Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft
File:                     7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft (raw, json)
Hash identifier:          P4XEtpHKjTUG6xFehqmOhx37A65ZBtKN7m58mAJfy0Y=
Subject key identifier:   C1:86:39:05:4B:AD:B3:68:5F:FD:18:71:49:89:23:D9:74:06:84:E7
Authority key identifier: ED:7D:1D:10:83:F7:04:2F:44:D1:5D:2F:0D:CA:21:FA:86:BC:40:D5
Certificate issuer:       /CN=ed7d1d1083f7042f44d15d2f0dca21fa86bc40d5
Certificate serial:       01A03D83ADC7DF0EBC38E19BCCF9CE42847C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7X0dEIP3BC9E0V0vDcoh-oa8QNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft
Manifest number:          012E
Signing time:             Wed 26 Aug 2026 10:00:34 +0000
Manifest this update:     Wed 26 Aug 2026 10:00:34 +0000
Manifest next update:     Thu 27 Aug 2026 10:00:34 +0000
Files and hashes:         1: 7X0dEIP3BC9E0V0vDcoh-oa8QNU.crl (hash: H2IyqlSRbWoTkk+4SFq0ABi/s8ILmEOcMSlXoPgVVD8=)
                          2: qhw-oWhw0NTepwRC4uCmjdN0RG0.asa (hash: Eh7fHtr19LeexhS3SBHy5ilwQiwjvV00HdoOnKi+arg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7X0dEIP3BC9E0V0vDcoh-oa8QNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 10:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3d:83:ad:c7:df:0e:bc:38:e1:9b:cc:f9:ce:42:84:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7d1d1083f7042f44d15d2f0dca21fa86bc40d5
        Validity
            Not Before: Aug 26 10:00:34 2026 GMT
            Not After : Aug 27 10:00:34 2026 GMT
        Subject: CN=c18639054badb3685ffd1871498923d9740684e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:b3:9f:11:08:71:98:da:05:2e:3d:f6:94:
                    ce:7e:63:34:c7:d6:c4:2e:57:3d:51:cb:af:d7:0b:
                    8d:c2:77:66:0d:4d:1e:18:ce:91:c6:c8:c8:ae:7e:
                    50:0a:68:f1:ba:ad:bd:6c:bf:2c:12:03:41:42:34:
                    be:29:3c:79:11:fb:fb:98:93:1d:9a:ad:75:af:5a:
                    6b:17:ec:fb:e9:5a:ef:c1:c6:d6:55:12:a9:b0:4c:
                    79:26:b2:c9:1d:9b:70:83:7f:b0:a1:8a:1c:2c:cd:
                    f1:29:94:41:26:79:30:2d:a1:b3:68:4f:d3:99:b2:
                    8c:62:19:1d:2d:e8:c0:00:9e:b5:aa:a5:be:7f:bf:
                    5c:91:e5:24:d4:6c:4b:24:d1:41:15:eb:e5:ef:90:
                    9c:5a:23:d9:ef:ef:b2:15:a8:a6:85:ac:d8:15:44:
                    20:24:e8:58:b8:1f:f5:76:97:5b:7d:84:52:cb:1a:
                    ac:42:8d:89:a8:62:62:3b:70:d5:05:b5:9f:8a:4a:
                    d2:f1:8b:26:a6:d3:6a:9f:ff:b6:fe:53:d0:c2:8e:
                    45:84:26:90:71:52:59:e0:a8:7b:eb:c5:9a:d5:98:
                    c1:aa:46:38:e2:d9:ed:96:83:b8:b9:12:f2:b7:5a:
                    43:82:4d:1a:0d:9e:b2:06:e7:6a:e2:2a:e7:9e:4d:
                    c7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:86:39:05:4B:AD:B3:68:5F:FD:18:71:49:89:23:D9:74:06:84:E7
            X509v3 Authority Key Identifier:
                keyid:ED:7D:1D:10:83:F7:04:2F:44:D1:5D:2F:0D:CA:21:FA:86:BC:40:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X0dEIP3BC9E0V0vDcoh-oa8QNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:66:64:e0:32:b5:da:22:a0:c1:6a:35:33:e6:f6:60:4c:cf:
         49:d8:e9:c1:ee:38:db:3d:8c:55:d0:3f:c8:f6:8c:05:2f:62:
         60:d1:ee:cd:ed:4c:de:08:1d:2a:17:13:ac:60:f6:ee:79:e7:
         61:12:7d:0e:ef:c1:8f:89:6e:b6:3a:97:e1:bb:c2:de:d9:b4:
         bf:b4:69:11:69:88:1a:2a:57:5c:b6:ac:0b:81:9e:fe:7f:c9:
         61:2d:a0:a9:e2:29:de:e0:26:c9:25:62:53:37:6e:27:a4:df:
         fa:21:a4:5e:ec:15:3f:b6:e6:20:e4:aa:d5:c2:82:c4:da:4b:
         75:92:80:f1:91:6d:ec:3c:31:69:3d:4c:92:95:85:f4:ed:db:
         46:55:3b:8b:8b:32:b0:08:79:9b:8a:7e:b5:6b:63:ad:38:83:
         05:4a:dd:e0:5b:70:ee:6c:b7:4d:75:00:8b:76:ea:d3:f0:15:
         38:40:1d:c8:f1:db:65:88:9a:90:b8:b6:b9:74:cf:fd:c8:b6:
         80:e4:cb:33:6f:b5:be:d9:f8:70:e7:81:01:0f:33:d6:87:74:
         b3:c4:3b:31:b5:61:c9:a1:9c:b2:4e:59:ea:09:29:fd:14:24:
         57:bf:55:e7:be:38:9a:84:8e:d3:14:ae:ec:b7:cd:00:83:1f:
         f8:ae:56:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:09:45 2026 by rpki-client