Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
File:                     7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft (raw, json)
Hash identifier:          BggXXnNqKZfZ07kCWOWNeFyZ+INzDJ+ZHIpK897HmfQ=
Subject key identifier:   F7:2A:51:E5:C1:5E:71:32:58:4F:A6:1A:54:A0:61:CA:0E:E6:EC:F0
Authority key identifier: EE:9F:FE:53:E6:2E:29:EA:A5:BD:6A:A8:17:89:8D:3C:38:F8:FC:A4
Certificate issuer:       /CN=ee9ffe53e62e29eaa5bd6aa817898d3c38f8fca4
Certificate serial:       01A08E69EE11FDE143209B2A27A642AA444F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
Manifest number:          C3
Signing time:             Fri 11 Sep 2026 03:01:41 +0000
Manifest this update:     Fri 11 Sep 2026 03:01:41 +0000
Manifest next update:     Sat 12 Sep 2026 03:01:41 +0000
Files and hashes:         1: 7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl (hash: lJO3V1fmH0qoIL1J7YhvXLrrmH4trQa2QzpCfokiAQI=)
                          2: HknPQh-0Yk6yaxmwcZa5py8_zl0.roa (hash: wuIV5US3SZC05FFGszlUmrIVNWyDFMwcOW0Vs4e0MUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:69:ee:11:fd:e1:43:20:9b:2a:27:a6:42:aa:44:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee9ffe53e62e29eaa5bd6aa817898d3c38f8fca4
        Validity
            Not Before: Sep 11 03:01:41 2026 GMT
            Not After : Sep 12 03:01:41 2026 GMT
        Subject: CN=f72a51e5c15e7132584fa61a54a061ca0ee6ecf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:4b:ab:11:ff:ef:81:ac:3c:05:95:fe:c1:
                    41:2d:0d:f7:17:68:47:05:28:d4:2f:3d:93:4a:fb:
                    a8:34:b6:06:e6:1b:d8:e3:b2:17:cf:60:74:dd:da:
                    57:b5:c3:a8:53:75:41:81:01:bb:25:b9:73:e2:f8:
                    2f:8e:d2:1e:f6:a1:3b:af:da:7b:c3:f4:1c:e1:f2:
                    70:5a:84:ed:01:57:40:2f:f3:86:78:81:d9:ca:48:
                    d6:ae:71:8e:ae:2b:60:ad:9c:92:5f:b4:17:c2:df:
                    a0:3b:61:b5:4b:a7:ae:a0:57:f9:44:bd:14:5f:46:
                    2d:3f:fd:00:62:6b:20:7b:74:e4:12:29:4b:d8:55:
                    c3:d3:cf:a8:8d:a1:2e:48:a5:de:b0:ed:9c:81:a3:
                    49:f6:70:24:30:6c:59:73:bf:b4:12:50:75:a4:f4:
                    3f:59:de:f8:7b:29:54:35:a7:7e:49:2b:d6:07:fa:
                    8b:4a:22:60:35:94:a4:9e:b6:a5:2d:3d:ce:b8:ea:
                    2a:0e:4e:04:13:87:a2:14:6e:37:d2:c9:41:78:d9:
                    7a:f5:31:cb:b3:2d:12:cc:ef:dd:38:cc:5a:95:0e:
                    a4:b4:f3:6b:36:dc:d3:e6:43:db:03:3e:a6:09:de:
                    3b:cc:7e:4d:1d:e1:29:b7:b9:78:0f:8a:af:b7:30:
                    32:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2A:51:E5:C1:5E:71:32:58:4F:A6:1A:54:A0:61:CA:0E:E6:EC:F0
            X509v3 Authority Key Identifier:
                keyid:EE:9F:FE:53:E6:2E:29:EA:A5:BD:6A:A8:17:89:8D:3C:38:F8:FC:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b3:1a:54:ce:48:e9:e4:dc:f7:a9:54:0c:40:d2:8c:87:05:
         79:d0:8b:f2:a6:c9:ad:9e:f0:f2:44:93:3b:62:9c:59:1a:2e:
         26:0a:0d:46:61:81:c1:09:e1:ee:b8:1e:eb:95:37:7d:94:03:
         62:bb:e6:c5:8c:b9:18:be:71:ad:f8:38:60:5e:a2:c1:2a:29:
         e8:39:6b:b9:0a:4f:a9:35:39:87:79:97:74:3f:6a:c8:86:42:
         be:35:d1:75:e8:f6:55:c9:a9:19:d2:98:cd:d1:8d:35:08:a3:
         7a:95:49:2e:ab:65:f6:3a:38:f6:e1:48:ed:d4:55:fa:bb:21:
         51:4f:4f:81:5c:94:99:49:29:f5:8b:8c:50:92:5b:99:fb:5a:
         53:dd:c7:49:46:03:3e:ef:79:bf:24:e3:e1:86:ba:8e:09:27:
         39:ba:93:83:32:9a:2d:78:67:81:8a:05:4e:40:3a:bb:e2:22:
         da:55:6b:85:67:5d:6a:23:73:c5:cb:a8:b5:74:2f:74:c8:83:
         83:50:bc:f6:3e:a4:19:32:2d:8d:e5:06:bd:1a:17:69:46:be:
         c7:27:67:b3:60:4a:35:89:d1:8d:c9:ce:b3:db:43:79:1d:9e:
         75:0e:e5:ff:93:56:b0:38:be:10:2a:54:fb:da:7d:24:5b:0a:
         b3:ab:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:58:58 2026 by rpki-client