Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
File:                     7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft (raw, json)
Hash identifier:          evlHSC8jyLvTfk21h2gYuh7T36cgGgzxnGOL8Z1IZE8=
Subject key identifier:   AD:01:60:62:41:F5:00:50:33:3D:C3:4F:25:80:8C:47:6F:9F:89:D5
Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Certificate issuer:       /CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Certificate serial:       01A0FCB482674DBE907BD08103FE0B25B59B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
Manifest number:          1826
Signing time:             Fri 02 Oct 2026 13:01:23 +0000
Manifest this update:     Fri 02 Oct 2026 13:01:23 +0000
Manifest next update:     Sat 03 Oct 2026 13:01:23 +0000
Files and hashes:         1: 2tKSrvE8w4OPUMtHHmn4NBgdIN0.roa (hash: xtQTDappKS+L7HJWwmh8B32VXucrBAKNvYHP3fwsAXE=)
                          2: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl (hash: X5ryvWLoW6gUscMK0LpRmVuk+DKMgFZiNdh94qcl85o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:b4:82:67:4d:be:90:7b:d0:81:03:fe:0b:25:b5:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
        Validity
            Not Before: Oct  2 13:01:23 2026 GMT
            Not After : Oct  3 13:01:23 2026 GMT
        Subject: CN=ad01606241f50050333dc34f25808c476f9f89d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:74:1d:73:cf:9d:41:87:c8:0a:54:16:87:
                    0a:2e:df:fb:1a:a7:7e:8f:51:fd:1b:70:b8:7d:1d:
                    30:42:f8:0a:ca:a4:9d:49:24:a7:95:b5:fb:91:c4:
                    3c:50:99:67:f8:f3:27:8b:59:3d:80:ef:01:80:db:
                    d1:c8:a2:18:09:0d:36:90:3a:d2:d4:29:6b:08:17:
                    89:e7:dd:94:25:08:c8:ff:52:96:fb:08:a1:7d:d0:
                    2e:9d:b2:bc:b7:9b:3b:1f:76:97:4a:bb:f7:37:fb:
                    ed:24:05:d0:71:b4:03:e3:40:54:e6:98:24:27:1f:
                    0d:b4:7b:3c:4d:98:2b:cf:b5:d1:21:65:8d:cc:01:
                    4a:d1:40:03:3e:7a:b1:1d:ac:92:59:01:3b:98:e3:
                    68:35:dd:b0:83:d4:67:9f:26:87:ef:66:6d:5b:da:
                    8b:b4:df:5b:22:b7:b2:fd:01:d9:f5:b7:a0:ce:8d:
                    4a:84:ea:53:22:36:fb:ab:d2:dd:2a:b9:92:f2:76:
                    15:93:cb:a0:93:cf:40:0c:a9:b5:97:86:26:8a:88:
                    4d:5f:7b:05:94:c1:91:96:ca:15:85:8e:5b:20:b8:
                    bc:64:6d:1c:ce:87:d3:b5:67:72:2a:bb:70:08:3d:
                    1c:8a:79:a2:95:48:47:92:f2:d8:ff:0f:32:78:26:
                    51:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:01:60:62:41:F5:00:50:33:3D:C3:4F:25:80:8C:47:6F:9F:89:D5
            X509v3 Authority Key Identifier:
                keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8a:57:67:f2:6c:16:e1:a3:58:90:f0:94:e3:7d:89:79:8d:
         21:95:99:47:ad:5d:84:ab:13:a4:69:e9:3c:d5:20:43:99:e1:
         fe:14:0a:a0:f2:13:72:13:54:c9:68:19:e7:5e:d4:25:9c:79:
         9e:bf:e4:40:fa:5f:1d:e4:c6:0c:7b:fd:d7:ae:67:c9:6a:57:
         72:57:8c:b6:38:0b:39:e0:49:47:6a:31:6f:32:18:44:2e:af:
         fe:f1:48:33:b3:66:b8:93:15:72:d8:ee:b5:c3:2a:6a:6a:5c:
         ac:ce:59:e4:4f:f1:11:8b:7b:af:97:cc:77:23:a8:d4:10:c6:
         74:e6:5e:48:7a:31:0e:a0:33:fa:1c:73:d0:c7:32:2c:f9:7f:
         81:28:e4:92:1a:a5:b8:74:65:3a:56:9f:0b:27:4c:0a:56:03:
         e2:c4:bc:12:08:1e:27:b8:07:4d:bf:c9:bb:de:37:82:42:69:
         6d:d8:89:01:c3:aa:18:dc:a2:21:1b:3b:27:2d:d9:74:b5:b5:
         4f:24:da:a4:a0:4f:5b:06:07:19:64:fb:c1:53:9d:0f:26:99:
         92:5b:5a:ac:aa:d0:e5:14:d9:32:e9:03:db:fe:50:3d:c0:7e:
         9d:82:a0:55:a0:da:86:af:a0:e9:c7:23:e8:09:34:0d:58:ad:
         a5:d5:82:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 18:39:02 2026 by rpki-client