Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
File:                     E7T2uQFntxvWY_oDkeA4oBVbuTk.mft (raw, json)
Hash identifier:          rV8tYXDvTpXJgG9rRAPjkDgN8hXCtNzt9viLC593YDQ=
Subject key identifier:   1F:8B:55:72:A2:43:2C:98:97:21:A8:DD:DC:35:53:30:19:C6:00:B8
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Certificate issuer:       /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial:       01A13E9512AA8BB28674DFE95D4A9FE3CBF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
Manifest number:          1625
Signing time:             Thu 15 Oct 2026 08:01:59 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:59 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:59 +0000
Files and hashes:         1: E7T2uQFntxvWY_oDkeA4oBVbuTk.crl (hash: 4XkaR+KcS6tSs4bQrmvjEAagPhFht96iZE8Omz/BGhM=)
                          2: c8_lqB8zuXEzmspKXzyipWp0Oa0.roa (hash: 2ZR0m4jkOWS1KPdLD0KrcVGTacYGG1RI331SCTXCoGQ=)
                          3: if86lxu5nlPzs7hkWMJDZ9tMh_c.roa (hash: ORNVkMFl7t2RmENsppqBUHYflyrOzGV65xG9bRC2Ckw=)
                          4: pbc4SdtODYEUzlwKQZU-lgRu770.roa (hash: Aa4AR2Tswo+VpEELO6t1/gEy+JGa3NESKeediOsubQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:95:12:aa:8b:b2:86:74:df:e9:5d:4a:9f:e3:cb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
        Validity
            Not Before: Oct 15 08:01:59 2026 GMT
            Not After : Oct 16 08:01:59 2026 GMT
        Subject: CN=1f8b5572a2432c989721a8dddc35533019c600b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:a1:37:f0:9a:bc:6f:75:a0:17:12:2b:fa:
                    c1:f2:12:b2:70:4d:1e:3b:4c:32:c8:08:1b:49:98:
                    67:66:a1:f6:e1:8e:3e:0d:f0:5f:b0:b1:62:d1:8d:
                    e4:26:45:3a:e5:4d:67:73:ad:5d:4a:ee:12:d2:bf:
                    1d:03:c5:ad:0a:b5:21:4a:d8:f1:70:c3:b0:8d:33:
                    ca:90:de:ec:0b:71:0c:ff:39:41:ec:da:98:1e:91:
                    29:75:19:50:77:e3:d0:ea:9a:99:e7:b9:e2:eb:cc:
                    e4:71:e6:8a:42:ea:0f:fe:79:0b:a7:08:f3:fa:f6:
                    20:82:1b:1c:c0:2c:ba:54:4a:a7:12:56:e6:44:1f:
                    28:1c:c0:d2:c5:dc:e9:8c:b3:6d:e4:f2:13:ec:47:
                    00:79:e0:76:77:cc:df:10:c8:b8:10:ef:a3:18:0e:
                    db:91:f6:8b:9e:99:aa:28:30:27:4f:c0:bf:80:c2:
                    b5:ef:5d:08:2b:3e:46:17:d3:ff:46:66:ac:33:62:
                    6d:29:5d:24:a1:45:d0:2f:88:f0:8c:5e:dc:01:9c:
                    69:39:8a:f4:e8:90:1a:5d:ff:58:32:74:47:38:94:
                    08:6b:67:1a:cf:7c:d8:fd:23:da:99:bd:e6:3d:f6:
                    2a:0e:3a:5e:c4:fb:9e:5a:71:d2:1e:d5:9f:7c:6b:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8B:55:72:A2:43:2C:98:97:21:A8:DD:DC:35:53:30:19:C6:00:B8
            X509v3 Authority Key Identifier:
                keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7e:e5:74:9a:a4:c9:8b:10:56:3b:71:56:b7:e2:d0:15:bd:
         4f:fb:40:c5:1a:43:81:c4:4d:ba:d8:f6:03:f6:03:25:e1:9a:
         8b:c7:af:6e:d4:1e:32:88:94:9f:17:49:31:1b:db:21:04:69:
         73:7d:08:d5:c3:26:8a:5f:bf:1c:2e:75:7b:7a:6b:88:ce:43:
         03:52:36:4c:3a:ca:41:81:f2:eb:de:03:9c:e8:b3:b1:67:2b:
         86:61:a5:38:cd:f5:df:be:82:f3:3e:d6:81:df:de:76:c9:ad:
         95:e1:a5:07:bc:1c:2a:83:58:56:c4:fc:7c:fd:d2:11:91:da:
         7a:e3:26:fa:b8:51:b9:50:4a:26:22:13:be:de:c0:a3:93:b2:
         48:54:6a:7a:60:62:5c:3b:1f:ae:59:0f:f1:a8:07:09:aa:ab:
         f8:23:65:6a:75:e9:0a:6a:da:13:2b:93:12:09:91:36:7f:ef:
         92:72:48:e3:c9:f6:8e:44:b6:7d:e2:aa:c5:72:af:f4:28:88:
         c3:ae:19:a1:fa:82:eb:bd:73:20:2f:ff:a4:52:6a:fc:ba:12:
         77:85:c0:51:88:ae:cf:14:cd:2b:9e:3d:83:e9:f4:10:1f:a8:
         26:91:b7:58:b2:c8:f4:30:48:c3:f2:57:a5:8a:57:c0:61:c5:
         b8:55:f0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:14:29 2026 by rpki-client