Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
File:                     7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json)
Hash identifier:          85lyU+OEz5aNrbEf0IA5mlkS4oKizg3iktfNGfrD8HI=
Subject key identifier:   94:0C:48:3B:45:5D:0E:0E:9C:FD:DD:73:74:3E:6E:6B:74:CE:E4:E6
Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
Certificate issuer:       /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Certificate serial:       01A13FA6FBFA013B6B1C1BC9CC479FCE38F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
Manifest number:          0B02
Signing time:             Thu 15 Oct 2026 13:01:10 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:10 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:10 +0000
Files and hashes:         1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: 7KQj5xCUX6UDHYzmhV/qtHk+6XcwAApnjc3xiXUnDjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a6:fb:fa:01:3b:6b:1c:1b:c9:cc:47:9f:ce:38:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
        Validity
            Not Before: Oct 15 13:01:10 2026 GMT
            Not After : Oct 16 13:01:10 2026 GMT
        Subject: CN=940c483b455d0e0e9cfddd73743e6e6b74cee4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6c:ce:e1:ff:9c:fe:75:d5:d9:76:5e:b2:18:
                    69:e7:86:9d:83:90:cd:03:69:2d:40:7b:ba:f0:5d:
                    16:65:4f:8b:eb:64:9b:00:a7:f8:09:d6:c1:dc:f0:
                    59:fe:54:d1:98:a9:7a:00:39:7d:bb:ca:ca:da:8d:
                    e7:36:4c:77:d7:7b:6f:4f:b4:95:ce:06:b1:9b:77:
                    bc:a9:e7:2b:14:61:a6:ea:ce:34:ce:cd:2b:b6:e0:
                    ef:7f:a3:4b:45:62:46:d0:bc:49:a6:dd:e6:bc:7c:
                    71:5a:86:ab:47:a2:da:c2:64:25:71:64:02:4d:db:
                    95:44:e9:ea:81:03:eb:48:4b:94:a5:7e:84:40:0c:
                    49:17:2e:39:e3:39:69:e1:9c:86:af:bd:61:df:fe:
                    2d:95:9b:09:fc:90:d0:de:24:b5:9e:13:9d:e7:3c:
                    cf:41:bf:44:44:73:09:db:16:4f:7e:18:50:5f:d5:
                    dc:7b:7e:48:12:27:11:77:20:e9:3a:10:5b:67:e8:
                    1d:1a:3a:07:25:93:fa:2b:05:36:0a:28:1c:66:79:
                    80:5b:44:6d:f5:2d:c8:f4:26:24:c0:f2:1b:27:b7:
                    39:39:d1:53:5c:37:62:3e:af:3b:1c:4d:9c:46:3d:
                    a3:b0:26:35:58:f8:52:b1:d6:37:03:10:70:f4:b6:
                    3f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0C:48:3B:45:5D:0E:0E:9C:FD:DD:73:74:3E:6E:6B:74:CE:E4:E6
            X509v3 Authority Key Identifier:
                keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:1a:48:4b:f6:0c:55:a4:4e:46:57:7e:3a:f1:84:73:9d:ec:
         c2:d8:5d:d7:67:8f:1e:bc:bb:de:34:e0:1d:18:d0:d2:a7:58:
         a9:a8:35:0d:9f:84:22:32:5c:08:c4:66:2a:ff:56:5e:99:2a:
         90:63:1a:1f:df:33:93:bf:3b:64:49:b7:a9:58:a4:58:ab:07:
         55:4d:be:f3:7f:30:99:78:63:6e:61:8c:ee:e0:a8:b5:fd:44:
         3e:d1:9f:74:30:9e:62:ec:5f:1c:f7:3a:7a:3b:17:c5:30:d3:
         99:53:26:84:26:9f:a8:67:d4:cd:d1:4f:3a:bb:0c:cb:44:87:
         96:b2:71:fb:e8:08:01:c0:2f:e9:43:a9:5f:d9:db:71:27:ca:
         19:71:bc:de:7a:83:5a:a7:9e:15:ec:4c:5c:b0:53:e7:15:2d:
         06:ed:9f:46:f0:15:1b:ca:87:02:7d:53:87:b3:4d:4a:07:65:
         17:21:01:02:52:02:86:1b:2d:24:fc:02:6a:8a:50:d8:da:0e:
         d4:9e:c6:13:2b:86:ae:c5:e3:ad:db:7f:24:9c:4c:7a:40:01:
         3d:21:19:92:af:eb:04:a7:1b:c8:c2:bb:26:2d:70:fc:18:69:
         d9:91:df:b6:5e:d9:14:b5:0a:cb:62:05:0c:3e:1c:7c:ef:71:
         c7:f2:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:33 2026 by rpki-client