Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.mft
File:                     e2JYjviU8V-132v-4paOMiKQUAk.mft (raw, json)
Hash identifier:          87xLZ0RRvt6OOUyg16uHP1D4FXC42yx/YUg5loMgjkY=
Subject key identifier:   C0:20:01:C3:F4:52:01:6B:2E:11:D4:C6:3E:6E:C1:60:62:E4:BC:B4
Authority key identifier: 7B:62:58:8E:F8:94:F1:5F:B5:DF:6B:FE:E2:96:8E:32:22:90:50:09
Certificate issuer:       /CN=7b62588ef894f15fb5df6bfee2968e3222905009
Certificate serial:       01A0F2D627DB321296056032594B422F4700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e2JYjviU8V-132v-4paOMiKQUAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.mft
Manifest number:          F7
Signing time:             Wed 30 Sep 2026 15:01:56 +0000
Manifest this update:     Wed 30 Sep 2026 15:01:56 +0000
Manifest next update:     Thu 01 Oct 2026 15:01:56 +0000
Files and hashes:         1: e2JYjviU8V-132v-4paOMiKQUAk.crl (hash: Uf0f0chbYLVgARAblMaCCqEY3kbtdH6jzwG2L0VVqEc=)
                          2: n4PZqEq4ej9Dd5bdBkRp3aOYqNE.roa (hash: 1E/T9nLd+QL/eysx3WY4PkqyPLvT4d8WYewTXo8g6eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e2JYjviU8V-132v-4paOMiKQUAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:d6:27:db:32:12:96:05:60:32:59:4b:42:2f:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b62588ef894f15fb5df6bfee2968e3222905009
        Validity
            Not Before: Sep 30 15:01:56 2026 GMT
            Not After : Oct  1 15:01:56 2026 GMT
        Subject: CN=c02001c3f452016b2e11d4c63e6ec16062e4bcb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:ea:1d:91:93:7f:e7:93:2a:19:18:92:40:
                    9f:0b:cf:f5:7a:e2:f4:c4:9e:a8:13:73:1a:59:80:
                    d0:9b:a2:c0:a9:7e:c4:9d:cd:52:29:06:3a:e8:09:
                    33:d7:d6:f0:6a:7a:91:5c:d1:dd:61:92:bd:97:f3:
                    be:b7:93:96:61:8c:0e:df:5f:25:90:38:81:5a:a0:
                    ad:bf:3a:32:9e:e0:6d:de:ce:de:21:23:7d:fc:b0:
                    d1:de:44:2e:2c:ae:b4:71:a7:8d:17:3b:cd:1e:4e:
                    07:54:05:10:46:b1:c4:dd:db:b7:a6:be:43:6d:8d:
                    2a:e8:1a:7d:30:be:32:6c:e0:37:7c:f2:f8:d8:4f:
                    31:01:07:72:b6:7d:9b:44:00:5e:58:25:70:f8:5d:
                    b4:85:cb:d8:6c:0c:05:51:0b:e5:3a:86:25:0f:d8:
                    7a:18:fc:b7:3e:33:3d:8a:8c:d8:4b:e4:79:e2:80:
                    9e:60:f9:67:f8:71:e9:85:e0:d2:41:f4:e3:62:b9:
                    1d:b7:69:48:e8:82:07:9c:62:84:70:7f:78:06:01:
                    78:48:11:f4:50:57:26:d4:ea:f0:e7:50:68:76:2c:
                    b0:02:36:86:8d:b4:5e:12:75:17:6e:f3:32:1c:fa:
                    97:3f:05:cf:1c:b9:5d:14:8d:64:4b:44:7d:d8:60:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:20:01:C3:F4:52:01:6B:2E:11:D4:C6:3E:6E:C1:60:62:E4:BC:B4
            X509v3 Authority Key Identifier:
                keyid:7B:62:58:8E:F8:94:F1:5F:B5:DF:6B:FE:E2:96:8E:32:22:90:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2JYjviU8V-132v-4paOMiKQUAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f6:1f:ce:8a:60:50:68:5c:08:7c:dc:e1:15:99:e3:ab:c3:
         62:ea:e4:8f:fe:cc:b7:c4:af:46:a7:7e:a6:fc:b7:6b:14:92:
         a5:36:9b:60:ac:cd:46:6b:b3:00:2a:b3:02:98:c9:45:2c:b8:
         01:60:d7:57:28:20:e9:5e:cc:5e:8a:43:be:f1:dd:b1:0d:63:
         50:d2:5d:ac:00:dd:d2:ef:67:13:a3:4a:82:16:c3:82:1d:8c:
         76:4b:96:98:11:ad:38:6b:2a:71:28:32:7b:bc:6e:f8:bc:82:
         58:33:fd:76:46:af:4d:ab:51:bf:72:54:29:13:18:2d:1f:4f:
         09:a6:59:a0:b3:c9:50:1a:c4:7b:5b:09:3c:00:3a:64:5b:82:
         d0:f5:18:ea:8a:8e:af:b9:26:75:1e:32:b0:07:81:47:90:78:
         07:8e:9e:f9:6f:e1:eb:33:9b:f0:68:fa:16:a6:01:d8:04:b7:
         ce:ae:e4:29:53:32:62:ac:fd:a0:56:50:b4:f4:17:c8:b4:f7:
         1b:b4:e5:34:36:77:8d:36:d9:9a:be:c6:59:bd:29:44:4f:3e:
         4e:a7:0e:89:b4:07:97:87:dd:e3:e2:72:a1:7b:b6:99:a3:4d:
         a4:85:f2:7d:62:fd:a0:aa:6b:ad:44:3c:54:55:3b:b0:1c:ca:
         fa:39:72:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:28:29 2026 by rpki-client