Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
File:                     u7MU1-NpAfbep8ApGlFTO7Ik87M.mft (raw, json)
Hash identifier:          IS6UmhY1L05vDcfET2nW7QGPNQCWlX6kwTtOXYjs8rw=
Subject key identifier:   60:69:46:27:3E:C8:28:4B:39:A8:39:80:1B:2B:18:DC:82:79:C9:0E
Authority key identifier: BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3
Certificate issuer:       /CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
Certificate serial:       01A08A8D60A3BF8682652F9D79E17EEFDEEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
Manifest number:          0DC8
Signing time:             Thu 10 Sep 2026 09:01:56 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:56 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:56 +0000
Files and hashes:         1: 2H14aLA4Cp324rBqEO8djM07PBg.roa (hash: AyLJeaWqYxVRZJAqZbG+ccG5qtic1hAj5FwGn1wevMA=)
                          2: u7MU1-NpAfbep8ApGlFTO7Ik87M.crl (hash: NKmshBrePOBt5FjVNBUXGpZYkNxNHefl5MMkyHBQ9IY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 09:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:60:a3:bf:86:82:65:2f:9d:79:e1:7e:ef:de:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
        Validity
            Not Before: Sep 10 09:01:56 2026 GMT
            Not After : Sep 11 09:01:56 2026 GMT
        Subject: CN=606946273ec8284b39a839801b2b18dc8279c90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:86:2b:61:2a:1f:2e:3f:ed:42:e4:c7:14:d4:
                    21:fb:e0:35:57:1c:68:37:11:cd:76:b1:5d:1c:62:
                    da:d0:d0:f9:e1:32:4c:36:c5:45:92:bb:5e:3d:f3:
                    50:45:81:d3:b6:04:3d:8a:b3:c1:b4:02:91:8a:68:
                    88:f6:9e:a8:d2:81:9d:b5:39:e3:d9:ac:e7:8c:0d:
                    58:e5:ed:da:76:04:1a:3a:9c:5c:31:bb:36:0f:90:
                    75:ed:8d:ae:74:dc:5c:05:3d:21:55:4e:b0:37:dd:
                    7c:95:6b:0b:7d:52:2a:96:9f:64:0f:f0:69:90:29:
                    e1:25:fa:e5:e5:21:f3:12:93:21:ae:ca:7a:64:2e:
                    78:46:19:91:f4:c2:81:1d:a7:ee:db:46:75:36:5d:
                    5a:28:8f:98:94:13:b3:30:0c:5d:32:29:d7:b4:88:
                    04:58:ef:95:98:0a:dd:af:df:9f:bc:b9:7a:d1:59:
                    6c:48:05:9c:68:f9:d9:b0:3a:e6:5a:f6:06:a7:87:
                    33:2b:c5:af:6f:4b:d9:cd:8f:9c:14:8c:f7:30:09:
                    43:27:34:ee:8c:11:ff:cd:9a:97:b5:19:00:3b:dc:
                    d5:b6:ba:03:df:e9:97:5c:fa:52:38:67:d2:8a:d8:
                    bd:11:ab:02:3f:72:96:a8:f1:06:6d:72:38:b9:aa:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:69:46:27:3E:C8:28:4B:39:A8:39:80:1B:2B:18:DC:82:79:C9:0E
            X509v3 Authority Key Identifier:
                keyid:BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b7:64:3a:35:8f:0c:ff:4a:21:c0:ec:b0:ab:bf:af:b4:d4:
         3f:6d:92:d5:78:e3:6d:1c:41:e9:4f:79:44:3d:cd:fc:31:9b:
         b1:df:2b:9a:94:99:a4:7d:be:8a:e8:dc:54:6d:3d:28:d5:43:
         e0:79:97:8c:e5:31:94:94:fa:28:a7:5a:59:8a:15:31:f6:0b:
         2e:8f:1e:dc:89:7c:d7:cf:85:a1:ac:05:ae:d1:ed:f9:76:e4:
         e8:95:f2:47:ca:05:57:f1:ba:bf:bf:85:1b:81:a8:ad:2a:ae:
         08:c7:65:1f:e6:ed:88:b5:ae:91:d5:c4:17:60:c0:a6:c1:88:
         81:f7:28:7a:4c:cc:35:81:38:da:73:cd:28:d3:5d:71:bb:b0:
         c9:63:ed:41:72:24:64:63:bf:00:bc:b8:2f:f0:d9:4e:d3:27:
         e9:e6:b7:f5:28:27:d8:a5:10:c1:a6:be:96:f8:64:fe:c2:ee:
         d4:57:48:52:90:f3:05:1c:e9:1c:7d:18:d2:a8:16:8f:89:d9:
         a6:2d:6e:8e:15:f3:a7:1e:58:a3:18:3a:e9:8d:af:4a:72:d9:
         c6:93:eb:6f:15:13:a2:74:d7:7b:0b:2f:09:5d:a0:e0:cf:75:
         04:0a:45:89:3b:5a:63:ca:b1:4c:35:a7:79:79:ce:6e:be:b6:
         c6:5e:62:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:44 2026 by rpki-client