Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File:                     7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier:          jTX3s6k/t9L2/Gv3XXXLHEHEVrMeguyCRMVdbMnWBj8=
Subject key identifier:   BB:7B:E6:0F:F4:66:61:FB:DC:9C:A6:D6:10:E5:E4:D4:DE:7E:7E:80
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer:       /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial:       01A0D1923E399697BDBE5A865230360AD2E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number:          15B1
Signing time:             Thu 24 Sep 2026 04:00:17 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:17 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:17 +0000
Files and hashes:         1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: L1Murpr7Ol2c/r94uJpr/uhhMwudlI5YX118CxN93qM=)
                          2: 88NWVToLEwKK_Mpgeyzi5wA0xpo.roa (hash: l2cWTge/R/tklyYKEf8+fIr98gBT5pBqi6tErfFhBF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:3e:39:96:97:bd:be:5a:86:52:30:36:0a:d2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
        Validity
            Not Before: Sep 24 04:00:17 2026 GMT
            Not After : Sep 25 04:00:17 2026 GMT
        Subject: CN=bb7be60ff46661fbdc9ca6d610e5e4d4de7e7e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:01:13:f2:47:fb:de:b8:f4:98:5d:f7:69:
                    e3:fc:c8:29:88:db:2e:6b:64:d2:23:2c:39:db:15:
                    85:02:8d:59:bf:a9:c6:46:5c:17:b9:9c:ee:44:d3:
                    12:65:4c:7a:dc:bc:e4:71:4a:4c:da:ca:f3:f8:d5:
                    55:7e:13:f8:80:26:7c:c2:91:fa:23:28:ef:a2:94:
                    68:6b:99:03:42:f9:63:b5:aa:04:58:3f:83:1f:d8:
                    f5:00:24:73:6f:0e:ef:99:1f:c8:23:a2:b5:b6:1f:
                    46:72:e6:1c:b2:dd:39:22:6e:b3:2b:52:cb:75:0a:
                    1e:b7:74:ea:45:7c:fb:ec:09:a2:6a:9e:e5:5c:7c:
                    69:bd:f6:3b:94:2f:8b:55:86:e0:1b:b3:56:1c:47:
                    41:b9:65:f4:6d:9a:f9:55:02:51:ae:11:6c:f0:66:
                    c2:db:cd:a8:33:bb:e0:98:a7:34:25:55:13:d6:5c:
                    da:dd:49:b9:de:c8:5c:ef:bc:f2:92:d8:9d:1c:9b:
                    fe:8a:5a:36:c5:23:ff:2d:a9:fe:9c:02:42:cc:57:
                    0b:9c:60:3e:d6:b9:28:95:a2:e9:64:54:32:f2:2e:
                    a2:0c:39:fa:0c:52:d3:ea:fb:f6:e8:70:07:2b:75:
                    89:c7:80:cf:af:2e:88:5b:9a:d2:35:7f:74:b4:6c:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7B:E6:0F:F4:66:61:FB:DC:9C:A6:D6:10:E5:E4:D4:DE:7E:7E:80
            X509v3 Authority Key Identifier:
                keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b1:a7:30:a9:66:b3:94:7a:43:cc:68:3e:42:0a:ea:65:a3:
         e8:26:91:d0:32:3d:fb:e5:b9:49:b1:5b:ed:e8:56:9b:9b:87:
         83:4e:ed:00:a1:b0:f3:fc:8e:db:e7:b6:9c:0e:af:3c:db:dd:
         c8:43:53:bd:b5:cf:6a:56:af:15:8d:f3:de:c6:fa:24:25:18:
         0b:3d:25:24:be:df:64:e0:e1:6f:4a:c8:c5:eb:ab:e9:7c:66:
         21:ea:ff:b2:ba:7f:31:cd:e8:45:95:1b:f6:c4:bc:0f:4f:6f:
         01:2d:f1:8b:f5:a6:77:c6:83:c7:e3:51:47:59:10:88:a1:d4:
         54:bc:b2:f6:52:5e:1c:d8:1b:85:c8:c5:e1:84:7f:f7:e3:22:
         bb:50:92:90:a8:7d:65:64:12:08:25:9b:41:a3:a9:3c:d6:16:
         52:67:35:cb:d4:16:49:cb:0b:f6:16:0d:8b:99:e1:45:d4:66:
         91:27:51:c1:69:c9:3e:fb:36:92:d0:e3:fb:55:0c:2a:6d:5a:
         7d:32:fd:9b:9f:3e:20:f5:75:41:9f:3a:1e:b2:f6:71:f8:2f:
         1e:95:d5:3f:e9:bd:3e:05:d6:6d:52:fe:72:79:c9:9e:35:fa:
         89:a1:81:b9:17:c9:fa:4c:82:a2:22:27:82:c3:de:0f:11:2a:
         8b:30:1b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:28:19 2026 by rpki-client