Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
File:                     7bkm-MYDqrectGqIO_YyVko_qr8.mft (raw, json)
Hash identifier:          85FQRVUmGa1FHJXaGGK1Bk9AXwae5ZpF2IMNXthaMfo=
Subject key identifier:   10:54:C7:3A:10:7A:5B:F1:DE:B7:3B:AE:C8:99:D6:2B:21:22:D5:14
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       01A0CB5972D6E43D2EB655EE99D467985E61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
Manifest number:          1A99
Signing time:             Tue 22 Sep 2026 23:00:31 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:31 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:31 +0000
Files and hashes:         1: 5CiJxwVbdUZ8eM7me5oInvUUaLg.asa (hash: dP8XoNIksXb4H+NwZjef9TLwaeJ0Qhddyzp+zEO5+gw=)
                          2: 7bkm-MYDqrectGqIO_YyVko_qr8.crl (hash: Pt7em4NpPpcUQ99BNCBybuDqBoXJKB14lbuBleuYu2o=)
                          3: ZOavrk-QF97rJP_2jNT7lmVgOvE.roa (hash: r2s3h1w3Hjfzrez9cKoP8cqtXCYOTfAkva8ue3B7Z2Q=)
                          4: b4zo6KiTgoc5L-wE1iEGLa3ot54.roa (hash: 7qq5CHWNx2oa5BEGotuEcxfckS6TczcC6U6UJrqCLzo=)
                          5: ffZakNnkJ9qo1A3shFhtl9qXd_Q.roa (hash: zf21A+pRvsATbzNE1edRMBnzKSA0PFpPQRbeA3NRvG4=)
                          6: g2nNQ5VhHao4Apal56-pguzsiBg.asa (hash: gNuWJZ3S7x7XLK2/IgqTwexYiw/r4lDYIjTdNxVRqcE=)
                          7: ySpczFe0bFDpQcjPCdkMrRLgsk4.roa (hash: 4bkzvAWfxVndAxO5MdGK6YbLnfuFOHsrNBENCi5CdAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:72:d6:e4:3d:2e:b6:55:ee:99:d4:67:98:5e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Sep 22 23:00:31 2026 GMT
            Not After : Sep 23 23:00:31 2026 GMT
        Subject: CN=1054c73a107a5bf1deb73baec899d62b2122d514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d8:6d:bb:69:d0:9b:fc:6e:04:f8:d1:89:98:
                    ba:20:4b:71:0d:26:6c:31:0e:1f:da:97:6c:b2:e7:
                    d0:e8:b8:26:55:74:d2:7a:d9:19:15:07:09:95:54:
                    ba:27:bc:e5:0f:64:c4:61:0a:bf:a9:31:cc:f4:12:
                    f3:3c:f0:12:f5:94:c0:64:c0:b1:db:59:fe:37:b0:
                    db:be:a7:35:a8:fc:e5:c8:30:c0:17:6d:be:e3:b9:
                    34:09:ec:ba:30:38:8b:55:62:f7:9f:dc:4e:31:23:
                    3a:49:67:38:15:29:1f:76:ac:9b:f2:b4:6c:a2:37:
                    a0:95:05:17:dc:4c:1e:7a:49:6f:17:25:1f:14:d9:
                    ad:71:23:45:31:60:0a:d9:fa:5a:3f:45:9f:f7:96:
                    4b:64:91:d9:bf:28:e8:3f:7b:51:da:7a:a0:6e:10:
                    13:d2:47:b9:3c:e1:6b:34:be:3a:3b:8b:e8:75:ff:
                    9a:f6:d0:5f:e4:5e:9d:67:d4:4e:e2:4f:df:90:dd:
                    77:52:4e:81:eb:00:8d:a6:8e:4e:4b:42:50:44:ec:
                    18:27:08:30:2b:77:20:a7:5f:65:e9:d1:af:9f:55:
