Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
File:                     7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json)
Hash identifier:          HPL3/7RdqwN99HtFfG2dV1K+rl4+k2YKx22qOUpdVD4=
Subject key identifier:   6D:4A:31:86:4B:70:8D:F3:10:CD:C0:FE:37:40:1A:8D:9E:CE:BE:A1
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Certificate issuer:       /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial:       01A0C4B2BE2C73ACDA435AD9487580E6E95D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
Manifest number:          1A68
Signing time:             Mon 21 Sep 2026 16:00:43 +0000
Manifest this update:     Mon 21 Sep 2026 16:00:43 +0000
Manifest next update:     Tue 22 Sep 2026 16:00:43 +0000
Files and hashes:         1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: +pQD/znRSQU1vciB7YntAWP887yFl12pRUwt/IFdfzE=)
                          2: Rrw9o3WCpwNOEYYVtK8wHu_QJkY.roa (hash: 6I0ghzBeN79J1UAgpVFm5cx7tXZBN44byXnGOpV99sA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:b2:be:2c:73:ac:da:43:5a:d9:48:75:80:e6:e9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
        Validity
            Not Before: Sep 21 16:00:43 2026 GMT
            Not After : Sep 22 16:00:43 2026 GMT
        Subject: CN=6d4a31864b708df310cdc0fe37401a8d9ecebea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c7:85:91:24:4f:ef:48:65:59:c8:1a:24:9b:
                    56:be:a1:7e:34:8f:15:22:a3:92:28:b5:03:ff:4b:
                    e5:92:f9:2f:e6:86:4e:55:a5:f5:af:d8:44:e1:ba:
                    54:dc:7b:94:ca:47:3b:30:c5:88:e0:0f:9b:f8:c3:
                    9c:5b:60:36:3d:cd:eb:9d:c5:bf:5d:26:d1:34:df:
                    70:ab:c9:c3:99:f8:85:7f:93:5b:d8:b1:df:49:28:
                    7a:82:97:a0:7f:f2:96:9a:50:02:88:29:40:97:a9:
                    f9:89:1e:4b:63:08:0b:1d:15:4b:dc:70:cc:69:f2:
                    97:21:85:07:af:5a:af:4e:42:22:ec:78:ad:33:3c:
                    83:20:27:b1:32:5b:02:91:fb:2a:92:75:0e:d1:50:
                    e3:a0:0a:f0:da:56:d7:cc:e5:d5:cf:84:10:b8:23:
                    7e:d7:17:07:67:44:ea:5b:ff:df:f6:c3:23:72:a4:
                    da:70:01:48:29:ca:35:a4:5e:8f:f9:6b:97:5e:64:
                    86:e8:64:27:c8:0d:cf:38:ae:ac:67:c6:df:0e:80:
                    9a:77:52:93:5b:80:b6:ad:25:a5:56:bf:20:e4:77:
                    a0:12:ee:9a:04:a3:b6:4f:0e:f7:ed:96:06:35:66:
                    29:0d:6b:c8:ce:20:bc:6e:b0:32:32:e3:cd:9d:75:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4A:31:86:4B:70:8D:F3:10:CD:C0:FE:37:40:1A:8D:9E:CE:BE:A1
            X509v3 Authority Key Identifier:
                keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d4:a4:35:a7:8c:35:e7:6a:95:03:30:61:a2:52:4d:9e:dc:
         6b:03:48:fe:a4:db:b2:1a:1b:ec:37:7f:be:50:02:8b:6d:ff:
         5b:f8:40:43:b9:06:c1:d2:d2:41:1f:87:c5:10:c8:4f:aa:4c:
         a5:48:4d:44:c5:d9:37:96:91:bf:9f:82:b8:bc:a1:4b:c1:4b:
         a9:72:62:76:b6:12:6f:8f:31:e5:26:19:e7:5c:b7:21:e7:6d:
         1d:95:66:72:f1:ec:48:2a:1b:02:8b:cb:1f:b1:1a:6e:8c:c3:
         2b:7d:e5:1e:70:09:da:77:29:09:71:97:ad:fa:b7:af:6a:99:
         2c:9d:dc:47:d3:a5:1c:98:dd:fc:4e:eb:b3:5f:c1:98:5e:cb:
         f7:ea:96:32:67:a9:45:9d:d3:6d:3f:60:a5:2e:0a:87:5f:49:
         2b:e2:b1:20:51:8a:53:44:42:76:f1:59:6f:53:ae:61:9e:06:
         61:7b:65:52:6e:d8:60:e4:fe:92:5a:45:0b:e8:d0:9b:cf:44:
         d8:7b:11:b6:97:22:51:ff:93:6b:4c:61:e5:ab:29:95:41:a0:
         db:06:9c:06:e8:6a:60:28:1d:23:3c:fe:48:79:b1:ee:0f:10:
         d2:2b:ee:7c:74:d0:c8:46:1b:a8:0a:9c:68:e8:4a:e6:de:db:
         ba:51:eb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:58:55 2026 by rpki-client