Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File:                     m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier:          qrpfZ3T1CpFnNdz3iDXb3UgxgPLBs2ywJsWyndpn1z0=
Subject key identifier:   FB:12:99:DF:E2:CF:D3:7A:FF:E4:8B:C8:A3:06:3F:5A:EA:A3:D2:22
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer:       /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial:       01A08942CECC78D4ADFBB220D626BE6D2F57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number:          1A4C
Signing time:             Thu 10 Sep 2026 03:00:51 +0000
Manifest this update:     Thu 10 Sep 2026 03:00:51 +0000
Manifest next update:     Fri 11 Sep 2026 03:00:51 +0000
Files and hashes:         1: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: BXPC4uNsOrjHShfW+jG2uUoCWIvzTIwsZ93z2FGnZN4=)
                          2: rUqausp6DPOMmVyNhwwtnCu8uOI.roa (hash: mGV2O68I7SUJIySepwpfOUclIH+MBiTk0XkuVOdxx9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:42:ce:cc:78:d4:ad:fb:b2:20:d6:26:be:6d:2f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
        Validity
            Not Before: Sep 10 03:00:51 2026 GMT
            Not After : Sep 11 03:00:51 2026 GMT
        Subject: CN=fb1299dfe2cfd37affe48bc8a3063f5aeaa3d222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:94:2f:2a:a3:d5:f2:e2:e4:ee:dc:32:12:51:
                    ae:9b:71:a6:2e:d5:1f:69:0a:bd:2f:79:86:a4:62:
                    c5:0c:ce:53:14:53:76:cd:a3:32:c1:e6:71:ff:2a:
                    41:6c:5b:4c:60:2b:3f:cd:1e:63:8a:3f:f5:1d:c1:
                    f4:85:8c:03:d5:17:3b:dc:8c:5f:a9:43:70:b9:5a:
                    94:a3:3e:7d:70:a9:fe:01:5e:c5:21:66:1a:58:9b:
                    e9:86:20:f2:66:40:4d:6e:0e:83:e7:df:5a:b6:05:
                    41:1f:ad:8f:95:ff:a9:ea:96:74:25:66:68:2a:c9:
                    35:99:28:52:57:5b:81:30:68:31:89:d3:3c:16:aa:
                    7e:4a:2c:9a:05:2b:c2:b0:c6:6b:89:b8:8b:ff:45:
                    0c:c1:99:ee:af:d9:b0:34:6b:bb:69:aa:c5:e8:85:
                    50:65:6d:b1:28:31:ae:55:8b:ef:f7:43:49:13:0f:
                    66:7f:2e:1c:9a:27:89:8d:e5:4b:01:f9:5e:67:51:
                    0c:cf:f5:c4:0a:1e:f3:69:5b:66:d7:58:1d:e3:e1:
                    e8:af:10:ff:ec:78:17:18:7d:0e:5e:ee:86:8b:f6:
                    38:6e:dc:e6:75:bc:bb:c4:5b:f6:60:1a:d7:0c:4d:
                    6a:f5:d2:e3:46:23:cd:9a:d0:02:94:02:00:ba:18:
                    49:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:12:99:DF:E2:CF:D3:7A:FF:E4:8B:C8:A3:06:3F:5A:EA:A3:D2:22
            X509v3 Authority Key Identifier:
                keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9c:1e:28:d4:65:72:e3:37:9c:81:e3:fb:24:b7:96:22:85:
         50:39:da:3b:dd:95:cd:cf:2b:07:64:7e:3c:a3:e0:d8:5a:34:
         02:d7:d5:32:ed:3c:ae:eb:58:bd:1f:6e:a8:a1:f5:da:2c:01:
         1c:4e:16:d3:67:96:05:52:9a:2e:5b:8b:fe:76:09:71:47:7a:
         47:09:36:0f:74:b8:f3:89:17:7e:e8:a7:aa:b4:5f:04:cf:ac:
         f3:c4:ad:74:f5:c2:54:0e:13:c9:69:36:e1:71:c4:73:41:fe:
         c1:9f:11:7d:5d:75:cd:e4:67:ac:13:b9:4a:c0:2f:7a:0a:fb:
         54:12:fb:37:5d:94:45:7f:8d:42:06:bd:88:83:30:81:61:91:
         8f:1a:a6:db:d4:44:63:99:bd:1c:72:19:c0:c1:68:3c:35:be:
         4a:f2:d8:24:3f:a7:8f:7a:92:cc:c7:10:e6:08:cb:59:7a:57:
         30:14:7d:0d:66:14:dd:67:80:19:5b:37:d8:83:c5:0d:d1:d3:
         ef:b3:3e:d5:9b:70:84:c2:2a:fa:6f:80:65:cd:f8:63:a8:35:
         20:6d:8e:fd:2a:a8:0a:d2:3c:73:65:2c:60:3c:16:23:17:62:
         e6:28:0b:d0:84:86:15:69:07:92:a4:37:f8:b1:8c:d1:57:5c:
         a5:1b:40:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:12:10 2026 by rpki-client