Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File:                     7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier:          LZmsIHsB1oIey27oM3lCY8Ppvt1lZTT08Yt+IbAQkZQ=
Subject key identifier:   92:D8:8B:80:DA:3A:FD:4C:B3:C2:44:F6:EE:CA:9D:F4:D6:81:69:5F
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer:       /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial:       01A0CC363A8F99AADBC424C1B20E73E5C7C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number:          19FC
Signing time:             Wed 23 Sep 2026 03:01:41 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:41 +0000
Manifest next update:     Thu 24 Sep 2026 03:01:41 +0000
Files and hashes:         1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: IQ6OluzL0j1k75FWEfpLOYVeJQsosVLuhvNvHIFXkLo=)
                          2: NJ53-rR_xX4WzjhOA9BrYV2nSLM.roa (hash: QoLJTTNt4EV3su31vq7GYg/U/5yk5wlrs70Rl9FmejU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:36:3a:8f:99:aa:db:c4:24:c1:b2:0e:73:e5:c7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
        Validity
            Not Before: Sep 23 03:01:41 2026 GMT
            Not After : Sep 24 03:01:41 2026 GMT
        Subject: CN=92d88b80da3afd4cb3c244f6eeca9df4d681695f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:d0:c5:67:8b:6e:6e:d4:96:b3:9c:bd:c6:
                    c3:51:7d:93:e8:8f:08:a5:db:34:cd:a5:9f:86:f5:
                    bc:1b:21:2f:ca:9e:ca:8f:4b:25:4d:26:a3:24:22:
                    df:e2:65:f6:11:08:33:b6:81:bb:d3:2f:7e:0a:21:
                    20:30:9f:b7:1c:f0:ae:fa:9c:79:ae:ae:ae:e3:45:
                    e0:23:77:fa:ef:72:1f:5a:72:ef:3a:ea:88:ee:de:
                    88:72:8b:07:ab:1a:0e:a1:3f:8c:52:0a:2a:2e:fd:
                    92:98:45:d7:4e:12:14:fa:55:5f:ca:05:3a:b1:70:
                    a7:1b:a1:94:ef:1c:56:3a:33:9e:19:5f:3f:a9:4a:
                    8d:6c:a1:10:df:c8:ba:ec:51:02:51:dc:0f:f7:d8:
                    ee:e3:ce:d8:79:58:fb:8d:c2:ca:b1:e2:df:ef:61:
                    57:ef:eb:dc:d5:e8:75:89:ae:80:a0:67:a0:65:c9:
                    0d:4b:77:1b:f9:ff:aa:6d:1d:24:06:fa:27:ed:6d:
                    22:c6:10:e9:e9:ae:c6:98:f2:a0:5c:a5:b8:0a:44:
                    5a:ae:23:eb:bb:12:1b:70:0c:9c:3b:50:4f:95:36:
                    f8:cd:65:35:c5:95:24:b9:32:0c:06:3a:00:92:c4:
                    de:be:75:a7:f6:64:4f:97:1c:77:f9:32:09:7f:39:
                    e1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D8:8B:80:DA:3A:FD:4C:B3:C2:44:F6:EE:CA:9D:F4:D6:81:69:5F
            X509v3 Authority Key Identifier:
                keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:cf:2c:31:50:34:29:35:08:eb:7b:3b:b0:94:18:bf:64:73:
         61:2f:1d:9f:91:87:f0:b2:31:bf:a1:6c:3e:5a:0e:fb:b6:f7:
         b3:7a:9d:b1:51:b1:0b:b2:4f:a7:af:ef:f7:60:09:d7:e1:00:
         18:cf:9c:95:9f:e8:45:3d:38:8b:49:66:af:fd:f5:07:04:18:
         cb:ff:6d:dd:4e:22:d8:ea:ac:b4:6b:a8:87:92:6d:d1:e2:11:
         da:53:6a:75:fc:8e:70:57:6e:56:ea:05:8e:ef:c6:dc:93:d6:
         65:ed:e4:7b:e1:1d:ba:c5:74:5e:43:c7:10:da:38:ef:54:ac:
         95:b7:ad:c3:57:3d:f9:a2:fa:9a:94:4b:6a:e3:ba:c4:d0:10:
         18:ac:02:ed:90:ad:44:2e:66:6f:99:5b:40:f4:fc:70:a0:ba:
         78:e8:f7:aa:3f:b6:c5:51:16:fe:b5:05:41:41:5d:c1:80:d4:
         87:1a:ea:ea:ad:8f:5a:52:4b:fa:7b:c2:22:bd:fa:ce:15:db:
         e4:c3:8b:57:23:43:14:8b:6e:7c:e4:80:b2:d9:d4:7f:54:7d:
         74:52:84:5f:fa:01:88:2c:d2:b9:51:dc:5f:9e:cb:27:a5:79:
         34:77:33:95:3b:42:be:39:b5:00:08:fb:f6:11:33:58:d6:4d:
         fe:f6:f2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:17:27 2026 by rpki-client