Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
File:                     D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json)
Hash identifier:          eYTmI8iGIoAefY+5Zv/Bw44QaIlANidmfmjllbGyUso=
Subject key identifier:   F8:D3:5D:3D:1B:E7:7C:AE:68:A7:70:90:F0:CF:74:6E:FB:C3:F3:2B
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       01A0C821C5C30A90B9D0C54DDE332FB34F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
Manifest number:          1198
Signing time:             Tue 22 Sep 2026 08:00:51 +0000
Manifest this update:     Tue 22 Sep 2026 08:00:51 +0000
Manifest next update:     Wed 23 Sep 2026 08:00:51 +0000
Files and hashes:         1: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: Qnh6KFXTtiR2OWCkafQD9N8Giqeloubc1KPdKn5CzG0=)
                          2: IFrQrnZlcDy6Cg2Rsz5QrR_ViKw.roa (hash: 5NDZ9fYEk6QjwvvjIgarKP6mtzbMjVq5FS8+N6De1Yk=)
                          3: XmnG0MqLIgeN6LB3ZvX_EHKUPUs.roa (hash: w3yL18W2ynzjIg8bQ2zeCSOfCkrmB+prpT+GDS84ZrE=)
                          4: XvBJZwcn7VU_moTOvJdb6scRTKA.roa (hash: qtP0FU9yzxkB6If5YZB4PVXGwxz8cr/TjgCYhAvSLVY=)
                          5: cSi7_OAuX-rLMOiqKcF2agOjyuY.roa (hash: SyyfBcCCktRPddt1j77ZoKfvba/2lQeJcmhdFBczGME=)
                          6: ljGQpGa82Fq4AfYrsYkkXWHmbQ4.roa (hash: XBY4/UtnM0b8oNJm9u2YyPgXyoTfFMPyMfliMhcU86s=)
                          7: oJ_9gZWX0-HZBwO501St9llybTk.roa (hash: TLUGLY8S71f/0cvwgOTLfE6brs5a4M3ghefdEt5ZM+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:21:c5:c3:0a:90:b9:d0:c5:4d:de:33:2f:b3:4f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Sep 22 08:00:51 2026 GMT
            Not After : Sep 23 08:00:51 2026 GMT
        Subject: CN=f8d35d3d1be77cae68a77090f0cf746efbc3f32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7e:33:b6:b6:a6:eb:00:92:20:7c:93:20:be:
                    f1:47:30:59:13:3d:23:79:4a:48:af:fc:cd:bf:37:
                    fd:03:f2:1a:06:47:8f:15:60:de:12:22:f8:5c:5b:
                    21:ec:3c:8f:a3:09:6c:79:38:cd:af:a4:97:df:ed:
                    78:b2:16:d7:0f:87:f7:d4:dd:be:78:f7:75:cf:36:
                    8f:64:3f:64:18:be:13:f5:9c:f5:77:34:eb:f9:00:
                    7d:69:72:71:77:bb:ce:18:ec:1b:f2:9f:8a:f6:41:
                    e8:9c:c3:85:31:4f:90:a8:26:6f:42:ca:08:97:d9:
                    ed:7a:64:9b:d9:3e:87:93:c3:91:c8:05:6c:cc:f7:
                    d1:86:a5:c4:39:ed:ad:4b:60:c8:53:29:8d:43:24:
                    a8:34:9d:32:d2:f4:08:21:7e:d6:53:d1:14:34:f2:
                    fe:e1:a9:fc:15:ff:a8:c6:df:dc:33:ce:69:1b:55:
                    21:0c:41:84:dc:62:59:03:e9:64:42:a0:ea:5a:36:
                    38:29:a5:eb:a9:5a:f3:f3:4e:d1:6d:ae:38:8b:5a:
                    62:98:04:5e:2e:72:88:c4:13:18:e2:f3:b7:45:3c:
                    1a:f9:83:ff:be:75:4f:6d:a5:78:7b:e2:5f:89:6f:
                    05:bb:46:d7:92:77:57:43:ef:76:6b:8d:1f:89:9d:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D3:5D:3D:1B:E7:7C:AE:68:A7:70:90:F0:CF:74:6E:FB:C3:F3:2B
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:2e:35:76:97:e3:da:75:45:9a:63:c6:2f:a0:a8:fb:67:f9:
         98:3f:a2:23:35:97:c6:4e:41:c2:26:59:ea:7d:c7:9f:4b:95:
         48:ac:90:da:ad:77:fe:39:35:83:65:54:ec:6d:51:69:ce:28:
         2f:5d:25:7a:b8:1b:9b:43:8c:40:d4:fa:39:6c:b0:e6:b3:08:
         f5:5d:3c:f3:54:a0:ac:96:1f:58:3f:bc:d3:c4:c1:53:ef:56:
         13:38:33:b8:7e:db:9b:6d:2b:d3:3e:b9:c9:7e:e9:a4:38:d2:
         66:c9:a5:a6:a4:64:8f:fc:fd:73:95:d1:32:81:3f:5e:db:3e:
         4b:4b:e0:5e:1d:4d:e2:90:0d:b8:9b:93:ef:95:2e:2c:a2:27:
         2d:b3:a3:02:e9:57:f3:39:f4:a4:3a:90:5f:f2:57:ff:e4:c4:
         39:9d:3e:55:5e:5b:70:8a:87:05:7f:78:ac:2d:78:6c:28:e1:
         35:dc:b8:36:8c:ff:f2:a1:b8:3b:0d:d9:64:c8:2c:32:2b:26:
         a0:04:a4:0f:ff:cf:2e:b5:05:f7:5c:38:5b:d4:a1:eb:d1:0b:
         30:62:5f:fc:a2:ef:48:a1:48:1e:6b:bb:35:1c:07:e2:97:fc:
         68:ac:6d:10:d9:55:20:a0:3a:7d:34:72:93:5d:ea:91:b0:6f:
         cc:27:87:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:27:23 2026 by rpki-client