Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
File:                     7ouogkxcjSBzJqSjq4k-u49Qlq0.mft (raw, json)
Hash identifier:          QIE7kOEJWGN+j/DDeocyHxGmgcJuB12B0jFsENrREyo=
Subject key identifier:   47:D5:39:07:A4:FE:7C:63:B0:B8:C7:DA:9F:C8:B1:D7:DF:84:13:F0
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Certificate issuer:       /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial:       01A0CA47A3FA845A3E2D1036FDB53DC8E696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
Manifest number:          1B59
Signing time:             Tue 22 Sep 2026 18:01:27 +0000
Manifest this update:     Tue 22 Sep 2026 18:01:27 +0000
Manifest next update:     Wed 23 Sep 2026 18:01:27 +0000
Files and hashes:         1: 7ouogkxcjSBzJqSjq4k-u49Qlq0.crl (hash: 8KmG2gBrD9Kg5P2ALnBzFbDevMQ6ihrV9OZzls/F9wI=)
                          2: 9_qzaYR-EszIpBxI4ownqBBUFGw.roa (hash: VhzjhZWKdSpMHocreuG2Si0iTaWmN7K1sjii56hPLwc=)
                          3: KjzZQ3XHTR1E4K2w5QoidTvxCog.roa (hash: 0FtQ/w38a9SAPO2B+4vZGc9BxQRkeEmmddcJQ1zQ63s=)
                          4: QOp6ldZ4aq2zfMPYvuOeV0oKmeY.roa (hash: 8YOvlrB9urinWAqeR4fd1zgfcxdDnYVPoOrAJi9cHqo=)
                          5: aZXb-HM8btPUx1LInalsokc-cKM.roa (hash: TYnAlNekNynJRsOGiqtjVYr/puO2iGT+VRAtTpQi4YY=)
                          6: m24O6Wpo34YVFTi5GGLw487-z5U.roa (hash: 8LP656VRzP22y/4rrgOPp8IsbB22qkGycpmzkEoh59Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:47:a3:fa:84:5a:3e:2d:10:36:fd:b5:3d:c8:e6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
        Validity
            Not Before: Sep 22 18:01:27 2026 GMT
            Not After : Sep 23 18:01:27 2026 GMT
        Subject: CN=47d53907a4fe7c63b0b8c7da9fc8b1d7df8413f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:f5:c6:3c:b5:49:13:6f:03:d0:25:6b:48:
                    a8:d5:47:39:b2:32:bd:f7:7b:58:d7:70:75:63:d9:
                    64:d1:34:fd:cc:c7:85:13:17:54:48:36:6d:ed:5f:
                    b4:99:dc:a3:84:7b:cb:69:c9:6f:67:d6:8b:95:ed:
                    8d:74:8a:31:26:ff:43:1a:97:64:92:c5:37:a9:8a:
                    75:09:54:07:55:55:db:30:fa:32:cd:b9:87:9b:cd:
                    fe:fb:1d:e2:61:97:a3:e5:4c:7b:b5:9a:c8:ba:71:
                    1c:b1:0a:92:ad:67:73:93:81:d2:7d:39:ba:d8:47:
                    55:38:73:bf:d7:e1:c4:d9:24:bc:71:b9:57:07:b1:
                    9a:22:70:97:c7:68:35:e8:cc:be:64:e8:31:49:38:
                    87:1a:ab:80:1c:13:89:56:10:c7:b6:b1:72:10:2a:
                    eb:07:a1:ec:ad:41:01:63:9d:3c:34:17:2e:16:50:
                    10:3a:83:77:72:2e:93:63:52:9a:69:b0:15:fc:47:
                    80:e8:86:10:c3:5d:14:6c:a3:a5:87:1d:ad:42:a0:
                    91:3c:d4:96:79:56:28:ac:1c:4f:72:10:34:dc:e7:
                    0e:8a:dc:e9:96:5f:42:a7:f5:99:d9:e7:17:74:c6:
                    a0:bc:48:60:97:d8:ba:36:ac:c3:0a:9f:a6:d9:de:
                    9f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D5:39:07:A4:FE:7C:63:B0:B8:C7:DA:9F:C8:B1:D7:DF:84:13:F0
            X509v3 Authority Key Identifier:
                keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5b:fa:d3:11:e6:6d:2c:09:d9:b4:81:0f:3a:1e:dd:a6:b7:
         c3:3e:90:5a:49:6b:2b:8a:48:1c:68:7e:9b:03:1e:69:10:73:
         ed:2f:8a:c6:07:8c:61:c9:aa:03:e3:df:d9:96:3c:f2:ac:97:
         25:00:60:6b:93:a5:4e:ae:83:8f:da:fa:38:90:60:56:9d:0a:
         2f:b0:db:6a:f3:6e:08:53:28:65:c8:b1:05:02:eb:3b:92:64:
         dc:e1:dc:ad:4a:6b:f0:47:e8:41:de:fa:55:e2:20:17:fd:6a:
         77:d9:fa:0e:3d:d2:51:77:f0:4a:97:f6:55:28:9b:36:ce:e7:
         cb:c2:8e:82:a9:2c:56:05:16:1d:50:99:ff:13:37:3f:f7:64:
         7f:b1:10:b9:2b:27:3a:16:6e:f4:c2:04:75:46:b3:fe:38:a1:
         97:9e:d9:c1:49:70:dd:af:42:66:7e:a7:98:57:14:4e:c7:8b:
         0d:01:23:8d:08:79:17:05:39:df:d7:0b:ec:3d:50:54:0d:93:
         5c:6e:a8:c1:a0:b8:5b:20:d4:e4:b0:2b:84:7c:b0:00:de:01:
         15:33:bf:e5:82:2e:ad:14:5d:fd:1b:ac:a1:96:81:2d:6e:c1:
         6f:7c:0b:f8:d9:27:d8:43:55:cc:6a:89:14:54:fe:e2:48:0d:
         ed:f1:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:32:56 2026 by rpki-client