Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File:                     7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier:          Mk6KLdFRpMMRp5ASr0A6uW/l03OsvqBpww1UPQ8058Y=
Subject key identifier:   C0:E3:23:66:A5:6F:AA:60:D1:E4:BD:DB:DC:39:67:ED:34:F8:C7:DB
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer:       /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial:       01A0C2FBB237134E62B001FBDC6078BC0C3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number:          1A65
Signing time:             Mon 21 Sep 2026 08:01:10 +0000
Manifest this update:     Mon 21 Sep 2026 08:01:10 +0000
Manifest next update:     Tue 22 Sep 2026 08:01:10 +0000
Files and hashes:         1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: Fqk98sk3Mrb2uorpWjwNH3Gigicyipx3fkpy0vQGAuU=)
                          2: jI0W3FXepCGwUQYooUrSqFApgnI.roa (hash: ywNZ9Hr6Ek5jRSdgINiD2gJAFEBiWAjLS61c7FwJ6mA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:b2:37:13:4e:62:b0:01:fb:dc:60:78:bc:0c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
        Validity
            Not Before: Sep 21 08:01:10 2026 GMT
            Not After : Sep 22 08:01:10 2026 GMT
        Subject: CN=c0e32366a56faa60d1e4bddbdc3967ed34f8c7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:a2:83:cd:c8:23:ca:aa:54:45:38:af:be:
                    8c:63:a4:97:db:99:73:0e:47:f9:94:85:e8:24:17:
                    b1:41:e8:05:3a:0b:17:fe:f1:d0:58:1d:54:66:1b:
                    b1:43:7e:8c:e3:5b:55:26:6f:2c:d7:8e:5c:68:f2:
                    1e:ef:28:5a:ba:05:c6:53:55:bd:8d:f6:e1:aa:64:
                    ec:75:92:13:9c:df:c1:85:64:9d:54:46:1d:14:42:
                    21:9b:4a:29:ad:c2:8e:9e:43:fc:87:dd:27:53:3c:
                    6b:b4:f4:1b:e4:ab:c2:dc:40:6c:95:9b:d1:61:46:
                    ff:25:c7:87:f2:d6:23:f2:68:8b:07:06:25:d3:0b:
                    e6:13:98:aa:e1:51:2c:d5:db:46:c4:57:32:34:59:
                    92:1c:7b:7c:a7:14:2f:6b:a3:69:5b:c5:06:ca:21:
                    07:7c:49:4f:a6:fb:c1:4e:ba:c0:cd:c5:08:29:09:
                    a5:9f:ae:a1:c1:dd:a9:dc:17:c3:25:2d:f1:94:df:
                    28:8e:d9:93:d6:a5:e3:40:65:a6:73:b8:40:bb:ce:
                    4e:39:a0:97:0a:75:48:86:5a:f4:88:4d:6e:a0:0b:
                    ad:b7:78:fe:75:84:1c:18:2d:e3:a8:72:5d:df:e8:
                    1e:38:17:6a:11:bb:0a:75:46:61:59:e2:1f:dd:57:
                    72:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E3:23:66:A5:6F:AA:60:D1:E4:BD:DB:DC:39:67:ED:34:F8:C7:DB
            X509v3 Authority Key Identifier:
                keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:8a:7e:1f:0e:69:0d:a5:80:fd:f8:3b:bb:a7:a9:c4:1a:cf:
         92:02:73:f7:5c:cc:a2:c9:4f:44:5a:3a:e2:6c:64:47:a4:0e:
         ff:37:b7:26:eb:36:19:da:29:68:9d:cd:a6:45:1f:a5:9d:6b:
         c0:53:3a:63:fd:ed:68:e4:9d:37:f1:0e:b9:dc:25:bc:09:96:
         00:b6:ee:75:c7:1e:6a:88:69:6b:fd:35:b1:7e:69:40:6e:0b:
         7d:1f:29:f6:64:57:6c:7a:db:90:eb:91:e6:4c:bc:ce:cf:b6:
         0e:14:08:85:aa:63:d9:0b:bd:54:6d:19:1a:f1:6b:90:3a:f5:
         12:aa:39:07:4e:56:82:7d:eb:09:0b:9f:d0:ca:ba:d8:03:f5:
         f7:92:e9:ed:35:bd:86:b6:d3:a4:46:33:cc:83:52:dd:5c:ab:
         1a:d1:c0:76:75:71:0a:ba:56:de:3f:39:1c:fb:a6:64:ad:73:
         d5:10:5d:66:75:51:28:1b:29:9f:1f:6b:f6:98:78:ba:74:28:
         a2:e4:98:c7:eb:30:05:f0:61:d0:3e:9c:6c:c5:6c:26:53:27:
         17:9d:8d:79:f4:4e:36:f4:e6:8c:9b:8e:a1:f6:89:c3:55:16:
         e1:2b:82:ac:05:1c:21:8c:7d:43:9e:51:87:0c:aa:ce:82:77:
         c0:02:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:12:47 2026 by rpki-client