Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
File:                     7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft (raw, json)
Hash identifier:          mIIyviSEt8xMUkEM9HHTLI8NqmhbvUqFG0+zk6HQEfE=
Subject key identifier:   AC:48:7E:13:B4:39:85:8F:B7:98:6F:F5:DB:54:B9:CC:3C:78:E4:BC
Authority key identifier: ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F
Certificate issuer:       /CN=eda8529160585381f07801656ffc4c551298449f
Certificate serial:       01A0D382BC2DA0B453D3CE7908BB6BE5430E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
Manifest number:          03F3
Signing time:             Thu 24 Sep 2026 13:02:35 +0000
Manifest this update:     Thu 24 Sep 2026 13:02:35 +0000
Manifest next update:     Fri 25 Sep 2026 13:02:35 +0000
Files and hashes:         1: 7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl (hash: RHFtCU//I7To9o7ga56KTACTim6jGO056Kfp8yhswyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:82:bc:2d:a0:b4:53:d3:ce:79:08:bb:6b:e5:43:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eda8529160585381f07801656ffc4c551298449f
        Validity
            Not Before: Sep 24 13:02:35 2026 GMT
            Not After : Sep 25 13:02:35 2026 GMT
        Subject: CN=ac487e13b439858fb7986ff5db54b9cc3c78e4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fe:44:f2:74:5a:3a:d1:ec:76:7f:13:93:cf:
                    08:56:cc:c8:c8:6d:81:02:ea:b5:67:2f:0f:6a:bb:
                    c3:a3:69:a0:6c:03:bb:00:69:56:ad:1d:37:67:d2:
                    37:3c:2f:44:d1:6a:b5:da:58:40:c8:bb:7f:3e:6a:
                    6d:49:c6:99:40:15:08:b6:e3:0e:b1:d0:1a:ca:75:
                    c9:8d:43:ce:43:d4:e3:01:d4:9e:e6:74:33:5d:46:
                    2b:b3:83:f4:d3:ec:fe:ea:5f:69:49:d1:c0:bf:b7:
                    98:3f:02:02:49:77:87:7f:36:a0:3f:a3:16:67:df:
                    7b:67:fc:c9:6e:48:11:9d:2e:06:33:30:ee:fe:da:
                    a7:4f:68:a4:35:27:70:cc:6a:a8:91:9e:73:86:4a:
                    54:00:32:cf:94:08:48:9e:a9:ee:23:64:eb:2e:12:
                    51:02:4b:6a:02:28:d8:91:6e:67:08:33:a2:af:ec:
                    2d:01:9a:14:26:e4:29:c4:61:da:37:4e:1c:22:2b:
                    70:a5:7b:ff:87:12:36:16:7e:ef:6d:23:3a:27:e3:
                    e0:32:03:3c:8d:eb:b4:2c:11:e7:1c:b6:d3:83:78:
                    48:b2:a6:cf:a4:01:1b:e3:7d:17:48:e6:88:9b:b2:
                    87:70:96:a1:f9:4e:a9:b8:00:2d:68:ca:94:eb:23:
                    b5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:48:7E:13:B4:39:85:8F:B7:98:6F:F5:DB:54:B9:CC:3C:78:E4:BC
            X509v3 Authority Key Identifier:
                keyid:ED:A8:52:91:60:58:53:81:F0:78:01:65:6F:FC:4C:55:12:98:44:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ahSkWBYU4HweAFlb_xMVRKYRJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3ed89f-e645-4f3c-ba2c-789fd4ba8c22/1/7ahSkWBYU4HweAFlb_xMVRKYRJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:3d:b0:5a:8b:70:b9:11:92:2b:10:e8:86:1c:ce:94:b9:5e:
         3a:a0:a7:04:21:de:9e:6a:0b:28:87:ca:70:c7:c6:90:72:47:
         e5:ea:4a:3c:99:ef:8f:8b:80:07:8b:61:32:a6:b1:b5:88:57:
         7a:d0:fe:ff:e2:37:7e:c2:ac:d7:59:d4:c2:cd:f2:1c:5b:8d:
         5d:58:1f:b0:19:fe:b2:11:6b:08:c1:74:22:c9:47:ff:7c:f9:
         57:66:b3:0c:3c:8c:11:8c:e7:bf:3d:0b:b2:dd:07:ca:17:e0:
         96:84:ce:e2:b5:a0:75:ca:96:ee:dc:3c:2d:cb:82:e5:5c:43:
         6f:99:3a:52:55:9c:5d:fe:d1:8e:63:b7:b5:88:75:9d:22:4a:
         d1:0f:f5:d4:8e:43:88:bc:ab:52:04:ef:8a:1d:ce:1f:dd:0c:
         d7:e3:63:4d:86:2e:bd:89:f9:42:28:e8:ec:1a:5e:e7:f5:66:
         55:8c:73:1f:72:db:76:74:27:a6:2a:d4:49:94:d7:55:4f:e4:
         5c:aa:a8:64:af:a7:ba:9a:8f:fc:8b:25:cb:8d:8b:0b:ab:5a:
         ca:82:65:e5:d3:7d:8f:97:59:45:53:22:11:b5:cc:5d:95:1c:
         90:1b:ef:98:02:e6:91:7e:c0:cf:00:a2:b7:06:73:4f:be:b8:
         39:6e:84:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:33:24 2026 by rpki-client