Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
File:                     7ouogkxcjSBzJqSjq4k-u49Qlq0.mft (raw, json)
Hash identifier:          J21la9vFHgShSAqc/bA8b27fvW6qe123jMA5Ffjm2Eo=
Subject key identifier:   26:AE:E4:D1:D7:54:13:90:B6:BA:04:A8:F9:AF:49:A0:68:C0:D2:17
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Certificate issuer:       /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial:       01A0D3EF3460E4764B4E20C8D59144A06BF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
Manifest number:          1B5E
Signing time:             Thu 24 Sep 2026 15:01:04 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:04 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:04 +0000
Files and hashes:         1: 7ouogkxcjSBzJqSjq4k-u49Qlq0.crl (hash: z42ShXQkbo4QckodkOVWgtX4T6XKOoU1Z3T3NxDEZbU=)
                          2: 9_qzaYR-EszIpBxI4ownqBBUFGw.roa (hash: VhzjhZWKdSpMHocreuG2Si0iTaWmN7K1sjii56hPLwc=)
                          3: KjzZQ3XHTR1E4K2w5QoidTvxCog.roa (hash: 0FtQ/w38a9SAPO2B+4vZGc9BxQRkeEmmddcJQ1zQ63s=)
                          4: QOp6ldZ4aq2zfMPYvuOeV0oKmeY.roa (hash: 8YOvlrB9urinWAqeR4fd1zgfcxdDnYVPoOrAJi9cHqo=)
                          5: aZXb-HM8btPUx1LInalsokc-cKM.roa (hash: TYnAlNekNynJRsOGiqtjVYr/puO2iGT+VRAtTpQi4YY=)
                          6: m24O6Wpo34YVFTi5GGLw487-z5U.roa (hash: 8LP656VRzP22y/4rrgOPp8IsbB22qkGycpmzkEoh59Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:34:60:e4:76:4b:4e:20:c8:d5:91:44:a0:6b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
        Validity
            Not Before: Sep 24 15:01:04 2026 GMT
            Not After : Sep 25 15:01:04 2026 GMT
        Subject: CN=26aee4d1d7541390b6ba04a8f9af49a068c0d217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:48:8f:73:08:4b:ab:1e:04:76:06:a7:64:88:
                    86:45:da:c7:63:c8:e5:5b:41:62:67:d8:a2:bb:9b:
                    f3:63:fa:6a:d3:b9:b0:d1:c9:1c:c2:77:89:ce:c0:
                    40:8a:4b:aa:13:cd:13:f0:bb:c0:01:91:a5:5d:45:
                    78:b0:65:bb:cd:79:30:bf:ea:ae:51:ad:3e:2a:1c:
                    c5:b9:59:c4:43:c7:c0:c0:76:dc:02:d1:79:43:da:
                    cb:13:45:fe:b0:b8:75:10:47:27:89:13:46:46:1e:
                    d4:2c:28:36:29:9c:de:d0:5c:7e:e5:08:ec:2a:b2:
                    b1:42:2d:43:38:b2:ce:93:34:9b:2d:8b:89:63:ed:
                    fb:f2:aa:1c:4d:25:5b:fa:c6:c6:21:cf:e2:b1:de:
                    45:22:1f:19:b7:17:51:72:c6:1b:d1:35:59:67:0e:
                    04:52:96:6a:ed:78:cb:c3:db:ef:d5:9a:37:66:12:
                    7c:a1:d3:55:ff:6f:5c:92:c1:38:47:b2:c6:82:2a:
                    c5:bc:9c:40:6f:91:49:07:94:a6:04:88:9f:ac:00:
                    b0:a3:fa:27:3a:05:61:5d:2f:b2:d6:da:96:ab:0d:
                    92:70:82:7a:a3:5b:a1:dd:22:e1:85:51:a1:11:4b:
                    31:60:bb:e0:2b:2d:0e:1a:3d:7c:f8:b3:1e:ff:93:
                    2c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AE:E4:D1:D7:54:13:90:B6:BA:04:A8:F9:AF:49:A0:68:C0:D2:17
            X509v3 Authority Key Identifier:
                keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ec:fa:03:00:c6:94:e8:9c:e4:7f:74:d7:a5:f4:41:0a:0a:
         9f:ab:fd:7d:46:1c:11:f5:b8:d4:93:9b:bc:27:45:26:f7:bb:
         72:c6:eb:81:c5:1c:8c:17:44:e3:d7:94:be:53:bd:3f:5e:53:
         a8:b5:83:a8:13:cc:9d:9b:c0:9b:1f:47:85:4c:26:eb:4b:61:
         bb:55:96:34:e4:a2:0a:fb:65:3e:d2:9d:dc:17:96:95:74:0f:
         ca:ac:86:10:6a:f6:ba:fd:73:d0:57:8c:7a:46:be:52:5c:35:
         48:22:64:a8:63:af:13:05:69:cd:a5:8a:22:72:21:1a:07:d8:
         82:65:b5:f6:66:af:5a:45:83:e8:79:ad:6e:af:1b:0e:48:69:
         34:bb:fc:be:96:5a:67:2e:a5:0a:ec:bd:18:29:b0:54:11:f1:
         2f:55:05:a7:4e:fc:b6:1a:e8:24:af:e4:fb:12:0a:6b:97:b6:
         06:2e:81:64:8a:b0:b3:85:21:f0:b1:75:75:22:38:28:8e:59:
         12:fc:54:1d:79:c3:2b:36:af:6b:89:2f:3e:46:b4:cd:0f:a4:
         4b:cf:20:08:47:13:e5:da:b5:bc:bc:94:ff:44:03:6f:24:34:
         e8:4b:f2:c8:f0:72:ca:53:ea:2e:74:1a:f1:8e:94:5e:ac:20:
         36:e2:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:55:21 2026 by rpki-client