Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
File:                     7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft (raw, json)
Hash identifier:          8fUZVBD9TzijeS2dM+FpygqR8wwThrm/Kk1Ln+ixr+A=
Subject key identifier:   98:3E:BE:5F:37:20:93:F8:20:68:92:84:47:34:AB:47:06:D9:18:AE
Authority key identifier: EE:9F:FE:53:E6:2E:29:EA:A5:BD:6A:A8:17:89:8D:3C:38:F8:FC:A4
Certificate issuer:       /CN=ee9ffe53e62e29eaa5bd6aa817898d3c38f8fca4
Certificate serial:       01A0CE242F2376C47ABBE165529C6729F26E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 12:01:12 +0000
Manifest this update:     Wed 23 Sep 2026 12:01:12 +0000
Manifest next update:     Thu 24 Sep 2026 12:01:12 +0000
Files and hashes:         1: 7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl (hash: T3/cTRtITKEefuZ3WpNIGg9Ea64tzcXKJ4VGaxIjCHk=)
                          2: HknPQh-0Yk6yaxmwcZa5py8_zl0.roa (hash: wuIV5US3SZC05FFGszlUmrIVNWyDFMwcOW0Vs4e0MUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:24:2f:23:76:c4:7a:bb:e1:65:52:9c:67:29:f2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee9ffe53e62e29eaa5bd6aa817898d3c38f8fca4
        Validity
            Not Before: Sep 23 12:01:12 2026 GMT
            Not After : Sep 24 12:01:12 2026 GMT
        Subject: CN=983ebe5f372093f8206892844734ab4706d918ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:06:13:f0:da:ec:30:df:df:db:b6:53:bf:
                    68:10:66:b6:15:41:7c:d3:ad:23:29:91:2f:6b:b3:
                    d4:f4:d1:a2:c1:b8:42:1b:06:99:eb:e6:d6:f3:d8:
                    2b:6b:85:01:a9:0f:14:38:17:ac:1e:96:f0:49:b8:
                    7e:86:d3:7e:fe:18:95:11:97:75:a8:8d:67:0c:04:
                    fc:a9:ed:b0:52:02:4b:39:74:31:89:3f:2f:b1:be:
                    a1:d4:94:44:a7:e9:cc:64:d6:9f:63:88:44:0e:d9:
                    ab:86:1e:a3:ab:0d:23:5a:2e:61:ce:00:2b:08:10:
                    69:89:9f:62:e6:8e:a6:df:c6:a3:f2:d8:93:7d:78:
                    e9:d0:da:02:9c:31:b7:d0:89:6d:e8:ab:83:4b:a3:
                    d3:e8:59:27:3b:74:59:9c:c9:23:95:27:9c:61:f3:
                    44:54:5a:21:8c:a1:bd:02:da:17:bb:13:f1:2a:98:
                    53:ed:40:33:0a:d5:73:d8:ba:77:26:f9:a2:24:54:
                    9b:ff:ad:1d:f3:7a:4d:01:53:57:b8:88:f9:d4:1d:
                    86:eb:0c:05:1b:b2:fb:39:c0:94:48:d5:5f:bc:d5:
                    5d:bd:0b:0f:6e:5c:a9:40:d4:db:b7:9b:b9:59:70:
                    f1:4b:68:d6:b2:df:5c:0b:9a:1c:5e:61:20:f9:46:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3E:BE:5F:37:20:93:F8:20:68:92:84:47:34:AB:47:06:D9:18:AE
            X509v3 Authority Key Identifier:
                keyid:EE:9F:FE:53:E6:2E:29:EA:A5:BD:6A:A8:17:89:8D:3C:38:F8:FC:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e6:fb:a8:a0:6e:e9:cb:a3:06:69:57:ef:80:c5:c8:f7:b1:
         00:61:55:9e:f6:8d:7e:08:e4:7e:f6:92:da:97:32:cf:c4:ae:
         7a:79:4b:73:ac:a6:c5:24:e9:1e:ca:4b:73:47:54:7e:3d:63:
         be:ae:e5:b9:e1:89:24:40:94:e1:72:ab:a8:33:12:7c:95:0b:
         0d:10:49:79:e6:3b:d3:f1:f7:a0:15:6e:f6:e7:5a:74:f8:38:
         36:dd:cc:0b:64:04:28:1c:5f:0c:7e:65:7c:b3:8e:72:6c:5d:
         57:66:0c:79:72:0e:1e:65:2d:d2:de:3f:ac:4a:6f:01:36:33:
         0d:9f:7b:b3:bc:25:ea:9a:97:cf:98:2a:32:14:dc:29:11:1e:
         9f:7c:75:77:ea:f1:44:db:72:0e:f1:55:c1:27:c7:7b:f2:07:
         a1:38:e5:de:c9:af:a4:aa:ce:9d:b4:7f:49:3c:1c:1e:5c:e5:
         0e:a1:be:2a:f3:cb:cd:96:71:3d:2f:9b:eb:11:4e:d2:bb:d1:
         59:42:7b:0a:4c:44:26:ac:c0:02:38:14:5d:9e:83:63:21:6c:
         92:75:25:3b:4d:52:eb:ca:a8:4f:36:f0:0a:22:f8:5c:e6:9d:
         ee:e9:7a:d5:3e:0e:d1:fb:58:b5:19:b9:14:92:20:78:1e:58:
         d1:d3:05:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:20:09 2026 by rpki-client