Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
File:                     7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json)
Hash identifier:          8FTRI+5cyoT58f/nuUvJzkVCzYGQ13/26tsZo53lDDs=
Subject key identifier:   91:5A:CB:25:7F:73:09:A9:84:39:49:62:55:5B:96:FF:03:DC:09:83
Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
Certificate issuer:       /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Certificate serial:       019F189E29922093CFC3AAFB8DC0ACB2C433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
Manifest number:          085E
Signing time:             Tue 30 Jun 2026 13:00:46 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:46 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:46 +0000
Files and hashes:         1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: 6N/2v0RNuWsSPI4iqN7F8h8KFlvXN9zYvHNhmAf8unk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:29:92:20:93:cf:c3:aa:fb:8d:c0:ac:b2:c4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
        Validity
            Not Before: Jun 30 13:00:46 2026 GMT
            Not After : Jul  1 13:00:46 2026 GMT
        Subject: CN=915acb257f7309a984394962555b96ff03dc0983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:e9:60:1c:33:2e:fc:8b:3d:56:20:43:d6:
                    70:36:ca:a0:15:c7:a1:a7:b5:e5:8e:04:3d:5a:c5:
                    1c:ef:9b:ba:71:2c:e9:ba:90:77:e8:d2:8c:08:4e:
                    b7:1d:1a:40:ad:c7:9b:63:ac:2f:dc:fa:58:19:75:
                    89:69:84:fa:c4:60:b4:c6:37:3f:ad:a6:52:df:9c:
                    0a:5d:be:20:02:bb:f3:f2:18:2f:32:41:21:c0:68:
                    96:40:8f:19:8d:36:6c:f6:67:59:66:a0:74:77:82:
                    7b:bd:16:d5:49:9b:2b:08:55:6d:67:70:20:47:20:
                    7f:34:14:c8:d2:77:c4:16:09:03:7b:86:c2:f7:60:
                    2a:30:e2:8a:cb:60:21:d3:d0:53:c2:cf:15:4e:ea:
                    60:8a:4e:4b:28:c1:77:70:c3:ba:d1:e2:ac:42:ec:
                    f4:66:a0:bc:ab:e7:69:3f:7a:e5:2c:45:86:50:d9:
                    b5:a7:7b:f2:5c:d8:ff:ff:7b:7c:fa:17:1f:ac:73:
                    59:42:a8:5a:86:cd:96:01:e2:4c:a9:02:32:cb:13:
                    b6:29:fc:71:ef:89:ca:6a:b5:21:c2:88:2b:b8:4c:
                    8a:8f:a6:46:4f:65:70:15:90:4d:e4:ae:43:e7:32:
                    a1:a4:aa:5c:1a:09:7a:55:24:1c:ab:57:ae:f2:33:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5A:CB:25:7F:73:09:A9:84:39:49:62:55:5B:96:FF:03:DC:09:83
            X509v3 Authority Key Identifier:
                keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fc:60:1f:dc:77:06:69:db:0c:69:5d:ed:8f:af:55:41:e2:
         b2:33:7d:0e:ed:89:bc:b9:a1:52:0c:cf:5f:10:32:c3:b5:96:
         70:8f:be:c8:f2:3e:0c:22:74:30:b6:b8:d4:e3:c2:1d:fe:f4:
         d1:1a:e5:92:ea:75:d1:5c:92:5b:f1:30:ca:1c:5c:e8:6f:6f:
         aa:f1:45:cf:f0:20:84:ec:23:61:45:c5:9e:51:80:19:38:fb:
         b4:7d:f8:ed:e2:fe:a1:11:a1:4f:e7:90:43:5a:30:4d:1b:02:
         a0:ae:c9:09:3b:bb:fd:cd:d1:ac:cc:d9:0b:6b:b7:6b:f0:e9:
         18:e2:f6:2e:c7:d4:71:0a:ea:38:9d:da:1e:c0:7d:81:f9:6d:
         26:b8:07:6a:3b:d9:82:80:90:c8:5b:66:55:f4:48:75:c6:3b:
         58:80:c9:aa:fa:7b:d3:13:77:45:da:df:d0:cf:ed:1f:b6:3e:
         6f:00:3f:b1:5f:f4:d2:b5:25:b0:07:3a:68:0b:25:e7:fd:ad:
         76:e8:65:37:3d:4e:bb:8e:bf:18:e1:83:f4:09:1e:b4:08:5f:
         99:82:74:d3:28:1c:f4:2f:8f:3a:76:56:74:92:10:c1:0b:7d:
         0f:f4:b7:fd:da:5f:32:b9:a1:73:ac:07:d6:c4:62:2d:1b:92:
         d3:af:e5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:18:30 2026 by rpki-client