Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File:                     7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier:          Sw3yLtCagA9y9hae1PRCSeWIPSAozlc9XZGIbp9IiKE=
Subject key identifier:   A1:2A:DE:BB:5A:61:A6:22:15:E2:E5:16:C3:5B:8D:D2:4A:24:6E:D9
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer:       /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial:       01A0CBC7A9AB46AF20398B014038635C9B51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number:          08D7
Signing time:             Wed 23 Sep 2026 01:00:54 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:54 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:54 +0000
Files and hashes:         1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: DnflMrGxn/gcqCHl+SiiFFp5YzNVItX20kOGMS00JzU=)
                          2: JU735praQ5D7ZouW4n12dU9bM-4.roa (hash: dXXp6fBpmMfrGgRgIwTGPcESSVbHsTgXLylCNhPpDJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:a9:ab:46:af:20:39:8b:01:40:38:63:5c:9b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
        Validity
            Not Before: Sep 23 01:00:54 2026 GMT
            Not After : Sep 24 01:00:54 2026 GMT
        Subject: CN=a12adebb5a61a62215e2e516c35b8dd24a246ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:55:c4:6f:8d:36:c9:f3:19:74:ee:18:89:
                    00:37:86:55:a5:68:5f:b3:64:de:a0:48:8e:33:71:
                    0e:9a:6d:04:9c:9c:11:95:02:ab:7b:06:c4:7f:29:
                    f1:80:28:14:c6:ee:59:44:7c:58:b3:3f:17:39:cb:
                    21:6a:06:08:b3:12:a1:6c:cb:53:e7:56:e1:c0:f9:
                    91:3f:87:f5:d5:94:05:8a:fa:2a:87:4c:71:cf:cf:
                    55:5f:27:d8:bb:c1:ea:c7:88:9e:c7:a0:ed:7a:d9:
                    98:84:b9:9e:22:21:43:3a:b6:c4:cb:9e:d8:60:6b:
                    68:5b:b6:7a:ae:a2:ff:f4:41:fc:7e:1a:e9:3a:6f:
                    3f:bd:98:12:92:0e:e3:0f:cd:3c:d5:ad:2e:19:5b:
                    ca:1d:da:73:0b:06:ae:78:28:15:d0:28:10:58:06:
                    0d:49:2d:0e:d8:0d:89:cc:83:77:73:b9:71:45:52:
                    b3:fe:6c:12:35:0c:50:4d:fa:d3:88:9a:ec:3a:67:
                    8d:16:b7:27:2c:0d:17:0b:28:15:73:33:a1:31:bf:
                    e0:6e:bc:bf:64:fb:e0:5a:6d:e1:ff:57:79:ac:91:
                    ab:b8:b5:5c:27:30:33:a6:0a:10:7f:36:f6:1d:44:
                    0a:18:33:9d:d4:d2:f5:8f:fb:6e:89:5e:27:08:ba:
                    0a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2A:DE:BB:5A:61:A6:22:15:E2:E5:16:C3:5B:8D:D2:4A:24:6E:D9
            X509v3 Authority Key Identifier:
                keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:12:78:81:04:fe:55:1a:0b:ef:57:fd:ac:61:47:89:31:7f:
         95:71:a0:21:f4:d7:d0:7e:b7:2f:ea:83:9a:9a:d8:36:97:7b:
         e7:a1:c1:f0:46:77:72:74:45:c9:a2:fe:27:28:62:b4:3c:91:
         3f:e2:65:fc:53:5c:04:40:70:e8:8e:79:39:b3:13:17:bb:8d:
         08:e8:6b:d5:8a:1e:1b:f1:da:ad:40:06:5b:88:a0:d3:b1:7c:
         54:e4:04:01:07:f6:31:75:30:00:8a:fe:3c:19:b9:f1:01:bd:
         b1:fd:bb:c1:2e:c7:c5:27:1b:50:f2:e1:c6:c1:1b:d2:14:eb:
         7c:b5:e2:03:3a:94:8f:df:7d:94:58:ff:4e:48:c7:e1:24:a1:
         18:fd:5f:c1:dc:7f:b7:25:61:76:5c:c6:30:4c:e6:72:02:4c:
         02:32:95:9c:4d:91:ac:70:af:7a:d8:8e:09:b5:c6:a6:9a:fa:
         ff:42:0c:b8:04:ee:bf:3d:b4:96:df:71:b1:45:0b:ff:e7:f8:
         e3:e3:fc:14:f2:b6:38:af:55:bb:ba:3f:55:63:1e:18:2b:31:
         55:dc:75:22:7c:32:75:34:de:5e:db:cd:1a:eb:f3:0f:4c:89:
         57:b5:4e:1e:c3:f9:81:df:40:0c:89:0b:38:29:05:44:47:d6:
         4c:47:c7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:27:26 2026 by rpki-client