Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
File:                     7AWYaJfQJOSMfNJeGJHEII_zu7I.mft (raw, json)
Hash identifier:          7wdGm6Y5Mvwg7KSAamQwEu9qAbJOLNqUMzt3JKTuQ14=
Subject key identifier:   52:A5:84:50:7B:0B:26:51:0E:B2:7D:2D:2A:11:2B:18:37:44:2D:3C
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Certificate issuer:       /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial:       01A0C9D8AB159B7F2CA425C00FC5C02CE72B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
Manifest number:          1426
Signing time:             Tue 22 Sep 2026 16:00:14 +0000
Manifest this update:     Tue 22 Sep 2026 16:00:14 +0000
Manifest next update:     Wed 23 Sep 2026 16:00:14 +0000
Files and hashes:         1: 7AWYaJfQJOSMfNJeGJHEII_zu7I.crl (hash: pRpX/DitoTTbbkMQgBtlgymIiHwZLf+hGD8e03iZWno=)
                          2: HXGNMLUxYfLt2IxSXdMd7iMfgVw.roa (hash: rGZ8j3Yypq0spYgSmlQPy3xpKi1OQAliNPVd0/dnsVw=)
                          3: NdtOCJvzGmFZlmDg7mwNpBd1B_Q.roa (hash: W9vZQt0X+AIDjmeyVAUiJ2h6aMzNBj5GBkBeIxqmyoM=)
                          4: zb3M5sCfdcroGbb7sb_8fFyKbFk.roa (hash: DT+a2ocZ5cYF7PMlIn/Yq8jpDiPXnKsM/EWJpn65oWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d8:ab:15:9b:7f:2c:a4:25:c0:0f:c5:c0:2c:e7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
        Validity
            Not Before: Sep 22 16:00:14 2026 GMT
            Not After : Sep 23 16:00:14 2026 GMT
        Subject: CN=52a584507b0b26510eb27d2d2a112b1837442d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:2d:10:36:bf:1a:c2:92:95:52:32:a6:56:
                    61:3b:30:8b:3d:a7:e0:d4:f0:b4:d0:56:40:38:74:
                    f8:69:b5:87:4c:8e:ea:74:96:b2:c0:03:b6:42:ef:
                    fb:83:7a:09:5a:1d:4d:67:ed:28:53:41:1e:a3:d4:
                    e2:40:8c:2e:27:e4:20:23:26:59:1d:2f:57:8b:74:
                    61:be:c2:43:b4:46:ba:8c:c9:a8:0c:45:c9:35:1e:
                    f3:f4:8a:1d:fb:e8:55:6b:1d:70:42:8a:79:ac:2c:
                    82:da:fa:0a:30:cc:dd:7e:86:74:95:82:08:9a:80:
                    ab:8e:41:33:c4:81:5e:3e:18:0c:91:4e:33:89:e6:
                    9e:6c:1f:9c:3b:de:1d:03:97:18:91:40:26:a8:e7:
                    42:66:8a:92:20:5d:0d:e6:f3:91:57:d5:34:e7:2b:
                    86:1c:85:f5:e8:02:f8:f7:60:dc:80:d4:87:2f:52:
                    6e:29:3a:c5:f2:59:e2:ff:9d:40:7d:19:1f:15:76:
                    25:76:71:e1:2c:a2:21:9e:35:8b:0e:b7:29:8e:08:
                    9b:54:77:e1:fa:1c:2f:2b:70:3e:86:65:09:82:ca:
                    f5:db:60:04:bd:44:c1:ec:e4:a6:eb:63:bf:f9:f8:
                    ab:32:bd:04:9b:30:7c:9c:6a:34:36:17:13:a0:3e:
