Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File:                     7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier:          2QsuG5tA+sCQG6m4Ac30kM3K5Jml1VHCV3+/Hy9sggQ=
Subject key identifier:   1E:A5:45:E0:CB:A1:2C:EC:B4:C1:98:0E:0C:4E:34:BD:FC:2C:FA:EB
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer:       /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial:       01A0C5FCBD6586C9EA36D8D560DB9B0D7D7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number:          142E
Signing time:             Mon 21 Sep 2026 22:01:09 +0000
Manifest this update:     Mon 21 Sep 2026 22:01:09 +0000
Manifest next update:     Tue 22 Sep 2026 22:01:09 +0000
Files and hashes:         1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: HgIs7nG4CLUYsDwfaFZ3rXjanBLljXSy5FlUvOBBNLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:fc:bd:65:86:c9:ea:36:d8:d5:60:db:9b:0d:7d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
        Validity
            Not Before: Sep 21 22:01:09 2026 GMT
            Not After : Sep 22 22:01:09 2026 GMT
        Subject: CN=1ea545e0cba12cecb4c1980e0c4e34bdfc2cfaeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:73:ff:70:7e:d8:f0:59:aa:16:65:20:9c:53:
                    27:76:bc:46:56:b5:c8:a4:89:cc:30:0a:6b:ff:b1:
                    fb:0c:61:c7:91:fd:9a:1a:e4:0c:eb:97:41:79:8b:
                    74:85:a7:96:3f:ab:07:ca:0b:da:53:55:2b:55:71:
                    59:74:4c:70:16:48:4f:9b:9f:81:0b:da:aa:4d:0e:
                    35:86:58:92:3b:76:cb:17:4e:cc:70:a3:09:93:63:
                    c2:1f:da:0d:5f:9a:a0:f5:f8:5e:59:c1:b8:b4:e7:
                    09:e6:53:d0:40:41:bb:79:02:f9:6c:69:35:07:1a:
                    07:30:48:1b:3c:7d:22:ae:83:32:52:df:a6:f4:06:
                    47:c7:6e:c1:fd:51:a8:cf:8b:ae:a0:53:4b:ed:c3:
                    0f:1b:1d:2c:a1:d3:d6:ab:ce:7b:9e:e9:cb:07:43:
                    a9:c6:4c:54:7f:23:ac:9f:48:9e:70:01:6a:a6:75:
                    6a:b3:6f:8a:a0:00:18:2b:b1:69:eb:fa:14:da:98:
                    5e:08:80:e5:1f:0c:26:e5:a9:a8:27:8f:0b:06:c0:
                    e7:0e:25:4d:a9:5d:77:e6:5a:12:dd:a2:8f:91:f0:
                    87:67:3c:f2:b2:9b:56:bc:fb:ec:4e:4a:9e:08:95:
                    56:ab:25:d5:b3:6a:35:d0:cf:1a:7d:dc:ac:92:3a:
                    df:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A5:45:E0:CB:A1:2C:EC:B4:C1:98:0E:0C:4E:34:BD:FC:2C:FA:EB
            X509v3 Authority Key Identifier:
                keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:27:38:09:bc:9a:2a:37:b2:51:39:84:71:e9:25:95:0b:dc:
         3a:3e:a0:e7:d5:4e:32:14:9b:63:66:93:eb:8a:36:b3:24:3f:
         71:16:d8:19:5b:55:42:7c:07:9d:3f:4c:e0:86:30:3b:86:1c:
         f0:b0:f5:e5:64:29:75:dc:80:56:de:20:9e:89:8a:3c:ca:72:
         0e:c5:e7:a2:79:4b:1c:67:4c:46:b4:51:33:ff:fa:06:8b:7e:
         4f:f2:04:fe:9f:f5:3e:e4:09:9d:27:09:0d:f9:5c:ac:70:d6:
         cf:04:ca:ab:fe:1e:af:98:d6:05:43:13:17:e3:e9:36:0b:f5:
         6f:43:1e:94:d0:7d:7d:e0:26:5c:ce:03:df:bb:a2:27:cb:61:
         86:76:aa:c0:ae:dd:a4:8b:fc:3b:6e:da:93:b9:f0:9b:43:ca:
         2a:bc:e2:75:71:33:f3:38:3e:05:30:92:46:eb:dc:d5:96:2f:
         14:3e:97:44:26:e1:a7:f0:cf:14:78:83:ad:ff:0b:e6:34:b6:
         b3:54:78:2c:c2:03:1e:70:c6:d4:41:ef:c8:a2:f9:80:6a:06:
         40:00:a5:bd:ee:b1:c2:46:d8:2e:e1:f7:a2:51:f5:60:2d:c3:
         82:49:3c:bf:34:b5:49:20:f9:a5:29:39:01:b6:5a:e1:e2:2f:
         61:f8:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:26:31 2026 by rpki-client