Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft
File:                     7tf2sWWjjP80bePjUhGNyZ7YIsc.mft (raw, json)
Hash identifier:          UxuL/v5hqg7z701/JaX6cx3+kOPKC8bm3MHfsw0ZWqc=
Subject key identifier:   05:01:B9:EA:52:03:F9:97:AB:38:B8:50:66:D9:B3:03:47:94:4D:D2
Authority key identifier: EE:D7:F6:B1:65:A3:8C:FF:34:6D:E3:E3:52:11:8D:C9:9E:D8:22:C7
Certificate issuer:       /CN=eed7f6b165a38cff346de3e352118dc99ed822c7
Certificate serial:       019FA9E2EA1B2D082C2AFB837B0C73F76606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft
Manifest number:          02BF
Signing time:             Tue 28 Jul 2026 18:00:48 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:48 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:48 +0000
Files and hashes:         1: 7tf2sWWjjP80bePjUhGNyZ7YIsc.crl (hash: Cf4sITTHfB5X/8LdpFikTtzZzBsFcqHWj9Or6tb8Q2c=)
                          2: NAW1_cKeiVf2Ht2OFDHqZcdwBFo.roa (hash: lOXDjnI4H7k/uRGO0GQznSDrcP2IS6+/d8MPZ+z5oLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:ea:1b:2d:08:2c:2a:fb:83:7b:0c:73:f7:66:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed7f6b165a38cff346de3e352118dc99ed822c7
        Validity
            Not Before: Jul 28 18:00:48 2026 GMT
            Not After : Jul 29 18:00:48 2026 GMT
        Subject: CN=0501b9ea5203f997ab38b85066d9b30347944dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:3d:11:87:b0:90:a2:f7:af:30:d8:68:41:
                    3f:34:13:23:5d:0b:89:5e:ee:dc:ac:a5:b7:64:1f:
                    11:36:4d:be:5f:4a:64:af:e8:fd:74:8a:cf:b1:55:
                    02:a9:98:e7:a7:a4:c6:cf:d7:aa:0f:e3:11:07:b4:
                    11:6b:af:c3:1b:c1:33:e0:f0:a9:61:75:7b:5c:14:
                    85:89:90:55:bf:8c:59:4a:a9:5e:fc:4b:39:5b:3d:
                    4c:29:02:ee:5b:16:da:53:4b:78:2a:91:ec:98:ae:
                    9a:3d:5f:ac:31:50:36:e5:98:f2:a9:33:a5:b1:a8:
                    ab:f8:83:f5:5f:a5:fa:d8:89:18:b5:5a:da:b5:9e:
                    f4:e4:e5:31:bd:c3:3a:d6:c9:5b:8f:82:3d:c2:d5:
                    13:e5:54:50:19:1a:60:f9:f6:c6:28:23:b7:7a:ac:
                    7b:c5:a8:07:50:79:ff:15:a0:63:8b:a2:9e:28:6b:
                    6c:f8:9a:c0:bc:19:02:a4:a0:a7:7c:5c:e8:24:d0:
                    63:5c:3d:7f:e7:64:71:1b:f9:be:45:7a:a8:1c:a5:
                    d3:62:a1:0b:36:18:fe:23:f7:ce:71:d9:c3:bf:27:
                    c4:1e:16:6b:30:4f:e3:80:d6:de:6d:b1:11:1d:d2:
                    72:ae:92:b3:d8:ba:4a:c1:3b:3d:7c:b9:67:c5:34:
                    d0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:01:B9:EA:52:03:F9:97:AB:38:B8:50:66:D9:B3:03:47:94:4D:D2
            X509v3 Authority Key Identifier:
                keyid:EE:D7:F6:B1:65:A3:8C:FF:34:6D:E3:E3:52:11:8D:C9:9E:D8:22:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:cd:ca:08:d8:91:4d:20:fd:be:3b:9a:54:b3:d0:c0:24:46:
         ba:6a:cf:11:b4:fa:60:da:bc:84:ae:5c:17:74:71:8d:67:e4:
         73:4f:90:60:ee:36:b4:56:e3:06:97:bf:89:df:49:62:b3:90:
         24:9f:c1:41:51:ad:77:67:20:bd:56:48:79:ea:ea:58:9c:67:
         09:e5:f9:08:42:db:7f:f1:a3:eb:c1:3e:9e:98:1e:e8:a1:a9:
         c5:d0:08:11:50:f8:4b:54:f0:45:92:de:07:b4:d8:03:40:99:
         fe:7a:c7:fa:63:54:df:74:f5:0c:4f:36:d8:af:15:2a:19:95:
         00:9e:9c:7d:c3:a2:75:46:ba:08:fa:ff:2b:09:e7:e1:9a:6e:
         bb:e2:9b:1d:ba:ab:6a:59:b2:51:3b:fd:89:49:23:4a:1b:08:
         52:6f:ef:6e:22:6d:24:11:14:16:36:91:13:f4:50:72:d4:d5:
         2e:7b:81:10:59:73:f4:fe:c9:5e:76:0a:a8:ab:44:96:14:ca:
         9d:bb:55:7a:df:93:e3:77:5d:0b:76:f0:8d:8b:c7:d5:a8:40:
         d9:cc:be:52:52:72:e0:2b:d4:30:65:af:11:b6:10:6b:e3:66:
         a9:92:6c:f4:34:6a:fc:e2:03:f5:6a:5d:7a:5b:79:8c:4f:f3:
         ee:2d:55:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:18:44 2026 by rpki-client