Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
File:                     CLP7QBlnsG-EG8ah6dSSqadfkmg.mft (raw, json)
Hash identifier:          F/aCyliz7WHe2aEnYdwneF3WiqBBXf63vgaw5lfm/Wg=
Subject key identifier:   37:E0:BF:A8:48:26:E6:8F:DC:91:90:51:DC:52:8D:F2:E3:FC:F7:89
Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
Certificate issuer:       /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Certificate serial:       01A0CCA2D16B414DBBEA189AD7739B3D43D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
Manifest number:          07F8
Signing time:             Wed 23 Sep 2026 05:00:17 +0000
Manifest this update:     Wed 23 Sep 2026 05:00:17 +0000
Manifest next update:     Thu 24 Sep 2026 05:00:17 +0000
Files and hashes:         1: CLP7QBlnsG-EG8ah6dSSqadfkmg.crl (hash: jIvbT50lI6V8AlCOB9Xyk4isusGh8l4RriREmoohkns=)
                          2: IZEphWg69cSETII6yv_zCGuLAdo.roa (hash: KJY/8Q52tgDHO65sY7/mwgDgyHvwck3lR6gtDYReLqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a2:d1:6b:41:4d:bb:ea:18:9a:d7:73:9b:3d:43:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
        Validity
            Not Before: Sep 23 05:00:17 2026 GMT
            Not After : Sep 24 05:00:17 2026 GMT
        Subject: CN=37e0bfa84826e68fdc919051dc528df2e3fcf789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:61:a1:11:c6:3b:1a:b1:86:d8:13:a4:91:c7:
                    7d:ca:54:9f:59:61:5a:39:16:30:55:1e:ba:e2:71:
                    80:04:c5:80:69:0a:d6:2d:d4:e3:4d:52:c8:d4:b1:
                    ae:1c:d6:02:64:30:65:1a:ba:84:b3:24:f6:5c:68:
                    92:bc:99:a0:27:34:b1:14:35:b0:d9:37:7d:25:1c:
                    12:cf:21:b4:78:12:18:0b:84:89:f8:d5:db:ef:03:
                    44:30:1b:c4:61:b9:d0:62:55:d9:36:12:63:4c:85:
                    aa:3c:de:a6:34:71:fa:fb:f0:b4:70:f1:01:90:b0:
                    17:0d:b8:d8:fa:04:1c:e1:a6:8e:db:a9:e2:e0:43:
                    89:af:16:62:2e:fd:8a:a9:39:86:10:04:fd:9a:42:
                    79:e1:90:1c:b0:09:98:0f:0d:9d:48:a8:b6:10:71:
                    b2:0d:38:1e:6d:09:74:ee:ed:f9:76:eb:79:e1:3f:
                    74:30:4b:ca:50:30:a4:c3:15:63:c6:4b:42:ef:2a:
                    43:50:57:7b:8d:b4:c9:24:a2:97:a8:6f:7a:b7:4f:
                    66:5d:48:0c:8e:33:a4:8b:4a:19:3b:30:2c:94:39:
                    95:46:ea:c1:47:a2:8e:0b:64:63:f8:a1:90:9d:cb:
                    0e:52:a8:8a:ed:76:78:74:d4:26:62:72:6d:9c:38:
                    67:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E0:BF:A8:48:26:E6:8F:DC:91:90:51:DC:52:8D:F2:E3:FC:F7:89
            X509v3 Authority Key Identifier:
                keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a0:b7:af:39:ca:ae:38:89:2a:48:df:e1:48:f1:e5:d3:0a:
         b8:48:d9:6d:1c:9d:fc:3d:4c:99:68:1d:0f:8e:62:f7:12:bd:
         d5:45:97:c2:97:7d:aa:11:84:40:f5:19:e9:91:37:30:81:11:
         83:20:47:21:3e:13:53:dc:4b:a9:9f:f4:12:71:ff:51:a3:fc:
         09:67:30:5e:3c:ec:f6:f1:0e:ec:62:69:71:0e:0d:fc:76:1d:
         3c:41:e6:c8:b6:f3:0b:b4:e4:24:fc:a9:11:48:2b:25:20:57:
         10:83:04:35:05:f7:42:50:f8:2f:8b:ae:2f:7a:85:09:39:b9:
         bb:27:aa:7d:38:90:58:f5:c9:d8:59:04:af:09:42:8d:0a:97:
         9f:e4:d6:17:72:6d:eb:c5:cf:06:ec:ea:f2:71:2d:6e:41:43:
         74:45:8a:93:3a:b4:dd:90:26:d9:45:38:11:c2:be:1c:88:69:
         33:b0:8d:18:13:59:84:5a:0e:67:18:5b:dc:35:e4:b2:38:97:
         8f:e6:1d:6b:fb:b5:43:59:30:79:53:01:c0:a5:27:05:92:0d:
         dc:e1:bb:6e:70:f2:4f:2c:af:26:83:eb:55:66:1f:ae:74:94:
         cd:b4:90:15:6c:32:86:90:54:6f:06:fe:e9:22:0a:7c:39:fd:
         23:73:09:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:24:03 2026 by rpki-client