                    7b:06:5a:2d:e4:17:01:65:65:9c:74:91:3f:e7:38:
                    67:94:13:e4:fa:6b:37:e1:04:be:44:ae:61:cc:5a:
                    8c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:54:C7:3A:10:7A:5B:F1:DE:B7:3B:AE:C8:99:D6:2B:21:22:D5:14
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d6:b2:95:11:da:4e:0d:2a:2a:02:b5:80:2e:80:3e:6a:7e:
         f8:80:0e:b2:dd:98:c0:c5:c6:f0:65:87:0c:40:bd:12:fb:43:
         6e:60:ba:15:01:3e:b1:28:5a:fc:9f:01:01:48:fa:22:09:c3:
         2e:5d:97:1b:bf:75:6f:ac:8d:26:b1:38:2b:8e:a3:5a:e7:09:
         bd:df:e9:5f:42:1f:f0:d9:79:ce:83:ac:79:19:a2:31:5f:3a:
         43:60:b5:6f:a8:88:0c:9f:3b:17:33:a7:10:b8:50:7b:12:03:
         34:d6:29:d3:ef:be:c7:c9:5a:5a:9a:82:24:02:f6:89:c8:5a:
         3c:ef:d5:04:aa:ce:6c:bd:fd:8a:05:49:00:5f:a2:27:4e:04:
         31:aa:25:d9:5a:8e:fa:0d:11:33:34:77:2e:bb:37:54:bb:36:
         34:f7:89:ce:6f:3b:82:f7:81:34:a7:53:28:0e:a0:ca:fa:77:
         e0:50:35:d0:b2:74:cb:7c:78:69:22:80:31:5d:df:a7:b8:f3:
         69:ee:79:35:2f:ce:ee:4d:c9:6f:a3:3a:d9:28:d6:35:03:17:
         02:37:b3:c6:a3:83:ed:27:50:4e:fd:cd:34:de:e5:2f:6b:5a:
         74:5a:dc:82:5e:47:54:43:f7:62:d9:68:9f:70:f6:b5:99:02:
         13:60:76:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLWXLW5D0utlXumdRnmF5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYjkyNmY4YzYwM2FhYjc5Y2I0NmE4ODNiZjYzMjU2NGEz
ZmFhYmYwHhcNMjYwOTIyMjMwMDMxWhcNMjYwOTIzMjMwMDMxWjAzMTEwLwYDVQQD
EygxMDU0YzczYTEwN2E1YmYxZGViNzNiYWVjODk5ZDYyYjIxMjJkNTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7thtu2nQm/xuBPjRiZi6IEtxDSZs
MQ4f2pdssufQ6LgmVXTSetkZFQcJlVS6J7zlD2TEYQq/qTHM9BLzPPAS9ZTAZMCx
21n+N7Dbvqc1qPzlyDDAF22+47k0Cey6MDiLVWL3n9xOMSM6SWc4FSkfdqyb8rRs
ojeglQUX3EweeklvFyUfFNmtcSNFMWAK2fpaP0Wf95ZLZJHZvyjoP3tR2nqgbhAT
0ke5POFrNL46O4vodf+a9tBf5F6dZ9RO4k/fkN13Uk6B6wCNpo5OS0JQROwYJwgw
K3cgp19l6dGvn1V7Blot5BcBZWWcdJE/5zhnlBPk+ms34QS+RK5hzFqMrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBUxzoQelvx3rc7rsiZ1ishItUUMB8GA1UdIwQY
MBaAFO25JvjGA6q3nLRqiDv2MlZKP6q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2Mt
M2JkMTk3OGJmMmY2LzEvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2MtM2JkMTk3OGJmMmY2
LzEvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNaylRHa
Tg0qKgK1gC6APmp++IAOst2YwMXG8GWHDEC9EvtDbmC6FQE+sSha/J8BAUj6IgnD
Ll2XG791b6yNJrE4K46jWucJvd/pX0If8Nl5zoOseRmiMV86Q2C1b6iIDJ87FzOn
ELhQexIDNNYp0+++x8laWpqCJAL2ichaPO/VBKrObL39igVJAF+iJ04EMaol2VqO
+g0RMzR3Lrs3VLs2NPeJzm87gveBNKdTKA6gyvp34FA10LJ0y3x4aSKAMV3fp7jz
ae55NS/O7k3Jb6M62SjWNQMXAjezxqOD7SdQTv3NNN7lL2tadFrcgl5HVEP3Ytlo
n3D2tZkCE2B2nA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:11:03 2026 by rpki-client