Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File:                     7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier:          G27rWbHSHrXnh1ojsemUXWsQbZlmFJDSzJ2zWWwkX6E=
Subject key identifier:   04:DC:78:48:2D:FC:00:7C:A9:0E:6E:83:45:E6:B9:4E:11:D1:3D:E3
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer:       /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial:       01A001DD9ED4EB40B3500CC3913187318521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number:          07BF
Signing time:             Fri 14 Aug 2026 20:01:36 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:36 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:36 +0000
Files and hashes:         1: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: 3yzfFSM8Q9T/LJYagVqTLu0v9CeEfB7lzbR8jFaIZck=)
                          2: DBz0WhaRA9wNrK9K1etEW30ajBM.roa (hash: TIvrus04yBKxsgpsBLzS8XeHM34FR+aAzVV81lSqNzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:9e:d4:eb:40:b3:50:0c:c3:91:31:87:31:85:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
        Validity
            Not Before: Aug 14 20:01:36 2026 GMT
            Not After : Aug 15 20:01:36 2026 GMT
        Subject: CN=04dc78482dfc007ca90e6e8345e6b94e11d13de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:22:85:fe:d3:ed:71:e8:b1:8e:8e:30:c7:25:
                    4e:16:55:cf:bf:06:7b:38:46:51:f3:f5:f3:1c:cd:
                    0c:c1:91:fe:45:07:b7:a3:04:08:ac:ff:8a:a2:43:
                    b7:6f:18:7b:69:f4:11:83:90:4f:e7:1b:44:fe:23:
                    47:88:1a:e6:63:8d:61:6b:f2:49:a8:a4:82:e3:20:
                    f6:fc:30:6a:4a:53:12:af:72:c1:45:07:8a:fb:de:
                    41:f6:06:d5:a9:3c:06:d5:fe:c0:41:48:9c:35:b3:
                    b6:7e:78:9c:cf:fa:a1:37:88:63:90:a3:cd:71:d7:
                    3a:7e:f8:6c:ba:97:32:79:92:c6:eb:48:34:53:60:
                    19:92:e0:c3:45:f0:4d:41:5c:6c:40:38:95:83:07:
                    98:4b:1d:83:99:8e:7e:fa:06:ff:5d:41:a8:de:84:
                    94:97:1d:36:58:de:6c:92:fb:ce:02:e9:d3:b4:3c:
                    7b:e1:06:cb:9e:b7:c3:1d:60:71:5d:77:84:2c:ad:
                    f3:e6:58:2f:2f:63:9c:82:ba:4d:20:24:92:27:08:
                    5c:30:1c:8b:97:84:71:4c:d4:1e:f3:0b:7c:47:99:
                    bd:2b:e2:13:46:0d:39:29:9b:e8:00:24:a2:70:7c:
                    60:97:d4:14:90:81:6b:26:16:af:46:c1:64:d9:1f:
                    80:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DC:78:48:2D:FC:00:7C:A9:0E:6E:83:45:E6:B9:4E:11:D1:3D:E3
            X509v3 Authority Key Identifier:
                keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:de:d7:69:75:0c:c4:fc:e7:8d:80:7b:01:17:7d:51:25:6f:
         c6:4a:8b:1a:a2:b9:a1:c0:54:a1:49:22:ba:e2:2d:0d:9b:2b:
         29:2a:1c:38:46:8b:48:16:8c:cd:25:a2:bf:6a:e0:43:31:eb:
         89:a7:66:9c:c7:a5:c2:48:8a:93:3c:e5:f2:a5:87:a2:47:0f:
         57:2c:80:c0:2f:27:8e:e4:64:d5:ee:94:35:57:70:63:f1:4f:
         11:41:88:24:f9:c6:bb:c1:5f:64:f4:b8:a5:48:15:57:f5:db:
         47:e1:af:3c:be:ae:77:13:2a:03:4b:70:ce:11:82:45:b9:c5:
         03:c9:48:dc:94:1c:6e:4b:90:d2:31:77:16:17:9f:eb:25:9a:
         c6:0f:2e:31:15:e0:c4:6d:e1:4c:a3:c6:6e:99:63:88:c4:d7:
         2d:d0:08:10:60:fb:de:ba:9f:7d:df:68:fa:e6:9b:5a:d1:9c:
         8f:62:82:6f:f3:17:0c:d4:3a:8c:ba:30:0b:19:06:33:0c:63:
         90:c2:b8:17:cb:b0:bc:49:6b:64:06:84:c2:01:75:99:43:eb:
         26:15:3e:20:2f:e4:e3:e4:b2:54:42:52:90:1f:e7:6c:e8:12:
         96:93:80:50:6f:9f:f8:fd:40:0f:95:86:c7:4c:3e:14:f6:5e:
         62:b0:85:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:26 2026 by rpki-client