Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File:                     7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier:          cfzeovebvIPTUqb2zzw8XDuNxaAvIr9jiXK+M++e1H0=
Subject key identifier:   5F:A0:B8:27:04:80:75:16:79:F4:B7:94:25:5F:CB:F0:DA:F9:1F:93
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer:       /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial:       01A131EB513527FC496C444DE43047E646AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number:          0A22
Signing time:             Mon 12 Oct 2026 21:01:07 +0000
Manifest this update:     Mon 12 Oct 2026 21:01:07 +0000
Manifest next update:     Tue 13 Oct 2026 21:01:07 +0000
Files and hashes:         1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: v7+MoYilQxi2oPeMhArctS77lMJrb1qxq0T9zUsSUFE=)
                          2: ci8f7Y86uB9atamo1D3e8sszzV0.roa (hash: JE0+am3liaO3am6zHqUi0SmfiCv9crbc5X4aX8Cwg8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:eb:51:35:27:fc:49:6c:44:4d:e4:30:47:e6:46:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
        Validity
            Not Before: Oct 12 21:01:07 2026 GMT
            Not After : Oct 13 21:01:07 2026 GMT
        Subject: CN=5fa0b8270480751679f4b794255fcbf0daf91f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:79:86:fb:a5:54:72:c0:91:ba:b0:7a:05:
                    55:f4:9e:c1:51:7d:ef:1a:0f:0f:5c:a0:ec:de:f9:
                    8c:f7:61:eb:24:3f:d1:72:77:80:8e:7c:b4:42:59:
                    f1:4d:41:eb:45:7a:91:16:87:e5:65:87:8f:2a:b9:
                    fd:77:86:0f:1f:19:07:cd:4d:03:23:d9:90:30:48:
                    75:42:3f:37:03:f8:78:30:94:f9:52:77:a9:93:2c:
                    9d:b6:df:98:58:45:a9:f7:fb:06:a4:07:e4:9c:02:
                    78:bf:e8:18:11:b5:36:e9:c0:4a:c9:2e:b4:75:0a:
                    47:dd:cd:95:f9:c5:8c:eb:9b:4f:bb:00:d1:d8:36:
                    cb:10:b1:13:80:b8:a2:2e:bf:be:83:a9:ed:49:62:
                    17:fb:be:69:ab:64:ab:b9:42:a5:47:eb:7f:32:74:
                    10:e7:4f:4e:82:59:89:82:4b:59:95:66:cd:53:b4:
                    b4:0e:93:93:1c:ae:fa:f8:a8:1d:b6:71:25:79:e2:
                    42:45:38:f3:5c:6a:db:3c:f4:a6:48:69:f4:57:fa:
                    46:0e:c5:be:59:6c:4d:cb:48:58:20:fb:f1:01:ad:
                    cb:af:fc:c1:d6:7b:73:e6:0b:c1:51:57:b7:eb:98:
                    7f:67:7f:f7:01:c0:98:41:17:32:dc:fb:76:37:c1:
                    22:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A0:B8:27:04:80:75:16:79:F4:B7:94:25:5F:CB:F0:DA:F9:1F:93
            X509v3 Authority Key Identifier:
                keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:02:2d:95:dd:3c:7a:53:3a:7f:6a:07:31:32:f7:52:25:37:
         78:43:78:54:1c:63:88:64:b7:a8:71:28:a9:00:3c:58:8d:26:
         04:92:1d:48:fc:ce:bc:d3:29:4d:52:2b:22:94:15:9a:d6:e0:
         01:bc:25:a9:ab:09:39:9d:01:5b:6b:be:7b:aa:32:6d:2d:8f:
         fe:aa:fc:12:1e:b0:b7:98:d1:db:55:1e:78:b4:cb:0d:bf:ce:
         df:39:be:67:3d:5e:c0:29:f0:08:0c:40:14:c0:87:a3:f4:d6:
         a5:25:ad:07:54:b2:7a:83:06:ec:51:90:df:a2:0a:10:91:a0:
         ca:48:2c:9b:86:9a:5d:47:bb:57:3d:32:b0:33:e5:1a:2e:f4:
         27:e8:80:93:de:dd:ad:b0:9e:31:c4:3e:b9:e9:1a:c9:d2:0d:
         d0:a8:7b:5f:12:ff:84:b8:9a:c9:01:7a:b1:63:d6:da:e5:61:
         73:d7:d9:8c:01:8f:5b:07:43:5f:89:ff:ae:62:0d:68:b8:c8:
         0e:1a:b7:ea:75:1e:ca:98:52:d0:ac:e0:1c:73:ba:e7:8a:95:
         be:62:d4:2e:66:f9:ab:87:24:58:2e:55:2d:62:bc:92:63:9c:
         78:b2:bc:33:e2:b4:98:b0:ad:d0:a4:b9:b9:76:2d:6d:7d:cf:
         f4:31:99:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:52:27 2026 by rpki-client