Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
File:                     7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft (raw, json)
Hash identifier:          PhxTIKRVrYFYMb90TqXaA6WUO0SVtsGyogWuCVtHqxY=
Subject key identifier:   E2:D4:9B:38:67:F7:AF:6D:52:12:38:81:95:7C:F6:38:16:73:E6:06
Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
Certificate issuer:       /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Certificate serial:       01A18F0B21B2B9B6389F0D665DF135343356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
Manifest number:          0A2B
Signing time:             Fri 30 Oct 2026 23:00:33 +0000
Manifest this update:     Fri 30 Oct 2026 23:00:33 +0000
Manifest next update:     Sat 31 Oct 2026 23:00:33 +0000
Files and hashes:         1: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl (hash: M2+LWnxC1i5IuUF1SpKNHh1uhppuh8ZDrFS+FpF8chQ=)
                          2: s7-y41zPRmkHcrILtIvpGUfe7SI.roa (hash: k/m4SqHR3oYDvv5JTtyJN297BXfGfqcf9sOF+T2TJHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 23:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8f:0b:21:b2:b9:b6:38:9f:0d:66:5d:f1:35:34:33:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
        Validity
            Not Before: Oct 30 23:00:33 2026 GMT
            Not After : Oct 31 23:00:33 2026 GMT
        Subject: CN=e2d49b3867f7af6d52123881957cf6381673e606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:68:3c:26:c6:4a:1b:6c:a7:ce:bc:30:5c:
                    4c:00:d3:51:50:98:c5:ae:11:f6:af:8f:77:5a:4b:
                    bc:b1:38:ee:59:18:ce:97:97:eb:60:67:ec:ec:5a:
                    8f:0a:72:fd:09:4a:14:90:83:43:bf:31:41:d3:db:
                    3c:01:da:eb:75:f7:51:59:54:91:42:62:b0:d9:8d:
                    a6:1e:5e:92:c1:5f:6c:01:0f:b5:c4:1d:8e:1a:6a:
                    f4:06:3b:3b:02:a8:d4:9b:9e:f6:b6:46:45:27:02:
                    ba:11:95:2d:99:ec:62:13:44:dc:bc:8a:57:28:5f:
                    c5:7a:35:f4:65:3f:c5:9e:7b:b6:8f:5a:8a:37:98:
                    86:d7:b1:b9:cd:34:e1:6f:c7:00:20:8a:04:16:45:
                    b7:e5:fa:16:fd:51:78:13:05:9b:b8:8b:ce:2e:03:
                    bb:58:98:3e:54:73:e6:96:e5:b0:08:0a:c4:46:06:
                    e0:57:58:d2:b3:0e:76:7e:9f:dc:5f:f2:c4:5e:b0:
                    4b:b2:a8:72:b6:9e:4f:4c:bd:be:df:5c:38:e5:ca:
                    5b:b3:c5:4d:cc:03:ff:cd:04:e6:56:d6:bf:20:05:
                    06:07:4c:20:e9:44:5a:d5:1d:fa:24:02:00:52:21:
                    fe:36:a6:a3:1d:a3:fe:be:a4:24:e3:94:78:7a:41:
                    7b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D4:9B:38:67:F7:AF:6D:52:12:38:81:95:7C:F6:38:16:73:E6:06
            X509v3 Authority Key Identifier:
                keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:44:fe:dc:dc:3b:64:b0:f5:9f:ec:27:06:fb:6a:f2:44:66:
         bc:34:e0:5e:73:f6:18:b4:82:6a:67:00:5a:84:8d:9c:a7:66:
         c6:d0:ad:21:1f:2d:01:cc:2c:94:19:d9:99:cc:e5:11:22:4d:
         f8:55:9a:1d:46:25:15:7b:67:87:d6:d3:92:0e:35:33:f4:17:
         f6:25:4c:06:0f:2d:5c:24:eb:12:c7:ad:3d:4b:d8:17:dc:84:
         80:07:79:29:16:3c:0a:84:97:6b:ad:86:27:ac:f4:e5:2c:db:
         63:30:28:ca:1e:ff:14:0e:3d:69:63:5f:09:a5:92:5a:07:85:
         7d:d5:94:b2:b5:ba:f2:97:3b:20:a7:88:ab:2e:95:a0:70:ee:
         f9:20:91:dc:37:bf:d4:c2:c6:14:fc:09:02:54:9c:5e:7e:de:
         19:10:f3:75:56:6f:05:ae:7e:5f:b1:d0:91:39:e2:28:3e:e0:
         c4:1d:99:c1:1a:c7:06:8a:5b:f8:8d:fb:86:7b:12:4d:de:d9:
         d6:bb:aa:e4:12:3f:12:29:90:75:06:6e:2e:e8:17:07:86:f2:
         4c:62:56:32:6d:44:7b:cf:73:ef:d8:b9:e3:f7:aa:e0:7a:5e:
         68:87:14:11:c1:67:13:77:29:0e:38:06:bb:39:af:33:b3:58:
         fe:d6:59:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:30:50 2026 by rpki-client