Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/7a8576-40ae-4242-82a9-203fc09d84b3/1/7mmOyB4Ap7dqDPtndxzLyCwrlBk.mft
File:                     7mmOyB4Ap7dqDPtndxzLyCwrlBk.mft (raw, json)
Hash identifier:          n8e+T8L3P+I4DePD48SV0SmR/tQG2oVjRowUIQWnN8Y=
Subject key identifier:   9C:35:E9:5C:BE:52:D0:8B:8D:BC:93:5C:1B:CC:77:19:35:2E:C0:37
Authority key identifier: EE:69:8E:C8:1E:00:A7:B7:6A:0C:FB:67:77:1C:CB:C8:2C:2B:94:19
Certificate issuer:       /CN=ee698ec81e00a7b76a0cfb67771ccbc82c2b9419
Certificate serial:       01A0D15B7FBC293FB7B0D657398B14B61E4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7mmOyB4Ap7dqDPtndxzLyCwrlBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7a8576-40ae-4242-82a9-203fc09d84b3/1/7mmOyB4Ap7dqDPtndxzLyCwrlBk.mft
Manifest number:          83
Signing time:             Thu 24 Sep 2026 03:00:29 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:29 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:29 +0000
Files and hashes:         1: 7mmOyB4Ap7dqDPtndxzLyCwrlBk.crl (hash: Q4rYWfCAMbKCvG2jxgw8w0xNWfrqI2ZgOQ/VvJm6wVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7a8576-40ae-4242-82a9-203fc09d84b3/1/7mmOyB4Ap7dqDPtndxzLyCwrlBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7a8576-40ae-4242-82a9-203fc09d84b3/1/7mmOyB4Ap7dqDPtndxzLyCwrlBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7mmOyB4Ap7dqDPtndxzLyCwrlBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:7f:bc:29:3f:b7:b0:d6:57:39:8b:14:b6:1e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee698ec81e00a7b76a0cfb67771ccbc82c2b9419
        Validity
            Not Before: Sep 24 03:00:29 2026 GMT
            Not After : Sep 25 03:00:29 2026 GMT
        Subject: CN=9c35e95cbe52d08b8dbc935c1bcc7719352ec037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:06:f5:a3:cc:b6:52:2d:a0:b3:47:d2:af:6c:
                    95:eb:ff:6e:68:2a:81:9a:a1:fa:30:af:3d:c2:c0:
                    d3:e0:4f:b0:6d:f2:f2:7d:2a:e2:f3:4d:89:5e:f6:
                    cf:4b:31:f9:e7:dc:e0:8f:a6:0b:02:75:8f:9f:13:
                    fc:9c:58:f7:e8:43:76:ce:96:93:34:67:0b:64:e6:
                    68:81:88:bf:ad:8d:0a:98:41:1b:f0:2d:9b:7c:6e:
                    1b:de:a7:b3:c6:15:da:3c:69:82:6c:27:73:6f:96:
                    d7:9f:0c:ee:d3:75:f2:09:2d:18:ad:13:e3:6b:a2:
                    bb:67:2e:c9:bd:9a:c6:0e:e2:78:90:b0:bc:8e:17:
                    35:dd:ed:9a:4c:e3:2c:ac:6e:a6:d3:48:fd:db:2e:
                    ce:48:d4:a4:7d:6c:f1:e8:6c:16:92:25:c9:bc:ba:
                    ec:67:4f:57:5e:c6:4e:32:68:d5:48:74:4c:b4:e2:
                    90:3b:93:e8:f0:c4:59:f7:72:17:45:ed:13:03:f8:
                    ef:ab:73:e0:33:5e:a5:23:72:92:ba:ab:0c:7d:41:
                    8b:5b:79:2b:81:33:ab:06:23:4a:d6:7b:1a:6a:6f:
                    d2:03:c6:62:42:78:8e:69:a9:8b:80:07:28:fc:6f:
                    9a:94:d0:24:86:74:14:c7:5b:dd:f4:fd:ca:0c:2a:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:35:E9:5C:BE:52:D0:8B:8D:BC:93:5C:1B:CC:77:19:35:2E:C0:37
            X509v3 Authority Key Identifier:
                keyid:EE:69:8E:C8:1E:00:A7:B7:6A:0C:FB:67:77:1C:CB:C8:2C:2B:94:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7mmOyB4Ap7dqDPtndxzLyCwrlBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a8576-40ae-4242-82a9-203fc09d84b3/1/7mmOyB4Ap7dqDPtndxzLyCwrlBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a8576-40ae-4242-82a9-203fc09d84b3/1/7mmOyB4Ap7dqDPtndxzLyCwrlBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5f:2c:52:3f:cd:53:cd:a1:dc:03:e0:f9:03:3f:1d:5d:27:
         f9:c9:b0:12:d3:09:4c:76:07:20:a8:f4:4c:98:3e:bb:b6:07:
         3a:ec:fe:c7:7f:e0:37:77:00:ed:28:af:83:75:f1:cf:35:c0:
         2b:a5:da:5b:d0:c8:98:97:14:cd:19:93:6a:96:77:c9:1e:5b:
         60:16:9f:0c:5f:d9:35:20:c6:83:3e:15:81:52:6a:52:84:21:
         7c:82:ad:7e:ca:19:c0:ac:bc:5d:fc:5f:35:09:ff:f0:a9:23:
         b1:43:c2:36:ed:70:0b:35:be:56:44:12:53:e3:8d:6a:7d:d0:
         ac:20:3c:0c:b2:3e:39:dc:33:33:5f:3d:af:46:09:24:e8:e7:
         d7:79:60:d0:6c:0a:e6:e4:61:7b:b4:69:f0:4a:6c:a7:11:f5:
         1f:1d:c0:d8:a5:0c:5f:f8:81:79:e1:1e:00:d4:f0:2b:07:56:
         fe:49:49:55:90:9c:56:f5:4d:ab:9c:08:3b:d2:2d:8d:56:5e:
         5a:d1:f1:82:6f:fc:f0:41:c3:c7:48:f7:4f:67:13:e2:eb:66:
         1a:20:b5:9f:0c:9f:66:93:d5:28:78:1a:b9:1b:b1:05:42:7c:
         92:81:a0:91:38:92:12:23:1f:01:97:2b:39:8e:09:a1:2b:86:
         12:4d:dd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:47:29 2026 by rpki-client