Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
File:                     7BZ7trBh__pindKoTM99tExxo1E.mft (raw, json)
Hash identifier:          unAN+4ykULndHlwOfIQKgKun8VhJPZlxUPrGKJx4tZ0=
Subject key identifier:   E2:1A:E3:BD:96:E2:66:F6:63:50:07:DB:94:0C:14:24:F6:64:62:7D
Authority key identifier: EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
Certificate issuer:       /CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Certificate serial:       01A0D315984A0EA5099D6A31A4B758C52C4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 11:03:22 +0000
Manifest this update:     Thu 24 Sep 2026 11:03:22 +0000
Manifest next update:     Fri 25 Sep 2026 11:03:22 +0000
Files and hashes:         1: 7BZ7trBh__pindKoTM99tExxo1E.crl (hash: LJvtEveibjECkUMG412Jd63cBLhKHqzYMD4n1jJRoBY=)
                          2: TE-zkB1WXTHRYrdiQgGmk6uSVdQ.roa (hash: eRgAHRTvSReUmr1Kc9vOCDCB9vNQ0s5lkzXZyGteC2Q=)
                          3: cE9z_vi7aIN7R1MRmejkUdogCNM.roa (hash: ErypDac6PMXFFeqxfqyYQBUhuGPwndIrMS3m77VeKJg=)
                          4: e9AyjlXwXBjeN_sQYf5sT7IZ60k.roa (hash: 5BeMkSTwe8lYH/6FFSl6JdJloHvDA2cuHQFyNcB8z8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:15:98:4a:0e:a5:09:9d:6a:31:a4:b7:58:c5:2c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
        Validity
            Not Before: Sep 24 11:03:22 2026 GMT
            Not After : Sep 25 11:03:22 2026 GMT
        Subject: CN=e21ae3bd96e266f6635007db940c1424f664627d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:ca:56:a0:65:0c:92:c6:95:0f:ba:cc:e3:
                    0d:98:a8:a8:92:40:74:92:e1:06:29:82:be:0e:ab:
                    9f:af:a9:60:33:18:63:f9:b0:84:25:44:8c:1b:ce:
                    57:d3:81:ba:c5:3b:12:cd:40:7d:56:48:7a:6e:5d:
                    9c:3f:43:8f:4a:90:88:99:35:fb:2a:26:b7:e3:14:
                    c9:f5:49:91:29:91:82:80:ac:9a:df:f1:1c:5b:88:
                    c3:57:11:19:a7:fe:b2:34:19:10:87:cf:6c:c5:75:
                    01:c1:30:04:a7:98:3c:98:40:15:52:21:1e:bc:5d:
                    ec:0a:94:33:5d:d7:c5:cc:d8:af:e5:84:2d:4d:24:
                    a5:f1:dc:d2:26:35:a4:ca:a3:e8:0d:5c:85:35:30:
                    d1:6e:ce:13:e4:66:38:ae:43:7b:6d:f8:35:32:32:
                    b7:fe:e2:4b:7e:ef:2e:95:0e:c0:50:c5:ae:c2:11:
                    ff:4e:77:fd:d7:d4:f2:fd:24:0b:47:a4:63:34:cd:
                    7b:65:9e:d0:b2:a1:72:fd:07:75:c4:de:10:46:25:
                    7e:9d:8f:b9:c6:cd:e1:14:e4:d1:8d:c6:39:ac:87:
                    8b:d5:fc:bc:70:2b:fd:82:fa:e4:6b:9d:6f:e8:74:
                    e5:33:3d:41:57:db:f1:06:e5:68:5c:e2:4e:81:9a:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1A:E3:BD:96:E2:66:F6:63:50:07:DB:94:0C:14:24:F6:64:62:7D
            X509v3 Authority Key Identifier:
                keyid:EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e7:b8:dd:ed:81:f1:bb:af:29:1c:3d:44:d0:51:b4:08:4b:
         61:37:8a:a5:2c:cd:39:e6:7f:db:17:3a:10:0b:e9:73:2f:c2:
         dc:83:f4:c0:78:ef:8f:a2:ef:b5:0c:80:2d:72:8c:f8:aa:1c:
         c2:70:0f:3d:19:f7:c6:21:26:02:f3:ca:ca:93:9d:b7:41:01:
         48:17:ff:6c:cc:14:dd:33:8c:d5:6d:ed:32:9d:b6:08:77:a3:
         fe:a6:49:8a:67:a0:9f:b1:07:5e:83:ab:23:e4:9c:41:3b:9e:
         30:15:a3:57:7a:e3:eb:cc:80:96:21:36:4e:e3:fd:c4:bd:7f:
         c3:8e:71:17:fa:bf:c7:cb:05:31:c1:6c:d9:7e:e2:37:10:07:
         89:c7:9a:0f:34:20:1c:3e:8d:b8:04:68:dc:09:3c:8c:b7:d3:
         f0:8c:78:98:f9:27:07:7d:e5:46:8e:e0:07:20:49:05:1f:0d:
         3b:c3:83:99:62:a5:5b:0d:7b:3a:c1:df:1c:8d:53:a7:5d:9a:
         73:59:59:29:29:a5:17:a4:08:86:e3:93:44:02:a2:4b:0a:17:
         b7:ee:6c:04:f9:d4:55:ba:44:b0:97:c9:80:39:51:64:6b:ad:
         40:fd:76:7c:c9:fe:ee:c4:18:4c:c9:63:01:ee:ae:16:3d:c2:
         de:0a:ee:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:22:08 2026 by rpki-client