Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
File:                     7enwFkj2hDY4I6bY7srOV5unt_8.mft (raw, json)
Hash identifier:          bKQMkB/oqkCn/W9M073udJIn2u+Bh5Z0Ibdk5QRUU4Y=
Subject key identifier:   1F:27:69:3B:F5:4F:0E:BB:59:97:18:2A:48:11:B8:2D:E6:EA:85:F7
Authority key identifier: ED:E9:F0:16:48:F6:84:36:38:23:A6:D8:EE:CA:CE:57:9B:A7:B7:FF
Certificate issuer:       /CN=ede9f01648f684363823a6d8eecace579ba7b7ff
Certificate serial:       019FA898F8F8ACA59D76C4A34CEFA33A3EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:00:25 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:25 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:25 +0000
Files and hashes:         1: 7enwFkj2hDY4I6bY7srOV5unt_8.crl (hash: hccvQiWFydlORmnBvg45oD4QuanDvlIohYRqX/+EpU0=)
                          2: N0pj_XAkmpu_lY4emTSafGvqA94.asa (hash: Uuz9QFe+O+ehHKa3uQpLvcHnBTIPRP4id7lgGYmUWlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:98:f8:f8:ac:a5:9d:76:c4:a3:4c:ef:a3:3a:3e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede9f01648f684363823a6d8eecace579ba7b7ff
        Validity
            Not Before: Jul 28 12:00:25 2026 GMT
            Not After : Jul 29 12:00:25 2026 GMT
        Subject: CN=1f27693bf54f0ebb5997182a4811b82de6ea85f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:0a:15:99:24:ae:03:34:07:51:0c:a4:7b:
                    97:83:11:4a:a8:66:a4:f3:48:2c:07:24:fb:ab:01:
                    8a:17:a0:e9:64:3c:10:f0:fa:dc:3c:d2:c9:79:dd:
                    2b:e0:44:34:54:a5:02:96:11:b1:3a:06:eb:fc:64:
                    bc:92:44:e9:35:74:20:f7:f3:4f:bc:80:38:a6:16:
                    42:9f:6e:11:28:f7:82:93:ff:5d:27:74:9d:98:46:
                    49:9d:ac:e6:ee:19:db:2b:c6:2d:43:f7:86:3e:b3:
                    e5:4d:ff:63:b7:06:5d:ec:29:8f:de:ed:0e:60:70:
                    cd:68:1e:4d:4c:0d:1e:86:fd:db:d8:f8:a0:7b:ca:
                    7c:ed:c4:26:bb:f2:4c:eb:21:80:6a:4d:4c:78:91:
                    ce:8f:f0:e2:ba:44:9e:67:ce:b8:43:2b:02:d7:2a:
                    18:c4:85:b4:08:e9:de:0a:f0:cc:00:88:45:90:b3:
                    32:c6:89:5a:25:e9:92:e6:5a:de:dd:99:bc:ec:07:
                    58:80:36:c1:32:28:5c:5d:8c:ee:92:a6:8a:9b:a0:
                    b8:33:d1:e2:a6:cd:67:6c:93:27:54:63:8c:9a:55:
                    a5:64:62:a6:53:0d:24:8f:95:c0:a4:14:b8:a2:ed:
                    4d:af:7a:90:47:d7:c4:c6:af:2f:3b:75:07:a4:29:
                    92:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:27:69:3B:F5:4F:0E:BB:59:97:18:2A:48:11:B8:2D:E6:EA:85:F7
            X509v3 Authority Key Identifier:
                keyid:ED:E9:F0:16:48:F6:84:36:38:23:A6:D8:EE:CA:CE:57:9B:A7:B7:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:67:5d:3d:ce:f5:f4:5f:0a:43:cf:2a:83:a8:40:68:1e:ba:
         06:cf:37:ef:de:95:e7:c7:c6:d6:00:95:fc:05:f8:63:e2:6c:
         56:c4:8f:96:b6:22:d5:d8:cc:a3:b6:8e:04:3b:2d:42:ef:05:
         1b:3a:c3:d3:00:c9:49:70:2e:3b:02:f3:26:f1:57:c9:94:0b:
         40:3b:5d:59:7a:61:7a:6e:15:81:e8:a9:6b:50:ba:23:c2:77:
         6c:44:8d:47:14:33:18:5f:22:b0:9d:31:6b:36:dd:aa:71:20:
         4f:aa:ea:24:02:ff:cd:42:a8:05:84:e8:97:f6:99:95:c0:b7:
         56:93:74:3b:74:39:06:91:57:d4:53:14:22:8b:39:06:0c:1e:
         a0:a6:d2:4e:81:10:fb:f3:a5:a2:12:25:2d:ba:8c:4b:e9:68:
         64:d3:3f:43:a5:60:37:1e:54:34:ce:3d:ff:f5:8b:4b:5e:3e:
         57:3f:83:09:fc:fe:51:12:16:f5:bd:e5:3e:dd:b2:2b:cb:fd:
         05:8b:1c:8a:e0:ca:5c:7e:08:2b:dd:ad:67:e7:da:86:f3:1f:
         eb:71:3b:4a:f8:b9:9b:d0:7f:cc:72:82:06:2e:3b:1c:17:f9:
         ab:2e:4d:4e:2d:84:4d:29:26:6e:a8:f4:fb:a5:fe:6e:74:fb:
         55:3e:5b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:48 2026 by rpki-client