Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
File:                     7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft (raw, json)
Hash identifier:          z4Zcb4S3V+rUjg8zkOEal3O8AZt6L/1z+2wRjk60ATE=
Subject key identifier:   DE:23:8D:84:D0:CF:1C:4E:D3:BB:81:33:FC:06:32:53:DA:E0:B9:24
Authority key identifier: EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
Certificate issuer:       /CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Certificate serial:       01A13F02F94549A0E5FB92581DFD7CCC4C34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
Manifest number:          1A20
Signing time:             Thu 15 Oct 2026 10:02:01 +0000
Manifest this update:     Thu 15 Oct 2026 10:02:01 +0000
Manifest next update:     Fri 16 Oct 2026 10:02:01 +0000
Files and hashes:         1: 7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl (hash: Z3KXNIiZwwxCoYp3Tsft7AnrZSAuKZ2b0AzHzueavbM=)
                          2: eZj5aI-pFV4NqPbPLKEKvj8QCIY.roa (hash: Ql1Y8D/xx7OIIHVESezWmyzRYEY4CZx9sPnyUIH5jGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:f9:45:49:a0:e5:fb:92:58:1d:fd:7c:cc:4c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec917c0afda449ecc0429c046df50fbc959b4eea
        Validity
            Not Before: Oct 15 10:02:01 2026 GMT
            Not After : Oct 16 10:02:01 2026 GMT
        Subject: CN=de238d84d0cf1c4ed3bb8133fc063253dae0b924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:23:11:e4:b2:73:2c:9a:9a:b8:27:83:48:
                    d4:e0:15:38:f5:7b:17:9d:1a:a0:98:62:29:b3:da:
                    a3:d3:a8:17:92:04:73:2c:b1:9e:6a:f6:57:d1:b7:
                    2e:1a:e5:2b:93:77:73:6f:b6:84:13:d9:99:d0:f9:
                    64:97:34:8c:4c:99:4b:9a:ee:d1:a0:92:16:60:42:
                    c0:b6:ea:3b:e4:14:c4:ed:96:99:90:3b:b0:7a:95:
                    3f:e1:88:2d:c3:94:da:68:42:5d:8c:25:dc:1e:0d:
                    ed:34:85:e8:c7:79:e8:cf:84:b0:eb:2b:6c:97:86:
                    c5:97:6b:27:18:e8:e4:8f:93:27:5b:a4:59:6e:7a:
                    06:dc:d4:8d:2b:dc:48:c9:8b:fa:e9:be:f7:17:a4:
                    94:56:61:60:fc:4f:07:1d:1d:2a:bc:6f:de:18:c5:
                    09:b3:95:71:00:0c:66:2e:e2:16:2c:0b:48:09:b3:
                    ca:05:c9:ed:ad:fa:ad:77:6a:5e:9d:35:9e:ce:84:
                    78:b6:16:6c:2e:61:d9:7d:b8:3e:82:70:07:59:e9:
                    3d:c4:2e:7a:76:a8:70:8b:9f:a2:84:19:de:74:c7:
                    87:1f:41:66:4a:3e:07:5c:8e:02:9d:24:61:94:a5:
                    8a:84:76:5a:00:a6:69:44:cb:ca:97:31:2c:64:ae:
                    57:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:23:8D:84:D0:CF:1C:4E:D3:BB:81:33:FC:06:32:53:DA:E0:B9:24
            X509v3 Authority Key Identifier:
                keyid:EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e6:0e:91:89:91:ac:44:33:c9:34:57:69:ec:4d:14:6d:1a:
         c3:1b:4a:d2:53:48:e5:ce:3a:dd:33:61:ed:21:33:48:ec:80:
         04:d7:8e:5f:2f:3c:3b:9c:d0:2a:67:c4:f6:cd:7b:d9:eb:3a:
         60:b8:46:05:39:6c:23:11:aa:7b:e3:59:23:13:17:b1:26:ed:
         d3:ba:af:81:72:3c:72:cb:fd:11:04:65:ad:c2:4c:75:96:bf:
         50:1d:c5:31:02:e9:6e:2f:1b:e1:60:41:73:7d:d9:b6:49:d2:
         a7:68:28:5f:b6:bb:7a:65:a8:9f:4c:48:47:41:9e:d1:21:be:
         33:86:ec:6e:7c:c4:c0:79:fb:fd:e2:47:3a:75:95:d9:03:81:
         be:96:f7:97:89:63:ef:78:0d:93:1a:df:07:35:d3:9e:51:7e:
         45:b0:18:78:8f:c8:b2:ed:d1:30:25:3e:b9:85:eb:a9:b0:26:
         4e:e9:55:70:66:ab:aa:21:3b:41:d6:3a:ea:6b:30:23:75:09:
         b3:89:e4:70:7a:3b:f3:6e:00:5e:72:39:70:7b:20:ad:16:c4:
         c7:83:47:22:e7:9e:29:bf:0d:d6:b1:d8:08:26:0c:20:85:57:
         f4:24:cc:3b:20:77:73:70:61:df:40:8d:5b:f7:91:b3:f5:08:
         d8:8d:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:21:59 2026 by rpki-client