Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File:                     7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier:          i0SAjQPFWyqIBYZgeCj5rAMo0fRVPO8bo1q5+OIQzjw=
Subject key identifier:   02:B9:6B:37:12:C4:39:96:09:60:3E:45:0F:3B:E3:33:73:99:1C:E1
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer:       /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial:       019FA9071D1FA7AE3AD346220A102F60D377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number:          0791
Signing time:             Tue 28 Jul 2026 14:00:43 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:43 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:43 +0000
Files and hashes:         1: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: aE6qkckYjRz/iasaqF+GlqyrVWtJbMwL52pAmwVs/Ac=)
                          2: DBz0WhaRA9wNrK9K1etEW30ajBM.roa (hash: TIvrus04yBKxsgpsBLzS8XeHM34FR+aAzVV81lSqNzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:1d:1f:a7:ae:3a:d3:46:22:0a:10:2f:60:d3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
        Validity
            Not Before: Jul 28 14:00:43 2026 GMT
            Not After : Jul 29 14:00:43 2026 GMT
        Subject: CN=02b96b3712c4399609603e450f3be33373991ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:15:dc:fc:4e:2b:10:a4:7b:37:a4:b9:40:d3:
                    d7:92:7c:96:f1:7b:04:1f:41:7d:29:f4:b3:85:e8:
                    17:f5:fc:b3:ec:49:08:ac:63:28:59:f1:ef:c6:df:
                    43:d0:fd:36:2c:6f:1c:58:d7:72:a8:73:92:4b:eb:
                    77:99:7f:79:5c:90:ef:f8:38:98:45:18:4b:2e:af:
                    91:a2:0e:9c:f4:ab:dd:be:53:6c:2c:04:98:02:f1:
                    20:37:2c:f6:cd:9a:a3:9d:6d:15:88:d4:76:70:ab:
                    65:d9:71:92:02:37:43:b2:90:53:cb:63:89:87:a0:
                    9d:4f:88:c7:21:e9:57:2d:7a:15:98:be:0a:9f:9b:
                    99:7f:b9:c1:c0:a4:ec:22:c8:ea:f1:79:7c:7e:65:
                    f6:af:ed:99:4e:6e:88:de:0e:18:69:1d:34:6c:b5:
                    6c:16:d0:4a:93:ee:1a:93:a4:34:10:bb:1f:67:11:
                    13:4e:73:0b:d8:e6:35:3d:7e:87:da:94:57:d5:2d:
                    92:00:a9:a1:e7:97:8b:ac:6c:38:04:c9:0c:c0:ec:
                    ac:67:97:2e:c2:ce:07:30:28:a9:e4:3a:a6:56:d1:
                    91:c8:19:57:67:2d:62:87:c7:95:ee:91:0d:69:e7:
                    fc:4b:4b:ea:5a:bc:63:0a:b8:40:36:11:44:a1:65:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B9:6B:37:12:C4:39:96:09:60:3E:45:0F:3B:E3:33:73:99:1C:E1
            X509v3 Authority Key Identifier:
                keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d6:31:77:ab:9b:22:c7:08:1a:ec:d4:64:f0:1a:a0:62:8f:
         56:c0:9b:4e:35:b3:dd:0f:47:67:3d:b7:ad:18:1a:90:a1:ad:
         24:39:0b:63:ff:de:77:d5:e9:33:e5:9b:31:f0:64:03:8b:d7:
         51:df:df:3f:f9:27:3c:5b:cb:2e:67:7f:56:ee:b3:5c:a7:76:
         df:ef:20:4c:3e:dd:72:ac:bc:b7:32:6e:76:c4:0b:72:ac:3e:
         50:b5:0f:28:07:9a:6a:53:6e:9d:e9:1d:c5:12:ad:a9:bd:bf:
         a3:2c:18:92:33:42:70:70:4f:bc:d4:47:ca:f8:f8:70:a9:8b:
         60:90:1d:00:9f:1e:62:50:54:1f:33:50:10:00:21:22:38:18:
         1d:9a:e6:84:34:73:78:82:9e:bb:bd:40:57:67:9c:5c:b4:51:
         6b:4f:dc:57:c6:d9:92:19:b8:b6:f1:50:bf:93:9e:67:1f:fd:
         a4:bd:7e:8a:a1:9d:35:ae:19:6c:da:12:d4:e5:ca:f3:0b:10:
         a0:f8:63:26:a0:40:79:62:ef:3c:cc:07:d7:1a:8f:16:4f:c0:
         4b:c5:b3:0a:ee:6a:42:70:07:9f:d5:5c:78:9b:a7:dd:7a:cf:
         af:8f:4c:6c:5d:4f:79:74:05:76:7b:4e:cf:c9:ca:3c:19:17:
         49:b5:50:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:28 2026 by rpki-client