Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/97aA0r7SnyBKG7L423iOWkscw28.mft
File:                     97aA0r7SnyBKG7L423iOWkscw28.mft (raw, json)
Hash identifier:          oZHs9qJ9H/BTYUZYT1OPkh/97QY4hUQ9j8UMeaTHT2I=
Subject key identifier:   3B:6A:A8:6C:38:8B:FA:F7:A6:5B:0D:CA:B2:0B:40:E4:4C:AE:D7:32
Authority key identifier: F7:B6:80:D2:BE:D2:9F:20:4A:1B:B2:F8:DB:78:8E:5A:4B:1C:C3:6F
Certificate issuer:       /CN=f7b680d2bed29f204a1bb2f8db788e5a4b1cc36f
Certificate serial:       01A0DF8625C7DFF0A3C67F6349825574B830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97aA0r7SnyBKG7L423iOWkscw28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/97aA0r7SnyBKG7L423iOWkscw28.mft
Manifest number:          ED
Signing time:             Sat 26 Sep 2026 21:01:45 +0000
Manifest this update:     Sat 26 Sep 2026 21:01:45 +0000
Manifest next update:     Sun 27 Sep 2026 21:01:45 +0000
Files and hashes:         1: 97aA0r7SnyBKG7L423iOWkscw28.crl (hash: A8KqmDJgn3VUdkvH/u4ZPKVg+rUFhdUKpSV185bRk9Q=)
                          2: zOXLkRXVLmmpWUjQiijMGHuhSdY.roa (hash: P7XRnR0Idl56m6AoSfQLmV1m5JUmtDA7uHfmGGvzfak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/97aA0r7SnyBKG7L423iOWkscw28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/97aA0r7SnyBKG7L423iOWkscw28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97aA0r7SnyBKG7L423iOWkscw28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:86:25:c7:df:f0:a3:c6:7f:63:49:82:55:74:b8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b680d2bed29f204a1bb2f8db788e5a4b1cc36f
        Validity
            Not Before: Sep 26 21:01:45 2026 GMT
            Not After : Sep 27 21:01:45 2026 GMT
        Subject: CN=3b6aa86c388bfaf7a65b0dcab20b40e44caed732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:ae:d0:de:41:42:91:cf:e4:fe:04:d9:81:
                    05:b4:48:96:20:9d:a6:00:71:bd:46:0b:62:f2:6c:
                    8e:e8:a1:d0:a5:78:54:86:e6:6f:05:73:11:cd:4e:
                    93:d6:e6:2a:db:1f:d5:c8:ac:cc:a0:ea:8e:ee:ae:
                    26:16:b4:2b:42:e7:76:7e:4a:42:4c:61:04:1d:10:
                    c2:1d:03:2c:a1:a3:9b:87:3a:44:21:4c:35:53:43:
                    7d:5b:f5:29:ed:01:f1:a3:24:17:47:4b:8e:9e:ea:
                    b7:36:cd:a4:cf:c9:9b:30:7c:00:33:37:1a:0d:d6:
                    a5:cb:ac:2d:97:7c:cc:00:64:44:10:7c:ab:6e:36:
                    10:bf:77:bd:c1:cf:b0:a4:27:ef:c6:82:dc:64:b0:
                    39:83:d4:5d:a2:b1:32:13:6c:ff:e8:0a:58:72:e1:
                    24:78:ea:80:ac:f2:98:bb:a2:98:dd:c2:44:ad:ba:
                    d5:55:7d:87:9b:ff:b1:e6:e7:1b:1e:dd:96:ae:83:
                    e1:79:f8:09:fb:96:41:5b:06:81:5a:45:5c:7b:65:
                    fe:18:8b:02:da:59:33:2e:b1:0d:de:31:94:d7:cc:
                    3d:80:36:2f:73:a9:9b:b7:0d:07:7c:11:2d:4e:f9:
                    b3:1a:73:3c:b5:62:9b:89:49:b4:4a:c3:16:c0:a5:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6A:A8:6C:38:8B:FA:F7:A6:5B:0D:CA:B2:0B:40:E4:4C:AE:D7:32
            X509v3 Authority Key Identifier:
                keyid:F7:B6:80:D2:BE:D2:9F:20:4A:1B:B2:F8:DB:78:8E:5A:4B:1C:C3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97aA0r7SnyBKG7L423iOWkscw28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/97aA0r7SnyBKG7L423iOWkscw28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/031047-8c74-4aee-b065-482862de730e/1/97aA0r7SnyBKG7L423iOWkscw28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:33:7a:eb:96:00:4f:d2:8c:bd:15:df:8a:1d:e2:68:03:e4:
         59:b7:26:a3:34:9e:67:73:03:f1:77:51:ab:fa:ff:09:78:78:
         b5:7a:eb:96:eb:86:4a:06:48:eb:78:04:60:77:0d:39:ba:9b:
         3b:12:e1:e3:3b:71:e0:3f:a1:f2:6f:1b:15:50:4d:48:81:a5:
         48:29:c0:54:54:cd:ab:98:b6:28:ca:d1:96:d1:c6:8a:18:b5:
         97:90:ec:4f:ca:39:be:e0:05:37:86:aa:6c:8e:a4:ce:fb:76:
         cd:b2:1e:60:26:4c:c8:35:f1:21:ce:5f:e8:b5:ad:1f:c5:f8:
         35:b3:36:57:fd:ec:a6:70:35:46:9d:a5:c4:bd:e6:09:f4:0d:
         e6:cd:ed:0b:bc:78:c7:c3:a1:aa:31:c9:d5:86:0a:65:e4:9c:
         23:ed:ca:6e:c0:40:51:a5:2f:47:ce:f4:74:c0:42:61:de:c0:
         57:a3:03:9a:b8:41:95:fd:37:33:ef:f8:0c:66:89:62:f7:b3:
         bf:b3:2f:7f:7d:46:8b:22:be:8d:b7:b8:75:8a:fa:9e:bd:82:
         39:8d:bc:f3:1e:49:2e:7d:08:a4:14:2d:db:49:8a:14:60:5f:
         3d:a9:49:e3:80:6d:a7:75:40:60:6e:79:1d:a0:b4:fe:cf:61:
         e8:24:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:52:27 2026 by rpki-client