Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.mft
File:                     7RpXpPGG_CJ_LgHhycRthas77dw.mft (raw, json)
Hash identifier:          YUZmV4dWyvqMd9ZyKyWl3BQ+7EmziNH99Bfjxkfvl4E=
Subject key identifier:   66:36:F0:39:27:59:00:E9:8F:CA:F8:0C:E5:06:D4:50:4F:C0:17:60
Authority key identifier: ED:1A:57:A4:F1:86:FC:22:7F:2E:01:E1:C9:C4:6D:85:AB:3B:ED:DC
Certificate issuer:       /CN=ed1a57a4f186fc227f2e01e1c9c46d85ab3beddc
Certificate serial:       01A11A50CB71360EBA0EA0C0C04DEF21C7AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7RpXpPGG_CJ_LgHhycRthas77dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.mft
Manifest number:          010C
Signing time:             Thu 08 Oct 2026 07:01:04 +0000
Manifest this update:     Thu 08 Oct 2026 07:01:04 +0000
Manifest next update:     Fri 09 Oct 2026 07:01:04 +0000
Files and hashes:         1: 7RpXpPGG_CJ_LgHhycRthas77dw.crl (hash: JdbeGnbdekIAymlQZ0gJ1SOzrMin9b/X1zN82aMbZrs=)
                          2: dTd-s2kzr6zPGlBsSBhTqjjZxV4.asa (hash: g3rSCH17kTajNOiom6f2kvmwIPGfrWb06N4I32V9KxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7RpXpPGG_CJ_LgHhycRthas77dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:50:cb:71:36:0e:ba:0e:a0:c0:c0:4d:ef:21:c7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1a57a4f186fc227f2e01e1c9c46d85ab3beddc
        Validity
            Not Before: Oct  8 07:01:04 2026 GMT
            Not After : Oct  9 07:01:04 2026 GMT
        Subject: CN=6636f039275900e98fcaf80ce506d4504fc01760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:28:71:38:e4:29:21:d2:23:e7:52:a7:93:
                    db:26:9f:0f:43:cb:e6:77:17:6f:93:60:29:5c:93:
                    59:e6:e0:2f:2c:d2:a4:62:62:6e:37:79:f2:ba:9c:
                    76:6f:e4:10:94:57:37:50:f7:99:9d:5f:d2:fb:ab:
                    7a:4f:c9:a2:a7:99:4c:32:13:23:d6:6c:c6:cb:0a:
                    cb:dd:d5:f8:e2:65:d7:b9:bd:32:b5:cb:28:a5:cd:
                    76:94:50:28:87:ef:cb:d1:bc:9f:81:02:79:13:0b:
                    b8:df:63:21:2d:00:ac:8a:89:ac:16:f7:3f:10:81:
                    34:a9:30:c4:9f:c3:8d:09:53:5d:96:1c:5d:d6:8a:
                    be:5d:c8:4b:e0:bd:dd:96:3d:da:b3:d7:8f:d8:e2:
                    12:db:79:bb:4c:49:11:ed:58:3b:e2:6d:34:1a:5f:
                    f8:c8:94:47:24:54:df:1b:01:3d:df:3a:dd:86:e0:
                    41:9a:a2:2a:38:4d:b1:c8:ed:70:de:34:40:0c:dc:
                    f2:a7:ba:f2:07:5d:bd:6a:41:46:2f:9d:df:b2:e0:
                    ac:e4:28:7e:44:46:fc:58:e4:39:bb:ce:0a:1d:82:
                    80:d0:7e:d3:93:94:14:51:ad:7b:42:f8:41:99:4e:
                    3e:5c:fa:40:39:e3:a1:43:ec:44:a3:9e:e4:cf:c6:
                    d8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:36:F0:39:27:59:00:E9:8F:CA:F8:0C:E5:06:D4:50:4F:C0:17:60
            X509v3 Authority Key Identifier:
                keyid:ED:1A:57:A4:F1:86:FC:22:7F:2E:01:E1:C9:C4:6D:85:AB:3B:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RpXpPGG_CJ_LgHhycRthas77dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/7RpXpPGG_CJ_LgHhycRthas77dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:89:d9:dc:f0:b3:1e:11:5d:4c:30:77:4f:7e:11:27:c6:4e:
         74:b5:b4:fc:95:45:2b:af:d5:86:a0:9e:e4:21:62:d6:a7:35:
         89:b9:0b:cf:9a:45:d1:f9:77:5b:ac:9a:92:83:2a:79:05:ca:
         c7:33:86:92:ce:ab:75:87:d8:0a:0f:5f:31:8f:54:50:c6:cc:
         f5:94:f8:28:48:9d:f4:7f:76:86:00:fa:8d:7d:4b:70:20:92:
         d5:63:da:c4:9c:fd:33:1b:4b:97:bc:2d:e0:14:b1:0e:2a:b8:
         6c:14:b1:13:59:26:c1:5b:a3:ff:78:b6:97:bc:c3:8f:08:78:
         f2:17:df:99:1c:2e:bb:91:ca:2b:7b:63:91:70:6e:43:81:7f:
         a4:a7:0a:02:10:9b:77:99:1a:98:32:a8:87:de:a0:68:b3:34:
         1e:02:de:1e:f9:2d:ce:11:67:e4:ec:08:84:e1:f0:80:d8:13:
         e0:94:88:87:9f:eb:7a:ba:8d:72:b0:53:76:3b:e6:86:a2:91:
         e6:08:0d:f6:c6:01:8d:ac:26:f3:92:e4:77:c4:d3:79:75:9e:
         cf:4d:37:c9:79:9b:65:62:57:d4:f9:f5:81:ce:81:ab:b8:c1:
         77:46:53:5a:84:5c:a8:06:28:31:55:6d:96:1c:3f:52:f8:67:
         68:0b:92:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:28:43 2026 by rpki-client