Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/7BDDXcq_u6cPeKF6oYhLR5fjpLI.mft
File:                     7BDDXcq_u6cPeKF6oYhLR5fjpLI.mft (raw, json)
Hash identifier:          vkYtqK6FrfDlNRP7KaeOBkPO6gheT5CuUaEwev1K4tk=
Subject key identifier:   C1:1D:D8:31:EC:35:48:89:56:59:A2:64:6A:16:90:2E:53:04:D9:BC
Authority key identifier: EC:10:C3:5D:CA:BF:BB:A7:0F:78:A1:7A:A1:88:4B:47:97:E3:A4:B2
Certificate issuer:       /CN=ec10c35dcabfbba70f78a17aa1884b4797e3a4b2
Certificate serial:       01A0E9D2816BAEE7F788A9AB114ACC60DEF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7BDDXcq_u6cPeKF6oYhLR5fjpLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/7BDDXcq_u6cPeKF6oYhLR5fjpLI.mft
Manifest number:          08
Signing time:             Mon 28 Sep 2026 21:01:22 +0000
Manifest this update:     Mon 28 Sep 2026 21:01:22 +0000
Manifest next update:     Tue 29 Sep 2026 21:01:22 +0000
Files and hashes:         1: 7BDDXcq_u6cPeKF6oYhLR5fjpLI.crl (hash: Xlq1ncBuq/0+dTnnkNRipS3QOu7NmG163yrHJ9H8mSc=)
                          2: twARUM7qtg-_svxxhZ9v2Br7j5k.asa (hash: IVeX1qT6cfN9j85T3K9lYgnlguv0xFUnxi2r2ZXPZOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/7BDDXcq_u6cPeKF6oYhLR5fjpLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/7BDDXcq_u6cPeKF6oYhLR5fjpLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7BDDXcq_u6cPeKF6oYhLR5fjpLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:d2:81:6b:ae:e7:f7:88:a9:ab:11:4a:cc:60:de:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec10c35dcabfbba70f78a17aa1884b4797e3a4b2
        Validity
            Not Before: Sep 28 21:01:22 2026 GMT
            Not After : Sep 29 21:01:22 2026 GMT
        Subject: CN=c11dd831ec3548895659a2646a16902e5304d9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d3:6e:89:c0:d2:f8:26:f1:0d:85:4d:e6:f4:
                    cd:af:31:7e:ad:55:4a:20:e9:63:fd:56:7f:a0:66:
                    6e:f4:a0:34:28:67:c8:8e:3a:ed:43:14:fb:16:4f:
                    d5:2b:14:d2:57:fa:0b:96:6a:7b:b9:2b:0a:57:bb:
                    40:1a:f2:4b:ed:4e:cd:a3:1c:1a:2a:e4:f6:53:93:
                    87:fb:d1:23:9a:04:1c:5a:9b:63:56:08:9d:91:a5:
                    59:ca:1d:ee:84:3c:8a:80:a7:04:93:83:b6:de:af:
                    86:ab:7c:49:09:bf:82:9b:88:c4:75:aa:cd:88:cf:
                    4d:e4:79:07:3a:23:d9:d3:ff:d0:33:80:e5:8a:e4:
                    1f:df:7b:21:2f:95:bf:2c:e4:50:fb:fa:95:b8:ed:
                    5a:82:b2:15:86:14:78:57:81:b9:71:be:05:ff:76:
                    88:ce:32:d0:e8:ce:2d:3e:03:92:b5:1e:c6:9f:0c:
                    1f:e8:22:7c:f7:88:dd:bc:73:0b:a4:af:6b:c4:b0:
                    46:08:6d:ea:05:37:51:bb:d8:77:3a:e1:54:0c:47:
                    20:7c:85:7e:86:0b:b8:90:8d:ed:c2:b3:b6:8c:25:
                    36:7d:df:6a:9f:b3:6e:d1:b8:67:44:f8:79:11:cf:
                    b5:2e:21:60:0d:62:cb:de:ae:1e:67:41:e1:80:a2:
                    a9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1D:D8:31:EC:35:48:89:56:59:A2:64:6A:16:90:2E:53:04:D9:BC
            X509v3 Authority Key Identifier:
                keyid:EC:10:C3:5D:CA:BF:BB:A7:0F:78:A1:7A:A1:88:4B:47:97:E3:A4:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BDDXcq_u6cPeKF6oYhLR5fjpLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/7BDDXcq_u6cPeKF6oYhLR5fjpLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/7BDDXcq_u6cPeKF6oYhLR5fjpLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:11:08:20:34:71:1f:9f:8f:c3:c4:6d:38:80:c8:d6:dc:4b:
         44:33:51:0a:e9:9f:01:25:17:a0:dc:77:51:34:24:20:aa:6b:
         e1:36:b6:39:2b:33:37:92:46:db:05:41:61:b4:b5:bc:c2:fe:
         a6:bd:bd:10:25:14:a4:b8:bd:40:37:ee:c9:7f:02:ca:58:fd:
         4b:30:1f:a0:ed:54:3c:ef:88:55:2d:c2:83:eb:06:80:52:04:
         b9:e0:59:f3:81:41:d3:ea:89:95:92:cb:74:b1:0c:ba:39:be:
         14:ae:30:16:fe:58:7b:8e:dc:da:d4:82:a0:ff:56:85:80:93:
         ea:da:99:c0:97:00:bb:e3:88:42:22:5d:f1:5d:45:e1:c0:66:
         9b:21:f4:b2:29:68:5c:b7:58:ac:73:0d:96:53:13:9b:66:95:
         5c:c8:08:89:1d:cf:91:14:8c:28:14:31:14:9c:de:b3:82:f8:
         7f:b7:77:1a:e5:bc:c3:4b:79:96:83:8b:b8:45:4a:53:fe:50:
         66:49:d6:84:41:14:46:00:c7:bd:28:7a:d4:e8:57:77:92:2b:
         37:de:96:c0:a4:d5:7d:18:eb:d6:87:05:8c:ef:25:18:78:ad:
         f5:63:88:55:e3:b2:cc:f0:c9:73:a9:58:2e:e1:6a:15:a0:54:
         fb:97:17:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:56:09 2026 by rpki-client