Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File:                     7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier:          6aS6KpOHTTNYzWnc0XKlFMo4V2IidgqlTblew9+rzRI=
Subject key identifier:   7C:AF:2B:92:41:63:74:B3:75:65:3C:FA:52:D7:14:58:DE:3C:0F:A9
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer:       /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial:       01A12654AA063A1C7C920031CEE6CA970984
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number:          1A96
Signing time:             Sat 10 Oct 2026 15:00:45 +0000
Manifest this update:     Sat 10 Oct 2026 15:00:45 +0000
Manifest next update:     Sun 11 Oct 2026 15:00:45 +0000
Files and hashes:         1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: odbV4Aqfn7cVc2GtzNSPI4Gx6rIANWkRFN3f+Kby0ow=)
                          2: DLJ6Lc26hou-gghVAiRPeC5X_w0.roa (hash: 0ehkmbQVXLiYPEC/LI/+SW3yDQBg8UXsIn3OJpfQk0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:54:aa:06:3a:1c:7c:92:00:31:ce:e6:ca:97:09:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
        Validity
            Not Before: Oct 10 15:00:45 2026 GMT
            Not After : Oct 11 15:00:45 2026 GMT
        Subject: CN=7caf2b92416374b375653cfa52d71458de3c0fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:42:c9:c0:24:d5:84:77:a4:ee:17:1c:51:
                    2f:e8:01:c6:b0:5a:7b:c0:a0:af:c3:c0:c4:23:21:
                    26:08:2a:9e:b7:5f:da:c3:b7:40:66:25:cc:90:bf:
                    78:7b:ea:00:c3:b8:a6:54:8e:aa:01:27:e5:47:dd:
                    17:29:aa:32:e2:71:95:28:53:b9:19:14:1b:3b:7e:
                    c5:04:15:08:52:09:d9:b2:15:10:73:bd:96:cb:d5:
                    8c:85:40:32:cf:3c:e0:51:13:03:87:56:8a:e3:e0:
                    6c:bb:1f:d7:f3:68:62:15:4d:0c:f9:28:ed:0a:a3:
                    fb:30:92:48:e2:d4:de:8e:29:03:ab:b5:64:ee:9d:
                    86:77:e2:b7:39:85:3a:39:a4:fa:0c:a1:03:ee:3b:
                    dc:6c:f5:a9:1c:21:42:40:5c:6f:32:7e:ce:15:62:
                    ca:c7:da:3e:76:d0:4b:99:ea:4e:29:99:7c:12:65:
                    0b:3d:f3:31:c0:c6:13:c1:d7:90:81:35:7b:89:b8:
                    5b:2d:34:ab:35:11:59:63:1c:37:c3:f4:64:5a:a7:
                    ec:8c:2c:d1:ca:cd:98:9d:f8:42:7d:68:28:60:e7:
                    a0:54:aa:63:b3:b7:b6:2f:9b:4a:f4:d0:de:8d:9d:
                    e8:7e:0a:b4:24:9d:fc:60:ab:e5:81:d7:1f:92:79:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AF:2B:92:41:63:74:B3:75:65:3C:FA:52:D7:14:58:DE:3C:0F:A9
            X509v3 Authority Key Identifier:
                keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:90:a7:71:49:6e:c3:00:f3:92:de:26:ca:52:99:b4:df:98:
         41:3b:f4:84:b5:b8:09:b0:f8:e4:4d:b2:66:51:04:b0:0e:c7:
         e8:1d:cc:42:15:e6:d1:ee:e8:30:f3:8f:5a:94:6b:43:7c:1e:
         f9:a2:90:9f:57:87:72:f9:ed:5d:71:53:28:e8:de:23:59:3f:
         6d:f9:6d:86:16:32:49:98:57:1c:b4:b2:99:cc:7c:4a:5e:47:
         53:73:b9:82:9e:b8:b1:1b:06:64:ed:38:44:28:0e:57:cd:35:
         2f:1a:b5:8a:da:30:cf:e9:9c:b6:4e:65:3c:18:90:08:23:dc:
         7e:ca:3e:37:94:4c:0f:c8:42:23:c7:13:87:01:ce:24:08:42:
         3f:1e:94:51:b8:6b:a5:0d:8e:aa:3a:d4:ba:ca:d1:7f:06:ff:
         ed:39:63:60:28:7e:f3:dd:9c:02:58:0b:4f:da:03:25:10:cd:
         1a:dd:90:0c:9b:85:08:92:e1:2a:d5:97:1d:73:0b:08:57:d5:
         9d:c4:8b:6c:31:40:f2:1c:4e:15:1a:0d:7a:ab:22:97:af:79:
         03:f8:bc:d0:32:fc:41:52:4e:3e:31:20:94:28:ef:ec:56:6a:
         88:e7:be:57:06:52:03:a2:0e:8d:ba:13:5a:a7:a9:b1:04:da:
         25:1d:e3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:27:25 2026 by rpki-client