Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
File:                     RI63RgCeGCwI7YT4F30ACKZIWD0.mft (raw, json)
Hash identifier:          m7/eSQ/RMHItqFGFh6Y8YKc39MfUrHamXqYqLVc34s8=
Subject key identifier:   D8:57:E1:FD:45:1A:3B:42:E4:0C:76:88:79:40:CA:3B:B6:B6:94:50
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Certificate issuer:       /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial:       01A08A5585AFB77031DD42BE515D71B1C8B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
Manifest number:          01F7
Signing time:             Thu 10 Sep 2026 08:00:55 +0000
Manifest this update:     Thu 10 Sep 2026 08:00:55 +0000
Manifest next update:     Fri 11 Sep 2026 08:00:55 +0000
Files and hashes:         1: QVq18C8a73aIQH-AcKRLMzpO3YQ.asa (hash: 2HTUzLpfDHOgyVFMt6dJ4aJ9WtaWtmAe0f3l6ljlAeU=)
                          2: RI63RgCeGCwI7YT4F30ACKZIWD0.crl (hash: EtdB4Z8nBxO63iXMO0Bfg7SapwwkcODtESHhY3a0Pbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:55:85:af:b7:70:31:dd:42:be:51:5d:71:b1:c8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
        Validity
            Not Before: Sep 10 08:00:55 2026 GMT
            Not After : Sep 11 08:00:55 2026 GMT
        Subject: CN=d857e1fd451a3b42e40c76887940ca3bb6b69450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:71:39:5d:59:5a:47:eb:05:77:a8:03:8a:
                    dd:ea:fd:e2:7e:26:b2:79:d8:a9:56:9d:8e:6d:4a:
                    cb:ca:fb:2d:60:e3:32:15:49:ac:3c:4c:ee:de:84:
                    c8:59:c2:a6:d7:a0:20:56:e2:fb:f0:0c:42:1b:ae:
                    ab:64:7a:50:67:c3:f6:6a:98:63:a4:4a:53:ac:af:
                    c3:aa:ae:3d:19:76:eb:89:72:6b:a1:29:ac:a2:3b:
                    bd:db:56:4a:41:93:b0:6e:d3:a6:15:13:60:46:71:
                    0c:a0:fb:7d:57:34:a7:e7:ea:1b:05:e3:a0:11:ba:
                    96:36:3a:a6:09:26:a8:79:80:66:65:ea:a3:3f:11:
                    2f:2b:28:ee:de:aa:35:89:80:a0:b0:6f:9a:fb:e8:
                    ed:35:2c:fd:6e:0a:41:32:37:63:7f:66:a6:2a:ec:
                    8e:df:41:9f:b1:25:c2:1c:ab:ef:66:63:12:d5:c9:
                    04:e7:05:47:64:ee:c2:f8:27:fc:84:17:46:b2:4f:
                    a4:15:30:2d:b6:e5:29:68:b1:8a:ad:57:58:6a:fd:
                    bd:6a:b2:2a:a4:6e:df:5a:8f:1f:ed:7a:45:ea:69:
                    b0:36:b3:50:46:98:68:16:65:62:b7:dc:11:88:84:
                    bf:3b:a1:95:4a:48:a2:50:10:81:94:47:24:c1:dc:
                    5e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:57:E1:FD:45:1A:3B:42:E4:0C:76:88:79:40:CA:3B:B6:B6:94:50
            X509v3 Authority Key Identifier:
                keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2d:0d:bc:62:25:fb:be:26:29:4f:33:73:17:c4:83:62:a0:
         ac:08:03:11:b0:53:95:e0:32:58:1b:3f:53:2c:df:59:2d:0d:
         28:53:d4:71:a6:ea:94:46:df:34:60:97:9a:00:25:fb:9b:48:
         b0:1c:31:ae:2c:a1:4e:e5:0a:74:89:36:35:c7:37:4f:03:b3:
         b6:ec:5f:6b:1c:16:6f:fc:ca:56:2e:a6:79:c8:08:c7:03:cf:
         e6:df:7b:71:14:93:2f:31:94:cb:f8:68:00:90:a0:f3:7e:19:
         63:22:df:9c:c1:3a:93:48:6c:25:8e:6d:e3:ca:4e:03:c1:d0:
         f3:e4:4e:e5:72:62:ef:f3:e1:48:f9:bb:44:29:c0:68:56:c0:
         8a:c5:a5:e0:83:69:26:f2:6a:8f:f7:51:51:09:5c:0a:89:50:
         90:60:b1:c4:e4:a2:d7:cb:8d:f0:51:d6:30:4a:40:66:c1:c5:
         fb:cf:6c:73:08:8b:39:21:15:97:b6:9f:e6:4e:20:87:55:12:
         96:b5:44:0d:12:24:f1:61:fb:93:a7:7c:5a:d6:9d:84:e9:05:
         a1:46:de:54:64:dd:7d:95:80:5b:e1:1a:d6:f7:3f:b3:99:14:
         fd:bd:b4:83:4d:36:37:53:1a:22:17:89:8d:ad:a8:c8:d8:72:
         76:6a:05:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:12:40 2026 by rpki-client