Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
File:                     dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json)
Hash identifier:          nEKbo5gIwXfVAXxvNRJGVOFMSci1pmpaZ3TAZnI7+4k=
Subject key identifier:   7F:67:79:07:27:2F:47:69:DD:E8:22:54:D2:1D:03:4D:C9:86:74:80
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Certificate issuer:       /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial:       01A10ADE0C04AECD368FD83669260F6103C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
Manifest number:          1A8E
Signing time:             Mon 05 Oct 2026 07:01:26 +0000
Manifest this update:     Mon 05 Oct 2026 07:01:26 +0000
Manifest next update:     Tue 06 Oct 2026 07:01:26 +0000
Files and hashes:         1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: Qb73sqW2kmJUwdv0GXTTFHfn0xcd/Wzk6SJw3F9eXoU=)
                          2: tSEZjU-vS57hTqP83y9FF4MrWAs.roa (hash: ozjgCaqpcyjXz1n6hccmETcyoNzECahsGI6im8BxTac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 07:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0a:de:0c:04:ae:cd:36:8f:d8:36:69:26:0f:61:03:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
        Validity
            Not Before: Oct  5 07:01:26 2026 GMT
            Not After : Oct  6 07:01:26 2026 GMT
        Subject: CN=7f677907272f4769dde82254d21d034dc9867480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a5:2c:fa:f3:3f:22:40:a3:e4:e6:47:eb:40:
                    88:9e:82:32:42:3a:9d:14:11:23:eb:42:ce:bc:c2:
                    9d:95:fa:41:1c:a8:2c:8a:26:d6:35:2d:71:66:77:
                    85:a7:c3:41:63:50:67:b5:15:c8:23:59:cd:f7:ab:
                    fe:6f:9f:aa:e6:a0:75:18:3d:c3:91:78:ae:ae:b6:
                    a2:8f:06:62:7f:7e:60:1c:d9:c1:b5:62:46:a2:ae:
                    c3:1c:e5:f4:a7:e2:79:8b:19:08:cf:fb:7c:37:4c:
                    42:7a:69:29:6a:78:ea:21:9a:43:33:0b:55:42:30:
                    35:6b:97:c0:40:ca:67:b0:32:ab:e5:8b:86:e1:7f:
                    88:78:bc:92:24:51:fe:64:37:22:cd:85:59:7f:50:
                    66:a9:7a:c6:5f:05:b0:15:48:23:31:9d:fd:3b:b4:
                    b0:8d:57:f4:2c:58:40:b8:55:f7:4d:23:43:4c:2b:
                    ef:19:60:5f:b3:5c:3f:23:c1:17:03:80:2b:de:25:
                    26:f5:a9:15:3c:e8:7e:c9:93:80:4f:72:30:ee:a0:
                    6d:4f:e9:f9:1d:97:bd:c9:41:11:f9:1c:b9:71:2b:
                    fb:d6:31:8f:4d:c8:68:75:1e:3f:8e:db:63:e7:d3:
                    dd:99:60:40:8b:8c:92:27:1a:39:0f:21:1b:3a:04:
                    7f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:67:79:07:27:2F:47:69:DD:E8:22:54:D2:1D:03:4D:C9:86:74:80
            X509v3 Authority Key Identifier:
                keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f7:43:28:ed:1e:34:f3:82:50:9d:cc:18:7f:70:b4:46:d6:
         2f:79:57:4c:c2:e1:53:b8:d9:71:29:2c:10:46:e7:f5:e9:37:
         cc:51:ec:d6:af:0b:7f:33:d4:d9:1e:70:d1:45:90:e2:8c:fa:
         ff:55:40:eb:7f:b1:f4:11:a0:5a:42:b6:95:82:94:e0:91:c9:
         1e:bd:1a:54:fb:a9:5e:54:93:0f:51:c6:f2:09:5c:2b:eb:51:
         12:c5:ed:5c:94:fe:f6:92:3a:cb:c4:aa:83:ec:14:fc:c7:c0:
         6b:d6:7d:f0:10:a4:17:da:34:3a:ac:45:a2:13:ab:e9:71:71:
         8a:5c:2d:e9:19:61:d3:2e:01:a8:2c:37:99:59:6d:b4:9f:e6:
         5d:1f:9c:f4:e4:ac:29:78:d2:1a:23:98:6c:f0:8f:2e:80:82:
         09:3b:b4:23:e8:20:4c:9a:3f:d3:3c:e4:83:84:3a:25:18:67:
         18:34:9e:47:7e:2c:89:ab:13:ee:79:90:d0:36:4e:e7:e0:b4:
         52:0b:86:67:84:bd:be:9f:ab:56:1b:91:03:68:da:93:20:f5:
         6e:93:b9:ca:c4:32:f7:f9:45:25:06:72:9d:94:5e:f1:29:6f:
         76:5f:0e:0e:29:c9:d3:30:af:5a:00:6c:40:b4:6f:86:6d:15:
         e3:c8:99:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEK3gwErs02j9g2aSYPYQPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NTRiMGNjMmMzZjZiNzU3ZmY1MmNiYTE2NWQ5ZmZhODhj
ZWQzMGYwHhcNMjYxMDA1MDcwMTI2WhcNMjYxMDA2MDcwMTI2WjAzMTEwLwYDVQQD
Eyg3ZjY3NzkwNzI3MmY0NzY5ZGRlODIyNTRkMjFkMDM0ZGM5ODY3NDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KUs+vM/IkCj5OZH60CInoIyQjqd
FBEj60LOvMKdlfpBHKgsiibWNS1xZneFp8NBY1BntRXII1nN96v+b5+q5qB1GD3D
kXiurraijwZif35gHNnBtWJGoq7DHOX0p+J5ixkIz/t8N0xCemkpanjqIZpDMwtV
QjA1a5fAQMpnsDKr5YuG4X+IeLySJFH+ZDcizYVZf1BmqXrGXwWwFUgjMZ39O7Sw
jVf0LFhAuFX3TSNDTCvvGWBfs1w/I8EXA4Ar3iUm9akVPOh+yZOAT3Iw7qBtT+n5
HZe9yUER+Ry5cSv71jGPTchodR4/jttj59PdmWBAi4ySJxo5DyEbOgR/pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9neQcnL0dp3egiVNIdA03JhnSAMB8GA1UdIwQY
MBaAFHZUsMwsP2t1f/UsuhZdn/qIztMPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xMjI2NDEtNzFhZi00NTljLWI5YzEt
OGIxNTZkYjRmZjM1LzEvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xMjI2NDEtNzFhZi00NTljLWI5YzEtOGIxNTZkYjRmZjM1
LzEvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPdDKO0e
NPOCUJ3MGH9wtEbWL3lXTMLhU7jZcSksEEbn9ek3zFHs1q8LfzPU2R5w0UWQ4oz6
/1VA63+x9BGgWkK2lYKU4JHJHr0aVPupXlSTD1HG8glcK+tREsXtXJT+9pI6y8Sq
g+wU/MfAa9Z98BCkF9o0OqxFohOr6XFxilwt6Rlh0y4BqCw3mVlttJ/mXR+c9OSs
KXjSGiOYbPCPLoCCCTu0I+ggTJo/0zzkg4Q6JRhnGDSeR34siasT7nmQ0DZO5+C0
UguGZ4S9vp+rVhuRA2jakyD1bpO5ysQy9/lFJQZynZRe8Slvdl8ODinJ0zCvWgBs
QLRvhm0V48iZVw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:15:34 2026 by rpki-client