Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File:                     7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier:          pmCrEPYNmF7EwBDXmWK5pYW86V+1B9M8k1e92vfaSfk=
Subject key identifier:   69:0B:B5:7B:87:38:41:48:91:93:76:B6:36:4E:7F:7D:ED:91:0C:D2
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer:       /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial:       01A11899324B787C5EE822855F0AF9B8268F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number:          1898
Signing time:             Wed 07 Oct 2026 23:00:55 +0000
Manifest this update:     Wed 07 Oct 2026 23:00:55 +0000
Manifest next update:     Thu 08 Oct 2026 23:00:55 +0000
Files and hashes:         1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: wi5/3BCmElI1McT6axyZ91QK3If+DbhbLKfphYGpMbk=)
                          2: CM5yTRt39UsRzQIWzuT7HO7bzSE.roa (hash: RH4eRmyLdVDmBQ+RCsFz+zVNIdYG+Aj2Xj1CkOhS/oI=)
                          3: LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa (hash: bMz5HXK6775JKPVW+G1i9ymi7O9XK+msuKRHy3NE0Qk=)
                          4: psWOMQeMbdYZeEJwNKNEAJmZbBU.roa (hash: Kwf/BATNuOaMCMQQKCC+7fI7j3/5LLVOOW7HAw/+s1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:18:99:32:4b:78:7c:5e:e8:22:85:5f:0a:f9:b8:26:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
        Validity
            Not Before: Oct  7 23:00:55 2026 GMT
            Not After : Oct  8 23:00:55 2026 GMT
        Subject: CN=690bb57b87384148919376b6364e7f7ded910cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a1:3f:0b:60:6d:be:db:8f:30:2f:93:df:55:
                    bf:52:c8:8c:a3:09:25:c0:3f:02:70:00:14:b6:bf:
                    0c:e1:8c:44:2b:67:f8:8b:ee:81:bc:0e:d2:86:c9:
                    3d:32:18:b0:03:f6:f2:97:5e:5e:6a:34:05:ab:00:
                    80:54:d9:b0:d8:68:c0:25:6c:0b:1f:be:f0:14:ec:
                    45:3c:57:4c:c3:fd:ea:48:32:bc:e9:35:8b:07:cd:
                    f3:75:07:f8:94:b8:b8:77:ee:50:38:41:ce:db:b8:
                    79:36:ed:ba:41:ac:47:b3:ee:7b:d0:a6:25:c2:ce:
                    44:d0:13:e0:68:8c:9c:44:2b:12:9a:8b:a3:d1:45:
                    8d:c5:bb:5a:3a:0f:b5:f7:f3:de:59:2b:d5:c1:e7:
                    ad:bd:1a:9a:97:9f:49:0a:8c:19:e3:dc:4c:9f:38:
                    f9:67:10:24:cc:4a:3e:3a:bd:ae:43:3c:4e:55:a7:
                    b1:34:87:a0:f8:d0:24:de:07:55:2d:04:7f:f8:02:
                    54:ad:ec:bf:c4:a9:d2:59:8c:9b:62:70:dd:5d:48:
                    d7:78:48:14:3c:14:a3:9a:2c:8b:aa:59:ab:08:6a:
                    82:d5:56:39:8d:00:a6:81:80:62:7f:b4:9c:aa:ac:
                    5d:37:ac:fe:a0:54:74:25:a4:ed:41:9a:24:bd:4a:
                    04:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0B:B5:7B:87:38:41:48:91:93:76:B6:36:4E:7F:7D:ED:91:0C:D2
            X509v3 Authority Key Identifier:
                keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d1:c0:bf:6b:2d:02:0c:2e:bd:fe:0d:80:2e:d1:8f:12:bc:
         84:b3:01:19:53:69:b6:0e:ec:29:ea:ca:df:6d:77:98:33:95:
         a6:0e:8e:c9:cc:9c:22:09:30:24:14:c8:f2:19:82:94:a0:fb:
         ce:bc:b7:f3:fb:66:42:f2:26:58:60:62:e0:a3:41:1e:0d:ca:
         ab:1c:e1:6a:38:fc:28:aa:6e:a0:d5:ca:16:fe:45:0c:90:12:
         8d:8d:3c:51:7b:e7:ea:58:95:be:6b:56:59:fa:ee:4d:ad:93:
         cd:3a:3f:2c:2a:59:8c:c3:7a:cb:c0:c8:c6:40:b9:11:a1:64:
         4e:db:bd:18:41:ba:a8:8a:a9:d8:dc:93:4c:09:25:e4:11:95:
         dc:f9:8e:31:9d:40:65:63:9a:aa:5a:36:9b:db:3b:e6:df:4a:
         3b:50:6a:57:3a:87:dd:84:c3:02:e1:4f:24:ae:9f:7c:f4:a6:
         24:66:b6:b0:1c:be:af:48:86:56:fa:18:41:01:5f:4d:41:1b:
         96:63:b5:73:ac:07:5f:7b:3e:07:8d:5c:02:d5:05:a5:89:f7:
         1f:61:7a:d6:16:0b:50:0e:e2:fd:a5:d6:52:33:f8:57:bf:d4:
         e2:22:12:39:0a:54:e1:cc:63:04:47:ad:9d:81:83:d2:4b:13:
         7e:c3:e7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:05:18 2026 by rpki-client