Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
File:                     7sMTGXauon0XHGwmepjT84KmGio.mft (raw, json)
Hash identifier:          4opDnNdMJz7axmvHwHCcAnaI+luasqfOPbKaLpb+/Ds=
Subject key identifier:   9E:F9:1F:B4:E6:32:A9:6B:FB:A8:9D:FA:DE:B2:A5:40:CE:87:8B:2F
Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
Certificate issuer:       /CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Certificate serial:       01A0CEFF9EA175EBA1282E31E0C92B687B52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
Manifest number:          1462
Signing time:             Wed 23 Sep 2026 16:00:53 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:53 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:53 +0000
Files and hashes:         1: 7sMTGXauon0XHGwmepjT84KmGio.crl (hash: c7MHC21x3u/3K0FZACfX4W907v2tIpNFwce1jp5hhz4=)
                          2: L_bdGxJHykWkh6lnI23znPb9ZRc.roa (hash: ZEX+GgljqjjHrDsG1Iee4BuX7n/kzIjwqN8LRfjYRoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 16:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:9e:a1:75:eb:a1:28:2e:31:e0:c9:2b:68:7b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a
        Validity
            Not Before: Sep 23 16:00:53 2026 GMT
            Not After : Sep 24 16:00:53 2026 GMT
        Subject: CN=9ef91fb4e632a96bfba89dfadeb2a540ce878b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a9:54:04:b4:3b:19:e1:d2:a0:e1:cf:d3:d1:
                    f3:03:55:14:31:ec:7e:5a:55:86:63:67:69:77:30:
                    e0:5b:b5:b7:db:c8:28:9c:ef:ce:71:ae:68:b7:77:
                    a8:83:a7:4a:45:9d:a6:8d:e0:d4:70:0b:22:30:a2:
                    96:a4:01:d1:be:2e:99:db:fb:f2:04:e7:53:d7:1f:
                    31:ea:dc:c6:f0:c8:af:75:43:00:c0:db:8e:e4:5d:
                    52:64:b6:06:c2:f3:91:65:73:71:5e:3f:43:47:38:
                    22:de:a8:58:82:83:db:c3:fa:9f:f0:f9:40:14:ca:
                    ef:24:1a:0d:b8:cd:12:07:31:a2:4c:28:46:39:c0:
                    5b:e6:88:27:de:5a:d6:a6:fc:de:b6:a4:0d:16:36:
                    07:dc:7d:07:66:ae:44:46:cf:67:af:e4:13:c4:b2:
                    64:af:d2:3d:61:e0:b8:fe:d8:57:a1:45:80:3c:45:
                    53:e1:8c:4f:7f:63:58:fb:0e:4d:83:48:af:ca:d5:
                    f3:fc:2c:a5:08:9b:66:2c:5a:8e:d8:52:4d:11:22:
                    ce:ba:b0:39:25:6e:a3:8d:b9:ea:0b:bf:10:0c:69:
                    5b:7f:3b:ae:af:01:18:8d:d2:a2:56:20:e0:ab:5f:
                    ca:f1:6d:32:d6:ae:0a:0f:0c:2b:80:24:98:22:eb:
                    00:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F9:1F:B4:E6:32:A9:6B:FB:A8:9D:FA:DE:B2:A5:40:CE:87:8B:2F
            X509v3 Authority Key Identifier:
                keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:1f:8a:94:06:c2:33:1b:84:4e:52:e8:23:d8:b7:18:b2:ed:
         74:b8:bf:cb:d5:7e:7a:c7:89:a1:1a:00:40:b0:cf:0b:59:a4:
         43:67:c7:54:91:40:b4:c8:fe:fa:8b:3d:85:db:82:e8:23:01:
         86:d0:a6:8e:4c:00:dd:5f:a1:2c:85:eb:4b:0e:30:8d:f3:c6:
         18:b0:dc:2b:73:e0:cd:cf:dd:15:f2:17:45:5e:b4:96:e3:15:
         3e:c1:f7:02:c9:87:ee:18:fe:f9:94:f5:cf:30:2d:0f:ec:06:
         2a:38:6d:82:6c:37:c8:5a:52:01:61:cf:f5:ae:4f:da:29:6c:
         6d:e7:fe:55:91:d8:6a:54:3b:39:4f:ec:9e:7c:dd:aa:a7:4c:
         e3:5e:93:8c:35:2f:3d:26:f5:a8:c7:82:f8:fe:de:d7:93:4d:
         0c:88:85:a6:70:f7:59:46:f0:04:cb:95:aa:7b:ca:3f:bd:5b:
         ff:ec:4d:97:75:95:2b:6f:4c:09:99:a2:6f:bb:7d:b3:8a:d8:
         3d:5e:4b:d8:ff:65:55:c3:3a:2f:a2:b6:b7:7c:6a:50:90:35:
         2d:ee:84:52:6a:61:d0:46:1f:ee:36:b6:da:fe:8e:16:92:d1:
         72:9b:b0:84:1c:b6:5a:71:0b:8d:7a:5b:01:a3:c1:c6:f6:14:
         5e:ab:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:36:26 2026 by rpki-client