Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft
File:                     7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft (raw, json)
Hash identifier:          cETnTir+z/dYvH2W40Sexauzn45ZCdwZXtb81eJa3nM=
Subject key identifier:   3C:C6:C8:B5:AF:9E:F7:7B:15:EF:E2:0F:0F:D3:0C:F9:AB:9F:D1:04
Authority key identifier: EF:EE:B5:0E:FE:D2:9C:17:17:10:85:40:0A:F0:7C:66:90:FA:39:6A
Certificate issuer:       /CN=efeeb50efed29c17171085400af07c6690fa396a
Certificate serial:       01A1A82731A79EE8BB7CB74313C16ACADEA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-61Dv7SnBcXEIVACvB8ZpD6OWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft
Manifest number:          01DB
Signing time:             Wed 04 Nov 2026 20:01:43 +0000
Manifest this update:     Wed 04 Nov 2026 20:01:43 +0000
Manifest next update:     Thu 05 Nov 2026 20:01:43 +0000
Files and hashes:         1: 7-61Dv7SnBcXEIVACvB8ZpD6OWo.crl (hash: GZgztuwha39aFsC969Pcz4D14/UGHsSNkeWItAXK18s=)
                          2: JS4OZw-dfoAGScXsIL4kb3KCX_4.roa (hash: CsnYx8saM2GDN99ZZzqzztzcHAktERUojOcFYdBknRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-61Dv7SnBcXEIVACvB8ZpD6OWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a8:27:31:a7:9e:e8:bb:7c:b7:43:13:c1:6a:ca:de:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efeeb50efed29c17171085400af07c6690fa396a
        Validity
            Not Before: Nov  4 20:01:43 2026 GMT
            Not After : Nov  5 20:01:43 2026 GMT
        Subject: CN=3cc6c8b5af9ef77b15efe20f0fd30cf9ab9fd104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ab:38:b1:86:87:5b:b6:aa:65:25:75:f9:b9:
                    cd:1e:e9:3e:6a:92:61:04:bb:f1:28:bd:04:6a:9b:
                    eb:71:0e:4f:6e:f3:ef:1d:ed:81:ec:4e:24:59:4d:
                    07:c1:dd:02:0e:28:12:61:66:c1:0b:d7:06:28:50:
                    00:4c:3b:2f:dc:45:68:2e:1e:a2:0f:f1:03:37:97:
                    17:05:48:5a:0b:9a:81:f6:e8:8c:92:e5:2e:9f:54:
                    3f:e0:cb:b0:de:24:60:ee:c8:b5:06:4f:99:3b:fc:
                    b4:6c:a4:84:6c:21:7d:cd:b1:d2:53:75:6c:9f:b5:
                    02:90:ec:35:1d:dd:85:9b:ab:d8:a5:a9:50:d5:69:
                    c9:da:f4:16:1c:6b:d7:3e:97:63:22:31:34:25:32:
                    7a:32:0c:33:16:52:9b:ee:9d:05:42:cb:a5:5e:b3:
                    ad:65:68:8e:08:e5:35:d1:d0:e3:95:82:1c:4f:e9:
                    84:24:00:7d:63:bc:e4:4b:27:20:4d:a2:70:20:bb:
                    42:5f:ad:fa:4c:55:1c:a7:e8:48:2e:d7:b5:a4:81:
                    45:6e:31:1e:70:82:54:3d:fb:c5:6b:51:48:7d:ee:
                    55:68:72:c4:99:a9:dd:e0:29:54:ac:19:c3:da:3a:
                    e7:87:03:4f:51:d1:e9:e9:23:b0:37:4b:cf:83:0c:
                    53:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C6:C8:B5:AF:9E:F7:7B:15:EF:E2:0F:0F:D3:0C:F9:AB:9F:D1:04
            X509v3 Authority Key Identifier:
                keyid:EF:EE:B5:0E:FE:D2:9C:17:17:10:85:40:0A:F0:7C:66:90:FA:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-61Dv7SnBcXEIVACvB8ZpD6OWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:bf:b9:63:27:ee:91:c4:13:31:92:8a:1f:d1:2e:49:11:56:
         a8:de:8e:fb:26:e2:56:14:af:63:75:ad:eb:b3:da:01:11:6a:
         65:c1:58:f6:83:62:81:3b:cd:74:f9:ec:a6:72:76:22:93:0b:
         e7:92:32:02:c5:d3:ad:86:f8:57:c3:ee:1a:48:91:5c:88:f6:
         bc:4e:0f:23:03:10:79:f2:db:57:1c:4a:53:fa:2f:41:f8:89:
         95:88:82:33:da:83:0b:8c:a2:5f:43:63:3e:4f:18:2c:95:6d:
         fe:0a:fc:cd:b9:b1:ad:53:79:de:cd:bc:9d:75:05:03:39:8a:
         8c:c6:cd:1e:92:0f:ef:f9:6f:70:d1:cc:4f:c1:7f:99:2f:95:
         3b:c4:fe:89:72:50:0c:e7:7e:45:09:b7:33:b7:3a:33:98:ce:
         64:c2:77:72:6a:63:7a:bf:06:f4:2c:e3:62:81:0c:35:ae:40:
         48:92:13:bb:a0:d6:11:60:1c:a8:18:ed:0f:f0:47:58:39:45:
         b6:3e:31:c7:a2:24:1f:dd:3d:2d:cb:10:e4:11:29:25:58:7e:
         90:90:56:4a:0a:51:ed:89:d2:0c:56:ab:98:55:b6:0e:b8:0c:
         75:45:f8:0d:e3:21:d3:4f:a6:c3:6e:7f:61:e6:e5:df:55:d9:
         cf:dc:02:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:02:37 2026 by rpki-client