                    24:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A5:84:50:7B:0B:26:51:0E:B2:7D:2D:2A:11:2B:18:37:44:2D:3C
            X509v3 Authority Key Identifier:
                keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a7:09:0b:43:3d:47:c6:fb:e6:ad:6b:af:66:3c:36:4e:c0:
         bc:6d:77:8e:46:3b:ab:96:f0:b2:b8:13:8d:18:8c:7a:76:a1:
         0c:59:38:d0:c2:5e:43:5c:d3:8a:dd:d1:d6:81:75:0e:19:c2:
         fb:fc:25:50:e8:03:0e:54:bf:8a:a7:e0:e4:fd:09:fd:95:f0:
         d7:fb:5f:34:54:80:29:87:5d:5b:39:a3:d5:da:a3:6e:63:61:
         31:d3:4c:94:cd:ed:8f:1e:61:42:c5:5b:57:95:0c:54:79:ce:
         94:94:62:6f:63:ca:a0:dc:0d:1e:b4:58:7a:cb:cf:a0:b9:5b:
         92:a9:84:ce:13:ff:aa:4e:14:4b:1b:38:92:cb:2a:5d:f8:a4:
         98:ef:f4:ca:08:df:f4:21:18:36:a5:fd:e5:e4:34:fe:da:18:
         fb:fa:60:7b:5e:a9:67:b1:03:68:1c:80:72:d5:8e:7b:c3:a7:
         f3:43:ca:2d:c2:f7:7d:04:ea:09:df:cd:f3:54:fc:a4:f3:9d:
         9e:ec:07:5b:fc:d2:08:83:4a:a6:b2:7a:a8:fe:3f:3f:ca:99:
         99:1a:a2:02:2d:47:8e:25:3c:aa:6f:d3:c4:52:29:37:dd:6c:
         eb:bb:c7:95:b7:f6:67:6f:d3:ab:74:f8:00:a4:2e:ea:f1:f7:
         02:2f:40:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJ2KsVm38spCXAD8XALOcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMDU5ODY4OTdkMDI0ZTQ4YzdjZDI1ZTE4OTFjNDIwOGZm
M2JiYjIwHhcNMjYwOTIyMTYwMDE0WhcNMjYwOTIzMTYwMDE0WjAzMTEwLwYDVQQD
Eyg1MmE1ODQ1MDdiMGIyNjUxMGViMjdkMmQyYTExMmIxODM3NDQyZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruItEDa/GsKSlVIyplZhOzCLPafg
1PC00FZAOHT4abWHTI7qdJaywAO2Qu/7g3oJWh1NZ+0oU0Eeo9TiQIwuJ+QgIyZZ
HS9Xi3RhvsJDtEa6jMmoDEXJNR7z9Iod++hVax1wQop5rCyC2voKMMzdfoZ0lYII
moCrjkEzxIFePhgMkU4zieaebB+cO94dA5cYkUAmqOdCZoqSIF0N5vORV9U05yuG
HIX16AL492DcgNSHL1JuKTrF8lni/51AfRkfFXYldnHhLKIhnjWLDrcpjgibVHfh
+hwvK3A+hmUJgsr122AEvUTB7OSm62O/+firMr0EmzB8nGo0NhcToD4kowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKlhFB7CyZRDrJ9LSoRKxg3RC08MB8GA1UdIwQY
MBaAFOwFmGiX0CTkjHzSXhiRxCCP87uyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hZDZhZjAtMDA1Zi00M2EzLWFhOWQt
NzY2ZDFmMzI0MzNjLzEvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hZDZhZjAtMDA1Zi00M2EzLWFhOWQtNzY2ZDFmMzI0MzNj
LzEvN0FXWWFKZlFKT1NNZk5KZUdKSEVJSV96dTdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKcJC0M9
R8b75q1rr2Y8Nk7AvG13jkY7q5bwsrgTjRiMenahDFk40MJeQ1zTit3R1oF1DhnC
+/wlUOgDDlS/iqfg5P0J/ZXw1/tfNFSAKYddWzmj1dqjbmNhMdNMlM3tjx5hQsVb
V5UMVHnOlJRib2PKoNwNHrRYesvPoLlbkqmEzhP/qk4USxs4kssqXfikmO/0ygjf
9CEYNqX95eQ0/toY+/pge16pZ7EDaByActWOe8On80PKLcL3fQTqCd/N81T8pPOd
nuwHW/zSCINKprJ6qP4/P8qZmRqiAi1HjiU8qm/TxFIpN91s67vHlbf2Z2/Tq3T4
AKQu6vH3Ai9AlA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:09:03 2026 by rpki-client