Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
File:                     uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft (raw, json)
Hash identifier:          CysLmFCAi6Jcrf7MXgNxo2bzprRoIs6a1TtQARXn8MQ=
Subject key identifier:   E5:E5:B7:07:71:B0:C8:92:1D:42:41:D7:12:C6:19:43:A6:40:37:08
Authority key identifier: B8:4C:D9:BC:3D:1A:8F:1B:46:6B:B6:72:A3:0B:C6:D9:67:E7:C5:27
Certificate issuer:       /CN=b84cd9bc3d1a8f1b466bb672a30bc6d967e7c527
Certificate serial:       01A08A559FE5796F443672AA74E4EC262B92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
Manifest number:          09A1
Signing time:             Thu 10 Sep 2026 08:01:02 +0000
Manifest this update:     Thu 10 Sep 2026 08:01:02 +0000
Manifest next update:     Fri 11 Sep 2026 08:01:02 +0000
Files and hashes:         1: uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl (hash: +wIS6k5wjk7z9TLzikFNMatzXcDQ4RX1oTNzhauWd9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:55:9f:e5:79:6f:44:36:72:aa:74:e4:ec:26:2b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84cd9bc3d1a8f1b466bb672a30bc6d967e7c527
        Validity
            Not Before: Sep 10 08:01:02 2026 GMT
            Not After : Sep 11 08:01:02 2026 GMT
        Subject: CN=e5e5b70771b0c8921d4241d712c61943a6403708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:f6:c8:41:1c:34:f7:d6:2c:a0:68:ea:aa:
                    76:da:90:f6:d8:5a:be:c1:c3:cc:2b:13:84:18:c1:
                    a2:38:3b:8c:b4:83:aa:6c:84:66:1a:ce:18:cf:ad:
                    a8:48:31:70:58:17:ae:45:9b:79:65:59:28:16:eb:
                    dc:c3:7e:39:70:b9:3f:ce:33:0b:fd:55:23:65:81:
                    25:f3:c4:fc:3a:16:53:ff:b7:63:00:50:98:84:53:
                    ea:ec:48:92:3c:c7:a8:83:d7:dc:22:0f:9b:69:fb:
                    6d:5e:8c:ba:7e:14:b7:bd:8d:5c:c7:23:0b:6a:3b:
                    20:c4:a4:51:69:9b:21:c7:8a:04:66:b5:2f:17:35:
                    57:3a:3e:7f:c8:f0:b7:5a:36:e1:f7:bf:99:d3:01:
                    85:1a:7a:16:eb:5d:f7:2a:7f:1a:c1:7c:7d:32:20:
                    34:3c:f8:2f:94:1d:36:20:52:27:9a:4e:a0:be:1a:
                    9a:23:41:b5:9b:99:79:73:48:be:cc:18:d1:c2:77:
                    99:9f:34:ef:57:1c:c0:72:12:bb:9a:9d:d5:c4:45:
                    73:57:3b:9c:46:db:61:7f:f7:20:f4:c8:87:96:f3:
                    cb:0a:2c:2c:c7:46:f2:9b:84:21:3e:09:0b:6a:86:
                    34:b1:f4:02:a8:93:b5:b7:02:86:65:a4:93:18:c6:
                    85:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E5:B7:07:71:B0:C8:92:1D:42:41:D7:12:C6:19:43:A6:40:37:08
            X509v3 Authority Key Identifier:
                keyid:B8:4C:D9:BC:3D:1A:8F:1B:46:6B:B6:72:A3:0B:C6:D9:67:E7:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5e:78:07:d6:33:90:18:c9:f8:c5:91:a6:f5:a7:fd:b3:f9:
         55:71:ab:22:80:ce:5b:bd:e1:4c:bf:7d:3a:fe:55:f6:1d:57:
         d3:cc:b4:28:b3:8d:a1:35:fe:70:5f:8d:1c:02:e3:0b:79:fc:
         85:ef:1f:2e:94:94:28:44:0b:eb:b0:14:31:77:69:34:da:75:
         93:ca:d9:3f:79:b6:e4:a0:0e:d1:7c:9b:4f:92:84:0a:97:b4:
         62:e2:82:5b:30:62:cb:ee:13:9e:43:40:26:aa:df:88:a8:c5:
         8d:08:30:80:20:ce:1a:d5:2d:93:f9:a2:96:f0:0b:5d:12:eb:
         ba:93:7d:c1:5c:d9:0f:90:6b:a3:62:87:86:2a:9c:81:69:46:
         11:34:b6:5f:64:76:3b:3b:20:5e:a1:3c:a4:d8:1c:9c:b0:bf:
         cd:b8:9a:b7:2a:57:ca:7c:01:e2:02:ae:41:b4:5f:25:d5:ab:
         1d:aa:ba:0d:2b:59:e2:f7:7d:ce:24:e0:47:c8:af:1e:4d:c5:
         6f:f7:68:0f:da:32:34:eb:21:1b:72:61:ad:c8:dc:72:ab:c8:
         b7:88:7d:94:fd:fc:07:b8:61:d7:84:85:e1:3a:dd:48:4c:57:
         d3:cd:48:5a:05:31:8a:51:92:4e:8b:52:1a:5c:31:f0:79:61:
         10:b3:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:25:10 2026 by rpki-client