Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/f6ee76-8d93-4204-808c-1d594474bbbf/1/7JPIHMQUA7uAa61U88Xbq-YHn2E.mft
File:                     7JPIHMQUA7uAa61U88Xbq-YHn2E.mft (raw, json)
Hash identifier:          8/sBlTY+cfZInIJoZucVjygeWjmE345DW5psPWHMK3s=
Subject key identifier:   BF:A3:97:83:99:FF:88:C3:A0:F3:40:5F:82:7A:28:61:2F:5C:6D:DE
Authority key identifier: EC:93:C8:1C:C4:14:03:BB:80:6B:AD:54:F3:C5:DB:AB:E6:07:9F:61
Certificate issuer:       /CN=ec93c81cc41403bb806bad54f3c5dbabe6079f61
Certificate serial:       01A0CDB5C188E195C39B94D735030F1AC8FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JPIHMQUA7uAa61U88Xbq-YHn2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/f6ee76-8d93-4204-808c-1d594474bbbf/1/7JPIHMQUA7uAa61U88Xbq-YHn2E.mft
Manifest number:          92
Signing time:             Wed 23 Sep 2026 10:00:35 +0000
Manifest this update:     Wed 23 Sep 2026 10:00:35 +0000
Manifest next update:     Thu 24 Sep 2026 10:00:35 +0000
Files and hashes:         1: 0ywd-6eVKMtZ7bS4ku_CSsCepxU.roa (hash: ADNF64eep1JzdTcOf4p8IZP/kwaUnRYhISdpW3nO13k=)
                          2: 7JPIHMQUA7uAa61U88Xbq-YHn2E.crl (hash: e2WSGwtKQUl0iL/hKSZWCKqgJuQaPUUO2uysVgCNtFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/f6ee76-8d93-4204-808c-1d594474bbbf/1/7JPIHMQUA7uAa61U88Xbq-YHn2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/f6ee76-8d93-4204-808c-1d594474bbbf/1/7JPIHMQUA7uAa61U88Xbq-YHn2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JPIHMQUA7uAa61U88Xbq-YHn2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:b5:c1:88:e1:95:c3:9b:94:d7:35:03:0f:1a:c8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93c81cc41403bb806bad54f3c5dbabe6079f61
        Validity
            Not Before: Sep 23 10:00:35 2026 GMT
            Not After : Sep 24 10:00:35 2026 GMT
        Subject: CN=bfa3978399ff88c3a0f3405f827a28612f5c6dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:d7:4f:e9:b0:7f:45:4d:d9:83:4f:20:90:
                    3a:2e:9f:22:03:d8:73:e8:bb:ec:6c:fc:3e:fb:72:
                    c4:67:1e:df:5a:e0:2a:c5:36:19:bb:77:e6:f0:2d:
                    51:c0:21:e4:b8:7a:58:6d:f5:e7:1e:eb:fe:18:40:
                    19:18:78:05:15:04:66:48:7c:21:a3:a6:07:00:03:
                    22:7e:c1:89:91:af:8b:19:84:9f:65:70:33:52:fc:
                    cd:59:03:ee:19:5e:85:43:11:54:ea:90:58:47:e8:
                    ba:52:80:34:6a:ac:a0:bf:b6:5e:80:dc:96:04:f4:
                    16:a9:dd:61:e0:8a:b5:62:1d:b5:5d:68:2c:d7:1d:
                    d5:da:56:a0:09:d2:77:92:0d:1c:85:f0:1e:43:22:
                    12:c9:6f:94:e1:a1:a6:8d:99:95:d7:05:df:d0:85:
                    75:93:e1:ab:d3:c9:c5:6c:70:29:f0:98:2f:b2:83:
                    f0:21:dc:fb:99:c0:cc:a3:3a:1a:ad:95:ac:40:e4:
                    14:a0:fc:2e:2e:81:a6:81:a2:47:4f:e8:23:fc:7d:
                    b5:d1:dd:d1:e1:ba:5c:14:25:80:d7:9b:02:92:75:
                    0d:32:ce:55:4a:1e:26:d3:d7:f3:cc:1b:45:60:23:
                    07:70:31:a0:7b:e3:ca:06:b0:3a:76:5f:19:0e:57:
                    23:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A3:97:83:99:FF:88:C3:A0:F3:40:5F:82:7A:28:61:2F:5C:6D:DE
            X509v3 Authority Key Identifier:
                keyid:EC:93:C8:1C:C4:14:03:BB:80:6B:AD:54:F3:C5:DB:AB:E6:07:9F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JPIHMQUA7uAa61U88Xbq-YHn2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f6ee76-8d93-4204-808c-1d594474bbbf/1/7JPIHMQUA7uAa61U88Xbq-YHn2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f6ee76-8d93-4204-808c-1d594474bbbf/1/7JPIHMQUA7uAa61U88Xbq-YHn2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:0f:11:a5:f2:2e:60:db:b2:a7:27:56:fb:99:52:af:e1:86:
         ea:97:18:15:ce:34:91:68:d9:21:e5:d4:87:09:72:c0:4b:47:
         d6:4e:2a:53:ff:6e:70:2b:6c:c8:4f:02:b0:ed:ae:85:9c:c6:
         05:da:28:a7:fb:59:d6:14:33:bb:50:fd:ff:e6:17:52:3b:71:
         c8:4b:eb:3a:74:64:a5:5c:bb:52:16:7f:43:b4:8f:1b:0f:71:
         46:b7:ab:ef:6a:17:3b:5e:3d:e5:e1:fc:22:69:bd:3a:a8:b9:
         cf:a6:2c:09:6f:78:0e:9f:e7:69:e5:e5:4a:7e:5c:43:6a:8c:
         32:d1:86:37:12:5f:a0:fe:14:d0:6c:1b:af:6f:43:6a:81:73:
         41:81:98:7d:7e:97:2a:9a:08:b5:9a:c4:a5:c3:11:46:74:ab:
         06:ad:10:ac:56:66:5d:b8:2e:2e:63:cf:37:5c:37:3b:93:ae:
         84:f9:5b:08:a9:94:2c:6e:5b:b2:23:7a:f9:a6:93:05:c8:d0:
         8e:be:e7:e7:32:a4:17:cf:9e:02:3d:02:d7:0d:cd:91:d4:e3:
         ee:f4:81:5d:9f:46:b1:c4:96:c1:23:5b:48:ae:c6:1d:4e:a7:
         67:d7:a9:72:1c:ca:71:f8:af:40:ad:dc:57:c5:11:af:21:8c:
         ba:38:b2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:40:17 2026 by rpki-client