Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft
File:                     7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft (raw, json)
Hash identifier:          rKzw7Nxccok8T/ypzCUpmRDaABoNSVDcRMchgzgd3GQ=
Subject key identifier:   B9:1A:44:8A:4A:42:25:28:2C:A9:3E:CA:C9:98:47:2D:84:21:D4:77
Authority key identifier: EC:61:B7:A6:AC:31:8C:C3:30:FA:5E:B2:4E:0F:D2:48:36:01:96:EF
Certificate issuer:       /CN=ec61b7a6ac318cc330fa5eb24e0fd248360196ef
Certificate serial:       019F8FECC4B3319CC7A4EB7C35D820D3089E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GG3pqwxjMMw-l6yTg_SSDYBlu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft
Manifest number:          8B
Signing time:             Thu 23 Jul 2026 17:01:26 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:26 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:26 +0000
Files and hashes:         1: 7GG3pqwxjMMw-l6yTg_SSDYBlu8.crl (hash: sXTBoC66gIN02frg9wxJl7anEGCwMEQsIR5JR8SV7OI=)
                          2: Ijn8-P6TGDIDFNlQB8DmmxgPL1I.roa (hash: gpvXxQg5tH99OjYIfkw0uUChypTbhupMYAjwAZjaKkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GG3pqwxjMMw-l6yTg_SSDYBlu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:c4:b3:31:9c:c7:a4:eb:7c:35:d8:20:d3:08:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec61b7a6ac318cc330fa5eb24e0fd248360196ef
        Validity
            Not Before: Jul 23 17:01:26 2026 GMT
            Not After : Jul 24 17:01:26 2026 GMT
        Subject: CN=b91a448a4a4225282ca93ecac998472d8421d477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:57:4f:26:01:6f:61:7f:dd:2d:ef:40:c6:c9:
                    a9:eb:8a:d3:7c:0e:9f:f3:f6:29:64:b5:67:68:ae:
                    2b:2d:c6:4b:c4:6a:ca:85:0e:f5:31:35:d8:d5:a2:
                    93:ce:c0:b6:d2:33:53:7a:6d:16:80:c0:aa:79:89:
                    b0:d0:39:19:63:9f:e7:35:af:64:c4:e4:ab:63:b8:
                    57:7f:2a:6c:2f:28:dc:2c:e8:d9:4a:b0:92:56:6c:
                    0b:b4:94:f8:66:2d:63:94:e1:0b:c7:1f:91:0a:74:
                    ca:a2:df:e5:e1:b6:52:62:f7:10:8e:b0:89:93:c5:
                    fd:a2:57:6c:f7:c3:19:14:eb:b6:31:a1:47:16:73:
                    26:03:02:ca:83:88:b4:67:94:32:bb:c0:64:54:41:
                    34:95:12:36:d8:68:ea:b5:f5:dc:72:59:ae:73:d2:
                    bc:3f:f9:ad:0f:4d:06:a5:a4:b8:cc:ff:3c:1a:4c:
                    b7:11:2c:28:f1:8f:a5:22:24:78:de:99:2b:6e:1e:
                    31:4c:37:43:af:66:90:3e:18:70:5e:19:b4:c2:47:
                    54:47:23:3b:5d:a8:95:5f:1d:62:ca:95:28:cf:23:
                    07:60:64:86:80:cd:55:cb:61:ae:ee:b0:b2:ff:78:
                    e1:5c:0e:08:72:ce:ba:a8:61:44:97:43:54:94:30:
                    65:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1A:44:8A:4A:42:25:28:2C:A9:3E:CA:C9:98:47:2D:84:21:D4:77
            X509v3 Authority Key Identifier:
                keyid:EC:61:B7:A6:AC:31:8C:C3:30:FA:5E:B2:4E:0F:D2:48:36:01:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GG3pqwxjMMw-l6yTg_SSDYBlu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:41:87:ee:71:63:d7:82:6e:40:33:ed:80:3b:4f:97:e9:c7:
         f9:fe:17:d1:c1:c3:40:96:6d:8b:1a:4c:1b:b9:b2:d3:8f:88:
         51:70:ee:68:81:67:68:f7:bb:e7:c4:33:82:d5:e8:98:a4:68:
         18:a5:fa:1d:b2:2b:41:93:03:ad:ac:28:77:d0:3c:da:be:06:
         54:29:3b:02:0d:da:47:dd:7c:af:fe:3c:6b:25:37:06:e1:01:
         7f:3c:97:4d:d8:39:38:5c:80:08:0e:7f:7e:73:08:f7:20:d3:
         ef:e8:49:cb:7f:33:2e:6b:b5:2e:8c:65:de:90:2b:c4:19:35:
         a4:97:2b:e2:9e:69:4a:12:62:b3:90:a7:84:ab:cb:45:71:3c:
         b5:b8:44:91:84:9e:b2:8e:33:0f:b9:d2:7c:fb:93:42:b4:8f:
         f3:ec:f7:a5:cb:5b:d9:c9:be:86:a4:8b:d7:05:94:9d:fa:7c:
         13:e0:27:01:68:1b:cd:70:7f:6e:70:c8:50:52:a7:15:5f:62:
         3e:59:9f:cc:e5:7e:32:06:96:41:f8:18:38:41:f4:b7:44:43:
         c5:b8:57:81:f3:66:58:4b:14:16:ce:34:04:79:10:2d:55:35:
         94:2b:96:25:28:9b:f3:da:a8:30:51:09:c2:b7:74:79:07:28:
         d2:ca:9f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:27 2026 by rpki-client