Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
File:                     hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json)
Hash identifier:          qNZy5lB0qsPWydqR4HhsThsiPCcGhCs4Gdjn6q3Dd6s=
Subject key identifier:   7B:34:A4:E7:DA:84:B5:B0:A7:01:57:17:19:0F:6D:6A:36:5D:C0:08
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Certificate issuer:       /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial:       019FA3E1359AF96E4F959CE89C0EC6D427A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
Manifest number:          0E12
Signing time:             Mon 27 Jul 2026 14:01:13 +0000
Manifest this update:     Mon 27 Jul 2026 14:01:13 +0000
Manifest next update:     Tue 28 Jul 2026 14:01:13 +0000
Files and hashes:         1: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: c+WJicDn+MYnc2p+Dl65YM9s0sXi4STj4jYyche3kmM=)
                          2: osHVQH8VsNLb4CfrwBHFrXKWzUM.roa (hash: VoKNeQ3l9XKj9V37+GVfXeQ4vJfOENAKEnCMkVGQkdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:e1:35:9a:f9:6e:4f:95:9c:e8:9c:0e:c6:d4:27:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84827de36da383801ec42a8043c787253776037e
        Validity
            Not Before: Jul 27 14:01:13 2026 GMT
            Not After : Jul 28 14:01:13 2026 GMT
        Subject: CN=7b34a4e7da84b5b0a7015717190f6d6a365dc008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:80:ea:ec:73:5a:13:16:6c:a0:24:4e:53:
                    02:10:b9:bb:39:8a:fd:d6:75:a3:02:10:de:59:72:
                    c7:49:f7:5b:55:03:6c:7c:50:15:6b:13:c8:ce:6f:
                    3f:4c:fc:4a:9f:79:5a:da:30:0a:10:95:d1:9b:00:
                    99:fb:07:30:61:c3:76:ea:fe:04:ec:e3:1a:9d:87:
                    5a:72:1f:01:7c:38:1e:30:dc:29:04:a9:cd:a3:53:
                    30:56:ad:d7:b0:0c:36:a0:fc:79:eb:99:82:32:b3:
                    99:4d:4f:23:59:71:0b:4d:35:91:ea:84:af:d0:1e:
                    2f:2a:0d:19:f6:3f:72:6a:10:76:9d:31:fe:e5:10:
                    0a:2a:f0:8c:20:19:2f:0e:00:dc:ff:41:3b:31:b1:
                    31:5c:64:16:a1:2b:80:95:1a:17:13:a8:26:15:a6:
                    89:00:60:fc:12:8e:7d:9b:62:ef:61:a7:01:c3:d2:
                    96:ba:36:43:ed:43:fe:67:d0:32:ed:c9:fd:1f:61:
                    ae:ef:14:40:b4:2b:61:51:0d:e7:7b:f3:7e:47:c3:
                    47:47:32:43:ba:9a:25:77:91:96:b8:a1:1b:52:d9:
                    f1:d5:b9:db:36:8a:8f:73:71:48:e1:10:cb:b0:65:
                    74:5e:8b:2f:c7:41:0e:48:d6:f2:60:7e:ad:16:98:
                    44:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:34:A4:E7:DA:84:B5:B0:A7:01:57:17:19:0F:6D:6A:36:5D:C0:08
            X509v3 Authority Key Identifier:
                keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:be:17:06:62:f2:e3:5f:87:ae:7c:20:c9:38:b0:a4:16:16:
         ce:3d:44:13:1f:6e:da:f3:af:ca:23:81:b6:ec:b3:a3:b4:12:
         07:48:b9:88:12:e5:3c:57:28:ae:8e:e6:fb:7f:21:5d:9f:c7:
         e4:77:ac:92:a6:77:86:b3:70:74:e4:27:9d:a0:2c:68:f5:e0:
         30:89:7d:b7:8d:7b:d8:54:81:3a:e5:ed:d6:93:64:d8:de:8d:
         0d:d2:7d:14:47:9c:52:82:32:00:db:60:0a:6a:4b:7e:9f:95:
         3e:99:ab:2f:1d:f0:28:36:11:fb:e4:c8:96:d6:55:f5:21:e0:
         03:b4:60:a7:b1:04:ce:80:65:b0:f4:46:24:42:be:44:b3:d0:
         f2:2d:a7:69:ae:76:9c:f2:63:d6:80:76:a9:44:73:4a:10:7e:
         c5:fd:6c:5a:72:a7:e3:c9:c8:57:2b:6f:50:74:d1:b5:f1:b7:
         51:4d:f1:cd:16:7c:e7:fd:97:a0:c9:25:b2:65:f6:79:86:d5:
         e6:38:9b:a2:38:75:05:55:bd:d6:2c:41:f6:bc:14:40:e9:b5:
         d5:6c:64:aa:a3:1b:c8:b5:6b:8b:f6:a6:c0:d8:53:fe:cf:a6:
         16:45:b7:ca:84:e1:a3:05:ae:23:ad:e0:45:73:89:63:02:23:
         10:ad:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:25:28 2026 by rpki-client