Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
File:                     7t4TuXp8d4rYAT-v-isbtkh2LPw.mft (raw, json)
Hash identifier:          tzjqjn1OTGEmzxAbovuC/HbiwPeaSQpuzPC/0heKzfE=
Subject key identifier:   B7:44:F3:B6:3B:D9:2D:B0:EA:A5:A2:AF:82:64:30:E1:8F:77:FB:DF
Authority key identifier: EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
Certificate issuer:       /CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Certificate serial:       01A16C115DAF2E3CAE2BA53A31074288ED3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
Manifest number:          0312
Signing time:             Sat 24 Oct 2026 04:00:39 +0000
Manifest this update:     Sat 24 Oct 2026 04:00:39 +0000
Manifest next update:     Sun 25 Oct 2026 04:00:39 +0000
Files and hashes:         1: 7t4TuXp8d4rYAT-v-isbtkh2LPw.crl (hash: +w7WaWuLIr8nAT++uInBK6wurMekJfNXfO/4MfvCMso=)
                          2: WHAMvVOClu2e4_1oVJNIUdJFRfI.asa (hash: /GKBi3C1f7lecWi+UvNJYtTMLV5cIJZHh3Pf0e4Lw/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:11:5d:af:2e:3c:ae:2b:a5:3a:31:07:42:88:ed:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
        Validity
            Not Before: Oct 24 04:00:39 2026 GMT
            Not After : Oct 25 04:00:39 2026 GMT
        Subject: CN=b744f3b63bd92db0eaa5a2af826430e18f77fbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ff:f2:ef:96:7e:2a:1a:5a:e2:bc:2e:5c:65:
                    35:d0:5c:0e:20:46:10:0b:ec:c1:8e:85:97:66:27:
                    80:78:3f:06:58:f3:3a:72:91:0c:69:b9:9a:6c:f2:
                    1e:4f:3b:5b:4b:2a:19:6f:07:ed:f6:cd:40:fa:55:
                    0e:b2:78:55:1c:f4:3b:d1:75:57:dd:be:a6:a4:c3:
                    01:51:de:6e:78:68:84:cc:3d:3d:08:99:39:e6:42:
                    37:0a:8d:cb:01:dd:7a:22:8e:28:f1:58:78:1f:8d:
                    dd:eb:d1:8a:43:67:55:8d:c2:2e:cc:32:55:df:c5:
                    d6:42:c4:a3:b5:a4:ec:dc:e0:82:32:c9:a9:ed:8f:
                    fd:5a:54:92:c8:a2:3f:47:dd:2c:aa:30:c8:6f:20:
                    d8:1a:81:65:0e:57:37:19:79:95:97:f8:b1:3c:4f:
                    65:07:dc:65:75:f9:9b:03:57:39:4f:8d:bd:0e:c5:
                    36:f7:90:37:1c:56:d5:1b:76:0b:83:d7:76:12:26:
                    a7:20:ad:bd:6a:ed:ad:23:ef:91:07:68:2c:e2:c2:
                    4d:19:e8:14:55:4b:5c:3d:0b:42:7e:85:6e:48:23:
                    aa:76:c1:34:0c:1b:64:db:bc:23:1c:17:d4:28:16:
                    3d:a6:c0:e2:3a:88:11:ee:7d:35:f9:85:16:9c:f4:
                    e5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:44:F3:B6:3B:D9:2D:B0:EA:A5:A2:AF:82:64:30:E1:8F:77:FB:DF
            X509v3 Authority Key Identifier:
                keyid:EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:18:95:a1:fa:dd:a3:fa:93:7a:01:1a:c8:d3:04:31:c4:8e:
         2e:46:56:63:a6:79:df:e3:1f:3f:f3:af:26:b0:3a:14:dd:5d:
         c1:a8:1b:fe:74:e7:15:e4:8d:5f:4c:f3:4f:99:d0:46:29:70:
         36:27:63:8f:04:62:0e:f8:79:94:35:cd:b1:6b:e8:f5:26:ad:
         6a:08:88:22:60:92:98:fe:15:00:63:c5:77:6d:41:9a:d5:f5:
         0f:2e:44:f1:2d:d3:78:cf:0d:a7:49:61:e6:79:cf:d2:98:f9:
         10:53:d1:88:0a:9e:82:5c:65:00:58:f2:ca:81:99:f9:55:88:
         02:c7:fc:82:ce:55:51:00:fd:d7:d5:be:80:3e:d2:91:13:f5:
         98:ed:a2:5c:85:54:e5:1d:bc:ad:50:84:68:76:01:dd:7d:44:
         54:8a:05:dd:58:06:7c:ab:58:e0:ec:43:ac:78:71:3d:2c:4d:
         d0:d1:2c:b0:3c:e2:b0:b2:8d:4d:1c:70:7a:65:17:60:1b:44:
         3b:de:57:1e:09:34:c4:48:d1:09:f8:ff:f1:af:e4:d0:03:d8:
         0a:e6:12:4b:05:f5:24:90:71:0c:98:8c:61:6a:84:22:f1:bc:
         59:c2:77:16:e0:0b:8b:0b:09:3d:ff:7b:5f:05:07:92:3a:c2:
         10:32:ea:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 08:42:26 2026 by rpki-client