Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
File:                     7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json)
Hash identifier:          wP880NK4RdaGPIWgc3GBf6fidVYNXrZU88tlnOYAJbY=
Subject key identifier:   A2:B5:C7:5B:37:BE:F2:5E:E6:39:C5:F2:9F:CD:20:5D:BC:D1:8E:A2
Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
Certificate issuer:       /CN=eff987189da4e38385b0721854feccc3ef466a96
Certificate serial:       01A0024B85CBC454519144A2CF4E2B23AA79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
Manifest number:          1099
Signing time:             Fri 14 Aug 2026 22:01:38 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:38 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:38 +0000
Files and hashes:         1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: 2ki/gZDSP4D/dRrJl1KVmwr/1oXHgbVmfmGU6DD3A7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:85:cb:c4:54:51:91:44:a2:cf:4e:2b:23:aa:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96
        Validity
            Not Before: Aug 14 22:01:38 2026 GMT
            Not After : Aug 15 22:01:38 2026 GMT
        Subject: CN=a2b5c75b37bef25ee639c5f29fcd205dbcd18ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2f:59:cc:23:8f:72:97:9d:07:86:08:05:61:
                    bb:10:c2:12:df:d0:97:18:54:de:fe:f4:83:54:6e:
                    d4:bb:4e:af:94:33:34:25:7d:51:cc:cb:27:8d:2b:
                    c0:a8:23:62:41:a4:fd:3a:f9:cb:4b:ba:38:e0:49:
                    a5:a8:94:78:3d:5f:92:86:3d:c7:48:b9:f4:6d:05:
                    a1:af:96:b9:0a:6e:5e:9e:ca:ba:db:08:5a:29:4d:
                    3a:db:91:54:74:5d:76:82:cb:1e:65:d2:35:63:52:
                    77:40:35:35:7d:0f:35:37:22:da:b2:27:aa:ff:15:
                    dd:dd:ab:f1:95:8d:c5:65:f3:eb:b8:cf:20:6b:2f:
                    51:49:8c:1a:cd:7b:a4:36:e8:57:8a:05:85:d0:07:
                    43:24:bb:9e:de:1f:4a:4f:86:de:3b:fe:b3:5c:20:
                    d4:3e:05:12:9c:9f:8a:bf:9f:97:23:2d:11:e8:fa:
                    d4:39:5b:33:c5:c0:53:36:ad:92:88:0f:5c:18:32:
                    8d:50:51:86:bc:44:30:59:d4:8b:5b:5c:e7:7d:96:
                    f5:bf:b7:eb:d4:10:b1:0d:1c:f2:c3:78:5b:57:25:
                    62:23:06:df:bd:4b:c3:90:1d:ef:c3:e0:c2:e5:0a:
                    23:fd:3e:70:be:91:ca:4e:22:fb:1e:40:aa:c5:db:
                    6b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B5:C7:5B:37:BE:F2:5E:E6:39:C5:F2:9F:CD:20:5D:BC:D1:8E:A2
            X509v3 Authority Key Identifier:
                keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:40:2d:28:95:e2:77:5b:95:2e:b4:3e:49:43:dc:20:40:87:
         0f:1c:01:4c:95:5b:89:0c:8a:72:9d:55:64:4a:09:51:ce:b0:
         dd:9b:05:32:ef:82:ed:ae:d6:87:84:e2:60:9f:a7:17:d7:cd:
         ad:b9:28:41:72:9d:23:15:e4:23:9a:d2:9b:91:64:39:7b:97:
         59:88:71:42:a8:66:ed:d5:b9:61:ce:0c:80:91:58:5b:ac:c4:
         07:39:1a:4a:93:f3:0f:b7:3b:e4:4f:75:6d:8d:54:29:71:23:
         7c:43:b0:a6:c8:f7:02:b9:d1:6c:82:c7:ed:b2:d0:50:d5:b8:
         c9:83:41:f1:12:41:32:cd:13:4f:c6:69:a4:20:50:6c:fa:ee:
         2f:2a:c5:83:ef:1f:96:c4:40:e1:2f:53:a6:68:b6:33:49:55:
         00:b5:c9:85:ad:13:25:f1:65:d5:13:de:62:fa:3f:35:27:ea:
         c4:2f:c0:f1:07:fe:3b:6b:23:c3:a0:06:bf:9e:f3:36:2b:00:
         47:4f:51:ba:77:45:ea:64:ba:37:98:1e:4f:02:ad:15:88:60:
         92:47:92:9b:76:fd:48:4d:c3:21:3e:33:e3:8c:90:7d:9b:f8:
         ae:3b:ad:b4:62:41:ac:c9:0c:fc:31:63:cb:14:40:29:43:5f:
         48:ee:31:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:59 2026 by rpki-client