Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/88f5b7-3b25-4c7d-b68c-2cac32a60cdb/1/7lWI_PJbvC1ojvaiJxDz9mL1QMU.mft
File:                     7lWI_PJbvC1ojvaiJxDz9mL1QMU.mft (raw, json)
Hash identifier:          +uV//NEM/MIUAfxa/z8HMXUMaxBcCf2V3LoGlCsYNsg=
Subject key identifier:   CA:03:B0:0E:58:1D:E9:D5:24:EE:EA:36:F8:38:E0:59:37:8C:B5:D7
Authority key identifier: EE:55:88:FC:F2:5B:BC:2D:68:8E:F6:A2:27:10:F3:F6:62:F5:40:C5
Certificate issuer:       /CN=ee5588fcf25bbc2d688ef6a22710f3f662f540c5
Certificate serial:       01A0CE5ADE366EC8883390B7AB2EF23A347F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7lWI_PJbvC1ojvaiJxDz9mL1QMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/88f5b7-3b25-4c7d-b68c-2cac32a60cdb/1/7lWI_PJbvC1ojvaiJxDz9mL1QMU.mft
Manifest number:          62
Signing time:             Wed 23 Sep 2026 13:00:56 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:56 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:56 +0000
Files and hashes:         1: 7lWI_PJbvC1ojvaiJxDz9mL1QMU.crl (hash: Sjp9a+vKm99uNPrKRi9YRA+jhi7+ailR29aA7AdHph4=)
                          2: AWlb0DgVfoDQ8kBsHLuO5miCC6U.roa (hash: 01mEoIEuGIxcC0au5+71kcj0MZHf6q+0oMWtVnDJxqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/88f5b7-3b25-4c7d-b68c-2cac32a60cdb/1/7lWI_PJbvC1ojvaiJxDz9mL1QMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/88f5b7-3b25-4c7d-b68c-2cac32a60cdb/1/7lWI_PJbvC1ojvaiJxDz9mL1QMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7lWI_PJbvC1ojvaiJxDz9mL1QMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:de:36:6e:c8:88:33:90:b7:ab:2e:f2:3a:34:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5588fcf25bbc2d688ef6a22710f3f662f540c5
        Validity
            Not Before: Sep 23 13:00:56 2026 GMT
            Not After : Sep 24 13:00:56 2026 GMT
        Subject: CN=ca03b00e581de9d524eeea36f838e059378cb5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:0d:80:af:0d:0b:2b:b3:29:47:1d:e9:7a:
                    9e:cb:d8:d3:37:4f:39:2c:f0:87:25:24:38:41:74:
                    78:50:63:37:5d:64:73:a1:31:71:33:3c:4f:95:9e:
                    0c:63:4d:74:4e:1b:62:5d:7b:01:1d:4a:22:ba:7a:
                    f0:62:8c:9b:89:7e:34:96:ae:21:8c:98:b0:41:a0:
                    59:fe:f8:d4:2d:7f:ae:20:d2:06:f5:7c:ba:1d:e0:
                    21:37:86:41:f0:99:3c:b8:f3:09:42:23:fd:96:b8:
                    19:15:bb:91:c0:f2:04:df:0a:f5:93:3f:e2:0e:f6:
                    b3:be:ed:3b:4f:34:cc:f1:9f:4e:29:6a:d5:9a:a1:
                    d2:c4:3e:dc:d2:5b:12:6b:2a:5c:2c:04:d9:6c:07:
                    af:5b:bd:2f:4a:8a:4c:df:86:78:51:88:da:01:24:
                    3a:04:3d:e1:78:a3:ab:58:77:95:3b:1b:24:ba:96:
                    62:93:2c:58:1c:85:ab:73:39:82:7b:2e:f7:2c:08:
                    f2:bd:17:a7:8d:95:cd:85:92:3e:84:ec:f5:1e:9c:
                    06:ea:b1:d2:2c:cc:5b:1a:17:07:3c:ac:54:f8:1a:
                    38:e1:4b:86:f2:d4:90:fb:d6:73:ea:0e:9f:01:83:
                    af:14:97:4f:17:d4:ea:33:28:f6:b6:36:7e:47:8d:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:03:B0:0E:58:1D:E9:D5:24:EE:EA:36:F8:38:E0:59:37:8C:B5:D7
