Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File:                     7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier:          PMDLdsAjJ1wzA4eNaFdD3soOCIM/P2uaRivnrCCSbAk=
Subject key identifier:   9B:78:8A:DE:B7:DF:2A:9D:43:D1:02:AF:E9:7B:F0:33:8F:FD:55:0B
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer:       /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial:       01A13FA7B1C718AE2A24490DB85977920538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number:          1AA4
Signing time:             Thu 15 Oct 2026 13:01:56 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:56 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:56 +0000
Files and hashes:         1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: h6QMocOVtfpfajHX2V/NdVLRZQNXpzKJGwhgDRHhPV4=)
                          2: oqgwVvgO4WobvG_o2YvqXL-ZxrA.roa (hash: qgN0ZwFa85gMlSMo8H+ZBEVFv906WUNJ1MUKTtcyf+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:b1:c7:18:ae:2a:24:49:0d:b8:59:77:92:05:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
        Validity
            Not Before: Oct 15 13:01:56 2026 GMT
            Not After : Oct 16 13:01:56 2026 GMT
        Subject: CN=9b788adeb7df2a9d43d102afe97bf0338ffd550b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:2d:f0:8b:52:54:10:eb:cc:fe:89:9f:88:
                    e2:64:bc:4d:55:9e:1c:ce:a9:7a:28:ca:9b:81:88:
                    7c:b7:86:71:e9:06:08:b1:8e:91:b5:6a:9d:f8:a6:
                    26:58:68:69:5a:93:31:1e:07:8f:5b:eb:73:87:51:
                    d9:90:99:1b:8d:4c:fd:9b:6f:59:18:66:f9:c7:30:
                    32:9b:b6:a9:a0:c4:24:9d:2d:af:60:19:b8:bc:4c:
                    c3:37:15:5a:b4:b2:c0:69:c1:bd:95:a3:f5:08:a4:
                    29:a9:ed:e0:d7:97:e5:33:c6:d4:f8:ef:af:d9:e3:
                    95:f6:06:36:bc:25:73:d0:13:4c:37:83:1e:0a:22:
                    60:c8:d0:33:2c:28:ae:84:9c:d9:43:1f:4e:ac:90:
                    70:c9:02:5b:a8:20:90:47:bd:ec:dc:36:a3:9e:5f:
                    8e:1e:83:e5:3a:ce:eb:b2:72:90:1b:08:ee:35:cd:
                    e0:fd:45:9c:5c:e6:fb:5f:54:da:d5:96:2a:f7:3f:
                    f8:b0:a3:f7:b2:f3:a7:79:9c:d0:4e:55:92:ab:bd:
                    60:aa:70:dc:b8:3e:ec:08:3c:41:e0:55:4f:0c:9a:
                    51:3f:cd:c3:21:97:31:6f:41:1e:f3:7b:94:7b:fd:
                    af:a6:05:7d:f1:d7:14:fe:5b:d3:1c:72:e7:7a:58:
                    d2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:78:8A:DE:B7:DF:2A:9D:43:D1:02:AF:E9:7B:F0:33:8F:FD:55:0B
            X509v3 Authority Key Identifier:
                keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:54:b6:29:05:bf:9f:a2:8f:63:65:92:ca:98:90:f6:ae:43:
         43:4e:68:b6:1c:a0:16:0c:d4:10:e4:58:5f:10:37:e9:84:53:
         56:7e:fb:de:e0:c2:33:58:b7:b2:30:b3:e0:dd:7d:d1:24:e9:
         90:2d:ea:59:15:22:b9:03:d0:50:d8:32:d3:56:cd:6d:4a:82:
         b4:2b:83:0d:8c:ff:fa:56:95:97:b4:35:99:74:f1:7d:6a:00:
         c9:3a:eb:51:5d:aa:8f:c0:30:1e:ac:06:ba:96:0e:92:af:50:
         b4:40:09:36:d9:53:f2:ea:2c:c7:fd:95:32:17:d8:b1:85:b7:
         83:fd:3e:96:88:cf:af:b9:ed:7b:f1:26:13:02:32:99:d2:ce:
         ea:d0:b7:91:5b:32:7e:b9:e6:2a:c5:53:5c:48:2b:aa:d2:65:
         e8:3e:21:96:83:0e:ab:0f:98:71:90:8d:f3:1d:8f:f6:6c:e0:
         91:03:81:04:6a:c9:4d:13:16:6e:80:54:b3:c5:b9:7b:e1:b6:
         7d:c3:60:3e:43:6f:a5:b1:77:0e:60:38:08:e1:3d:5e:5a:ef:
         4e:da:3b:87:d8:c8:aa:19:bc:ec:a5:4c:6b:31:da:54:bb:e4:
         66:0d:c3:01:e0:78:51:27:9c:32:68:25:1d:c5:9a:97:f8:b5:
         0b:0f:bc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:00 2026 by rpki-client