Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
File:                     B7egwbq9Yh6CINDXd4d6hEtBPBA.mft (raw, json)
Hash identifier:          s4Ac/Y4jaye45LUfpRqjVVFBDmCNlaMkdji524+NhcA=
Subject key identifier:   0A:C5:A6:1D:E6:0F:52:FA:D1:3E:E3:B2:06:07:4A:DD:3F:C8:56:F3
Authority key identifier: 07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
Certificate issuer:       /CN=07b7a0c1babd621e8220d0d777877a844b413c10
Certificate serial:       01A0D5390DDEDD729573098CBEBE87FD8536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 21:01:20 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:20 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:20 +0000
Files and hashes:         1: B7egwbq9Yh6CINDXd4d6hEtBPBA.crl (hash: NarF1lWvIQQn9T2JhHPcOkGnVyig+SFCnI5/L3a3H84=)
                          2: RY-r8degIdRULqk_qmxjFefq8O0.roa (hash: lLpPZuz/t5Yw8zlJe7ERdvGB1DRM1TuO1Rrg7Us/30Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:39:0d:de:dd:72:95:73:09:8c:be:be:87:fd:85:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b7a0c1babd621e8220d0d777877a844b413c10
        Validity
            Not Before: Sep 24 21:01:20 2026 GMT
            Not After : Sep 25 21:01:20 2026 GMT
        Subject: CN=0ac5a61de60f52fad13ee3b206074add3fc856f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:83:9c:79:63:ac:0a:d9:51:2e:d8:43:d5:
                    a4:59:a2:65:f7:a0:b0:0d:d6:bd:ab:e2:ad:da:52:
                    07:3a:f9:51:33:38:f4:04:c1:66:b5:50:dd:b5:e0:
                    45:e8:0c:a7:86:7b:44:b9:f9:bf:cc:a0:76:1c:d3:
                    8b:0f:0d:fa:fd:69:a9:3b:31:2e:fc:65:1e:68:f3:
                    36:3d:1e:40:c0:1d:83:74:a5:09:02:5c:1c:1c:44:
                    f1:f2:41:aa:14:cf:17:c2:ef:6c:1c:d3:16:2d:80:
                    6f:5e:dc:33:99:e9:7b:0c:fb:60:c5:7b:82:c2:55:
                    28:71:6a:4b:08:f5:82:8c:97:65:f2:84:59:13:16:
                    21:b9:c0:4d:5c:19:e3:dd:92:ca:11:cd:02:b1:d3:
                    e7:b8:96:37:b7:75:fd:ee:3c:78:a7:a5:03:4b:1f:
                    78:59:aa:6f:93:69:42:89:ab:8a:0e:4d:48:b0:63:
                    af:f7:a9:99:48:de:b0:47:41:a5:c3:15:ff:c9:8d:
                    01:31:bd:5a:21:f3:70:31:88:10:6a:49:6c:73:d0:
                    c1:59:48:e6:22:f7:f3:15:0a:ce:9d:27:39:52:e5:
                    a7:66:b1:40:fe:ab:e8:7c:b2:da:84:c8:be:1c:f9:
                    3a:65:5a:23:df:a4:45:1d:a7:8c:b6:8c:ac:aa:91:
                    a0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C5:A6:1D:E6:0F:52:FA:D1:3E:E3:B2:06:07:4A:DD:3F:C8:56:F3
            X509v3 Authority Key Identifier:
