Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
File:                     Rg7_G6LS91kqRNITPSB7KT4kGsI.mft (raw, json)
Hash identifier:          4klmSnf5la0IEkxhTgFCboHRM2Wv8aTwEexs9yqkMIQ=
Subject key identifier:   37:D6:2B:47:81:42:21:3A:7D:1E:00:01:6A:D3:27:80:59:B2:3F:4B
Authority key identifier: 46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
Certificate issuer:       /CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Certificate serial:       01A176CBDC008D92E7F83CBF533DFCFBD1B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
Manifest number:          0FC9
Signing time:             Mon 26 Oct 2026 06:00:33 +0000
Manifest this update:     Mon 26 Oct 2026 06:00:33 +0000
Manifest next update:     Tue 27 Oct 2026 06:00:33 +0000
Files and hashes:         1: Rg7_G6LS91kqRNITPSB7KT4kGsI.crl (hash: GFgHdof74g7SuCDSTo0GxRRTb5teHxMpsyrjBvo/GQ4=)
                          2: h_utoHeOpQBYse4tQQn19NAtDIA.roa (hash: wzWnekCDPzeEk5ruT1AKm5uXIAtEuf8wPeRY0OMMD+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:cb:dc:00:8d:92:e7:f8:3c:bf:53:3d:fc:fb:d1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
        Validity
            Not Before: Oct 26 06:00:33 2026 GMT
            Not After : Oct 27 06:00:33 2026 GMT
        Subject: CN=37d62b478142213a7d1e00016ad3278059b23f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:8a:02:2a:5e:ce:2f:4a:10:37:c8:cd:6d:
                    2c:59:b6:12:fb:77:59:9f:14:a2:00:08:a4:4e:c0:
                    1a:76:68:28:bb:31:0a:62:82:56:ec:aa:b0:53:37:
                    1f:29:5d:13:30:6e:e6:e3:83:dc:09:a2:87:52:e5:
                    04:8f:1c:1e:56:6a:c8:5e:1c:65:5f:b4:fa:02:80:
                    ef:26:3d:4d:1c:85:b2:65:93:70:d2:e4:69:f8:5d:
                    5c:75:10:65:8d:f5:64:6f:d8:7a:dc:8b:ac:04:7a:
                    e0:92:2d:a9:90:e3:6c:92:30:ba:0d:d0:37:63:d6:
                    14:fb:bd:e1:50:d5:68:ac:ad:63:a3:4a:9b:90:a0:
                    3d:d2:9e:3f:e1:a9:06:a0:2f:21:2d:4c:61:c6:b2:
                    53:fc:18:96:86:88:88:ac:b7:ca:ee:fb:6d:b4:12:
                    af:05:59:ad:b7:7c:3a:0c:81:9a:e6:9a:fa:fb:fb:
                    ce:0f:70:d2:8b:a3:a8:85:56:cb:09:9f:98:0a:5e:
                    e4:9f:df:d8:c1:bf:74:81:46:3d:4c:4b:0d:57:3e:
                    13:79:0a:76:33:d7:30:04:6e:03:f9:03:e4:4a:74:
                    c6:0f:96:a5:5e:4e:16:9e:eb:b2:0e:0a:f9:18:18:
                    09:1d:91:02:ef:f7:78:0a:1b:87:2f:e5:34:7a:f3:
                    41:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D6:2B:47:81:42:21:3A:7D:1E:00:01:6A:D3:27:80:59:B2:3F:4B
            X509v3 Authority Key Identifier:
                keyid:46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cb:36:3a:53:7a:30:f1:75:f0:5c:1e:5f:8d:d2:42:99:a6:
         e7:17:3e:17:2a:53:c6:f7:b0:e1:c1:d3:78:54:3f:36:93:bf:
         3b:89:2b:93:d6:ee:45:f9:83:d5:01:5b:2a:a2:ea:13:b9:d8:
         9e:5d:54:7d:09:97:a8:ab:7c:9f:74:6e:7a:d4:0d:6f:59:7a:
         11:a1:86:0c:55:23:08:cd:3e:4b:b2:86:5f:6d:8f:37:1f:3a:
         fe:ca:dc:d6:e6:94:d6:14:36:b6:be:9a:ce:4d:b0:f7:e5:de:
         95:3b:76:3a:29:61:09:37:f4:fc:01:cf:04:74:8a:f3:98:a1:
         00:f4:52:99:da:24:e6:2f:7f:ca:4e:d8:b0:1a:6f:44:a0:dd:
         aa:ce:cf:6a:2a:b0:19:3a:9d:2d:df:3c:2b:5d:76:28:b5:20:
         26:de:ae:8f:b6:31:9e:13:c1:93:1d:9c:69:e3:a1:61:55:1a:
         0d:e6:97:25:39:06:a6:8f:cf:a7:c8:79:2d:90:93:cc:ff:28:
         f5:01:79:fa:c1:98:6d:aa:2b:3c:47:86:db:b5:0a:e0:14:a2:
         18:72:af:cf:b1:33:e2:0b:68:04:78:1d:87:0e:b8:c1:6d:14:
         66:50:2f:ee:f6:0e:d0:63:a7:4d:42:22:12:02:c4:eb:ee:0c:
         c0:44:b9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:20:23 2026 by rpki-client