Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft
File:                     7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft (raw, json)
Hash identifier:          cc4WOF4EI4UBz83Q34UeB8WtxQPKoEjLZBPU4c4rkJc=
Subject key identifier:   7E:B2:C3:A1:7B:C0:A3:FE:AA:B2:4F:DA:3C:15:9D:0C:B7:7E:07:26
Authority key identifier: ED:18:48:F3:30:D0:F3:3F:1B:B9:C2:5F:AB:76:33:0C:AC:7E:C8:6A
Certificate issuer:       /CN=ed1848f330d0f33f1bb9c25fab76330cac7ec86a
Certificate serial:       019F8F7E74FB1D56164D45A24568B562E05E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7RhI8zDQ8z8bucJfq3YzDKx-yGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:00:57 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:57 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:57 +0000
Files and hashes:         1: 7RhI8zDQ8z8bucJfq3YzDKx-yGo.crl (hash: MHZ0oo1zOX5FyUpFIPCqAud49q0Y5UwVCT6kq+PjOpM=)
                          2: rrVg1yY76H0OrkLgPPxFAVeSQco.roa (hash: 3S/SBO00c/swPpqrVgrHXRtOLs7Ygz5vb2pQy4rK3mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7RhI8zDQ8z8bucJfq3YzDKx-yGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:74:fb:1d:56:16:4d:45:a2:45:68:b5:62:e0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1848f330d0f33f1bb9c25fab76330cac7ec86a
        Validity
            Not Before: Jul 23 15:00:57 2026 GMT
            Not After : Jul 24 15:00:57 2026 GMT
        Subject: CN=7eb2c3a17bc0a3feaab24fda3c159d0cb77e0726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6f:28:a8:bb:a2:05:15:ed:4c:0d:38:99:be:
                    04:cc:4b:04:38:6e:3f:2f:c0:fd:48:d2:5b:ad:e1:
                    39:84:e8:27:22:73:b7:16:c7:b4:23:df:94:54:55:
                    aa:72:77:0d:58:c5:26:1d:9f:73:d9:8e:8d:a6:c6:
                    e9:ee:4e:ed:cc:7e:cc:4f:f1:0d:b6:9e:34:a7:0e:
                    55:76:8c:9a:38:76:3f:a7:11:ce:2b:8b:c8:af:0f:
                    0b:db:1b:b6:e5:3b:bf:f7:9a:c0:1d:ba:43:88:66:
                    9f:06:2a:08:86:a1:57:fe:eb:9d:57:63:17:ba:0b:
                    f3:ef:d5:f6:51:68:ec:ca:b5:96:f0:4f:32:5a:d0:
                    2a:1c:be:6d:53:8f:82:d4:ce:88:56:73:07:57:76:
                    66:45:f4:23:8e:88:f9:1e:d9:b8:4e:17:17:0c:c5:
                    5f:01:4c:76:ba:96:fe:f9:b3:5c:6b:11:67:86:22:
                    74:ad:84:88:d6:20:21:36:a5:58:b2:22:25:31:8d:
                    59:dc:8a:23:43:c8:3f:13:78:fe:e5:cc:d7:5b:95:
                    56:4a:77:61:aa:12:79:37:d0:d6:a3:9e:42:19:e7:
                    d0:37:b3:7f:ed:cc:6d:94:18:3a:64:48:d2:cb:5e:
                    d3:8c:d2:7d:f2:d4:d3:0a:0e:85:93:f5:2f:9e:5e:
                    ed:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B2:C3:A1:7B:C0:A3:FE:AA:B2:4F:DA:3C:15:9D:0C:B7:7E:07:26
            X509v3 Authority Key Identifier:
                keyid:ED:18:48:F3:30:D0:F3:3F:1B:B9:C2:5F:AB:76:33:0C:AC:7E:C8:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RhI8zDQ8z8bucJfq3YzDKx-yGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/201e45-b16c-4779-874a-315c02a59fa5/1/7RhI8zDQ8z8bucJfq3YzDKx-yGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5d:c8:1b:5c:08:fd:1e:1e:b6:26:c8:3e:c1:01:09:de:a4:
         f7:07:2f:3d:97:33:f5:d1:dc:d3:e8:df:3e:65:c8:46:f7:cb:
         93:aa:81:52:13:02:28:33:1c:40:8d:7f:0a:ae:79:6c:7c:f3:
         09:3c:e0:46:b9:91:fa:fd:07:03:92:11:fe:36:99:09:53:52:
         89:5b:4a:b6:89:19:6d:20:42:26:f6:4e:87:49:56:1a:4b:ac:
         d0:b7:10:ca:0e:34:7b:41:00:78:92:fe:23:96:55:b8:df:b6:
         8a:31:d0:39:4c:b1:4e:0d:8c:02:93:46:8a:14:78:82:70:33:
         cf:57:de:0a:ac:1e:14:fe:57:1a:5c:57:65:a2:e1:c9:9c:46:
         21:d5:6c:11:1f:2e:43:cc:5a:55:55:4a:95:3e:35:87:44:78:
         73:4b:dd:e0:93:71:e1:9e:54:11:9f:db:e3:69:a2:c0:a2:6d:
         a6:3e:f1:c2:a3:04:73:84:0a:03:a8:94:ad:d0:ee:c0:6b:4c:
         69:c9:90:1e:24:60:55:67:e4:5f:c4:21:25:fd:e7:c7:c5:14:
         e0:b8:c9:54:66:01:74:be:24:ea:e2:5d:b2:ce:c7:4f:e6:50:
         0b:e7:25:16:9b:cb:85:b5:49:13:fc:31:0e:30:91:c8:6a:84:
         09:70:d9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:10 2026 by rpki-client