Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
File:                     7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft (raw, json)
Hash identifier:          3zuJ14DC2qVjDJOR8SM+gI3816JSkmvdg9KU3qnHd3M=
Subject key identifier:   F1:B7:91:24:E9:3E:0A:30:2E:F3:45:4B:67:73:5A:44:F8:1E:4F:EC
Authority key identifier: EE:A7:09:FE:AA:0A:9F:A0:88:6D:7A:B1:20:68:AA:7F:DA:97:9F:88
Certificate issuer:       /CN=eea709feaa0a9fa0886d7ab12068aa7fda979f88
Certificate serial:       01A0412A11076A791D94687FDABF4A69EE6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
Manifest number:          01FA
Signing time:             Thu 27 Aug 2026 03:01:10 +0000
Manifest this update:     Thu 27 Aug 2026 03:01:10 +0000
Manifest next update:     Fri 28 Aug 2026 03:01:10 +0000
Files and hashes:         1: 7qcJ_qoKn6CIbXqxIGiqf9qXn4g.crl (hash: IyUMZvu7xEOkIK/x79xG4R6EyCYAK5/rHzzgZZMLWWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:2a:11:07:6a:79:1d:94:68:7f:da:bf:4a:69:ee:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea709feaa0a9fa0886d7ab12068aa7fda979f88
        Validity
            Not Before: Aug 27 03:01:10 2026 GMT
            Not After : Aug 28 03:01:10 2026 GMT
        Subject: CN=f1b79124e93e0a302ef3454b67735a44f81e4fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:26:38:41:09:87:8e:fc:82:48:f2:84:88:
                    31:5c:78:91:ab:26:b0:48:03:85:6d:56:1f:d2:e3:
                    39:bc:c6:10:45:8c:10:17:46:11:11:e4:c1:dc:24:
                    55:d2:4e:10:65:52:1d:89:15:90:a9:c6:6b:c7:83:
                    51:e4:f6:0f:8e:39:2b:14:c5:41:61:3e:51:c3:bd:
                    42:e4:e1:b1:c9:77:f2:fd:93:00:e1:eb:62:82:8b:
                    b2:4a:9f:2d:ff:35:b3:80:00:bc:2c:ea:e8:18:99:
                    ae:dd:3d:7f:8c:61:83:a3:4e:a6:df:ae:98:42:72:
                    f7:59:e6:60:36:a0:1c:07:91:6d:7c:77:5a:16:c4:
                    bd:cc:d6:ae:17:ae:be:9a:4f:7d:80:f8:b4:3d:a6:
                    e6:68:bd:d6:d1:df:4d:ff:d8:cd:a5:58:ca:50:d1:
                    41:32:d6:cb:59:c1:eb:00:f3:c2:23:9a:50:15:79:
                    e0:01:60:5e:79:b6:d3:fb:58:d0:01:87:a0:d5:99:
                    7d:c7:ee:77:ab:08:19:5d:38:b1:82:5f:4d:09:60:
                    50:dd:02:74:06:c3:8b:ff:d2:fb:c4:b1:f3:f1:8a:
                    db:d5:2b:3a:56:bc:7b:b4:a8:0b:58:20:8e:2c:e9:
                    dd:0f:02:e9:dc:77:2b:12:85:ce:ee:82:29:4a:04:
                    a9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B7:91:24:E9:3E:0A:30:2E:F3:45:4B:67:73:5A:44:F8:1E:4F:EC
            X509v3 Authority Key Identifier:
                keyid:EE:A7:09:FE:AA:0A:9F:A0:88:6D:7A:B1:20:68:AA:7F:DA:97:9F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dce00d-72c6-4814-b587-ce27684a0e5a/1/7qcJ_qoKn6CIbXqxIGiqf9qXn4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:6f:7a:11:ea:b0:96:89:4a:4c:2e:2d:90:95:b3:a4:95:43:
         b3:b8:57:36:3e:65:21:ea:ec:ec:51:9e:39:fe:ab:29:0c:e1:
         ac:21:a4:66:9b:53:c1:54:f5:25:ce:dc:2f:f7:07:d6:41:58:
         05:34:ea:66:14:d4:a1:3c:1b:8f:d0:24:1e:1a:80:c8:b5:8f:
         7b:09:25:a6:0c:af:b9:5d:ff:cc:27:bf:15:6f:f9:18:8c:8c:
         60:de:ff:a3:91:24:94:6a:9b:87:d9:24:7b:7d:02:f0:6e:c3:
         4e:d2:7c:c2:ad:25:08:d3:5b:8c:6a:1f:4d:59:3d:e0:4a:39:
         2a:8d:67:df:77:04:38:25:fa:a4:d4:85:ad:55:82:1f:a3:4c:
         58:8d:43:8e:2f:f9:8b:75:bf:07:b5:fc:f2:e1:ca:1f:6b:34:
         a7:d7:34:ce:56:ae:5e:4b:5a:58:44:2c:a9:63:94:01:84:55:
         a1:2f:6d:30:0c:b5:16:1d:f3:c5:23:65:8e:e9:45:78:07:e1:
         b9:a6:db:c3:4a:79:ae:7d:39:5e:32:8e:44:64:24:26:e4:cb:
         03:63:fb:95:70:2d:38:d5:27:3b:49:84:0d:c4:44:f9:e5:33:
         81:43:01:cd:6d:e4:1f:5f:83:06:cf:38:39:b2:0f:9e:09:26:
         87:da:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:25:59 2026 by rpki-client