Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File:                     7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier:          eFl5aY8v0g9e05NnvKDDe//FuxbiMLhlH9BwW7RP4Lo=
Subject key identifier:   00:31:09:48:81:BC:0B:8E:F5:E7:47:10:23:C9:16:24:DA:70:33:B4
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer:       /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial:       01A0C2FBA81623BB827B11DBC3AC63BF57D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number:          1A7A
Signing time:             Mon 21 Sep 2026 08:01:07 +0000
Manifest this update:     Mon 21 Sep 2026 08:01:07 +0000
Manifest next update:     Tue 22 Sep 2026 08:01:07 +0000
Files and hashes:         1: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: rwmuiv3aFJLp6YRIKIVWEByS34ioiy4RWCWlhK+9mv0=)
                          2: JsIYFyLR74GQysEIqnGykpSJQUI.roa (hash: iaHnb3OAMXTWsBgbEKrwhuTvCOgUBCodv1kDk+4mavA=)
                          3: NKy6Tyf5RyRglBk0yV_ExDPmxuo.roa (hash: ebb1VqS7aGDzvUXqYNWhDAqOkeGUT55XR6ggJqYbSMU=)
                          4: OUVdt4o2LS_i-Gunl0nnzrdW_jI.roa (hash: LG7q3NWzE4G2vBN3PTFInwdMW/gtEeHrNbl3IVaBPnE=)
                          5: YH5NKMifzBmhf3nIG20jcgRcBU0.roa (hash: V5cTAFBzO7CMX8CCIxzqRfhGsna670gP9hgi/NVqRBc=)
                          6: mCt7UGq2s1qnA69MYZljhYxWiD4.roa (hash: qi5pYWU2cgvvhT1J3aGpMqhq1J2xvA8Deh0/Hh6j/Rg=)
                          7: sRMtAiiTomuNQjvyhVAd07KYQM0.roa (hash: 1ZDSFc07GgvbF2RmQMqVaUItzv9tv/zTWoNdPvDIoXs=)
                          8: sjgUHUj_TSMku2aB-f61amSIyCM.roa (hash: /+JjugGAK765zafXtIVOVPtipqmOZ3WaKKGK25tgoO4=)
                          9: zhcr9I3s3OVNgzaih7vQHJr6C0Y.roa (hash: nLQ289DooRLgqJOtJaVgt01KECd6y0NdXrqka7CO4Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:a8:16:23:bb:82:7b:11:db:c3:ac:63:bf:57:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
        Validity
            Not Before: Sep 21 08:01:07 2026 GMT
            Not After : Sep 22 08:01:07 2026 GMT
        Subject: CN=0031094881bc0b8ef5e7471023c91624da7033b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7a:4b:22:8a:69:29:5e:49:59:fd:6a:2b:db:
                    a1:e8:25:af:34:db:9b:3f:99:a8:73:a1:b4:be:8d:
                    4b:52:34:4c:80:b4:4f:5d:75:d7:9c:34:46:19:b3:
                    52:80:f1:b7:49:ab:db:73:d3:42:8d:cf:b7:f3:2b:
                    05:ae:92:ed:66:be:8b:d4:df:86:e5:0f:a2:f0:59:
                    e2:63:cb:64:84:1c:fd:34:da:a3:0c:e6:52:2e:2a:
                    a8:73:b7:74:8f:11:76:15:59:91:b8:3a:73:ce:d3:
                    02:c1:a4:92:45:93:a2:0b:8d:9f:c5:35:7c:de:ca:
                    56:7f:47:47:cc:95:11:c1:f3:c0:e2:39:08:f0:50:
                    74:4d:c5:e8:4b:54:1d:97:bd:28:7a:c9:86:4e:7f:
                    fb:93:50:87:21:c7:f7:80:c9:bb:52:d4:48:66:34:
                    8a:78:49:19:93:58:68:ce:61:24:3f:ae:54:3d:c4:
                    1c:9a:61:85:f0:83:fb:d6:8d:ae:9e:2b:89:b6:d3:
                    26:bc:f0:70:e1:67:8b:06:e9:b1:8c:75:7e:e8:3b:
                    9a:3d:81:97:1f:65:79:fb:0b:e6:9e:63:e2:30:38:
                    34:9b:c8:29:00:f4:56:86:7a:11:b4:fc:84:18:0b:
                    15:7f:17:36:b3:fb:aa:dc:a8:37:ae:01:69:af:5d:
                    bb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:31:09:48:81:BC:0B:8E:F5:E7:47:10:23:C9:16:24:DA:70:33:B4
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:60:5d:6e:37:ce:b1:4c:8b:11:90:ad:47:80:b0:13:0b:ae:
         c0:9b:56:fd:ff:e0:c4:40:4c:b4:dd:38:87:84:94:b8:1a:d9:
         5e:11:14:c6:63:74:58:05:db:c8:94:f4:6e:1d:fe:c3:dc:48:
         ec:be:6f:53:d2:43:f3:c4:65:7f:ed:f6:c7:f8:e3:eb:c1:3e:
         ea:29:f5:9b:5d:3a:e2:a0:de:6f:39:80:42:31:a8:3a:0a:14:
         e4:e5:81:16:f1:34:66:01:49:0a:76:85:bd:e5:8a:20:db:7d:
         62:2c:7b:c1:c9:c1:0a:d5:64:b1:1a:f8:a5:84:33:0f:45:6b:
         c1:a8:46:08:b9:f3:5c:19:86:56:29:1b:45:51:ca:79:61:da:
         e1:44:3b:fb:a5:2b:50:72:94:8b:0e:98:f3:34:e9:00:db:ae:
         52:2a:d4:75:05:be:00:e8:ca:9a:7c:e2:4d:4f:4a:ce:b2:29:
         33:89:65:7c:b2:93:bd:50:b6:2c:6a:ea:0c:31:0c:cd:9b:74:
         10:0e:4f:e7:44:f8:8f:08:e2:4d:75:13:d7:dd:ca:e0:13:e1:
         83:0c:df:72:a2:c8:31:86:65:3d:1f:ec:dd:82:03:d8:e1:b8:
         dd:ba:1f:9c:f0:f9:41:46:2f:78:f5:30:83:85:1b:f3:97:c4:
         d3:85:03:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:18 2026 by rpki-client