Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
File:                     7t4TuXp8d4rYAT-v-isbtkh2LPw.mft (raw, json)
Hash identifier:          UAgzU25HLr6l8XbO1pdePX9kQW/iJH856vwzgI7V3YM=
Subject key identifier:   D0:99:7A:4C:F5:D7:E6:21:87:5A:7E:B2:DA:46:3E:08:5B:75:52:75
Authority key identifier: EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
Certificate issuer:       /CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Certificate serial:       01A040BB9B75A606A5724D3F527B40B5A5D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
Manifest number:          0277
Signing time:             Thu 27 Aug 2026 01:00:31 +0000
Manifest this update:     Thu 27 Aug 2026 01:00:31 +0000
Manifest next update:     Fri 28 Aug 2026 01:00:31 +0000
Files and hashes:         1: 7t4TuXp8d4rYAT-v-isbtkh2LPw.crl (hash: CL6rQWPk3hWa/yyX1ymX8TynHqbRFpS5DTcFpIM1KgA=)
                          2: WHAMvVOClu2e4_1oVJNIUdJFRfI.asa (hash: /GKBi3C1f7lecWi+UvNJYtTMLV5cIJZHh3Pf0e4Lw/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bb:9b:75:a6:06:a5:72:4d:3f:52:7b:40:b5:a5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
        Validity
            Not Before: Aug 27 01:00:31 2026 GMT
            Not After : Aug 28 01:00:31 2026 GMT
        Subject: CN=d0997a4cf5d7e621875a7eb2da463e085b755275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:ab:14:72:a5:e1:1d:b4:b4:f1:34:0b:b1:
                    9e:e5:a6:36:82:fb:63:f5:9d:14:c9:57:7b:55:d9:
                    f7:ab:99:1e:ef:3f:2e:60:72:df:e1:6f:68:90:10:
                    c9:28:f6:47:d2:ea:9b:ee:97:67:39:a4:b0:93:13:
                    64:ca:a0:7e:df:a1:f5:dd:b7:a1:c4:cd:0a:6f:22:
                    40:b7:db:aa:8d:e1:1d:7e:84:63:de:7d:4c:89:3a:
                    b2:2c:54:14:99:a0:f7:fa:63:4e:5a:1f:81:95:39:
                    28:9a:fc:4d:b0:99:70:4e:00:c3:6f:c9:d4:54:ae:
                    a1:9e:b3:21:5a:c3:51:d8:7d:1c:cb:94:48:ee:e9:
                    0d:33:c9:ca:5b:7e:5b:b7:7e:44:6d:3f:e5:c3:1b:
                    b4:5f:fa:25:92:ac:e1:37:10:74:82:8d:46:ba:c7:
                    43:48:40:18:d8:6c:4c:94:24:e9:07:f5:bb:cf:86:
                    28:8d:a6:44:e5:e5:a4:43:f9:91:08:1b:d0:2d:ff:
                    28:3d:ee:ac:95:ed:f6:2b:6d:fb:69:c6:31:c5:82:
                    4d:ca:82:bf:73:d8:71:f9:b9:74:79:8d:24:1d:bb:
                    5b:2b:b1:02:15:ac:c0:14:db:4d:fc:02:ec:4b:12:
                    c1:dc:ff:2a:c1:06:5e:f2:7b:f6:32:e0:71:59:ae:
                    de:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:99:7A:4C:F5:D7:E6:21:87:5A:7E:B2:DA:46:3E:08:5B:75:52:75
            X509v3 Authority Key Identifier:
                keyid:EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4a:50:a3:69:a1:3d:7f:b1:85:dd:97:3b:e3:3e:9c:bb:27:
         71:ce:24:da:75:91:ad:d1:86:e7:54:b3:49:c8:98:a3:ed:94:
         c3:41:a1:2b:0e:02:f2:09:a2:4e:10:ef:e1:21:7b:6b:5b:24:
         9c:ef:e8:87:2f:85:ce:5b:5b:e2:cd:0b:4a:af:c3:a4:57:c5:
         44:31:fb:5d:a3:1b:06:f5:4d:91:2a:f2:c0:49:85:d5:aa:81:
         47:02:22:72:a7:de:1a:27:b8:35:df:2d:57:3b:f6:44:c3:f8:
         6a:4f:25:42:b1:9c:0b:08:a6:f9:d8:15:2a:84:2a:89:ae:24:
         80:f5:28:fb:1f:ad:66:29:f1:70:0c:e0:16:3a:fd:1b:bb:69:
         e3:d4:af:59:e9:5f:0f:d0:33:48:81:65:1c:63:e0:6f:49:05:
         15:e9:92:2b:6a:a1:42:08:27:7d:af:19:2c:65:4d:28:1b:a3:
         51:c8:db:8e:3a:59:38:97:5b:9e:d6:12:60:c1:5d:d8:c7:8f:
         d7:89:2e:fc:17:9b:e2:0e:3f:7d:44:21:30:fc:e0:38:07:b8:
         96:f6:25:17:d9:28:9e:ce:2c:56:4f:59:8d:e0:85:0e:eb:eb:
         b0:75:fe:1e:6a:1b:be:0b:60:9b:62:1c:91:0e:54:6a:79:26:
         f1:f2:bd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:56:51 2026 by rpki-client