                keyid:07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:66:2d:42:1a:1f:68:dd:8c:ac:aa:3c:9e:4b:d8:3d:82:99:
         e0:fc:e6:e4:cd:af:b3:09:be:59:47:06:7f:e8:eb:72:d5:e8:
         13:3e:ec:3a:0c:78:07:89:1f:83:2c:d0:3f:12:55:a0:3f:4b:
         b4:fa:9a:f9:b6:54:86:d7:ec:ee:72:b4:c0:d8:6a:da:53:14:
         56:8d:b5:13:bf:cd:b0:13:a8:c8:cb:b6:44:13:95:c2:b1:82:
         83:8b:46:34:c0:bd:ee:08:fb:e1:25:39:cb:38:b6:af:1d:73:
         09:63:15:0d:7d:4d:a9:07:13:69:c6:17:62:fc:17:04:62:a2:
         f1:9f:06:1c:a7:56:96:98:18:91:e5:77:46:ab:f4:9e:99:06:
         66:bf:61:bb:07:2a:c6:75:b4:7a:aa:77:e1:7e:92:f3:0c:cd:
         06:26:1a:5a:14:51:b4:2b:49:6d:e6:e1:60:ac:1d:4f:ee:21:
         95:b4:ec:82:e6:a5:dd:79:03:8c:20:2e:e2:2b:95:c6:f9:c3:
         fd:18:10:b6:7a:f5:5b:9d:3c:6c:95:d6:9f:a3:7e:7a:69:7e:
         75:96:d8:98:34:25:b2:ae:7b:28:53:ba:45:d1:69:a2:33:af:
         bb:7a:46:8e:20:f6:2b:6a:d5:ca:66:4e:5d:1b:44:3f:37:ef:
         73:79:68:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVOQ3e3XKVcwmMvr6H/YU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YjdhMGMxYmFiZDYyMWU4MjIwZDBkNzc3ODc3YTg0NGI0
MTNjMTAwHhcNMjYwOTI0MjEwMTIwWhcNMjYwOTI1MjEwMTIwWjAzMTEwLwYDVQQD
EygwYWM1YTYxZGU2MGY1MmZhZDEzZWUzYjIwNjA3NGFkZDNmYzg1NmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY6DnHljrArZUS7YQ9WkWaJl96Cw
Dda9q+Kt2lIHOvlRMzj0BMFmtVDdteBF6AynhntEufm/zKB2HNOLDw36/WmpOzEu
/GUeaPM2PR5AwB2DdKUJAlwcHETx8kGqFM8Xwu9sHNMWLYBvXtwzmel7DPtgxXuC
wlUocWpLCPWCjJdl8oRZExYhucBNXBnj3ZLKEc0CsdPnuJY3t3X97jx4p6UDSx94
Wapvk2lCiauKDk1IsGOv96mZSN6wR0GlwxX/yY0BMb1aIfNwMYgQaklsc9DBWUjm
IvfzFQrOnSc5UuWnZrFA/qvofLLahMi+HPk6ZVoj36RFHaeMtoysqpGgfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArFph3mD1L60T7jsgYHSt0/yFbzMB8GA1UdIwQY
MBaAFAe3oMG6vWIegiDQ13eHeoRLQTwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjdlZ3dicTlZaDZDSU5EWGQ0ZDZoRXRCUEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81YzNmYzMtMzVlOC00YTBjLWEzMGYt
ZmI5MjE3MDI4YzVjLzEvQjdlZ3dicTlZaDZDSU5EWGQ0ZDZoRXRCUEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS81YzNmYzMtMzVlOC00YTBjLWEzMGYtZmI5MjE3MDI4YzVj
LzEvQjdlZ3dicTlZaDZDSU5EWGQ0ZDZoRXRCUEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWYtQhof
aN2MrKo8nkvYPYKZ4Pzm5M2vswm+WUcGf+jrctXoEz7sOgx4B4kfgyzQPxJVoD9L
tPqa+bZUhtfs7nK0wNhq2lMUVo21E7/NsBOoyMu2RBOVwrGCg4tGNMC97gj74SU5
yzi2rx1zCWMVDX1NqQcTacYXYvwXBGKi8Z8GHKdWlpgYkeV3Rqv0npkGZr9huwcq
xnW0eqp34X6S8wzNBiYaWhRRtCtJbebhYKwdT+4hlbTsgual3XkDjCAu4iuVxvnD
/RgQtnr1W508bJXWn6N+eml+dZbYmDQlsq57KFO6RdFpojOvu3pGjiD2K2rVymZO
XRtEPzfvc3loRw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:50:30 2026 by rpki-client