Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File:                     7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier:          0CUcI2gEwscnYpqqOO4FjE8nE19Rfde7BKdurdQ5Psc=
Subject key identifier:   F4:B8:B4:34:4C:D5:B7:58:92:CF:F7:E0:3A:BC:52:DA:8A:7F:10:FC
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer:       /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial:       01A001DD846A8521A02F40744D8BBF1E362D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number:          10E0
Signing time:             Fri 14 Aug 2026 20:01:29 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:29 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:29 +0000
Files and hashes:         1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: PuQP+6nEDGNQruT/NoyzCK2UQbHlu5pCUBp5XRzTgww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:84:6a:85:21:a0:2f:40:74:4d:8b:bf:1e:36:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
        Validity
            Not Before: Aug 14 20:01:29 2026 GMT
            Not After : Aug 15 20:01:29 2026 GMT
        Subject: CN=f4b8b4344cd5b75892cff7e03abc52da8a7f10fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:c0:2b:8d:7d:1d:7b:71:a3:61:6d:ee:85:
                    5a:c9:b2:10:a3:d4:47:79:f9:13:23:e1:7a:01:f0:
                    1f:37:cc:2c:67:57:08:62:f8:f4:95:7d:30:72:84:
                    bd:1e:a8:be:85:f8:52:31:a6:4f:ba:ba:de:4b:91:
                    24:78:5d:e6:e0:97:d1:d9:49:a8:e1:9e:17:36:03:
                    62:43:a6:a1:b8:a8:03:ff:3f:14:38:b3:54:7f:61:
                    2d:61:80:7e:20:c4:00:93:d9:4f:ec:54:a6:0f:bd:
                    ae:7b:5b:58:e9:3e:0e:be:c4:03:90:14:7a:d9:fc:
                    9b:bc:91:31:e5:57:a3:b6:e4:a4:62:51:b7:f7:74:
                    17:bc:b1:f4:f1:2e:83:7f:28:78:5a:d5:4b:37:e4:
                    61:9b:da:a1:ca:bd:53:b9:e3:95:ec:7b:3e:43:e2:
                    e4:77:4d:05:46:00:f9:84:b1:a8:cb:fd:1a:76:d7:
                    73:dc:0c:0b:e8:62:5f:b4:5c:a8:fd:03:77:2f:e5:
                    41:e5:f9:00:c0:67:b6:f3:2a:84:7c:4f:80:f2:fe:
                    7a:67:c9:5c:b0:7d:9e:0e:0d:4c:ce:78:d1:c4:be:
                    b5:d0:ad:7d:b1:29:70:e5:83:b8:ea:06:37:52:3a:
                    a3:24:70:39:d5:27:5b:e9:a3:2b:25:52:e8:3e:c0:
                    d8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B8:B4:34:4C:D5:B7:58:92:CF:F7:E0:3A:BC:52:DA:8A:7F:10:FC
            X509v3 Authority Key Identifier:
                keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cb:fc:71:0e:6c:df:29:3f:21:57:c2:15:7d:2d:d0:47:80:
         95:fe:e6:5b:9f:ec:6b:37:2b:2a:23:f8:10:14:fa:2f:78:14:
         30:25:34:01:03:b6:65:e3:d3:6a:95:9a:97:3f:b1:52:ad:e7:
         35:9b:b1:2d:2e:69:59:58:26:14:5c:2e:0b:f4:54:f5:81:1a:
         5e:b9:1c:e1:fb:69:d3:13:ef:6c:50:89:fb:38:36:b0:54:3b:
         3a:db:45:d6:29:f6:d0:bc:7d:71:d6:df:12:88:66:ff:09:0c:
         ec:6a:f0:1d:f7:bb:82:b3:bf:a1:88:95:43:c6:1e:66:0a:eb:
         33:fd:42:9f:5f:80:f3:54:eb:16:09:1d:70:a8:18:02:cb:55:
         8c:41:a9:05:52:b9:bf:e8:54:dc:a1:b8:4b:61:ac:53:85:15:
         25:e3:a5:dc:26:4d:df:e7:90:7e:6e:32:68:12:74:c8:49:ae:
         dd:be:2b:74:bf:c6:a2:fb:a3:a9:e9:6b:d0:83:c2:a1:4b:c4:
         9d:c5:23:3c:77:2f:78:18:fd:b8:74:19:55:82:b0:60:f5:8f:
         20:a2:bc:aa:b0:c7:be:4d:df:a1:91:f6:50:bf:34:e2:aa:a2:
         dd:d0:86:29:a1:b2:a7:00:69:6a:ea:4d:b9:9b:09:a4:ce:b0:
         5f:38:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:14 2026 by rpki-client