Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/ba2444-e090-42b0-abdc-f77e31086017/1/7jG4Pm0913f5Y5tsJyhlS1elssI.mft
File:                     7jG4Pm0913f5Y5tsJyhlS1elssI.mft (raw, json)
Hash identifier:          KzqwQX8yKFFH/4xBG8T2Qgcs4iKqzJFr8LI4xzYgBmI=
Subject key identifier:   3E:AF:01:27:8B:DF:08:F0:15:08:EA:A4:17:B8:4D:D1:FE:6A:F6:AB
Authority key identifier: EE:31:B8:3E:6D:3D:D7:77:F9:63:9B:6C:27:28:65:4B:57:A5:B2:C2
Certificate issuer:       /CN=ee31b83e6d3dd777f9639b6c2728654b57a5b2c2
Certificate serial:       01A0CB90A7324436C7A3CA58BACD60625943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jG4Pm0913f5Y5tsJyhlS1elssI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/ba2444-e090-42b0-abdc-f77e31086017/1/7jG4Pm0913f5Y5tsJyhlS1elssI.mft
Manifest number:          88
Signing time:             Wed 23 Sep 2026 00:00:49 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:49 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:49 +0000
Files and hashes:         1: 7jG4Pm0913f5Y5tsJyhlS1elssI.crl (hash: JSApab0qe5T9WSBnerVhSc3APQ6MtiVZugVEaGaSwak=)
                          2: xoNWql4HohJkuw-WyU4P7canzu0.asa (hash: wpqUkNrRvNQcEvfvj79UN91Hgn0YvBvpGb93trQ3Or4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/ba2444-e090-42b0-abdc-f77e31086017/1/7jG4Pm0913f5Y5tsJyhlS1elssI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/ba2444-e090-42b0-abdc-f77e31086017/1/7jG4Pm0913f5Y5tsJyhlS1elssI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jG4Pm0913f5Y5tsJyhlS1elssI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:a7:32:44:36:c7:a3:ca:58:ba:cd:60:62:59:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31b83e6d3dd777f9639b6c2728654b57a5b2c2
        Validity
            Not Before: Sep 23 00:00:49 2026 GMT
            Not After : Sep 24 00:00:49 2026 GMT
        Subject: CN=3eaf01278bdf08f01508eaa417b84dd1fe6af6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:06:29:f3:13:54:ff:d8:13:54:b6:9e:dd:
                    2f:e6:ab:53:9a:c6:a0:4e:0e:1c:1d:2e:71:0a:4e:
                    72:1c:7b:47:2d:46:5d:45:4c:2e:aa:0a:94:e5:fa:
                    94:f5:32:13:33:06:40:ff:ba:e5:62:6a:f6:17:a3:
                    7b:c3:c3:23:e6:1b:ed:7d:ca:ec:0f:03:f0:2d:4f:
                    85:d3:47:e1:0c:70:d8:ce:06:91:c1:37:50:5f:65:
                    54:38:7e:a1:5d:c3:b4:4a:3b:a8:57:2d:0b:77:64:
                    5d:d8:60:02:f6:1e:74:01:6b:17:92:d7:17:75:06:
                    97:72:75:a3:57:31:88:1b:eb:b5:cd:c4:d1:70:49:
                    90:7a:67:e7:57:ba:09:cc:42:3a:29:3e:d3:67:31:
                    ee:7e:8e:12:99:1e:69:77:3d:22:f6:59:ef:61:90:
                    f3:5b:9c:f3:43:1e:2f:0c:f6:c2:78:28:08:1e:42:
                    e1:99:ef:42:f2:31:f3:b0:ac:90:07:88:53:5f:d4:
                    d5:f8:8a:10:ed:3b:91:52:64:03:29:e3:e0:da:b4:
                    82:76:ae:d9:31:2d:19:8e:5d:63:f7:c0:b2:50:02:
                    24:d1:d3:38:6c:7e:f9:c4:bc:e6:04:6c:23:e3:5f:
                    a4:02:9a:0d:97:c6:a0:df:90:51:36:f9:bf:91:a8:
                    63:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AF:01:27:8B:DF:08:F0:15:08:EA:A4:17:B8:4D:D1:FE:6A:F6:AB
            X509v3 Authority Key Identifier:
                keyid:EE:31:B8:3E:6D:3D:D7:77:F9:63:9B:6C:27:28:65:4B:57:A5:B2:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jG4Pm0913f5Y5tsJyhlS1elssI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/ba2444-e090-42b0-abdc-f77e31086017/1/7jG4Pm0913f5Y5tsJyhlS1elssI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/ba2444-e090-42b0-abdc-f77e31086017/1/7jG4Pm0913f5Y5tsJyhlS1elssI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:7e:57:f2:f1:4c:38:ac:04:82:2f:02:a5:ca:5c:31:c7:c8:
         2c:8c:6f:42:3b:10:51:54:d5:a1:79:3b:cc:77:82:ce:18:d9:
         46:53:88:31:fd:ec:c7:29:0f:1a:8d:d5:08:60:f5:ca:2a:05:
         b0:cb:52:98:a2:1b:e0:1b:81:14:5e:93:0c:47:69:62:40:25:
         ef:86:bd:fd:84:33:d1:fa:15:0b:fb:9b:5d:4d:26:55:a6:28:
         aa:75:a2:1f:c0:16:8e:2a:d2:5d:5e:c8:17:db:c6:90:74:a4:
         b4:15:f6:1d:ad:ee:e8:4b:45:f0:8f:d4:04:ba:2e:85:a1:63:
         e8:82:c8:49:df:b7:80:f2:5d:5a:49:77:0a:74:c4:c1:be:ce:
         a1:97:48:aa:80:ec:ff:16:e8:1a:98:a5:08:a9:77:bd:b7:20:
         2f:06:7a:0c:f4:fe:f9:c3:03:a1:ad:4b:a6:5f:e2:1e:b3:e1:
         a7:56:fe:ba:e1:34:fd:02:0c:1f:87:6b:79:97:9f:11:c2:d7:
         c6:de:e4:fb:77:e5:68:45:57:0e:69:f8:ce:85:74:34:7d:6f:
         d7:b2:2b:2e:eb:0f:01:7a:81:30:59:76:5f:df:89:70:e6:b6:
         64:f7:26:ed:32:63:e9:c1:34:63:22:f8:1d:b7:c0:0d:5a:5c:
         a1:60:11:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:15:45 2026 by rpki-client