Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
File:                     JQQakk7oOTLBjogOQerd-nzyy7M.mft (raw, json)
Hash identifier:          e6E5Np80SZHywxVTgJgsgYTKgfHGrTxUyg47sxUHExE=
Subject key identifier:   FE:FA:7D:F5:4C:69:55:49:8C:E3:19:77:BE:2B:BB:DB:AD:39:74:C4
Authority key identifier: 25:04:1A:92:4E:E8:39:32:C1:8E:88:0E:41:EA:DD:FA:7C:F2:CB:B3
Certificate issuer:       /CN=25041a924ee83932c18e880e41eaddfa7cf2cbb3
Certificate serial:       01A0016EFD396E87E4295AD5356254DAAC21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
Manifest number:          7A
Signing time:             Fri 14 Aug 2026 18:00:45 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:45 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:45 +0000
Files and hashes:         1: JQQakk7oOTLBjogOQerd-nzyy7M.crl (hash: W4dv1aRHT1rsCp/pSkUL1Fx1xBeLG5FVtmqSHVg1KPg=)
                          2: gqBVZEVuiZ-zx9jxMYipRTJwia4.roa (hash: j0pbo/Vqg06cGHRaMHKMNgMf3A2mm2wCn/7xVagvqms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6e:fd:39:6e:87:e4:29:5a:d5:35:62:54:da:ac:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25041a924ee83932c18e880e41eaddfa7cf2cbb3
        Validity
            Not Before: Aug 14 18:00:45 2026 GMT
            Not After : Aug 15 18:00:45 2026 GMT
        Subject: CN=fefa7df54c6955498ce31977be2bbbdbad3974c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:3d:f3:f6:78:75:bb:58:b4:9f:20:d9:49:
                    c5:a1:db:07:74:cf:8b:3b:cc:fe:f8:7a:fb:c7:4f:
                    63:55:a9:40:a4:be:e6:76:75:6c:94:4c:3d:d4:6d:
                    44:a8:d9:32:92:21:6d:23:15:10:19:9f:eb:f7:b2:
                    9d:0b:9f:89:64:8d:e6:e6:b7:e9:a4:3e:64:5d:db:
                    78:e7:84:72:22:2b:34:0e:cd:82:a3:31:75:ab:8f:
                    b0:7d:f2:a1:98:d5:a2:e1:6f:de:26:df:69:56:6c:
                    e5:97:ea:87:ff:23:d8:75:f2:9a:64:ce:ac:22:04:
                    8c:34:50:bb:08:1d:0a:fd:37:a1:30:38:0b:dc:4d:
                    60:10:eb:73:51:e0:72:89:0b:24:a4:5e:98:24:a6:
                    03:49:64:23:67:9f:6b:d0:b8:b0:54:f8:5e:5e:1d:
                    08:6f:a2:e1:d7:2e:0d:de:ce:f8:bf:d1:53:a5:29:
                    a4:c7:ea:c6:0d:c5:30:bd:4c:f4:5a:f2:8c:7a:26:
                    a6:90:05:63:60:e0:88:ba:7d:03:b1:da:86:4c:5f:
                    9e:f9:f3:b7:ff:22:85:41:d8:5e:bf:92:02:49:b4:
                    f7:fa:92:49:2c:52:dd:a5:a3:f4:e5:8f:0d:c3:c1:
                    06:12:c7:64:73:cc:61:03:3f:6d:9a:59:e1:fb:6b:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FA:7D:F5:4C:69:55:49:8C:E3:19:77:BE:2B:BB:DB:AD:39:74:C4
            X509v3 Authority Key Identifier:
                keyid:25:04:1A:92:4E:E8:39:32:C1:8E:88:0E:41:EA:DD:FA:7C:F2:CB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:91:7d:3a:36:60:b3:e5:2c:7e:c9:6b:7a:a6:ce:5b:b3:20:
         40:9f:92:e9:b0:e0:8e:21:52:07:03:3d:75:5e:b7:d4:c0:52:
         c0:d7:5a:4f:1f:3d:00:63:19:05:e7:0c:01:0b:0a:3e:f5:fb:
         7c:45:91:36:95:4c:c7:a0:64:d4:17:1c:3c:51:0b:01:b9:00:
         67:5d:21:05:a6:01:71:e4:f9:2d:e2:b9:ef:8e:be:1f:5c:07:
         b8:89:ad:39:09:01:4d:46:51:bc:b2:67:c9:6b:32:0b:51:81:
         1b:88:6e:bd:39:27:0c:ef:46:34:cd:dc:66:4a:6e:07:c5:81:
         63:04:58:db:0d:cb:43:d7:ea:fd:bb:a8:e5:db:c6:3c:f9:23:
         83:8d:70:3f:63:66:92:eb:6d:8d:15:49:aa:cd:9f:a1:31:e5:
         f5:49:89:57:dd:4b:59:ba:27:ba:e2:d3:28:a9:bd:e5:98:52:
         e3:b1:71:a0:c8:60:02:7b:d1:fe:0b:d8:f6:e0:2d:ec:c9:78:
         c8:40:fc:5c:45:64:e2:5f:ae:ef:99:29:33:86:de:87:7a:31:
         0d:42:96:ad:9c:e8:93:2e:10:9d:32:f6:af:4d:07:80:02:12:
         40:29:19:df:a7:23:a3:0a:13:b9:ae:ce:cf:bf:fa:85:31:ef:
         e2:c4:42:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:06 2026 by rpki-client