Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.mft
File:                     7V_L2XIhSr5_fQFu0bwTOtBh6u0.mft (raw, json)
Hash identifier:          /5BD24wo2Qfl8ITTumCmOEwZgsjouKMeZ7J5tcfsDBg=
Subject key identifier:   CD:F6:1B:DB:97:15:84:B0:21:7B:D4:55:6F:CE:0E:40:D1:4C:C9:5A
Authority key identifier: ED:5F:CB:D9:72:21:4A:BE:7F:7D:01:6E:D1:BC:13:3A:D0:61:EA:ED
Certificate issuer:       /CN=ed5fcbd972214abe7f7d016ed1bc133ad061eaed
Certificate serial:       01A04017B78C042E9E7DF027142DE1989106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7V_L2XIhSr5_fQFu0bwTOtBh6u0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.mft
Manifest number:          2E
Signing time:             Wed 26 Aug 2026 22:01:30 +0000
Manifest this update:     Wed 26 Aug 2026 22:01:30 +0000
Manifest next update:     Thu 27 Aug 2026 22:01:30 +0000
Files and hashes:         1: 1mu-oF5lEGtu3bKBru8G-eAjPDI.roa (hash: HG5xIfF52f1qSIktwkhA6u4wMdnhONyi0mxZYpcPZgY=)
                          2: 7V_L2XIhSr5_fQFu0bwTOtBh6u0.crl (hash: /BNXqK7kq7rosv5U4Yaj5mwV1JiIcugyz474ZS8My1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7V_L2XIhSr5_fQFu0bwTOtBh6u0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:17:b7:8c:04:2e:9e:7d:f0:27:14:2d:e1:98:91:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5fcbd972214abe7f7d016ed1bc133ad061eaed
        Validity
            Not Before: Aug 26 22:01:30 2026 GMT
            Not After : Aug 27 22:01:30 2026 GMT
        Subject: CN=cdf61bdb971584b0217bd4556fce0e40d14cc95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cf:bc:06:20:60:45:aa:5e:16:72:74:c2:12:
                    07:d1:9e:72:d9:62:28:0b:1c:af:d5:01:2c:da:1c:
                    e7:12:47:21:3f:c4:1e:26:61:20:72:28:d7:a3:c6:
                    db:08:33:d6:fa:d1:79:29:23:e9:53:ba:81:0a:4b:
                    c9:85:d3:62:0d:ed:57:97:99:05:1e:7f:7e:49:86:
                    7f:35:6a:cc:39:c9:cb:ef:6b:1b:ff:29:de:70:8b:
                    af:40:9b:a0:ca:04:35:01:d2:5a:a5:44:f8:49:0b:
                    14:31:c8:27:86:2d:b7:2d:70:c6:25:72:ff:f5:d1:
                    88:96:cb:4f:80:c0:4b:1c:f8:c5:fa:ba:e0:ed:8e:
                    03:70:76:80:87:45:a9:47:96:68:56:9b:26:e8:5d:
                    cf:79:60:44:a2:df:87:c9:9b:04:e9:09:3f:94:d0:
                    51:f8:f9:78:f5:eb:42:f3:ba:5b:a0:b9:1d:85:9d:
                    9b:fe:61:cf:2b:c4:22:24:6b:06:c1:41:33:6e:95:
                    bc:e2:d2:7d:d6:68:36:52:85:8d:99:00:3b:0a:64:
                    46:7c:03:6f:3e:e0:3c:a7:92:34:ec:41:49:1e:7d:
                    7b:bc:33:b4:db:90:15:9d:83:7f:08:a8:e0:b1:78:
                    46:a1:64:b0:cc:38:12:54:a2:d8:a1:1e:4b:be:81:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F6:1B:DB:97:15:84:B0:21:7B:D4:55:6F:CE:0E:40:D1:4C:C9:5A
            X509v3 Authority Key Identifier:
                keyid:ED:5F:CB:D9:72:21:4A:BE:7F:7D:01:6E:D1:BC:13:3A:D0:61:EA:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V_L2XIhSr5_fQFu0bwTOtBh6u0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:62:be:47:fe:77:4c:2c:39:e1:0f:23:7e:2e:a2:af:f4:d0:
         60:1a:de:46:2f:06:b1:14:4e:77:96:a1:6a:bc:28:12:b0:65:
         4f:74:c3:80:1f:90:68:5c:7a:53:44:8e:a8:96:29:7b:87:04:
         55:48:8e:58:8e:35:03:4e:38:2b:63:38:6e:fd:9b:c9:c6:e6:
         bc:06:9a:9e:71:46:8b:b2:59:b3:e3:99:bf:28:73:05:d1:46:
         99:23:61:10:a3:77:c7:5f:67:18:19:ba:73:af:dd:8a:81:9a:
         f6:f9:99:3d:3f:e2:15:2b:49:6e:0f:7a:7a:22:9f:c2:c6:e1:
         22:05:e5:2a:26:45:1b:72:2c:6d:4e:97:4a:ee:7b:fd:db:b3:
         20:57:bc:d3:ca:a8:eb:37:0a:a1:05:24:3b:ce:38:93:57:6c:
         67:bc:0c:68:60:68:3f:f6:df:af:4f:88:67:69:05:24:f7:25:
         b4:9a:9b:a8:74:01:dc:a4:30:58:89:6e:22:cc:cc:09:68:0f:
         33:d1:21:47:44:34:b4:04:6e:4d:0d:84:5b:af:95:e0:ef:fa:
         9c:e2:48:2d:e7:52:28:08:ce:55:d7:66:9e:04:0e:f0:d3:bb:
         44:97:2a:ca:0f:8f:05:dd:99:20:c4:2d:aa:02:26:dd:64:04:
         48:29:c3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:25:43 2026 by rpki-client