Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
File:                     7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft (raw, json)
Hash identifier:          SktZyPb7/vqYshaCOPlJE8320Tf006BA+QLfGAr0fJI=
Subject key identifier:   CD:34:81:DB:DA:82:E6:87:F4:59:5F:D7:E1:DA:D2:D1:ED:4D:B6:09
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Certificate issuer:       /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial:       01A0C9D94DEB965A9C6689107DA1AB33CB10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
Manifest number:          16A8
Signing time:             Tue 22 Sep 2026 16:00:56 +0000
Manifest this update:     Tue 22 Sep 2026 16:00:56 +0000
Manifest next update:     Wed 23 Sep 2026 16:00:56 +0000
Files and hashes:         1: 1-nbvgTns4XEuIeTkS-WiJtQc-Ow.roa (hash: EpsG3PKVN4LLuyVtTXVPkQWMYJTWkP9XR4apujaoYwQ=)
                          2: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl (hash: agWpDHrMpNSvvM+2N8vXSE0ge64hKGr8b5yR7/barmY=)
                          3: sXC5yLn4k7J0Q9mLK5jMRSmlHl4.roa (hash: oarBoJiBeI3rfhIyVi9iZrYHFYrWYPyK5g0g+OH5uWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d9:4d:eb:96:5a:9c:66:89:10:7d:a1:ab:33:cb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
        Validity
            Not Before: Sep 22 16:00:56 2026 GMT
            Not After : Sep 23 16:00:56 2026 GMT
        Subject: CN=cd3481dbda82e687f4595fd7e1dad2d1ed4db609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:f1:bc:ce:c6:7f:77:52:69:8e:70:4c:b1:
                    6e:5b:60:b0:76:12:3a:4d:b1:fc:ef:bd:5f:7c:ed:
                    7a:85:0f:99:8a:3d:e4:08:c7:1c:6a:74:22:a1:18:
                    3f:73:99:9f:6c:21:04:b0:c9:b2:b6:a3:55:60:1e:
                    78:4a:9b:ad:97:32:17:af:5a:9f:91:1d:28:09:4c:
                    0a:6e:08:f7:1d:c5:e7:95:d8:28:0f:41:a6:cc:77:
                    6d:b7:31:be:3a:5e:00:7a:55:9f:21:1f:cf:b6:db:
                    1c:78:55:08:9c:67:f5:26:85:1b:d1:8c:bb:eb:d9:
                    e5:c9:30:27:d1:30:07:7b:15:46:ac:4f:50:5c:70:
                    18:f1:8a:c3:2e:93:04:9a:ac:b4:8a:1a:27:82:db:
                    c9:ee:7f:a1:fb:43:85:3f:05:f4:eb:03:48:98:b4:
                    9e:23:c8:2b:4b:b8:87:88:00:fc:4e:bc:a5:7d:97:
                    7e:2d:1c:b8:5e:b4:94:f6:da:9e:49:d6:83:26:19:
                    6d:ca:c4:6f:30:03:87:25:ec:66:72:04:a7:e2:14:
                    5d:3d:0b:0d:5c:c3:b2:28:17:7e:d0:a6:7c:6f:3f:
                    85:57:89:ae:fe:8f:f1:04:37:c1:64:ea:aa:b4:15:
                    80:b9:d8:a4:de:bf:4d:ca:0c:df:60:3a:86:f1:ed:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:34:81:DB:DA:82:E6:87:F4:59:5F:D7:E1:DA:D2:D1:ED:4D:B6:09
            X509v3 Authority Key Identifier:
                keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fb:9a:65:25:b8:46:a7:38:1d:1c:16:2c:f0:55:d9:10:2d:
         2f:82:9f:24:a8:f8:96:c7:32:cd:ea:dc:f1:7c:47:b3:f1:ca:
         ed:7c:fc:d5:53:3e:8a:2f:ee:75:80:0c:58:5e:7e:ed:70:eb:
         bb:fc:96:6b:09:24:ce:e9:be:39:37:7e:98:c3:02:0d:87:81:
         e9:68:ac:01:40:dc:3d:1d:9e:39:34:eb:6a:5b:8d:ca:12:ea:
         58:3a:a1:46:1a:b0:5e:74:1c:b5:04:2f:c4:a0:77:90:1b:40:
         cf:5e:26:f3:6e:22:85:b2:52:0f:6f:37:62:b7:5f:24:ec:ad:
         98:2c:82:c9:5e:0e:cb:fd:04:fe:c6:5a:a9:98:0e:9a:6c:5b:
         a3:3b:c6:d7:ff:11:20:97:ca:60:4c:cd:34:a1:37:c6:57:6e:
         55:7c:be:8b:df:78:af:f5:ce:22:38:fe:b4:f4:14:75:31:ac:
         e6:99:a2:4d:32:90:04:ed:cc:7e:42:ee:7c:46:e6:5a:57:db:
         1c:8f:9d:b8:27:ac:b7:af:13:24:f8:d0:a5:2d:64:83:11:fe:
         ef:88:44:c1:47:2a:42:27:0f:9d:b7:c5:10:da:81:c4:bf:12:
         2c:30:22:68:0d:89:eb:d8:b9:01:27:e8:45:84:69:74:7a:56:
         fc:9d:d2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:22:16 2026 by rpki-client