Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
File:                     7600TrX36x3uS4-ENftbnYdmPp0.mft (raw, json)
Hash identifier:          cZSOYe4NIZFQHCJ9WIY9ztAPqZ1WQOcwrbclqb8tDL4=
Subject key identifier:   60:3D:4E:40:C3:2B:DC:9D:86:6B:6F:7B:A8:BC:99:5F:E2:B6:7A:CE
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Certificate issuer:       /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial:       01A0BF1E4424661D6F78C8F28D6B32EFDEB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
Manifest number:          11B5
Signing time:             Sun 20 Sep 2026 14:00:26 +0000
Manifest this update:     Sun 20 Sep 2026 14:00:26 +0000
Manifest next update:     Mon 21 Sep 2026 14:00:26 +0000
Files and hashes:         1: 7600TrX36x3uS4-ENftbnYdmPp0.crl (hash: 6WuXdTHUZGJEzXf2SDU/RSiOWk8r90mOhyZPBATMyUw=)
                          2: AcXoWak-xK4ZKNSV_h-I-j9U8yE.roa (hash: M4sDqwOMIZizBB76sZa3y0HyKa7KEq67cgqNfzRhIus=)
                          3: NTOKxZSEQdmFFOX7bCsv4r0G0ew.roa (hash: rTzaWCrN7/PGI/tGitbdR8zCYLNID56tT4jNL15qESI=)
                          4: U_kRx4mriKz0wBVYQvlU8Ms7-xg.roa (hash: bPOAl1necdKvajjqeHPndZ0hEAM24k076WDHjCV7BMk=)
                          5: lQ47t4cinUX2Zd4lU-kVod80YBY.roa (hash: 9fN+vypDbYHdWtZGhrsCb1aCBdMbisC6WmQVwPJJbhg=)
                          6: vTbTYAIYT2eZUJb7TkwsnY2su-s.roa (hash: q1fiFZBvw+bZgutEKtCfyXhHllS8RfutEfOzQXScNMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:1e:44:24:66:1d:6f:78:c8:f2:8d:6b:32:ef:de:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
        Validity
            Not Before: Sep 20 14:00:26 2026 GMT
            Not After : Sep 21 14:00:26 2026 GMT
        Subject: CN=603d4e40c32bdc9d866b6f7ba8bc995fe2b67ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f1:35:58:59:e9:75:ee:45:f4:fa:42:f1:b3:
                    26:a0:5b:fb:c1:cd:0d:c5:ae:90:e8:1d:d7:51:0f:
                    50:4a:29:d9:4b:3c:7f:04:bb:0e:57:e6:03:9f:54:
                    05:88:d8:b0:ce:b1:b0:89:18:9c:43:39:47:11:f2:
                    53:43:37:ee:79:60:46:78:4d:74:4d:2c:3a:7d:c5:
                    a5:28:7d:83:fa:4e:f6:9c:e8:49:21:31:45:90:e8:
                    70:88:95:10:87:05:dc:8b:13:04:62:26:ed:7d:51:
                    a8:fc:44:85:f1:13:8f:00:42:f4:cf:ab:ed:d1:57:
                    78:11:ec:8d:64:48:94:27:35:9b:a1:47:8a:70:66:
                    85:dd:23:e8:a0:65:b7:98:ab:9c:5a:5a:84:4e:96:
                    51:18:45:d4:35:b0:79:7c:ce:e0:d2:e7:2d:0a:8b:
                    58:f4:23:fb:71:84:c9:38:29:60:60:1c:ad:0a:1a:
                    79:23:ce:06:76:b3:89:37:0d:51:66:a6:cf:0b:88:
                    24:dd:c3:7e:3b:8b:a0:93:d5:09:a5:fe:37:03:88:
                    b4:46:ae:45:7d:55:96:75:83:b6:f9:99:20:b9:c2:
                    ee:f2:69:1e:74:42:aa:a7:3e:86:cf:6a:7d:03:f7:
                    83:5d:ce:ab:e6:e1:cd:e0:3c:1f:b0:3a:78:48:32:
                    87:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3D:4E:40:C3:2B:DC:9D:86:6B:6F:7B:A8:BC:99:5F:E2:B6:7A:CE
            X509v3 Authority Key Identifier:
                keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:54:06:9f:ef:36:c5:6a:07:e8:53:aa:b4:ce:ba:43:c6:0c:
         78:06:ce:54:f0:6c:2b:ee:aa:19:0e:97:6b:de:fb:4e:a0:31:
         63:f6:90:94:a0:f3:58:60:f7:41:dd:03:f6:01:07:d3:52:fd:
         77:e4:32:a9:bc:a0:f3:96:0b:9b:de:f0:52:66:8d:fc:41:02:
         d9:9e:bd:4f:e6:ef:24:0e:73:e3:58:bb:b6:94:27:f7:15:05:
         10:6a:88:c8:13:8d:b8:5e:28:01:8e:8e:77:4b:92:40:f9:6d:
         31:fc:66:2c:9e:f8:59:68:bd:03:42:64:f2:cd:ce:a8:25:16:
         88:00:4c:9f:f9:7a:68:af:24:08:72:ec:d6:af:e4:68:b6:b3:
         7b:02:96:1f:77:6f:bb:97:ad:89:01:43:e1:96:f4:f6:b8:78:
         48:6e:76:10:21:4e:36:b5:31:4e:4c:61:f8:d7:2a:84:25:16:
         26:da:1c:04:28:b4:f5:20:fa:b3:92:aa:21:9e:2f:cb:49:8d:
         05:79:a9:44:b5:4d:6a:34:81:ef:d9:4b:7b:c6:23:3d:4f:07:
         62:f8:23:b2:1c:28:e1:14:f4:26:1d:9c:29:f5:af:20:d6:e0:
         4a:9c:a1:1c:a9:1d:f7:d0:9a:02:ba:5c:a5:dc:6d:60:c7:a8:
         5a:94:1d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:45:20 2026 by rpki-client