            X509v3 Authority Key Identifier:
                keyid:EE:55:88:FC:F2:5B:BC:2D:68:8E:F6:A2:27:10:F3:F6:62:F5:40:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lWI_PJbvC1ojvaiJxDz9mL1QMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/88f5b7-3b25-4c7d-b68c-2cac32a60cdb/1/7lWI_PJbvC1ojvaiJxDz9mL1QMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/88f5b7-3b25-4c7d-b68c-2cac32a60cdb/1/7lWI_PJbvC1ojvaiJxDz9mL1QMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:28:77:d0:cb:fb:e2:a3:96:f9:8b:c0:71:7a:00:c8:9b:35:
         84:a0:91:88:f7:82:72:31:42:45:e3:93:79:60:15:53:ac:98:
         bc:2e:3d:a1:d6:13:a2:c3:22:6f:3d:12:25:39:49:db:a3:bf:
         01:91:30:f3:40:ef:28:5c:30:47:d2:e7:cd:d0:c8:29:84:6f:
         82:09:70:ad:0b:45:82:95:84:d4:25:e5:d9:d4:fe:01:94:91:
         57:31:4c:d9:96:fb:59:36:c7:14:cd:8f:39:f4:7d:8f:c1:e0:
         68:9d:f9:3a:fd:a6:ef:c8:02:7a:a9:b2:c4:5d:a7:54:66:a7:
         5b:cd:67:43:4f:2a:62:5c:23:dd:23:f8:8d:d1:f0:d5:ff:1e:
         c4:a4:0d:8e:70:e6:63:b0:21:54:32:a9:41:eb:79:6b:1c:15:
         50:d1:d0:95:0e:a3:ae:82:60:87:bc:f3:7d:9b:51:d2:16:09:
         ed:2d:4e:da:e5:a5:8e:4b:40:c7:a8:80:f7:64:be:2b:17:17:
         42:51:8c:13:88:71:80:0d:c4:ac:24:52:a0:b2:ab:90:56:99:
         39:ea:17:fa:a0:33:68:6f:5f:25:08:0d:c0:ed:e8:db:d4:42:
         b3:9d:f0:ff:43:62:e1:75:3f:4b:8c:b3:5a:20:1c:2c:fa:91:
         46:bd:41:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOWt42bsiIM5C3qy7yOjR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNTU4OGZjZjI1YmJjMmQ2ODhlZjZhMjI3MTBmM2Y2NjJm
NTQwYzUwHhcNMjYwOTIzMTMwMDU2WhcNMjYwOTI0MTMwMDU2WjAzMTEwLwYDVQQD
EyhjYTAzYjAwZTU4MWRlOWQ1MjRlZWVhMzZmODM4ZTA1OTM3OGNiNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsloNgK8NCyuzKUcd6Xqey9jTN085
LPCHJSQ4QXR4UGM3XWRzoTFxMzxPlZ4MY010ThtiXXsBHUoiunrwYoybiX40lq4h
jJiwQaBZ/vjULX+uINIG9Xy6HeAhN4ZB8Jk8uPMJQiP9lrgZFbuRwPIE3wr1kz/i
Dvazvu07TzTM8Z9OKWrVmqHSxD7c0lsSaypcLATZbAevW70vSopM34Z4UYjaASQ6
BD3heKOrWHeVOxskupZikyxYHIWrczmCey73LAjyvRenjZXNhZI+hOz1HpwG6rHS
LMxbGhcHPKxU+Bo44UuG8tSQ+9Zz6g6fAYOvFJdPF9TqMyj2tjZ+R424/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoDsA5YHenVJO7qNvg44Fk3jLXXMB8GA1UdIwQY
MBaAFO5ViPzyW7wtaI72oicQ8/Zi9UDFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2xXSV9QSmJ2QzFvanZhaUp4RHo5bUwxUU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84OGY1YjctM2IyNS00YzdkLWI2OGMt
MmNhYzMyYTYwY2RiLzEvN2xXSV9QSmJ2QzFvanZhaUp4RHo5bUwxUU1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS84OGY1YjctM2IyNS00YzdkLWI2OGMtMmNhYzMyYTYwY2Ri
LzEvN2xXSV9QSmJ2QzFvanZhaUp4RHo5bUwxUU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACih30Mv7
4qOW+YvAcXoAyJs1hKCRiPeCcjFCReOTeWAVU6yYvC49odYTosMibz0SJTlJ26O/
AZEw80DvKFwwR9LnzdDIKYRvgglwrQtFgpWE1CXl2dT+AZSRVzFM2Zb7WTbHFM2P
OfR9j8HgaJ35Ov2m78gCeqmyxF2nVGanW81nQ08qYlwj3SP4jdHw1f8exKQNjnDm
Y7AhVDKpQet5axwVUNHQlQ6jroJgh7zzfZtR0hYJ7S1O2uWljktAx6iA92S+KxcX
QlGME4hxgA3ErCRSoLKrkFaZOeoX+qAzaG9fJQgNwO3o29RCs53w/0Ni4XU/S4yz
WiAcLPqRRr1Bjw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 15:37:19 2026 by rpki-client