Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
File:                     7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft (raw, json)
Hash identifier:          b9ZfWcO8NvlEsiGAEMEPvWh63aulzTESi2djmA+Bwcc=
Subject key identifier:   60:F1:46:5E:D4:08:EF:66:A1:A0:C5:6E:76:87:73:37:88:17:79:AA
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Certificate issuer:       /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial:       01A11B63718ACBE88558AAB509841ACFE392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
Manifest number:          1A91
Signing time:             Thu 08 Oct 2026 12:01:04 +0000
Manifest this update:     Thu 08 Oct 2026 12:01:04 +0000
Manifest next update:     Fri 09 Oct 2026 12:01:04 +0000
Files and hashes:         1: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl (hash: vgNkgn87KEqSHeorkb5ViIjkCg7CTPeO9HRwUbKMK/s=)
                          2: 7ymJo6ToPK4ZRuDJzRSPCXxaPm4.roa (hash: ytpfJ9vNS5JwRc89yU0uWlEyTvzj77675KecMolldFc=)
                          3: Es0ua-vxyxjcsLvaoi1mzGRFLDs.roa (hash: f1TQFLKcOmbSU1W2vbI+gyaehRaTN+oWeXN0L2tAh3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:63:71:8a:cb:e8:85:58:aa:b5:09:84:1a:cf:e3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
        Validity
            Not Before: Oct  8 12:01:04 2026 GMT
            Not After : Oct  9 12:01:04 2026 GMT
        Subject: CN=60f1465ed408ef66a1a0c56e76877337881779aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:d6:e6:e2:a4:d3:51:84:02:a0:c9:51:20:
                    6f:e4:bd:d9:01:4e:cc:49:b4:c0:e8:60:8f:d5:9f:
                    bc:ee:5b:e7:d5:32:12:f4:13:35:45:c2:83:a6:48:
                    24:5f:66:3a:ea:c8:c5:3f:d1:ac:e7:ae:a5:79:8b:
                    7d:49:5a:15:b9:f7:66:ba:26:1f:2c:5e:04:c9:6f:
                    db:c8:0d:cd:1a:16:0f:e8:0c:f0:3e:e7:dc:a4:b9:
                    03:e8:61:a4:25:03:de:c4:54:05:83:50:a1:45:66:
                    53:d2:56:d0:32:1e:e5:10:cd:fa:32:68:c0:fc:00:
                    22:16:61:2a:9e:84:93:ff:d8:d6:59:be:06:94:01:
                    eb:fc:6d:64:ff:94:60:12:21:d9:f7:7c:a3:f4:05:
                    dd:f9:28:06:04:32:37:2d:94:d4:10:7e:cb:4a:58:
                    ab:de:fc:f2:8e:75:6e:e6:a1:a1:9a:60:70:87:8b:
                    50:0b:e6:80:b6:05:27:a8:5f:96:a8:4f:1f:59:2c:
                    09:43:ef:c3:cb:00:79:4e:4d:b4:c5:c3:8e:ec:38:
                    df:9d:b1:fc:05:94:23:40:48:4d:80:a3:b1:ae:59:
                    c8:b2:22:31:98:ad:94:b1:b7:ca:a5:0e:21:89:ce:
                    84:34:a6:1e:d2:ed:71:1d:79:d8:26:f2:0a:3f:27:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F1:46:5E:D4:08:EF:66:A1:A0:C5:6E:76:87:73:37:88:17:79:AA
            X509v3 Authority Key Identifier:
                keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9b:df:e6:39:eb:9b:d8:01:85:8c:c8:a6:6c:35:9a:19:0d:
         c4:41:91:e4:79:a1:d6:3f:c1:e1:8d:08:b3:22:4c:a7:ac:cd:
         8c:34:af:b5:61:0e:07:83:c9:c7:c4:6e:a6:cc:2a:2f:ff:f3:
         89:2f:2c:c6:ad:6f:e7:df:8a:cd:1d:be:ff:ce:91:6e:94:b8:
         c1:98:6e:e7:c4:b7:45:a9:40:15:7d:ec:58:59:98:22:0b:c9:
         91:12:d0:a5:53:cf:ef:a2:10:27:e3:61:42:4a:65:59:38:9b:
         09:cf:ef:0e:11:be:dc:cb:33:08:4e:6a:c8:b4:98:49:2a:74:
         a6:ad:24:ec:fd:de:c2:b9:5d:b4:3c:ab:f5:40:16:b8:7e:72:
         d9:87:4f:94:fa:bf:91:21:92:9b:4a:d0:3a:14:6e:50:09:da:
         17:4f:09:ec:a2:22:36:b2:31:d0:6d:2b:e0:b6:00:93:05:24:
         76:4d:5b:4d:6f:a2:b0:45:10:1d:32:81:ed:ea:9c:30:f9:69:
         14:0c:b5:96:1f:a1:45:1c:f8:3d:e6:83:46:67:11:cb:d3:5c:
         06:60:2d:74:8b:0a:e2:44:f2:ed:32:1d:b8:c1:1a:2d:f0:2d:
         84:13:02:ff:2f:c7:29:6b:40:f5:cb:96:98:db:34:88:cf:0d:
         07:b4:e2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:16:33 2026 by rpki-client