Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
File:                     7t4TuXp8d4rYAT-v-isbtkh2LPw.mft (raw, json)
Hash identifier:          SffHuNipmF9qOahLEs6YKX4fT7LV1x+NPqwnTcCDqGQ=
Subject key identifier:   71:42:39:37:85:96:76:72:89:C3:94:92:C9:63:A2:DF:71:A5:65:83
Authority key identifier: EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
Certificate issuer:       /CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Certificate serial:       01A0BE42F8E10CC47F4C4447C999CDC8ED92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
Manifest number:          02B8
Signing time:             Sun 20 Sep 2026 10:00:55 +0000
Manifest this update:     Sun 20 Sep 2026 10:00:55 +0000
Manifest next update:     Mon 21 Sep 2026 10:00:55 +0000
Files and hashes:         1: 7t4TuXp8d4rYAT-v-isbtkh2LPw.crl (hash: jitn2JnFH5qeyHa/YjVbdPm7KsQtuDiM7IdQNo/qCjk=)
                          2: WHAMvVOClu2e4_1oVJNIUdJFRfI.asa (hash: /GKBi3C1f7lecWi+UvNJYtTMLV5cIJZHh3Pf0e4Lw/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:42:f8:e1:0c:c4:7f:4c:44:47:c9:99:cd:c8:ed:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
        Validity
            Not Before: Sep 20 10:00:55 2026 GMT
            Not After : Sep 21 10:00:55 2026 GMT
        Subject: CN=714239378596767289c39492c963a2df71a56583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:a1:e4:17:ae:46:f6:2f:e9:49:dc:ff:1e:
                    17:dd:a0:92:70:65:f3:fa:3d:93:1c:3f:d4:f0:85:
                    b2:8d:76:01:42:82:6c:af:93:d8:3f:6a:a8:97:41:
                    36:c7:a5:e9:51:9b:9d:40:c9:6d:ae:e5:af:fe:a8:
                    6f:05:91:fe:02:2c:5a:f8:21:6f:91:d4:ff:e5:5a:
                    cd:27:bf:1e:8f:a9:71:4e:70:0a:e1:ca:55:7a:4b:
                    aa:f3:d9:33:e9:9b:1e:55:14:2b:b7:90:24:44:94:
                    37:f1:c7:08:5f:b5:ce:e1:85:6f:6f:d0:76:70:5a:
                    56:ca:8b:f8:ee:10:69:77:9a:15:7f:73:d8:0a:0f:
                    1e:6e:b6:52:08:0c:77:b5:f7:87:df:c1:e3:70:e9:
                    59:0c:2c:df:f9:73:b5:9f:11:bf:d8:c5:ef:6c:4f:
                    13:50:1d:2f:f6:29:db:1c:6b:6e:6e:0c:f3:a2:66:
                    c9:17:10:1e:7e:ff:4b:ec:93:3a:98:32:e9:8e:32:
                    88:b2:6f:ab:61:68:6e:fc:40:48:de:a7:e1:c9:34:
                    47:73:b0:eb:3e:d1:88:5e:8f:03:d1:a2:de:9c:1b:
                    7e:99:0d:3d:61:de:c6:76:06:45:a7:28:5f:ef:68:
                    82:55:63:a8:34:e1:14:fd:a5:f9:69:c5:a4:b9:40:
                    cb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:42:39:37:85:96:76:72:89:C3:94:92:C9:63:A2:DF:71:A5:65:83
            X509v3 Authority Key Identifier:
                keyid:EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:fa:c9:72:92:4c:d4:ca:ab:02:f1:fd:64:28:86:47:b5:55:
         a8:62:89:07:94:45:d2:36:e5:5f:18:02:d4:91:bc:8d:b8:1a:
         d1:a5:88:d5:4f:17:6b:7f:78:83:f4:ed:b5:2a:51:8e:85:a4:
         81:24:d8:b5:e3:f1:05:4a:fe:cd:03:6a:36:7c:19:db:47:ab:
         78:4b:42:e2:cc:6d:c2:bf:f4:9e:82:0d:eb:9a:e7:65:7b:9e:
         c2:41:c9:9c:1b:e5:23:c6:ad:56:0c:0d:81:bf:72:a9:82:cb:
         d5:51:11:94:92:7b:ab:6d:65:54:87:cc:11:eb:a7:b5:a8:65:
         74:bb:e6:12:32:03:e2:44:62:4f:d8:7f:62:ef:84:67:1d:e3:
         0f:56:24:d2:3c:9e:16:7c:25:29:a0:c9:25:73:1c:68:ac:98:
         41:c0:be:c7:88:0f:32:57:a3:c3:68:ca:1d:3f:d8:46:8c:e0:
         e3:67:f0:2c:4f:75:e2:5b:88:10:71:fa:10:32:cc:a0:46:76:
         ee:5e:9f:6a:0b:9f:b6:03:1f:52:56:bc:70:00:98:8f:9b:fc:
         5d:25:bf:60:de:0f:57:c9:ca:65:c0:f8:f8:2a:7c:b1:c7:69:
         2f:00:5f:14:ed:0b:64:75:dd:cc:fd:bb:35:29:de:08:2b:da:
         dd:30:a7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:35:31 2026 by rpki-client