Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
File:                     7WUYxCbPxAgvuS7HQNfDx4glVjs.mft (raw, json)
Hash identifier:          UgmLHiueHow6eKJeS9UmM6/nCyn+LqM3ucAEnkTIE9Q=
Subject key identifier:   37:9A:51:3D:53:AE:4A:2E:57:93:FE:76:AE:BF:14:2C:EA:D5:0A:CE
Authority key identifier: ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
Certificate issuer:       /CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Certificate serial:       01A0C6334E7B423DAE3C4565C7AB57C4F880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
Manifest number:          0EBA
Signing time:             Mon 21 Sep 2026 23:00:46 +0000
Manifest this update:     Mon 21 Sep 2026 23:00:46 +0000
Manifest next update:     Tue 22 Sep 2026 23:00:46 +0000
Files and hashes:         1: 7WUYxCbPxAgvuS7HQNfDx4glVjs.crl (hash: uQ7w/iBv5b1owOOovxwe/LNBgZ1xZoYod0Vy5hAyEzY=)
                          2: Q9-NRTuMMnqARHq49_Cuxnzrpl4.roa (hash: NRZTfCUYWGj35ekHkCYEsq0YVn/edvt5CYrvQlwekLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:33:4e:7b:42:3d:ae:3c:45:65:c7:ab:57:c4:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
        Validity
            Not Before: Sep 21 23:00:46 2026 GMT
            Not After : Sep 22 23:00:46 2026 GMT
        Subject: CN=379a513d53ae4a2e5793fe76aebf142cead50ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:57:57:74:57:a1:78:d5:46:f8:c3:84:62:5b:
                    11:24:b9:c7:46:05:0b:91:3e:ac:4d:e1:08:1e:02:
                    9c:0f:b3:16:af:dc:f4:a4:95:ae:db:84:03:bb:c5:
                    32:fb:96:cf:8c:d5:36:d1:0c:46:1e:23:12:9e:56:
                    96:3a:10:90:75:89:a7:4e:dc:12:30:b8:b7:c1:44:
                    da:33:54:a2:5d:9e:3d:54:ad:8b:e5:b5:59:10:17:
                    95:de:ea:0a:a4:d1:eb:04:e0:46:be:2a:4f:61:dd:
                    93:51:a8:ee:3b:bc:c2:61:d7:be:c0:8d:cc:e2:60:
                    54:87:fa:01:6d:10:79:9f:3a:0a:02:73:28:07:5c:
                    fc:08:54:4d:42:1a:3e:55:88:76:76:09:6d:d3:6d:
                    58:5a:4e:0c:a0:50:20:44:4b:12:96:34:de:ff:78:
                    de:06:87:51:a2:46:a3:f5:be:dc:92:11:ee:62:48:
                    f3:0e:a1:03:f0:92:f2:1f:3a:12:6e:c3:be:06:a0:
                    1b:fd:44:dc:d8:4f:10:e9:43:a5:00:72:11:43:5c:
                    5f:5a:9f:cf:84:3f:3e:24:a3:30:9c:57:69:4e:dc:
                    ff:6c:42:59:30:07:54:1c:a7:49:79:8d:a3:59:b9:
                    3c:04:c6:5e:35:23:9a:4e:95:47:46:33:d2:16:9c:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9A:51:3D:53:AE:4A:2E:57:93:FE:76:AE:BF:14:2C:EA:D5:0A:CE
            X509v3 Authority Key Identifier:
                keyid:ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f9:8f:76:d9:f6:ca:70:2a:4e:35:6a:e7:9f:bd:bc:17:04:
         20:c4:e2:49:67:10:63:7f:d5:27:14:81:13:21:11:0d:e4:ee:
         14:bd:57:38:4a:85:92:78:09:be:85:53:aa:01:0d:b5:97:7d:
         78:c5:43:16:31:84:87:67:b4:00:3e:68:8d:b9:db:99:32:7c:
         85:26:d9:7b:59:d8:8b:20:17:25:2e:db:9b:1e:58:70:c3:4a:
         5b:58:73:3c:3b:5b:e0:b9:98:07:c7:8d:10:3a:56:6e:c7:a8:
         6f:6f:4c:0b:cf:4e:6b:85:7f:1d:f9:c5:e9:fc:a4:87:9a:86:
         72:2d:42:c9:43:29:c6:b3:18:8b:f4:eb:95:fa:4a:75:ac:43:
         87:29:b6:67:8a:c5:c0:73:4e:2a:e2:d6:8c:2c:d6:9b:82:4f:
         94:59:38:e2:48:c5:e7:20:4f:23:8d:c9:90:a4:f3:e4:dd:d5:
         b3:03:e3:fb:72:9a:2f:43:88:a7:69:f6:23:f8:f2:2a:e3:28:
         40:01:d3:61:21:4a:39:f4:ed:47:da:87:ca:7f:84:fe:dd:09:
         4f:e0:f2:e1:46:fa:c3:df:5a:96:96:54:42:ab:77:b9:78:32:
         37:85:c3:bb:7b:dd:ac:1b:9d:fe:8d:9b:20:7a:60:1b:a7:5e:
         22:ba:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:56:04 2026 by rpki-client