1NoM8U4MmQEnei5Fk9mwIqg8=)
                          2: aolEbo2qB2S6A6P1jzACXp478EQ.roa (hash: oA7ghnRZDo0Fz0lfj+1EUdXsdtQn6tS/8aJp7ap6T0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:de:93:a3:60:3e:35:b4:eb:92:c8:07:b6:6f:47:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
        Validity
            Not Before: Sep 25 14:01:00 2026 GMT
            Not After : Sep 26 14:01:00 2026 GMT
        Subject: CN=d4240107171245744bbedaf648f838386adf7db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:f7:58:9c:ba:06:96:66:06:8c:48:73:59:
                    5f:15:ee:eb:49:b6:a9:1c:25:f5:26:ce:ae:fb:09:
                    1e:9f:79:56:fd:2f:b3:f5:c4:3b:5b:da:1c:68:b6:
                    66:f1:73:2d:dd:54:5e:aa:5a:8f:d6:55:9a:e8:5b:
                    b1:8d:96:93:15:1e:81:9c:2c:5d:14:ea:ed:45:0f:
                    e9:59:62:50:59:9c:6b:90:56:6e:4d:d1:4b:11:a9:
                    97:a5:47:c0:12:2e:10:91:c4:b3:02:9e:25:2e:1b:
                    3a:9c:17:6f:84:92:91:24:41:12:c2:24:01:03:af:
                    61:f7:c7:34:8c:4f:59:74:57:2d:d7:41:10:b7:a9:
                    06:dd:d6:3f:5f:fe:1c:84:e4:6b:b2:a4:d1:93:43:
                    8a:4d:79:3a:fb:ed:74:6e:5f:33:96:4b:1f:6e:fa:
                    cd:b5:c8:5b:52:31:4f:a4:fe:db:03:e5:31:6f:7b:
                    53:08:b0:05:f0:63:73:c0:63:a2:d6:4f:07:40:b2:
                    b4:eb:f5:70:0a:2b:e1:0a:b9:c1:93:f7:5f:73:0a:
                    75:fa:78:c6:8b:42:35:77:45:f7:d1:18:70:1e:41:
                    64:39:54:06:70:74:4f:e0:72:68:7b:56:6b:ed:de:
                    2b:f8:0b:b3:c8:8e:9c:75:98:86:0b:e7:18:3b:44:
                    73:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:24:01:07:17:12:45:74:4B:BE:DA:F6:48:F8:38:38:6A:DF:7D:B1
            X509v3 Authority Key Identifier:
                keyid:ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:9e:7e:4b:64:1a:23:18:28:c7:28:37:f0:d1:91:a0:43:b1:
         d5:3e:b7:e5:27:5a:38:e3:79:ba:8b:4c:7a:3b:40:8c:5a:a8:
         1b:b3:a4:6e:6f:fe:0a:16:4b:ee:33:3f:3c:a7:d4:fc:eb:26:
         5c:7b:54:88:9f:0e:b1:ab:2a:db:78:b6:6f:18:b9:ca:cf:84:
         ed:f0:27:67:e3:94:a2:92:dc:d5:1e:d8:20:1c:0d:fa:3d:a2:
         a7:72:2f:d3:e9:b7:a5:f8:b2:10:1d:b7:02:8a:c0:04:43:bf:
         fb:ec:8a:16:45:80:31:f6:4c:35:fd:0a:18:6d:1a:e5:16:b8:
         98:c5:c0:ea:a6:c5:8f:3d:62:bc:98:4a:21:c2:31:c1:aa:4e:
         85:ad:23:eb:86:6c:ff:e2:fd:25:5c:84:e4:05:4f:28:34:a0:
         1b:76:9a:5a:86:e4:a5:38:1c:63:5f:df:62:55:0b:d0:1b:61:
         56:46:af:99:0c:f5:04:ca:7b:5c:75:98:bc:85:bd:4b:5d:d6:
         d1:eb:54:9b:b8:f3:5b:0d:b5:94:4a:29:63:0a:ae:ea:11:e4:
         d4:b7:2b:11:7e:2e:15:aa:a9:4d:18:78:bb:a4:5e:0d:3d:00:
         5f:ce:31:06:50:6a:1d:b4:18:68:2a:e6:4f:4b:23:87:eb:fb:
         84:bd:fb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:02:07 2026 by rpki-client