Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
File:                     7sMTGXauon0XHGwmepjT84KmGio.mft (raw, json)
Hash identifier:          0BEmEGPEKK3380rHsq8Vobk42dlBKKW/VKnUv+wtxkU=
Subject key identifier:   27:E3:49:9C:06:F6:AD:DC:6F:54:A1:3A:2E:96:C9:05:B3:A3:4D:92
Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
Certificate issuer:       /CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Certificate serial:       01A110A91873347EDEE4AF168631D9450271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
Manifest number:          1484
Signing time:             Tue 06 Oct 2026 10:01:19 +0000
Manifest this update:     Tue 06 Oct 2026 10:01:19 +0000
Manifest next update:     Wed 07 Oct 2026 10:01:19 +0000
Files and hashes:         1: 7sMTGXauon0XHGwmepjT84KmGio.crl (hash: RXS1z85e/EGN+zNvmbW3KgyPD2W4XgsBgqvSK2f+ntU=)
                          2: L_bdGxJHykWkh6lnI23znPb9ZRc.roa (hash: ZEX+GgljqjjHrDsG1Iee4BuX7n/kzIjwqN8LRfjYRoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 10:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:a9:18:73:34:7e:de:e4:af:16:86:31:d9:45:02:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a
        Validity
            Not Before: Oct  6 10:01:19 2026 GMT
            Not After : Oct  7 10:01:19 2026 GMT
        Subject: CN=27e3499c06f6addc6f54a13a2e96c905b3a34d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:72:96:d2:94:f6:ec:8f:44:aa:15:78:f2:a2:
                    1a:9f:51:e3:f1:c3:f2:39:f0:fa:3f:24:f1:03:d4:
                    54:33:e1:ac:c8:c0:9f:33:96:52:d2:be:0e:ad:a0:
                    de:3f:f3:af:a9:71:0b:2c:ea:2a:ff:b9:b3:59:e3:
                    ad:8c:c1:f0:82:c7:c9:d4:01:eb:05:8b:2e:0a:3f:
                    c4:b4:a6:0d:5c:95:b6:55:dd:89:96:3f:97:35:ff:
                    a3:d1:f5:fa:9d:72:92:7d:36:3b:3b:ca:dc:11:fe:
                    ec:6a:e9:47:66:7c:91:f2:f2:ea:78:da:b2:fa:49:
                    1f:86:4e:85:a3:1a:59:c5:aa:0f:e5:e9:72:fe:97:
                    6f:00:6c:4a:95:9b:07:a5:a0:87:79:dd:05:f7:1d:
                    80:4f:f7:55:53:6d:ed:aa:39:0b:e7:2e:58:a0:22:
                    5a:c5:3e:4b:ff:62:d5:75:a5:6a:a0:bb:d6:d5:9c:
                    91:66:7e:f7:36:f2:a8:c3:40:3b:51:2e:23:2a:fe:
                    6d:44:5f:be:a2:d8:8d:9c:88:c0:fb:36:72:e7:dc:
                    f1:43:9b:31:80:54:7e:ea:f7:01:ad:b3:6a:a4:18:
                    03:3d:b4:ce:76:c5:74:40:50:6a:64:a3:fa:88:ac:
                    d6:40:9a:5f:b1:e3:e7:01:f3:63:a7:fe:8c:c4:8d:
                    61:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E3:49:9C:06:F6:AD:DC:6F:54:A1:3A:2E:96:C9:05:B3:A3:4D:92
            X509v3 Authority Key Identifier:
                keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:24:36:d7:02:e8:40:fb:6c:4d:20:2d:46:fd:a1:4b:ea:9a:
         42:96:7f:1d:4f:7b:c6:e7:40:84:b6:83:4e:11:5d:e1:d7:58:
         47:3a:b2:1c:ef:ac:d5:6b:1b:2f:e8:3e:f0:1f:67:ef:8b:70:
         1c:8f:fa:16:22:db:dc:76:fc:d7:da:e8:00:06:8b:d6:dd:a2:
         aa:b8:b7:98:12:68:81:6b:67:49:5f:64:cd:e2:b8:9f:c7:31:
         8d:cd:11:d5:40:d3:9b:44:fc:54:0b:eb:cf:cc:59:8b:05:f2:
         30:a0:f5:ec:63:40:16:7d:f3:5a:f9:e9:35:8a:63:3b:66:95:
         ab:ab:03:91:2b:53:bc:b6:41:35:b3:11:2b:e1:0b:a4:e4:b7:
         33:f6:d4:89:da:0b:c9:1a:f5:fd:8b:52:0e:e0:e9:2c:a5:f8:
         64:4e:e0:1a:3e:f3:95:cf:57:cc:f3:bf:28:92:0b:58:29:66:
         4f:08:4d:c6:b4:10:30:ef:de:bd:9e:13:d4:95:d1:d2:a8:e4:
         a4:ce:c2:7f:98:8e:fb:67:2f:ed:dc:11:fa:f5:3f:01:05:79:
         db:d7:1f:11:87:7d:24:8e:2c:e5:d9:85:f9:fa:fd:d4:bb:ee:
         bd:8e:e2:ce:9f:2f:87:32:ea:26:4a:2d:2b:22:9d:a0:9b:b1:
         c8:bd:b2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:09:54 2026 by rpki-client