Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
File:                     7wKUR5RZGCRZwV2MoBCop_R_gMg.mft (raw, json)
Hash identifier:          WOonQq3p2NMdsUgqWuffdxm7f7oVKc5IRiOG3i9HvrA=
Subject key identifier:   2F:C0:A2:0A:FA:19:1F:F3:83:86:4B:40:D1:91:3D:FC:CA:E0:6E:12
Authority key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Certificate issuer:       /CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Certificate serial:       01A0C7461C1379F5BFC0D4E265AB3228EAC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
Manifest number:          09C5
Signing time:             Tue 22 Sep 2026 04:00:55 +0000
Manifest this update:     Tue 22 Sep 2026 04:00:55 +0000
Manifest next update:     Wed 23 Sep 2026 04:00:55 +0000
Files and hashes:         1: 7wKUR5RZGCRZwV2MoBCop_R_gMg.crl (hash: e7/OQ8/DBrU5fdHqy3VvpgyopC4F1+JVANRnt5pNCaw=)
                          2: ZKITQWeRmOOpWe3j9phAgbWo098.roa (hash: uQME1knZ+/RpjbN1SdA7vXHO6Nrx1GYvYRwaBz+mqFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:1c:13:79:f5:bf:c0:d4:e2:65:ab:32:28:ea:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
        Validity
            Not Before: Sep 22 04:00:55 2026 GMT
            Not After : Sep 23 04:00:55 2026 GMT
        Subject: CN=2fc0a20afa191ff383864b40d1913dfccae06e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:88:a3:67:4d:e9:4b:90:c5:69:4c:53:d9:7a:
                    d8:8e:87:a3:9b:50:12:40:52:39:8e:bf:87:04:db:
                    b3:f3:1b:86:77:e3:e5:db:b8:d6:45:2b:d8:9b:65:
                    d0:c6:5b:29:92:bc:46:64:9b:b1:02:15:d1:52:00:
                    ca:66:6b:5d:6b:2a:6c:ca:70:a1:64:ef:8e:66:af:
                    f8:87:bd:49:e0:af:00:1c:e3:74:e6:95:d7:8c:df:
                    f6:92:1c:87:45:1a:9c:e9:3f:40:45:29:59:4f:e7:
                    03:65:e9:04:a8:8f:a1:b4:d4:74:cb:54:d8:c4:bd:
                    d1:c7:a7:c8:33:db:dc:a0:16:ef:be:72:8f:ea:08:
                    8b:cd:19:62:4f:51:69:ab:b3:85:74:44:27:13:a4:
                    7d:5d:85:a6:ae:5c:b5:20:63:8e:d9:21:30:8b:02:
                    ea:7f:02:1f:b9:7a:be:c3:27:2b:3d:7a:d4:ea:70:
                    e4:6f:8d:d5:74:31:c2:a3:69:d9:d9:83:d3:d6:06:
                    16:71:bf:48:6c:10:87:59:e4:fc:35:9b:a5:ca:83:
                    53:da:98:a3:af:9e:38:22:d6:6b:77:96:98:77:53:
                    e7:59:18:54:95:ea:3e:a5:33:cf:fc:96:3e:4b:bf:
                    cc:c7:69:79:77:c0:22:60:a1:47:76:ca:d3:ec:f9:
                    20:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C0:A2:0A:FA:19:1F:F3:83:86:4B:40:D1:91:3D:FC:CA:E0:6E:12
            X509v3 Authority Key Identifier:
                keyid:EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:58:e5:14:79:d0:23:9b:db:71:7e:f8:68:49:c7:69:94:be:
         ae:ee:c9:c5:1e:b4:f1:5d:af:cf:51:ae:4b:2d:1c:0c:50:43:
         4e:74:b3:89:44:69:88:13:e2:11:ad:de:6f:a2:35:08:c4:8e:
         1b:6c:3d:ce:09:9a:1c:d0:07:f2:e8:2f:00:25:b0:bd:4f:1a:
         72:a8:cf:d2:64:c7:ab:35:36:bd:42:3d:79:36:43:d1:f7:b2:
         b9:2f:77:0d:d9:60:bd:d6:f5:00:d1:d5:4b:e4:4b:b2:d7:c9:
         01:41:43:ce:5f:64:40:cc:9e:b2:ad:4a:1b:39:95:58:8a:3c:
         3f:41:0e:f7:1f:e6:f4:cc:58:a8:6d:4c:e9:ee:c6:e2:f8:ab:
         93:52:c5:0a:1c:c0:6d:13:56:17:1f:ed:bd:e0:c5:21:3d:11:
         d8:4f:c5:dd:0b:5b:3e:ef:80:ee:e1:46:6e:ec:65:3a:88:6e:
         22:08:04:5f:3d:9d:68:4a:17:b0:57:3d:5e:24:de:37:ae:09:
         1e:a7:a1:be:4f:da:24:bb:02:35:29:d4:10:f3:0b:ef:9c:d5:
         00:b9:0c:ea:c7:f6:b1:7f:33:8d:2b:0d:8c:a7:9f:a8:93:d7:
         77:11:8e:4d:4a:3b:60:bb:0b:ae:71:cc:09:98:29:c8:2d:7c:
         f7:7a:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:16:10 2026 by rpki-client