Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft
File:                     7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft (raw, json)
Hash identifier:          /Nk2b2uGiV1gr+nCkp3FsAVy3+zY1tdbR/3GPPsc8XE=
Subject key identifier:   BB:51:F9:C8:C2:9C:DD:87:C2:97:15:69:9D:71:34:6B:D5:C0:42:22
Authority key identifier: EC:61:B7:A6:AC:31:8C:C3:30:FA:5E:B2:4E:0F:D2:48:36:01:96:EF
Certificate issuer:       /CN=ec61b7a6ac318cc330fa5eb24e0fd248360196ef
Certificate serial:       01A003CB2BB9A89BADDD87296BCE92C63C06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GG3pqwxjMMw-l6yTg_SSDYBlu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft
Manifest number:          C7
Signing time:             Sat 15 Aug 2026 05:00:41 +0000
Manifest this update:     Sat 15 Aug 2026 05:00:41 +0000
Manifest next update:     Sun 16 Aug 2026 05:00:41 +0000
Files and hashes:         1: 7GG3pqwxjMMw-l6yTg_SSDYBlu8.crl (hash: l5CvzqBmoZthKF1P0SNCDdx1uFTjxQVrBBS5dzYsz/w=)
                          2: Ijn8-P6TGDIDFNlQB8DmmxgPL1I.roa (hash: gpvXxQg5tH99OjYIfkw0uUChypTbhupMYAjwAZjaKkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GG3pqwxjMMw-l6yTg_SSDYBlu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:2b:b9:a8:9b:ad:dd:87:29:6b:ce:92:c6:3c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec61b7a6ac318cc330fa5eb24e0fd248360196ef
        Validity
            Not Before: Aug 15 05:00:41 2026 GMT
            Not After : Aug 16 05:00:41 2026 GMT
        Subject: CN=bb51f9c8c29cdd87c29715699d71346bd5c04222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:21:0e:ef:df:0a:a0:04:a1:0f:67:f1:04:
                    7b:85:01:b5:27:9b:02:d0:d9:ca:d1:45:99:22:b1:
                    c9:d6:82:a9:cf:00:5a:71:0b:f1:30:c8:bf:df:80:
                    cd:00:b0:08:ed:66:c2:66:34:a3:ca:61:c4:a2:b2:
                    6d:05:b5:cb:d7:a2:39:da:81:6e:69:b6:1e:fd:0b:
                    da:47:42:bb:14:b5:a8:9f:89:d3:66:e5:eb:16:cd:
                    a5:dc:ff:4b:9b:bf:9b:15:90:ed:1a:22:a9:f8:7f:
                    5d:4f:84:7b:0b:dc:cf:d3:88:c5:aa:e3:0b:c8:5d:
                    db:08:a8:7a:b3:f2:db:c7:35:7a:60:1e:75:6d:96:
                    eb:ee:8d:b2:e3:7e:a1:9c:83:c9:de:10:44:b5:18:
                    59:f6:1f:8e:bc:56:c1:72:be:f0:6a:a8:1e:97:c5:
                    85:d5:1b:78:54:65:ae:f7:c9:a7:e7:b9:bc:62:19:
                    99:44:82:20:24:1d:80:3c:8e:98:fc:f4:8f:9c:b8:
                    4d:b6:98:8f:83:96:e8:7c:b3:db:99:1a:bd:63:d6:
                    88:bd:82:33:a6:b3:2f:f1:72:05:7a:e4:c2:c5:2d:
                    ed:7a:58:7f:e5:cf:6d:eb:65:e9:0d:5a:0f:e6:9f:
                    df:9b:bb:de:fb:e4:d1:39:0d:a9:98:df:06:85:36:
                    03:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:51:F9:C8:C2:9C:DD:87:C2:97:15:69:9D:71:34:6B:D5:C0:42:22
            X509v3 Authority Key Identifier:
                keyid:EC:61:B7:A6:AC:31:8C:C3:30:FA:5E:B2:4E:0F:D2:48:36:01:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GG3pqwxjMMw-l6yTg_SSDYBlu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff4762-22e1-4b2d-9733-5280b9ad1d0e/1/7GG3pqwxjMMw-l6yTg_SSDYBlu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2d:cc:75:66:ef:9f:20:6a:1e:01:55:4a:d0:e1:dc:a9:58:
         85:fd:98:a2:a6:62:0f:6f:08:4e:65:68:4a:31:76:63:66:e1:
         75:23:d6:36:92:15:68:8a:0b:3e:b8:1b:55:92:f7:2a:3c:90:
         6a:5a:0b:ca:87:63:5d:46:b4:12:11:3e:85:2a:e9:71:be:3e:
         e4:56:05:52:68:20:b8:b8:f3:08:7a:34:fe:e7:e3:a4:33:6b:
         ce:84:51:1a:03:1f:35:d1:f2:50:41:e6:d3:82:14:92:58:b9:
         e9:5d:2f:79:f2:31:ad:83:95:67:9d:3e:0c:6b:19:c7:61:fb:
         ab:28:b7:83:70:96:2c:92:13:9e:3b:38:65:1c:9b:b3:5d:ec:
         e3:fe:85:50:a8:f3:24:c0:ac:2f:4e:2d:6c:1d:49:c3:a8:e2:
         ff:92:71:d6:43:fd:e3:47:db:4f:fd:34:83:fb:45:4f:0f:cf:
         50:4a:79:7d:52:cc:67:d6:f5:d5:47:7a:3d:87:bf:7b:30:4a:
         f0:9a:58:13:c2:dd:72:41:7a:ea:42:9e:1d:e1:cb:06:22:09:
         72:06:84:50:0f:61:93:ea:84:40:3f:8f:a5:88:5c:3c:a8:db:
         87:fd:1e:97:45:9d:c8:3f:d6:83:e3:32:2e:81:37:73:02:d8:
         1b:0f:47:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:48:45 2026 by rpki-client