Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File:                     7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier:          DADlt/FIGhnvjKvownM5sUH1sqVOnas9QHqnlKgjg94=
Subject key identifier:   C1:76:CF:F6:41:AE:80:8E:32:F6:4B:BB:57:89:DA:44:B9:84:93:6C
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer:       /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial:       01A001A5A5A4AE78E14C947DA1457A5444D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number:          0E66
Signing time:             Fri 14 Aug 2026 19:00:28 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:28 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:28 +0000
Files and hashes:         1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: tqfeeSrIEbYtFznNQ8v1FK+JMM26tJK+B1xjZHhR7wk=)
                          2: Mt1633RiBIpuKnZW3jSMaHpSdRI.roa (hash: 6BNDp2CLnyhsZWA//die5Cd+w8BRp6sCkxu8tySEnX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:a5:a4:ae:78:e1:4c:94:7d:a1:45:7a:54:44:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
        Validity
            Not Before: Aug 14 19:00:28 2026 GMT
            Not After : Aug 15 19:00:28 2026 GMT
        Subject: CN=c176cff641ae808e32f64bbb5789da44b984936c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:2f:a6:f0:05:a9:e8:de:77:0c:81:39:79:
                    4c:fc:f4:2a:b2:5f:4c:aa:db:58:9b:9e:29:13:19:
                    b3:37:b0:4d:32:2e:d3:4f:51:c5:73:1a:9a:db:3c:
                    c5:05:00:e6:ab:21:2a:66:ff:11:9c:7d:6b:c8:5b:
                    a6:97:0a:f8:c0:ca:b8:d1:a0:b9:9c:01:4a:3d:84:
                    17:63:7e:bd:17:7b:2f:2f:f0:a9:b2:33:d8:00:02:
                    c4:6e:7f:b5:fc:e8:63:3b:1f:b9:7f:6e:0c:26:18:
                    38:40:be:52:59:0d:2c:a2:bf:b2:2a:5a:21:6f:23:
                    d4:65:49:83:d7:98:f8:75:03:65:fc:17:18:08:26:
                    5f:b1:63:15:7c:b7:b3:fb:19:e8:7b:7c:69:a9:54:
                    85:de:e6:f5:1c:38:8b:94:62:f2:b9:3b:2a:31:cd:
                    1e:4e:7d:ea:20:5f:38:04:1c:3b:ce:02:ff:b7:08:
                    af:10:8f:da:fc:a0:fb:12:0a:02:76:df:84:ab:cb:
                    cc:26:33:38:43:bb:47:1e:39:f2:b5:07:f0:a0:4e:
                    16:a4:1b:1e:17:41:83:60:06:48:56:bb:b2:ce:8a:
                    0a:86:7a:04:1f:8d:ef:82:44:5f:4c:24:bc:9b:3e:
                    a7:ff:e8:b7:c7:be:41:bc:1b:9c:e8:f8:cb:de:b6:
                    ac:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:76:CF:F6:41:AE:80:8E:32:F6:4B:BB:57:89:DA:44:B9:84:93:6C
            X509v3 Authority Key Identifier:
                keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:74:3c:c1:07:29:08:de:a4:a0:94:a3:17:30:5f:21:ec:19:
         9d:f7:37:5c:e2:92:f6:0f:3a:06:84:fc:ee:67:d2:c5:f8:2a:
         bc:f0:e6:f1:49:89:5c:e6:55:3c:04:e6:f7:36:2e:64:04:e9:
         6f:fd:3b:9d:e6:b0:b4:f1:3d:11:e3:d3:a4:82:e7:07:e5:d2:
         9b:84:20:67:83:1a:c9:c1:71:fe:7d:15:9b:d8:04:d0:f6:c7:
         b6:ad:8e:75:46:04:50:1a:63:31:d3:3e:51:30:7b:62:73:b1:
         45:60:16:d8:25:46:c6:24:0e:26:32:b0:79:7d:14:8d:6c:ad:
         74:0e:09:38:c6:df:9e:45:b2:4a:91:cf:91:f0:19:8d:4f:b6:
         c2:ae:83:ee:7d:55:4b:65:20:69:7a:61:0f:f7:e4:e2:ca:9a:
         4e:03:36:98:f1:c3:1c:76:76:ae:bf:ec:6f:0c:af:fc:48:5b:
         f3:04:52:ed:ed:2e:99:52:43:9e:40:d7:73:d6:a8:54:c3:7a:
         b3:85:35:ee:e2:77:43:ad:08:2a:b8:cc:e6:b4:7b:47:97:f6:
         c8:fa:08:f9:17:2f:0b:4b:77:a0:13:95:09:27:47:e3:1a:83:
         59:2e:47:f1:cc:08:36:1b:d8:48:62:74:4b:6b:d1:e7:4f:ae:
         a8:81:0d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:06 2026 by rpki-client