Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File:                     7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier:          IgsOsqSRrCQhYm4wKO2Rg9KWGRXHU3W/t2MoX0ZFcJQ=
Subject key identifier:   12:BE:AE:AE:BF:60:86:1D:52:85:EC:C8:90:23:64:67:0B:86:FF:9D
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer:       /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial:       01A1DEDED02C850E4B8E2B00EA5E1A318057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number:          1462
Signing time:             Sun 15 Nov 2026 11:01:46 +0000
Manifest this update:     Sun 15 Nov 2026 11:01:46 +0000
Manifest next update:     Mon 16 Nov 2026 11:01:46 +0000
Files and hashes:         1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: QRYchLMsYHThXUKybkfuinueDUcuVW6kfx0e0A1hYW0=)
                          2: ROD76SwfYB6C6gAmh6ocy7RmvzY.roa (hash: 8kz9BVZL6aAIte+oXvcJlqrJDsa6yWdXpOPNdQQYCKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:d0:2c:85:0e:4b:8e:2b:00:ea:5e:1a:31:80:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
        Validity
            Not Before: Nov 15 11:01:46 2026 GMT
            Not After : Nov 16 11:01:46 2026 GMT
        Subject: CN=12beaeaebf60861d5285ecc8902364670b86ff9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:72:7f:48:88:aa:22:43:44:a1:20:35:b2:
                    ba:14:5c:0b:79:c7:84:15:61:15:73:50:87:91:de:
                    73:ac:1c:d0:73:ab:4c:0d:4d:03:a2:4c:05:f7:f7:
                    55:c8:e7:9b:00:20:13:91:17:26:79:29:ce:7e:0c:
                    71:2d:ca:b8:89:74:b9:a4:17:18:30:18:b6:5e:fd:
                    e4:88:63:9c:0a:32:f4:45:3c:6d:c3:ad:be:e9:fe:
                    1a:1a:de:24:84:5d:29:26:ab:ee:c1:11:34:e1:7f:
                    4f:c4:5c:a5:75:dd:7c:06:25:f5:2b:2e:75:b8:ac:
                    1f:41:92:b7:ef:87:c4:c0:77:b9:d3:1a:bf:9f:1c:
                    e3:84:a7:2e:32:81:f8:5e:0a:77:4c:68:de:09:68:
                    d0:48:f4:df:d0:4d:28:a6:61:0e:29:7d:f0:73:7b:
                    7e:14:61:17:fe:03:d8:a8:49:bc:61:e9:b2:2e:ef:
                    43:3f:52:18:de:97:7f:db:99:7d:27:31:f4:49:a4:
                    a8:3a:a9:0f:f0:3a:01:5d:13:85:4d:57:3d:b5:20:
                    1c:6a:8a:50:12:4e:07:35:27:4c:e8:e9:25:79:25:
                    fd:ce:de:bb:ed:fd:70:14:7a:8b:84:d1:99:f4:f7:
                    bc:19:b2:24:26:67:67:8a:fb:26:fa:9c:61:94:bf:
                    d2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BE:AE:AE:BF:60:86:1D:52:85:EC:C8:90:23:64:67:0B:86:FF:9D
            X509v3 Authority Key Identifier:
                keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e0:82:66:be:20:7b:74:ed:98:7a:83:bc:28:7a:2e:65:12:
         e4:ae:57:7d:46:0c:2e:54:d4:14:42:ec:d9:92:20:57:65:65:
         b8:37:26:4e:23:a5:9d:76:b3:b0:22:a0:72:91:62:3b:c1:ed:
         96:1a:bb:36:07:2f:a6:3a:f9:f1:cf:8c:4c:70:72:76:4c:c1:
         50:c2:4c:5d:81:7c:07:59:a9:bd:b7:b3:4d:44:51:2b:0e:cb:
         97:69:b0:24:65:be:e2:b7:05:58:62:22:a2:2a:23:4a:f7:48:
         97:a9:56:d4:29:81:c6:bf:a2:0c:1b:09:62:2c:70:30:e1:75:
         54:72:1c:82:a2:ad:96:4c:52:b4:af:f6:63:9d:ff:76:cb:ce:
         62:cd:e1:ce:03:fd:73:62:df:44:36:9f:e3:65:13:53:19:76:
         00:43:da:92:80:43:d8:15:2d:96:e2:ce:08:eb:23:12:bc:0e:
         0e:0e:f0:c0:83:ae:a3:68:67:22:0b:52:8b:f7:31:e8:4a:6b:
         15:9c:d5:08:79:a0:11:24:99:fe:f5:39:7c:5f:5b:4e:4c:37:
         4f:ac:07:f5:4a:0c:e6:13:60:43:96:5b:b6:92:39:a3:7e:44:
         b1:78:8f:7a:66:e5:09:54:87:c3:8f:58:cd:36:fa:25:fa:ad:
         ee:f8:30:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3tAshQ5LjisA6l4aMYBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZGYzNjk2Y2Y3NGVhOTU1YmUzODM4NzRlMzlhNzI3YWE2
ODI0ZjEwHhcNMjYxMTE1MTEwMTQ2WhcNMjYxMTE2MTEwMTQ2WjAzMTEwLwYDVQQD
EygxMmJlYWVhZWJmNjA4NjFkNTI4NWVjYzg5MDIzNjQ2NzBiODZmZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCZyf0iIqiJDRKEgNbK6FFwLeceE
FWEVc1CHkd5zrBzQc6tMDU0DokwF9/dVyOebACATkRcmeSnOfgxxLcq4iXS5pBcY
MBi2Xv3kiGOcCjL0RTxtw62+6f4aGt4khF0pJqvuwRE04X9PxFyldd18BiX1Ky51
uKwfQZK374fEwHe50xq/nxzjhKcuMoH4Xgp3TGjeCWjQSPTf0E0opmEOKX3wc3t+
FGEX/gPYqEm8YemyLu9DP1IY3pd/25l9JzH0SaSoOqkP8DoBXROFTVc9tSAcaopQ
Ek4HNSdM6OkleSX9zt677f1wFHqLhNGZ9Pe8GbIkJmdnivsm+pxhlL/SFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBK+rq6/YIYdUoXsyJAjZGcLhv+dMB8GA1UdIwQY
MBaAFOzfNpbPdOqVW+ODh045pyeqaCTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgt
MGZmOGNhZmU1ZGVhLzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNGJhZWEtZjA1NC00ZTIzLTlhYTgtMGZmOGNhZmU1ZGVh
LzEvN044MmxzOTA2cFZiNDRPSFRqbW5KNnBvSlBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+CCZr4g
e3TtmHqDvCh6LmUS5K5XfUYMLlTUFELs2ZIgV2VluDcmTiOlnXazsCKgcpFiO8Ht
lhq7Ngcvpjr58c+MTHBydkzBUMJMXYF8B1mpvbezTURRKw7Ll2mwJGW+4rcFWGIi
oiojSvdIl6lW1CmBxr+iDBsJYixwMOF1VHIcgqKtlkxStK/2Y53/dsvOYs3hzgP9
c2LfRDaf42UTUxl2AEPakoBD2BUtluLOCOsjErwODg7wwIOuo2hnIgtSi/cx6Epr
FZzVCHmgESSZ/vU5fF9bTkw3T6wH9UoM5hNgQ5ZbtpI5o35EsXiPemblCVSHw49Y
zTb6Jfqt7vgwxw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:03:27 2026 by rpki-client