Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
File:                     RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json)
Hash identifier:          KIBCbLJQshWJ3Jx8ZHz0pOC2mkxskk8XJuXK53NywV0=
Subject key identifier:   13:7E:DB:B5:EB:D1:31:81:C2:01:38:54:69:1A:8E:74:D6:A0:0F:6B
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Certificate issuer:       /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial:       01A11229706CD79ECAB462D40E830DE21B4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
Manifest number:          0E7E
Signing time:             Tue 06 Oct 2026 17:01:08 +0000
Manifest this update:     Tue 06 Oct 2026 17:01:08 +0000
Manifest next update:     Wed 07 Oct 2026 17:01:08 +0000
Files and hashes:         1: KYrFJEDEjhc9HhmYSiPT-yYtVPQ.roa (hash: /AaiErA0b5IK+9x0vkOcwB+KnCvGEkMNKJApI/jbN6I=)
                          2: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: lLDmZ0tN3oCSocSSQRtvOxaudEoLSkf6ax0AMaHgGig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 17:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:29:70:6c:d7:9e:ca:b4:62:d4:0e:83:0d:e2:1b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
        Validity
            Not Before: Oct  6 17:01:08 2026 GMT
            Not After : Oct  7 17:01:08 2026 GMT
        Subject: CN=137edbb5ebd13181c2013854691a8e74d6a00f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:37:fd:06:cd:e0:62:3f:07:a2:6e:44:67:c1:
                    7f:80:3f:fe:82:f4:cd:19:5b:ca:2e:8b:63:0c:21:
                    6b:9f:e7:da:fd:a7:51:b0:59:60:5d:53:7f:21:84:
                    a7:a4:d0:5b:c8:70:e6:26:f5:7f:36:5a:1a:78:50:
                    55:18:8e:09:41:48:15:4d:f6:b8:11:51:f3:4d:0b:
                    41:12:ce:89:f4:fa:87:7e:5b:8d:a4:1d:6f:e8:a1:
                    80:b4:bd:5d:f3:61:3e:bb:af:e6:4c:8f:ba:ed:d3:
                    ca:f9:bb:d4:68:f0:04:18:5b:7d:17:ed:92:eb:67:
                    9c:04:8b:03:06:d8:9a:f7:c6:23:03:c5:e5:69:e4:
                    d1:0e:20:eb:a1:cb:a6:3e:6f:b5:d4:c4:e5:81:ef:
                    ce:14:2e:7f:4e:6f:6e:9f:40:22:d4:97:11:8f:2d:
                    5d:0c:26:90:af:22:21:b6:55:57:68:9f:21:90:e3:
                    fa:fa:46:99:90:6c:9b:64:4f:89:86:14:2a:21:c4:
                    70:08:2a:0c:56:9e:be:c1:37:3b:63:e6:10:7c:36:
                    b3:be:55:52:b1:15:01:72:3e:7e:ed:c1:ec:a8:a9:
                    c2:37:85:5e:ce:81:bc:67:52:07:9c:dc:c2:3c:27:
                    75:27:f7:1e:18:0f:1e:ac:4b:af:fc:08:ca:94:b6:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7E:DB:B5:EB:D1:31:81:C2:01:38:54:69:1A:8E:74:D6:A0:0F:6B
            X509v3 Authority Key Identifier:
                keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:cb:cd:af:69:9e:42:7d:22:4a:d5:f2:a5:83:69:ee:71:e0:
         a9:ef:68:fa:4c:97:25:bc:30:c2:62:b5:c2:b3:46:f6:73:61:
         61:de:91:ab:1d:62:1b:fa:f7:e4:28:5d:30:c7:33:c2:f8:19:
         ba:39:45:d5:4e:65:4d:5b:c0:f8:79:69:35:d7:da:aa:4c:9d:
         82:37:97:1f:6e:5d:69:61:56:35:04:84:2c:9a:47:82:a9:a5:
         d7:b1:81:9d:64:cd:1d:ed:b9:0c:37:4b:0c:a0:29:5c:83:b5:
         cc:5a:05:46:98:ba:e7:8f:53:85:ad:c5:61:25:da:33:c0:4a:
         f5:92:8d:67:c5:f9:df:9c:a1:9b:f7:97:61:84:f7:6c:57:d5:
         03:2a:79:07:c4:d2:90:71:1f:94:b8:d0:66:16:bd:03:4b:b0:
         55:38:05:b5:27:c6:10:79:f3:5b:27:a1:e3:f8:87:d5:c1:e5:
         7a:89:d6:fc:75:3a:c5:0c:0a:5c:3a:b4:1d:32:f3:12:79:33:
         fe:c8:87:34:17:45:97:51:57:75:fd:29:2e:a0:40:15:9f:c7:
         fb:0d:8f:91:16:92:11:91:6f:44:67:0f:72:91:78:22:2f:26:
         32:d7:3e:a6:8f:10:d5:7a:f1:23:7a:58:c4:d2:38:4f:f9:72:
         35:e7:0f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:01:17 2026 by rpki-client