Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
File:                     7nwowZyp0nBozrxpyBVBZ13BLN8.mft (raw, json)
Hash identifier:          2dbVYWyGCdI2faVPidvAJqejk2Y17sUQ1QEOK5d5Yr0=
Subject key identifier:   8E:83:41:0B:2E:4F:F7:4E:22:9A:AF:37:14:EA:CC:79:58:F3:05:54
Authority key identifier: EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
Certificate issuer:       /CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Certificate serial:       01A1DFF19835863BD4FA72C1D6D61A2B8D41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
Manifest number:          1AF6
Signing time:             Sun 15 Nov 2026 16:01:54 +0000
Manifest this update:     Sun 15 Nov 2026 16:01:54 +0000
Manifest next update:     Mon 16 Nov 2026 16:01:54 +0000
Files and hashes:         1: 7nwowZyp0nBozrxpyBVBZ13BLN8.crl (hash: FwiKtdI2onxHTwmi2GJrgPb5BA0UG28ogAPs4pV2rgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:f1:98:35:86:3b:d4:fa:72:c1:d6:d6:1a:2b:8d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
        Validity
            Not Before: Nov 15 16:01:54 2026 GMT
            Not After : Nov 16 16:01:54 2026 GMT
        Subject: CN=8e83410b2e4ff74e229aaf3714eacc7958f30554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:d7:26:98:8b:59:f0:87:88:7c:be:5b:97:
                    ab:1a:7b:3b:c8:d7:4d:7a:1a:e6:7d:d4:48:0f:bf:
                    2a:d3:7b:a2:7c:6f:90:d6:05:bb:d9:79:77:c5:fa:
                    b5:a1:11:81:56:58:fd:c8:22:37:4c:74:59:3e:1f:
                    c6:61:24:57:34:f2:8c:4e:e4:70:da:4f:a4:6f:87:
                    2a:dc:dc:dc:68:53:66:b2:4c:ed:5a:d4:0c:3a:a4:
                    d6:cb:5f:df:9f:7b:36:4a:12:86:c8:02:d4:d2:c5:
                    a8:89:97:bd:33:8c:98:30:00:8b:84:5b:26:76:e7:
                    d1:76:96:e0:d7:e5:18:ac:c7:b0:7f:89:da:d9:e6:
                    97:b3:58:a6:20:d4:cd:2e:97:eb:99:bf:12:b7:3a:
                    49:de:ac:9c:2e:91:90:58:ba:31:a1:35:66:22:9d:
                    ee:35:b8:ae:d8:80:94:51:bd:99:b3:77:44:c3:17:
                    84:d5:63:a9:7d:10:f4:54:3c:84:1c:f9:13:be:99:
                    36:fa:1e:0e:a0:bc:a3:ef:be:02:c3:4e:1b:b7:a3:
                    06:ac:d5:c7:02:5a:b3:bf:8c:99:31:e4:e6:75:19:
                    a5:dc:90:fe:d8:1b:ad:71:a1:39:bb:46:6e:69:51:
                    67:9d:b3:06:ab:cc:54:18:2b:be:35:11:4b:49:7a:
                    d1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:83:41:0B:2E:4F:F7:4E:22:9A:AF:37:14:EA:CC:79:58:F3:05:54
            X509v3 Authority Key Identifier:
                keyid:EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:96:9d:69:7d:34:3a:5c:e7:4b:e3:e1:87:ec:5b:cd:6c:5a:
         e2:54:51:a3:ea:de:06:7d:d7:05:a8:f0:e6:13:f2:cf:1b:62:
         c7:27:e9:a1:a4:31:28:a2:fc:e6:b6:b0:a8:62:c7:fd:b4:68:
         c2:2d:8e:e6:fd:b6:c1:b0:7a:76:ae:a3:2a:02:80:80:0c:15:
         f7:48:0d:c6:8f:05:85:3b:d9:75:95:0b:55:6b:9f:e9:51:db:
         d2:03:6a:5d:f2:7c:03:71:20:41:ed:48:6a:3c:36:bb:b1:dd:
         bc:9a:5e:05:c9:8a:4b:23:dd:26:af:7f:3a:45:84:cd:24:8b:
         bd:85:25:c8:4b:18:7d:b4:de:c5:50:c5:2b:92:41:72:1e:5d:
         13:d8:47:f1:6f:af:bd:27:5b:35:9b:54:eb:8e:99:0d:28:63:
         2f:50:80:8e:a1:65:7b:7a:5d:01:8a:d6:57:fb:67:a2:ac:4a:
         d8:55:d2:03:94:fc:b6:8c:50:2c:f4:f7:76:92:18:5d:f4:df:
         47:40:73:bc:7e:e2:90:90:6b:b2:88:1f:0e:02:ef:1c:24:b3:
         c4:2b:0a:50:41:15:be:34:f0:01:d1:a2:dc:73:e3:1c:29:98:
         32:61:9e:c2:62:57:49:95:34:08:8c:6b:15:90:26:8c:ff:c7:
         72:54:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:26:14 2026 by rpki-client