Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File:                     7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier:          WQQ+9M8Yw88h5TsrK6dq53m1XwQRGEU2ivsNATxppas=
Subject key identifier:   35:14:E2:49:C4:19:A4:B8:63:4C:15:90:18:F1:B4:66:8B:13:74:64
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer:       /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial:       01A0D6F07566D24D613C9E78E284103F66D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number:          1A70
Signing time:             Fri 25 Sep 2026 05:01:17 +0000
Manifest this update:     Fri 25 Sep 2026 05:01:17 +0000
Manifest next update:     Sat 26 Sep 2026 05:01:17 +0000
Files and hashes:         1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: rHuSIUOitsVhaM+RztH/RMzFCs3AvzK5ZGCCqvZAnlE=)
                          2: SEU-eUTm-6iORlN5RtiJHEwSdwc.roa (hash: rXL5N4BdgulO5NRgIVf5AGGcYxix/8Lxb7TWkibxEWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 05:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:f0:75:66:d2:4d:61:3c:9e:78:e2:84:10:3f:66:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
        Validity
            Not Before: Sep 25 05:01:17 2026 GMT
            Not After : Sep 26 05:01:17 2026 GMT
        Subject: CN=3514e249c419a4b8634c159018f1b4668b137464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:94:5d:b9:5d:99:ef:b4:b7:b5:47:02:a3:84:
                    18:9e:c7:4d:4d:43:94:a6:f9:de:bd:1b:fa:5b:0d:
                    0e:72:61:51:0e:33:63:a2:bb:0a:51:fd:9f:a4:b4:
                    c8:eb:1c:e4:9f:9b:27:82:e1:b0:db:57:51:08:4c:
                    dd:f5:a7:9d:b9:bd:45:57:b0:73:e0:b8:fb:55:a3:
                    85:0c:e6:76:66:ff:5c:9d:7b:01:11:99:26:84:75:
                    2b:12:71:c8:c6:76:e6:02:d3:e3:74:8e:ca:37:1d:
                    27:c2:78:dd:0e:22:6a:7f:4a:42:bc:42:14:88:7e:
                    73:5f:da:44:81:92:0b:80:02:26:cf:37:fb:ef:63:
                    1b:6a:fb:8f:1c:c7:93:1b:ac:92:5e:53:1a:a1:92:
                    9f:8f:14:4a:5e:ad:cd:7e:fe:00:67:07:0a:a9:88:
                    5b:c9:f1:97:b4:22:62:a5:c6:04:58:c6:2e:9c:82:
                    33:a9:c0:62:ef:51:04:e1:a2:07:fc:6b:57:5d:2d:
                    55:e6:c9:2e:7d:e9:c5:1c:2e:e9:09:c6:75:75:02:
                    72:02:aa:d9:96:20:e4:74:13:5b:25:bb:18:b8:7e:
                    6d:93:c0:ea:8c:4a:c5:d9:c3:b0:8e:bf:d6:62:b6:
                    0b:d0:7e:00:6d:3e:c6:69:fa:65:5e:58:09:38:4c:
                    4e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:14:E2:49:C4:19:A4:B8:63:4C:15:90:18:F1:B4:66:8B:13:74:64
            X509v3 Authority Key Identifier:
                keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:de:e3:de:8c:db:e0:03:4e:cb:46:94:32:01:ec:9d:50:97:
         0b:c4:4e:df:96:2c:b6:55:a6:f1:29:6e:99:25:be:40:32:4c:
         88:ba:26:95:ac:16:bb:eb:53:56:af:b4:15:36:66:e6:90:9e:
         33:30:8e:75:0f:e6:a0:a8:52:c6:58:7f:97:a0:86:ab:38:11:
         de:f3:94:05:66:9e:11:b7:a7:3f:9d:64:c8:95:8c:7d:df:ef:
         d5:13:9c:33:75:0e:99:6e:88:de:17:27:16:e5:5c:0b:68:e2:
         1c:4d:98:36:1c:6f:83:fb:97:23:f0:b8:1e:a6:45:29:d6:31:
         71:29:74:0e:b9:ed:01:52:5c:a2:8a:81:ba:25:43:65:e4:53:
         8a:6d:80:8f:b7:c5:d7:ca:8e:9e:1a:a9:84:89:26:c5:86:93:
         47:7b:ad:14:82:22:ba:d3:f4:15:3c:1a:f9:1a:7b:4c:b8:e8:
         b8:9f:a1:9b:8c:61:0f:20:fc:ae:7d:5a:bf:44:16:06:5b:7c:
         dc:d2:19:2e:7f:44:ef:bd:ed:f5:46:78:60:ba:dc:ca:33:6b:
         c0:22:82:81:a8:1f:57:19:86:27:fd:8b:1a:c8:bc:22:3b:2d:
         33:5d:78:0e:bd:7c:31:0c:9f:13:8b:41:4a:2c:56:64:7f:55:
         29:02:42:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDW8HVm0k1hPJ544oQQP2bTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzM5ODhhODRmOWZiYjQxODVlYTRhYzViNzIxODQ1Y2Ey
ODAzN2UwHhcNMjYwOTI1MDUwMTE3WhcNMjYwOTI2MDUwMTE3WjAzMTEwLwYDVQQD
EygzNTE0ZTI0OWM0MTlhNGI4NjM0YzE1OTAxOGYxYjQ2NjhiMTM3NDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJRduV2Z77S3tUcCo4QYnsdNTUOU
pvnevRv6Ww0OcmFRDjNjorsKUf2fpLTI6xzkn5snguGw21dRCEzd9aedub1FV7Bz
4Lj7VaOFDOZ2Zv9cnXsBEZkmhHUrEnHIxnbmAtPjdI7KNx0nwnjdDiJqf0pCvEIU
iH5zX9pEgZILgAImzzf772MbavuPHMeTG6ySXlMaoZKfjxRKXq3Nfv4AZwcKqYhb
yfGXtCJipcYEWMYunIIzqcBi71EE4aIH/GtXXS1V5skufenFHC7pCcZ1dQJyAqrZ
liDkdBNbJbsYuH5tk8DqjErF2cOwjr/WYrYL0H4AbT7GafplXlgJOExO8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUU4knEGaS4Y0wVkBjxtGaLE3RkMB8GA1UdIwQY
MBaAFO3DmIqE+fu0GF6krFtyGEXKKAN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEt
MTBmY2VkNWZkNGVlLzEvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEtMTBmY2VkNWZkNGVl
LzEvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGt7j3ozb
4ANOy0aUMgHsnVCXC8RO35YstlWm8SlumSW+QDJMiLomlawWu+tTVq+0FTZm5pCe
MzCOdQ/moKhSxlh/l6CGqzgR3vOUBWaeEbenP51kyJWMfd/v1ROcM3UOmW6I3hcn
FuVcC2jiHE2YNhxvg/uXI/C4HqZFKdYxcSl0DrntAVJcooqBuiVDZeRTim2Aj7fF
18qOnhqphIkmxYaTR3utFIIiutP0FTwa+Rp7TLjouJ+hm4xhDyD8rn1av0QWBlt8
3NIZLn9E773t9UZ4YLrcyjNrwCKCgagfVxmGJ/2LGsi8IjstM114Dr18MQyfE4tB
SixWZH9VKQJCNg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:16:18 2026 by rpki-client