Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
File:                     7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft (raw, json)
Hash identifier:          ajdZc0Bl8PNYeXAsBeFFsJBuF6n+1j7Jn5t73m4D7tE=
Subject key identifier:   ED:AB:65:93:DD:23:B3:70:5E:B2:10:43:D1:E1:52:A7:7A:BA:D8:AD
Authority key identifier: EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66
Certificate issuer:       /CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
Certificate serial:       019FA9AC1C89896D3C2EE74F03ADEF33E9F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
Manifest number:          082E
Signing time:             Tue 28 Jul 2026 17:00:56 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:56 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:56 +0000
Files and hashes:         1: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl (hash: ZLsNiEuMt3ryKCL8/9p5AlCZDNLVrfFVKNHl0VvuFlw=)
                          2: cFm6ye9YYzLfyOwoeW-SophEslI.roa (hash: wK5ZZbYjXfq8ZMAuBJ6aukKc/TCZu0uxRC1ZIPKuaL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:1c:89:89:6d:3c:2e:e7:4f:03:ad:ef:33:e9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
        Validity
            Not Before: Jul 28 17:00:56 2026 GMT
            Not After : Jul 29 17:00:56 2026 GMT
        Subject: CN=edab6593dd23b3705eb21043d1e152a77abad8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6f:f1:44:18:45:6d:23:6c:24:06:28:ab:3d:
                    17:d4:72:cb:82:e4:a2:3b:6f:0e:8d:94:30:41:df:
                    14:9b:65:df:42:c3:e8:6c:d2:c5:72:94:8e:6e:5e:
                    8e:b1:fb:e7:19:ee:72:5c:d7:18:d9:e1:02:07:37:
                    dd:44:fc:d1:f6:86:25:5f:a7:13:95:5c:61:8d:3d:
                    2c:70:b5:51:7a:68:7c:6c:d7:f9:7f:12:ef:7a:2a:
                    9b:29:ff:33:dc:86:80:64:9d:bf:6d:07:a3:0a:42:
                    f5:30:02:89:c8:10:f0:25:dc:47:57:84:0e:04:61:
                    1e:68:e8:44:5f:92:4d:ba:32:1a:ae:8a:e2:cc:8c:
                    f9:d7:bd:7a:68:1b:54:42:8a:d9:05:a1:99:99:1d:
                    75:5f:74:da:15:8d:2d:0f:d3:85:93:dd:84:3b:d6:
                    ec:59:8a:2a:d4:dc:97:9d:d3:76:16:f2:72:17:80:
                    82:43:39:c4:54:0c:61:95:74:1f:57:a4:6f:ca:ed:
                    15:45:d8:f6:41:40:a5:5d:ef:51:f0:62:be:b4:11:
                    37:5e:d1:8a:1d:b5:05:d1:22:90:fb:c0:dd:1e:51:
                    1a:56:e5:e6:6d:a4:78:02:8a:96:74:5e:c4:a3:aa:
                    b9:bb:c6:4f:8c:fc:36:b3:0b:80:f1:45:5a:b2:3b:
                    11:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AB:65:93:DD:23:B3:70:5E:B2:10:43:D1:E1:52:A7:7A:BA:D8:AD
            X509v3 Authority Key Identifier:
                keyid:EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b9:f4:01:f7:5e:08:2d:38:91:26:b5:1c:59:c6:fe:07:38:
         3d:89:09:90:c4:56:52:87:c7:fb:12:62:9a:88:16:ca:4a:e3:
         df:5f:89:e7:a6:39:72:d7:f0:08:fa:14:f6:9a:76:85:52:dd:
         ea:9b:ea:87:b6:b4:8a:31:b6:b7:80:8d:ff:78:2d:28:7f:80:
         da:74:e4:14:45:80:42:6e:9a:a8:3c:94:31:94:4a:cd:2d:a0:
         fb:81:4b:2c:7d:be:bd:28:9a:29:a1:92:5e:1c:a3:e6:48:11:
         38:3b:60:a9:a3:de:46:0a:8f:04:74:dc:42:de:29:15:17:38:
         03:c1:5f:b5:2e:d3:c3:8b:ca:ce:c2:97:77:6e:78:0e:f2:8c:
         3d:a9:6e:9a:cc:df:c7:dd:09:8d:ee:08:a7:f3:c8:bc:40:9d:
         ad:3a:4e:b1:64:0e:0a:98:b1:63:6c:c5:93:26:de:53:e8:62:
         fd:38:3a:ec:8c:dc:19:73:9b:88:ea:4d:fb:2f:11:cd:fc:54:
         fa:be:51:8c:35:ec:53:80:48:c1:14:96:04:07:d7:c5:55:00:
         65:92:b5:be:da:01:8f:5b:43:89:9f:51:9e:9f:e9:a6:c0:6e:
         4a:e5:7f:22:4d:60:f8:5e:e9:67:00:8d:08:f8:a0:41:f8:e3:
         c7:e8:b6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:29 2026 by rpki-client