Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File:                     7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier:          T67DDYadrxFkrHXuDEykfTDqWfeGcVThio1gDCJ+4cs=
Subject key identifier:   82:7C:E4:47:3D:BF:BD:FF:DC:98:AE:7D:4B:67:36:60:1F:92:D1:66
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer:       /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial:       01A0C40DE73AAEDB8B97D112C8FB1881DC8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number:          0E71
Signing time:             Mon 21 Sep 2026 13:00:40 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:40 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:40 +0000
Files and hashes:         1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: key1seo+gGJVyOgJy0rJVynIByhtHn6aaXn/YgXR1O0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0d:e7:3a:ae:db:8b:97:d1:12:c8:fb:18:81:dc:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
        Validity
            Not Before: Sep 21 13:00:40 2026 GMT
            Not After : Sep 22 13:00:40 2026 GMT
        Subject: CN=827ce4473dbfbdffdc98ae7d4b6736601f92d166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:be:09:df:6e:ae:25:61:8b:f4:83:9b:9f:f8:
                    36:71:23:9d:b4:90:99:f4:5a:ce:6e:0c:ab:f3:06:
                    f3:3f:28:55:44:28:7e:73:1b:8d:6c:42:3a:62:0d:
                    9c:de:22:fe:32:0d:51:da:39:6f:01:72:1c:c8:4f:
                    8f:ad:9d:e0:32:99:72:fd:8b:50:ab:00:2c:82:62:
                    e7:65:d6:dc:15:20:a5:14:cf:7c:77:e1:39:bd:85:
                    ca:13:68:6b:64:e2:05:e5:81:c0:c3:90:e1:50:d6:
                    c3:c1:8d:ab:b2:e1:7e:5a:73:f1:e2:11:01:4f:85:
                    63:37:50:31:61:9d:1e:c5:cb:e4:4d:1c:ed:95:53:
                    2c:83:3c:84:17:9c:90:69:b0:79:87:b8:2b:5b:f2:
                    1c:49:cd:3a:bf:59:50:b2:f9:e7:0c:8e:d1:e4:69:
                    1c:3d:73:78:1a:74:c4:c8:c0:22:8b:47:f0:d1:84:
                    cb:2a:a1:b2:86:6b:16:30:e0:22:2d:ec:34:e3:2b:
                    f8:c6:56:3a:68:ab:fb:d2:3b:0a:86:7e:91:71:bc:
                    62:45:a2:1b:4b:0a:ac:1d:c1:76:14:fe:56:9a:47:
                    6e:6b:da:16:cc:64:f7:b3:c6:9f:c6:db:0e:8f:6c:
                    80:59:8d:59:71:e2:3a:4d:68:20:df:ea:fb:b6:61:
                    42:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7C:E4:47:3D:BF:BD:FF:DC:98:AE:7D:4B:67:36:60:1F:92:D1:66
            X509v3 Authority Key Identifier:
                keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:79:2a:8c:f2:e4:5f:f2:aa:c7:f8:09:26:8c:e4:db:c1:8c:
         c8:13:34:ba:c7:7b:71:2f:b5:8d:20:9e:ee:47:18:ac:45:6a:
         0d:e9:cc:3b:43:de:ad:6b:70:5c:31:34:8d:f2:69:2a:d6:0d:
         fa:06:02:36:ff:3c:be:68:23:3d:de:a2:ae:4b:e8:0d:38:ac:
         27:19:f4:14:47:16:a4:c2:46:62:6b:56:2b:12:00:28:3b:a8:
         b0:ab:da:d7:e3:b6:57:aa:b9:97:ce:1c:cc:3d:d7:ce:4b:5e:
         b2:3e:ec:e3:44:8e:f0:d4:a6:62:1f:50:6b:be:eb:6f:b8:82:
         83:64:e2:08:42:bd:a2:8c:37:3d:41:81:3f:ee:a8:02:4f:16:
         21:71:0e:da:9f:26:a4:90:6a:54:36:b1:28:64:a2:35:eb:dd:
         16:b7:6c:e7:db:65:4d:e2:eb:10:e6:68:83:7d:18:0e:9e:cb:
         3e:44:d1:2e:1e:7e:fd:12:62:c5:0c:72:d3:90:4b:30:21:0a:
         dd:dc:41:19:df:1d:e3:8f:7a:aa:14:bd:a5:8d:be:44:00:84:
         c5:0a:c0:32:61:5c:35:c0:aa:96:d3:68:a0:09:f0:1c:45:1d:
         66:3f:13:26:ab:94:4b:ed:58:2b:4b:6f:d6:77:37:93:ef:e2:
         69:9d:a0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:11:24 2026 by rpki-client