Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.mft
File:                     7_bzoe97RhIN3qUDuRFA6kn0EoI.mft (raw, json)
Hash identifier:          LyWKoHFFsu4x5a+BtzfwjCGEkXgJMNFu94QXX6w7iC8=
Subject key identifier:   CD:D6:4E:EE:0F:83:27:BF:B4:69:BF:EC:02:83:E4:6A:EB:0F:B8:F4
Authority key identifier: EF:F6:F3:A1:EF:7B:46:12:0D:DE:A5:03:B9:11:40:EA:49:F4:12:82
Certificate issuer:       /CN=eff6f3a1ef7b46120ddea503b91140ea49f41282
Certificate serial:       01A0D1C956D5A3A4F55B391683CA148B61F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_bzoe97RhIN3qUDuRFA6kn0EoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.mft
Manifest number:          01B5
Signing time:             Thu 24 Sep 2026 05:00:28 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:28 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:28 +0000
Files and hashes:         1: 7_bzoe97RhIN3qUDuRFA6kn0EoI.crl (hash: 5HwY/H2KMiQL2Wtwn9atfogi7pC3U4SSPW4NiLJUXnQ=)
                          2: Q03Wrr-4bRfsym1mVZ38VCx0Qzc.roa (hash: QlIjxjh/GKAm5itGl6sVrB0RZN4x8cc0LZn3FPdxeAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_bzoe97RhIN3qUDuRFA6kn0EoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:56:d5:a3:a4:f5:5b:39:16:83:ca:14:8b:61:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff6f3a1ef7b46120ddea503b91140ea49f41282
        Validity
            Not Before: Sep 24 05:00:28 2026 GMT
            Not After : Sep 25 05:00:28 2026 GMT
        Subject: CN=cdd64eee0f8327bfb469bfec0283e46aeb0fb8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ac:14:85:8b:2e:cc:27:65:9b:84:b3:ad:bb:
                    f3:16:3d:0d:ba:05:a6:fb:43:0f:a8:1b:c2:da:17:
                    86:44:5e:6f:27:02:83:4a:2c:ba:1a:31:6b:2d:2b:
                    4f:8a:55:8f:39:f0:9e:c7:d3:49:b7:ce:3e:50:56:
                    a5:54:e8:d6:92:a9:04:52:21:05:10:eb:00:51:30:
                    06:ec:e4:d4:1a:fa:29:a0:f0:3a:6a:92:45:77:99:
                    95:f1:76:b7:f8:24:4c:08:2f:29:b0:c1:84:7a:a4:
                    c6:41:c7:19:74:d6:d9:16:df:5d:aa:79:bc:b2:5f:
                    6c:ac:36:5d:07:69:24:c6:f1:c6:44:e2:e4:12:c1:
                    d4:f4:19:60:24:45:9b:7f:0e:09:12:81:a2:a4:2c:
                    1c:8c:4c:e6:aa:00:2b:18:bd:64:8d:96:53:3c:11:
                    90:9c:e6:37:08:f3:aa:ef:df:f8:f0:2a:d7:03:0d:
                    f0:37:2d:dc:09:6a:84:1e:56:7c:7b:72:f1:c3:37:
                    4a:25:f2:86:53:18:3c:f1:10:f4:ed:47:b9:a1:ed:
                    a4:66:aa:7f:35:c0:e4:f0:ea:ac:16:63:6a:d3:1f:
                    48:fd:25:24:8e:8a:1d:5d:98:6f:20:64:04:d5:58:
                    7d:a5:38:8d:40:82:9c:87:35:3b:e2:f9:1d:db:2e:
                    e0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D6:4E:EE:0F:83:27:BF:B4:69:BF:EC:02:83:E4:6A:EB:0F:B8:F4
            X509v3 Authority Key Identifier:
                keyid:EF:F6:F3:A1:EF:7B:46:12:0D:DE:A5:03:B9:11:40:EA:49:F4:12:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_bzoe97RhIN3qUDuRFA6kn0EoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ec4769-eb6a-4c20-8bef-635726ccfdb0/1/7_bzoe97RhIN3qUDuRFA6kn0EoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:64:0a:02:fb:b9:13:8a:23:1a:b7:6b:23:70:e5:a5:47:53:
         b1:81:8f:f6:a5:3f:aa:e6:8f:79:51:a7:8e:c8:18:c5:24:f7:
         64:91:e8:02:99:99:98:6e:af:94:c9:4c:60:ff:0a:80:d6:8a:
         a3:a1:2d:cf:58:9d:36:90:98:f9:75:ba:cb:64:4a:28:df:6c:
         98:fa:5f:64:c1:00:d0:43:66:73:0a:69:40:35:ac:fe:56:03:
         d3:84:e7:f8:bc:58:20:9b:91:90:25:b1:0c:51:5a:96:a8:6e:
         2e:d9:41:57:d1:51:35:28:3d:ea:e7:42:8f:4a:f2:f0:36:ed:
         c2:c6:7b:a9:a0:f6:99:70:ed:53:7c:a3:d0:da:48:4f:b1:a2:
         8e:8f:1b:6a:c0:bc:79:0b:8d:b6:94:b7:cf:a3:63:ee:6e:0d:
         3c:c1:65:fc:74:26:9f:fa:0b:9c:f7:1a:32:77:62:f7:18:2f:
         b4:9e:b0:25:fb:f9:3d:10:d4:bc:55:1d:7c:8e:0d:d6:4f:cb:
         5a:f1:70:dc:c3:d7:e8:c2:e5:0d:5a:df:c5:df:f1:aa:c8:41:
         4b:dc:e1:a2:f0:08:1f:4c:c4:3a:7c:29:cd:fd:aa:ea:a3:63:
         20:bb:2b:cb:48:39:ba:8c:b6:19:b7:24:20:43:e9:ae:c7:9c:
         9a:0b:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:41:27 2026 by rpki-client