Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/7a8576-40ae-4242-82a9-203fc09d84b3/1/7mmOyB4Ap7dqDPtndxzLyCwrlBk.mft
File:                     7mmOyB4Ap7dqDPtndxzLyCwrlBk.mft (raw, json)
Hash identifier:          5RwrKqK/o2E3jLg38HVtJi+Cklpy6ckgAlUYlBuZIKo=
Subject key identifier:   78:3E:7E:CF:FB:F2:31:99:EF:D8:1A:9D:C2:AD:F3:5B:02:DB:10:6C
Authority key identifier: EE:69:8E:C8:1E:00:A7:B7:6A:0C:FB:67:77:1C:CB:C8:2C:2B:94:19
Certificate issuer:       /CN=ee698ec81e00a7b76a0cfb67771ccbc82c2b9419
Certificate serial:       01A0408589F80CC151CD606D7B196C8CD8A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7mmOyB4Ap7dqDPtndxzLyCwrlBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7a8576-40ae-4242-82a9-203fc09d84b3/1/7mmOyB4Ap7dqDPtndxzLyCwrlBk.mft
Manifest number:          38
Signing time:             Thu 27 Aug 2026 00:01:28 +0000
Manifest this update:     Thu 27 Aug 2026 00:01:28 +0000
Manifest next update:     Fri 28 Aug 2026 00:01:28 +0000
Files and hashes:         1: 7mmOyB4Ap7dqDPtndxzLyCwrlBk.crl (hash: NGsVIhdBW8UJp+ZYDBOWYtbF7u1iXBhy3IA1nZnfDWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7a8576-40ae-4242-82a9-203fc09d84b3/1/7mmOyB4Ap7dqDPtndxzLyCwrlBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7a8576-40ae-4242-82a9-203fc09d84b3/1/7mmOyB4Ap7dqDPtndxzLyCwrlBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7mmOyB4Ap7dqDPtndxzLyCwrlBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:85:89:f8:0c:c1:51:cd:60:6d:7b:19:6c:8c:d8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee698ec81e00a7b76a0cfb67771ccbc82c2b9419
        Validity
            Not Before: Aug 27 00:01:28 2026 GMT
            Not After : Aug 28 00:01:28 2026 GMT
        Subject: CN=783e7ecffbf23199efd81a9dc2adf35b02db106c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c6:07:b9:b8:22:0d:8d:16:49:cb:0d:05:50:
                    e9:63:60:61:6d:5e:b3:2f:9a:b3:52:f0:be:7d:26:
                    a9:56:f7:f3:98:6e:9c:51:18:22:9c:f1:6a:2f:1b:
                    fa:a8:67:20:67:61:9f:34:56:8a:9b:ce:19:d8:69:
                    9e:1b:32:bc:63:ac:f0:20:87:f4:be:d4:76:1b:c8:
                    44:e6:c6:c6:17:6b:52:75:76:9d:7d:b0:66:e9:4f:
                    11:f5:99:db:dc:5a:22:ff:d3:35:34:02:d5:64:11:
                    bc:10:dd:2a:98:80:f6:ae:56:9e:c1:b9:21:12:5a:
                    de:e7:27:05:07:6d:31:c9:66:12:eb:54:ed:bc:f7:
                    b1:d8:fd:8e:fd:ba:10:ed:1d:03:d4:9c:ff:1c:37:
                    42:fb:0c:70:0a:44:19:82:22:27:f3:16:51:f7:6c:
                    0a:ff:e2:d1:e8:89:75:89:3d:16:40:b6:d5:a1:73:
                    51:52:27:b6:5b:d6:84:73:2e:3f:8a:a4:c7:5e:21:
                    3d:13:0a:97:81:e3:1e:f1:a3:15:bb:7f:2c:c8:62:
                    38:62:b3:47:09:d1:7b:7f:47:a8:4c:22:55:6f:41:
                    09:c9:17:8c:f1:3b:28:b4:9f:c8:f4:88:d9:da:8c:
                    14:72:fc:ad:95:fd:a2:bc:f0:26:22:48:fb:05:52:
                    08:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3E:7E:CF:FB:F2:31:99:EF:D8:1A:9D:C2:AD:F3:5B:02:DB:10:6C
            X509v3 Authority Key Identifier:
                keyid:EE:69:8E:C8:1E:00:A7:B7:6A:0C:FB:67:77:1C:CB:C8:2C:2B:94:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7mmOyB4Ap7dqDPtndxzLyCwrlBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a8576-40ae-4242-82a9-203fc09d84b3/1/7mmOyB4Ap7dqDPtndxzLyCwrlBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a8576-40ae-4242-82a9-203fc09d84b3/1/7mmOyB4Ap7dqDPtndxzLyCwrlBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:78:7b:63:e1:8c:e9:4d:e7:3c:e9:f3:dd:a7:10:1d:c6:fc:
         2d:d6:c3:53:18:26:7a:c7:aa:5a:12:81:95:7f:17:7a:6d:2f:
         c5:2b:98:ea:0d:25:88:60:08:4e:98:aa:87:22:3c:be:82:aa:
         b4:8f:09:31:cb:f7:69:94:73:97:b3:de:7a:86:55:5b:f5:c8:
         d9:ee:38:92:55:e5:e5:8f:4a:73:fe:70:f3:b5:0b:15:e1:e1:
         46:a0:4e:30:e3:7f:c4:5c:9e:50:01:4f:e0:31:bb:99:4a:e7:
         13:30:06:ca:f5:5d:ef:a8:81:7a:82:9f:e9:f0:dc:ec:80:73:
         78:1f:9f:87:e4:ea:c8:37:5b:20:28:2f:92:ac:55:2a:bd:9e:
         f4:cc:e6:70:b8:7c:69:9b:e0:e0:22:8e:ee:6f:ac:92:b8:8c:
         3d:55:cc:b7:6a:fa:e7:84:5e:cf:82:54:f8:18:2f:fd:65:13:
         e9:8f:07:15:0b:7f:f4:38:17:36:13:c4:dc:c3:a4:bc:2c:bb:
         00:49:b7:26:fd:2e:48:cd:94:66:0f:eb:e1:7e:8e:14:97:ff:
         4c:f8:d5:cb:ce:54:b2:ab:f5:0f:44:b8:bc:82:b0:ae:60:49:
         08:d1:46:6f:59:d2:f2:09:09:d0:e7:65:d4:94:ff:cb:f0:a7:
         44:26:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:55:05 2026 by rpki-client