Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
File:                     7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft (raw, json)
Hash identifier:          2kvA9ihzQ/J5UNF5jFublnl6qMKyFDNm+XK6KZ3Hhto=
Subject key identifier:   00:C8:F2:60:73:46:57:F9:47:5C:2E:68:D4:DA:B7:59:3E:02:13:8E
Authority key identifier: EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69
Certificate issuer:       /CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
Certificate serial:       01A15175CA5B8C7E2A69C7C4FE11327C1B0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
Manifest number:          0128
Signing time:             Mon 19 Oct 2026 00:00:36 +0000
Manifest this update:     Mon 19 Oct 2026 00:00:36 +0000
Manifest next update:     Tue 20 Oct 2026 00:00:36 +0000
Files and hashes:         1: 7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl (hash: RXq6tJWXMb95pv7Tld5lNXb9BmoXONR6CXI2Yk8DtdU=)
                          2: HCihUF_5hDpIqXqYUJrzBJumeUI.roa (hash: f9CXT6KQWpEiwwhV9yK1XmVpJI+yxpUMYfkH0B1xxTc=)
                          3: K5IqS4P79U0rKvWInjWR5wEFe2Q.roa (hash: 9q13mYvOIEN+e4PDt27Up4NO4FxU8lAzXOS+dNjdg84=)
                          4: d7Aas885l3KjzbxzDRzrGQP7qlo.roa (hash: 49B2bk75lbQU3fm+06dc2qLUyXkN1RUhU0NMkmUUNbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:51:75:ca:5b:8c:7e:2a:69:c7:c4:fe:11:32:7c:1b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
        Validity
            Not Before: Oct 19 00:00:36 2026 GMT
            Not After : Oct 20 00:00:36 2026 GMT
        Subject: CN=00c8f260734657f9475c2e68d4dab7593e02138e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:5c:58:bf:38:65:bd:cd:6a:1a:d8:53:2a:
                    6a:06:d9:f3:63:86:a4:46:55:e6:2c:63:ae:02:43:
                    63:78:66:b3:9b:f6:f9:42:27:48:91:5c:af:73:c1:
                    23:74:b7:49:7b:93:f2:f0:c1:3e:a3:b3:5d:a5:57:
                    9c:99:19:45:6e:64:3a:bb:e6:cc:78:a6:1c:3c:c5:
                    dc:bd:76:9f:97:2a:61:17:d1:1d:a3:c9:38:14:09:
                    99:89:da:22:6f:96:4b:a9:d0:37:cb:25:85:6a:b3:
                    19:94:87:e9:c7:a1:90:00:5d:ae:37:67:86:5c:45:
                    86:b0:d7:b9:72:36:0a:3e:48:a8:b6:85:b1:38:03:
                    17:29:dd:4f:30:07:34:ba:cf:eb:a2:f8:7c:bf:58:
                    46:45:ae:c6:d1:dd:40:01:26:44:5c:74:ef:c3:df:
                    36:38:54:17:60:71:31:82:56:f4:a6:53:75:73:97:
                    12:64:8c:ad:ac:76:d8:8a:93:52:06:56:87:68:eb:
                    3c:dc:b4:23:5b:69:74:81:99:4e:d6:f0:f2:44:13:
                    09:fb:b7:09:8c:a1:cc:55:55:28:d2:a3:82:43:dc:
                    76:69:8a:b4:35:ab:02:09:ac:95:02:97:fe:7f:4d:
                    c9:09:33:ee:3a:7a:90:8f:b5:a2:e2:21:b8:05:c9:
                    93:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C8:F2:60:73:46:57:F9:47:5C:2E:68:D4:DA:B7:59:3E:02:13:8E
            X509v3 Authority Key Identifier:
                keyid:EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ba:00:96:09:f9:a4:83:1e:3e:a4:a7:cd:7a:84:74:72:1d:
         50:88:5c:69:e1:d3:6e:29:20:20:27:a9:68:c6:07:57:1f:7d:
         d8:d4:74:9a:24:5c:8e:52:eb:23:4d:e1:bd:ce:7f:00:aa:6a:
         30:63:41:54:a6:0c:53:47:f0:5c:ae:29:a6:95:0f:d8:ba:91:
         3e:30:d7:2f:82:e8:7e:64:8c:5f:55:23:ad:66:52:66:db:f7:
         ce:6d:fa:4e:69:da:e4:d8:55:48:db:ad:d4:99:49:95:fc:6c:
         ac:09:7b:d0:93:c6:96:14:df:66:f5:bf:57:54:9a:7a:04:f7:
         5e:d0:21:48:0b:08:e2:6e:15:94:1c:08:74:79:29:03:c4:7f:
         af:c9:f7:f7:dd:a6:f8:59:5b:a2:02:0f:e5:48:d6:3a:16:e3:
         5b:e6:9a:1a:1f:2a:dc:a0:5b:78:7e:71:f8:01:f4:72:77:3a:
         c6:fa:77:c4:a8:54:ca:6d:6c:f5:d7:17:ec:9b:fc:be:93:24:
         24:24:8b:20:74:d4:78:8e:fb:c8:9c:76:a9:6d:2b:8b:99:cc:
         f7:41:73:21:74:85:66:b5:7d:80:c9:50:ef:e6:7d:ee:b7:51:
         5d:53:6c:1e:c9:e2:09:f8:ee:92:5c:e7:24:6e:f1:3b:11:cc:
         08:ba:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 14:28:49 2026 by rpki-client