Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
File:                     7FraDckAoTyDtwrD9Yf7jC4d8DA.mft (raw, json)
Hash identifier:          LeUWbA5Sh+YjFkhakBcx16b2/44DXylxmdlxM7XLDEY=
Subject key identifier:   B8:64:75:79:CB:FD:C6:E9:97:D0:46:76:72:51:F5:DF:F2:56:C8:5A
Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
Certificate issuer:       /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Certificate serial:       01A0CE9200D691EDB4F05E6A2518F9A49B82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
Manifest number:          1A77
Signing time:             Wed 23 Sep 2026 14:01:09 +0000
Manifest this update:     Wed 23 Sep 2026 14:01:09 +0000
Manifest next update:     Thu 24 Sep 2026 14:01:09 +0000
Files and hashes:         1: 4h2CKrEG0zBXhUvh0QRtju6nDO8.roa (hash: 7r8KAs2j6Yww58kBTUpyYdSq5ad0gOR+q03EcWoTYfs=)
                          2: 7FraDckAoTyDtwrD9Yf7jC4d8DA.crl (hash: pBwGu4b8T+HVbW7iZZ+nWEAUMOuNODnP6QKSIb6eJEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:92:00:d6:91:ed:b4:f0:5e:6a:25:18:f9:a4:9b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
        Validity
            Not Before: Sep 23 14:01:09 2026 GMT
            Not After : Sep 24 14:01:09 2026 GMT
        Subject: CN=b8647579cbfdc6e997d046767251f5dff256c85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ad:0e:2c:b7:40:cd:a8:b8:2e:2c:75:84:35:
                    0b:5a:92:f0:86:65:7f:08:36:7f:57:47:1b:a1:bd:
                    bb:a0:c2:bd:1b:08:de:4f:14:2a:62:07:1e:ca:1d:
                    32:c6:b7:96:72:ae:9f:f0:d4:86:a5:f8:a4:28:1c:
                    2d:97:8d:fc:f8:54:1c:e1:59:2f:14:12:01:0e:70:
                    c1:66:53:d6:d6:f2:fc:c2:28:53:dc:79:ec:4f:9a:
                    15:08:de:c3:68:65:8d:79:61:24:6e:c5:ce:8a:83:
                    58:ff:bd:1e:4d:29:2f:46:26:c0:f0:e2:9d:dd:ae:
                    80:50:ab:48:50:4a:44:5d:93:a5:d7:3f:07:df:93:
                    59:1f:96:27:37:03:86:56:a2:ee:5e:6c:05:6a:ff:
                    1b:d2:54:15:a2:f1:c1:58:cd:08:1b:5c:a4:4d:f0:
                    d9:2e:f4:e5:0e:56:7b:77:ff:d6:dd:3e:ef:9d:e7:
                    24:f2:eb:24:44:37:51:44:27:6c:89:08:a9:07:b7:
                    99:1f:2c:88:83:c4:6a:fd:72:74:72:cd:c4:74:33:
                    14:8c:aa:34:5d:cb:86:33:48:8a:90:16:0c:43:39:
                    f8:b3:71:4e:85:08:db:58:b7:46:06:f5:88:9c:aa:
                    9d:54:e0:b2:b2:10:25:f7:68:d2:53:d4:f9:e1:17:
                    91:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:64:75:79:CB:FD:C6:E9:97:D0:46:76:72:51:F5:DF:F2:56:C8:5A
            X509v3 Authority Key Identifier:
                keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:8e:df:0a:8c:7f:a1:06:e7:db:11:f4:4b:fa:a6:f2:9d:f2:
         37:91:2d:64:de:d3:2d:a4:07:a2:7a:29:33:89:cb:59:c1:2b:
         42:c4:fb:b7:fc:d9:e8:05:ed:92:7f:8b:75:0e:5f:fb:61:19:
         3c:84:b8:6b:cc:d4:c1:f2:87:0d:c5:8a:7d:47:a4:cd:34:60:
         a7:39:aa:4d:ef:b3:6c:92:28:02:ed:eb:72:47:86:f2:f7:22:
         06:2a:cb:cb:bc:4a:b0:2d:ea:56:a7:f5:92:53:88:cb:8f:28:
         b2:9e:f7:cb:ae:70:79:33:65:b0:41:3a:ec:00:e5:24:2e:ad:
         2a:0a:ca:5d:f5:ed:34:b3:5a:03:a9:78:54:3e:7c:39:a4:1b:
         df:fc:e0:c2:0b:61:8e:38:6a:7a:4e:46:0e:4b:58:05:41:c2:
         24:72:ce:6d:b0:3c:0a:f7:3b:7c:70:44:08:b1:b6:0d:22:15:
         b6:c3:e5:30:5f:a3:e4:76:7d:29:94:ed:7e:18:59:39:96:81:
         36:90:9b:1f:2b:77:dc:f6:ed:df:96:be:82:bf:f5:6a:29:bc:
         02:e6:94:da:c2:5c:db:e2:68:35:d5:ce:e5:71:74:59:87:6e:
         d7:2d:c7:ae:18:b0:6d:68:88:3f:42:d9:d5:91:13:9e:23:de:
         35:a3:e5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:08:49 2026 by rpki-client