Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.mft
File:                     7D6JWnysF_dfnXXvbjhhTDLWnlU.mft (raw, json)
Hash identifier:          lImzY2FYwMeU94alZhJ3Tarz0gjR0G2B9GhQt/dVVL0=
Subject key identifier:   F0:04:06:AC:92:B0:B7:D7:12:60:0B:FA:44:45:8D:1F:B9:04:37:CE
Authority key identifier: EC:3E:89:5A:7C:AC:17:F7:5F:9D:75:EF:6E:38:61:4C:32:D6:9E:55
Certificate issuer:       /CN=ec3e895a7cac17f75f9d75ef6e38614c32d69e55
Certificate serial:       01A03FA9A0C9A761BA0112690B3E5015711B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7D6JWnysF_dfnXXvbjhhTDLWnlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.mft
Manifest number:          F1
Signing time:             Wed 26 Aug 2026 20:01:16 +0000
Manifest this update:     Wed 26 Aug 2026 20:01:16 +0000
Manifest next update:     Thu 27 Aug 2026 20:01:16 +0000
Files and hashes:         1: 7D6JWnysF_dfnXXvbjhhTDLWnlU.crl (hash: 5jfsq/Xh04ZN0OOQ/Z+e8FgK20fxgjhkzox//D8CfmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7D6JWnysF_dfnXXvbjhhTDLWnlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:a9:a0:c9:a7:61:ba:01:12:69:0b:3e:50:15:71:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3e895a7cac17f75f9d75ef6e38614c32d69e55
        Validity
            Not Before: Aug 26 20:01:16 2026 GMT
            Not After : Aug 27 20:01:16 2026 GMT
        Subject: CN=f00406ac92b0b7d712600bfa44458d1fb90437ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:3c:f8:47:a7:1d:f2:6c:d5:67:82:cd:78:
                    52:01:be:25:48:44:60:c9:f8:d2:2d:00:db:9e:38:
                    86:05:6a:bc:80:a6:04:f3:ce:df:2d:de:fe:e7:c5:
                    7e:9d:bb:ce:8e:dc:39:c6:f1:66:83:89:c6:98:0e:
                    04:61:69:92:8b:d2:02:00:5e:59:08:06:31:7c:7a:
                    6e:32:1c:f8:17:1a:ce:75:80:2b:e3:c5:b7:50:0e:
                    89:60:f2:c4:6d:bd:d7:50:32:f2:6c:5e:98:33:f5:
                    05:7d:d1:2b:36:fd:87:77:7a:b2:74:ad:ad:8a:d5:
                    c2:d2:f1:62:51:fc:fb:37:bb:7f:24:0c:b3:ce:70:
                    4e:43:14:30:df:4f:f0:35:e9:96:59:e0:37:c5:11:
                    71:27:6a:b0:39:ca:b9:a0:24:ae:f4:42:6a:de:34:
                    5e:d2:2c:9a:02:f7:72:18:3b:f2:c0:3c:bd:95:06:
                    70:ac:da:6a:a2:3a:87:9e:00:bd:74:f2:54:ca:c0:
                    78:48:d6:ca:c5:5b:46:df:03:4f:30:d5:e2:da:14:
                    f4:4b:1b:e3:3e:fe:4b:ea:d3:30:e7:74:9e:fb:a6:
                    0b:da:16:37:d7:ae:1b:5d:62:80:fc:bf:01:8d:60:
                    99:06:7c:85:b9:3b:2d:4d:a2:2c:db:c8:42:94:c6:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:04:06:AC:92:B0:B7:D7:12:60:0B:FA:44:45:8D:1F:B9:04:37:CE
            X509v3 Authority Key Identifier:
                keyid:EC:3E:89:5A:7C:AC:17:F7:5F:9D:75:EF:6E:38:61:4C:32:D6:9E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D6JWnysF_dfnXXvbjhhTDLWnlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3ac2c2-c1fc-4352-8106-8faf4e4d7f7b/1/7D6JWnysF_dfnXXvbjhhTDLWnlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5c:21:bb:e8:82:69:e9:ff:3e:36:63:d7:95:74:a2:59:66:
         ae:3a:79:e9:49:ad:67:52:62:ba:65:75:8c:3b:07:a5:90:76:
         d9:9a:4a:56:6f:5f:70:7f:95:46:44:45:d9:d0:12:68:80:bb:
         e9:c5:1f:dd:71:94:b2:bd:0a:8a:09:d3:86:f2:2f:5b:a2:e7:
         7c:1e:75:b4:f9:64:ba:46:00:0a:57:1d:e7:f0:12:04:68:01:
         d7:ed:99:10:41:4b:ed:4b:a9:6c:0f:f6:88:9b:ca:a4:e4:3f:
         cb:bf:fe:0a:ac:04:c8:9b:84:f1:71:b3:9d:9f:d2:84:24:6c:
         c6:b8:d9:0c:da:c4:a6:22:f2:44:c3:cf:3c:7a:f8:35:c8:76:
         99:c5:1e:25:22:e2:b0:b7:23:19:60:bf:4b:a0:8b:44:32:fb:
         21:88:e9:e4:ba:9f:c1:03:99:80:d7:66:c3:8f:29:7f:cc:d4:
         13:e3:fb:47:d5:40:9d:7e:2e:49:67:4b:84:dd:61:09:8d:3e:
         2d:75:36:f2:6b:d5:9a:7e:09:3d:fd:a9:7e:0b:8f:aa:ce:3b:
         40:8b:a7:8a:10:d5:28:cc:87:32:72:c8:bb:af:5c:00:03:56:
         57:9e:f8:22:d6:11:8f:90:c6:b6:5c:c4:d6:81:b4:4b:f3:17:
         27:ad:bc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:06:19 2026 by rpki-client