Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
File:                     7lsNNqN0qzXENu4Awuyu-7KjVEg.mft (raw, json)
Hash identifier:          hghqX5rUhQQ6zAY5M7LuwAlq7jnX8URrkUqXkUzAm0g=
Subject key identifier:   40:27:A6:CB:A1:8B:A9:B5:B0:96:F4:0B:9F:75:95:8B:78:B4:FB:F9
Authority key identifier: EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
Certificate issuer:       /CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Certificate serial:       01A03FA9EEC4C33F3AD57D30C0D456AE7A6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
Manifest number:          0441
Signing time:             Wed 26 Aug 2026 20:01:36 +0000
Manifest this update:     Wed 26 Aug 2026 20:01:36 +0000
Manifest next update:     Thu 27 Aug 2026 20:01:36 +0000
Files and hashes:         1: 7lsNNqN0qzXENu4Awuyu-7KjVEg.crl (hash: N6w11VT/Am7+/YiN1avEbzi5IvCxPWP0V4Ktv7FwBpU=)
                          2: od9igj5v7V0Kfnev8-CMqhUCNRc.asa (hash: LUunZpdTWKkS/76jaN+s9ShSo+KcgfzlH3gElWjZ7CQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:a9:ee:c4:c3:3f:3a:d5:7d:30:c0:d4:56:ae:7a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
        Validity
            Not Before: Aug 26 20:01:36 2026 GMT
            Not After : Aug 27 20:01:36 2026 GMT
        Subject: CN=4027a6cba18ba9b5b096f40b9f75958b78b4fbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:9d:9a:a3:69:c7:bd:d8:c3:7d:7c:37:6e:
                    5f:42:21:54:a3:c9:9a:aa:47:69:cc:13:9a:6b:a2:
                    18:cb:55:be:a5:00:de:70:46:6a:07:6b:50:e7:2e:
                    2c:0d:58:c7:ed:36:ac:e8:2c:cb:2c:c9:3e:98:ed:
                    7b:b6:0b:ed:9a:f9:55:4a:2f:39:dd:d6:0a:0c:b5:
                    14:db:fd:cf:e6:ce:3a:a5:27:e3:d8:35:88:d9:80:
                    61:ba:eb:b3:4d:fc:11:11:12:bc:8a:1c:cb:63:47:
                    d4:36:d6:1a:ad:90:8b:5a:7a:cd:74:fd:51:a7:60:
                    c8:66:ab:5e:ea:7d:ca:3d:b5:98:05:9d:ff:00:9e:
                    0c:78:ab:af:64:e0:8b:11:e3:4b:74:0b:2a:6d:42:
                    d1:08:aa:bd:ed:5e:a2:44:1a:39:c2:fa:cc:11:86:
                    b7:f4:6a:2e:7c:2f:1b:4e:52:06:98:4b:8a:ef:09:
                    73:b8:10:db:ab:a9:16:7e:55:f3:48:a0:54:d3:6f:
                    d9:cf:5a:2a:b6:79:c1:4d:d6:29:95:65:ca:4b:28:
                    bb:06:a8:3b:59:0a:96:f8:28:68:91:2e:ac:5a:f1:
                    52:f1:ce:da:96:9b:54:cd:57:06:79:4d:4d:56:57:
                    90:12:d4:34:72:70:1d:10:bf:b3:88:0b:57:46:b1:
                    bc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:27:A6:CB:A1:8B:A9:B5:B0:96:F4:0B:9F:75:95:8B:78:B4:FB:F9
            X509v3 Authority Key Identifier:
                keyid:EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:57:09:bb:d8:3c:32:7d:c0:bc:d3:09:c8:fc:be:3b:83:58:
         87:8e:bd:82:a6:60:0e:b9:fd:aa:48:f5:a9:7c:5c:fc:01:21:
         bf:90:c8:c7:fd:f7:45:cf:01:0d:4f:7e:55:ea:1d:a8:df:de:
         d8:06:e9:4c:28:12:e4:23:d5:7e:cd:6b:a0:1b:8e:33:ff:f0:
         f4:0b:fd:b3:7c:b5:ab:a7:3e:49:b5:7a:55:09:5b:58:37:9b:
         d4:69:07:1e:9a:45:d7:51:df:c8:f2:9d:d7:54:73:4e:82:83:
         21:0d:4f:71:85:4c:c0:e1:00:25:d4:8f:9b:f5:16:ca:0a:7e:
         39:90:34:18:6b:22:db:91:98:2e:78:7e:30:18:77:8a:f3:c2:
         c0:91:c2:8d:6b:d0:a3:c5:bc:5b:d2:d0:02:96:8d:f2:93:bb:
         cc:52:f6:f4:3e:0e:a5:fe:e8:a1:50:3d:c8:ac:45:54:9a:7f:
         13:08:1c:32:56:b7:6d:79:64:03:ea:9a:7e:08:be:4d:b5:6e:
         fe:94:5a:12:aa:11:48:1c:ad:46:f9:22:67:7e:18:5e:9d:72:
         d7:f8:c2:d2:b6:b7:c2:6a:60:35:2f:76:2b:50:9c:b9:15:17:
         df:97:11:c7:11:19:2b:10:6c:2f:56:22:9f:52:a1:be:0c:77:
         a4:9c:1a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:57 2026 by rpki-client