Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
File:                     7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft (raw, json)
Hash identifier:          fcUJjw358ApshM/axjcGRbPP7jufPYCfpHtjE9EpokU=
Subject key identifier:   06:F5:9C:14:81:92:B3:09:54:9F:1D:48:33:DF:53:32:B6:6A:20:11
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Certificate issuer:       /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial:       01A0C8FD80213C8CD25BBD87CDA85095CC39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
Manifest number:          0A86
Signing time:             Tue 22 Sep 2026 12:00:51 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:51 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:51 +0000
Files and hashes:         1: 0rJSCVJcNuE9Gj8yeKqLbu6nlbs.roa (hash: YC/UAX15SVftaglV+VnY5RgZVX1KqqrfW0tsy2D1Wa0=)
                          2: 7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl (hash: gCFkKtObLA9NtQafOPbow3vQOQC15on+Ql7A+Ptk8JQ=)
                          3: Qhj-dAw4UmH14cGcWPixT30vFoE.roa (hash: JjCn/CEVqHRrx5g3GCN0ImneG9z/AYQZMRc57RLWwA8=)
                          4: eDlvHgRtKsU4i-jNtF947Zs0OH8.roa (hash: O24cI9pKOeR6BhzhlKYvgEN2vTJ+LKMhalZO6Gb3Tb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:80:21:3c:8c:d2:5b:bd:87:cd:a8:50:95:cc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
        Validity
            Not Before: Sep 22 12:00:51 2026 GMT
            Not After : Sep 23 12:00:51 2026 GMT
        Subject: CN=06f59c148192b309549f1d4833df5332b66a2011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:5e:49:9d:3e:e8:63:01:48:cf:b9:c2:5d:
                    80:4e:b8:31:81:d6:6e:d1:43:8a:ec:15:52:4c:4b:
                    08:b6:44:76:90:70:d9:65:27:08:dc:22:f4:ba:39:
                    c9:91:23:44:8c:3e:0c:d4:c7:bd:6b:4f:70:78:8b:
                    98:a0:01:6c:06:06:6c:b3:2b:08:b3:68:47:f5:f7:
                    77:22:ff:1c:46:5f:00:ea:97:4d:a9:72:9c:81:f0:
                    4d:ab:30:4d:ab:4a:7c:2e:18:cb:bb:f0:24:3d:c4:
                    2e:9b:d5:40:c5:a7:7e:9b:bb:70:e9:17:49:45:a4:
                    f8:c2:af:0d:3f:97:07:f6:c4:ab:32:a7:02:0c:a9:
                    c7:5a:d5:c2:44:5e:18:34:e2:4f:7b:06:fb:54:95:
                    13:2a:67:84:07:1d:b6:2c:c7:d3:46:df:63:64:de:
                    9f:68:58:bd:d7:b9:ff:a8:47:03:80:1d:89:17:86:
                    30:d1:44:69:0a:da:4a:75:49:60:ed:b2:16:29:14:
                    19:76:5e:6c:cb:22:a3:77:37:83:83:41:9d:0c:fe:
                    fd:45:9d:17:23:f2:ed:c7:26:08:1e:8a:8a:a1:6a:
                    99:89:ef:86:c5:68:7c:c2:a3:5d:e1:53:2f:1e:79:
                    c7:2b:c2:67:d0:ea:34:fd:cf:c8:ff:74:df:33:86:
                    10:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F5:9C:14:81:92:B3:09:54:9F:1D:48:33:DF:53:32:B6:6A:20:11
            X509v3 Authority Key Identifier:
                keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:00:42:a0:a2:f1:04:8e:61:32:60:a2:30:40:c5:a3:50:64:
         de:2e:fc:3b:59:f8:9e:b6:bd:46:44:77:f9:fd:a3:df:ee:99:
         a1:4b:f5:5e:da:83:0c:24:10:2f:b5:50:c7:16:4e:5a:d5:52:
         48:dc:9a:e9:ae:3b:89:4f:c0:bf:ae:e1:2a:63:9a:fe:8d:13:
         91:7e:49:8f:c1:3e:06:a0:45:b1:bd:8d:4a:a7:12:be:3e:a3:
         9f:e0:70:14:92:d1:3e:da:3e:77:9e:b2:7c:97:a7:d8:4d:db:
         6a:e1:2c:0d:d2:29:0a:f0:e1:b3:02:fa:a6:41:5b:63:aa:5c:
         4d:e3:4c:55:00:e1:38:43:6f:37:08:ab:d8:99:0c:6e:f7:49:
         ec:cb:96:b7:01:0f:67:45:8d:3c:25:f5:29:6c:4a:36:80:f9:
         7e:f8:dc:85:cb:19:32:ae:36:ca:18:ab:3b:c5:7a:c4:dd:d6:
         a3:5a:5a:27:5a:dc:65:f6:ea:33:ff:d7:77:9c:6c:3d:30:06:
         5e:8d:19:ee:67:87:04:fe:e7:f8:d4:18:68:3e:43:ad:6c:c5:
         1c:bd:e9:ed:24:9b:14:16:0f:04:80:73:67:e9:19:88:55:8c:
         3c:a8:fa:8b:bd:f4:62:a1:78:b1:3d:b6:d7:b3:ab:ba:3f:73:
         19:ec:e1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:01:27 2026 by rpki-client