Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
File:                     7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft (raw, json)
Hash identifier:          bQ4ePxDdz3uEViGoTb3Gz2Xuw4SAEoEVi1uzDVd/wkw=
Subject key identifier:   37:A6:B1:96:34:75:40:F1:34:C4:07:87:AF:DF:3A:94:EE:AF:2D:A1
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Certificate issuer:       /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial:       01A0D011DB5C6326CBDA36B5D7788E8A9EF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
Manifest number:          1A6D
Signing time:             Wed 23 Sep 2026 21:00:26 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:26 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:26 +0000
Files and hashes:         1: 1-kHdsLNbk3wn4YZGGv7nR6qgmuo.roa (hash: GP85i29ZuAZsmZlUrVOG+U5Hl6NUzQEiBUiRqfR82Fs=)
                          2: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl (hash: q+DB4OLN5+MvlNIu5JmCQKiJpCA348DXEhqK6Nsn6wI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:11:db:5c:63:26:cb:da:36:b5:d7:78:8e:8a:9e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
        Validity
            Not Before: Sep 23 21:00:26 2026 GMT
            Not After : Sep 24 21:00:26 2026 GMT
        Subject: CN=37a6b196347540f134c40787afdf3a94eeaf2da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:0a:d9:d8:bc:ac:60:37:77:17:50:8d:b2:
                    cd:cc:f4:c5:be:95:4f:e0:d7:ff:f8:22:6d:bc:1e:
                    17:09:6c:0e:c5:70:6a:a7:d8:dd:3c:da:83:3e:d7:
                    70:b8:8f:71:a1:09:8a:df:34:1a:52:e1:f5:48:64:
                    96:9c:a9:6b:e5:ec:d1:12:30:05:19:16:74:ca:0f:
                    eb:11:0d:3b:d7:95:f9:5c:98:14:b0:a5:bd:4d:0a:
                    31:44:1b:6a:9d:ef:0c:50:13:5f:b6:16:69:cc:bc:
                    3c:06:ae:e9:99:29:e6:c0:5a:9c:8b:30:a8:c5:8d:
                    77:cf:c7:81:cb:22:c7:f4:91:2c:72:ca:94:f0:06:
                    f4:a8:5e:a9:c1:c6:e0:42:f3:2c:1e:44:99:c4:4b:
                    15:78:f5:a2:6a:fb:86:2e:d3:0b:b4:1f:ac:ee:34:
                    d5:ff:ee:8e:a1:79:64:74:a3:1c:e4:57:5a:dc:16:
                    ae:ac:25:b1:a4:1c:36:ec:76:79:93:58:ec:28:97:
                    cb:94:3a:88:a7:c1:a0:82:a7:3a:bc:77:68:96:03:
                    ba:c4:29:38:ae:a3:3b:8c:1f:18:1c:20:30:2a:65:
                    da:36:ab:75:df:72:bc:84:25:00:d0:da:0f:33:10:
                    ac:b7:47:a2:db:77:a2:f7:58:1e:05:31:07:22:8b:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A6:B1:96:34:75:40:F1:34:C4:07:87:AF:DF:3A:94:EE:AF:2D:A1
            X509v3 Authority Key Identifier:
                keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:42:c5:26:fd:05:33:bb:c8:7e:4f:1c:bb:e7:23:54:ec:e6:
         33:69:c5:a8:52:b5:52:a4:2d:3e:61:a1:dd:1c:5b:c4:38:37:
         81:e3:86:a8:66:4b:5f:2d:6e:7e:ff:04:e3:a1:83:9e:3a:d5:
         1f:d7:77:47:a8:21:78:db:8f:30:17:6f:50:d2:a0:49:3b:af:
         d8:74:53:84:62:14:1f:88:6c:a6:50:5f:2b:4d:1c:f1:89:15:
         16:cb:47:13:83:91:39:53:cb:4a:33:bb:06:50:10:b1:f8:3f:
         a4:ae:18:8b:41:61:66:2b:ef:fb:ee:03:ee:04:bd:d5:53:b1:
         f6:1d:b1:20:74:0a:8c:af:a2:a5:4a:07:0d:df:57:7b:31:c9:
         f2:6c:43:d5:e9:bd:0d:05:0f:ee:14:5a:2e:b4:1e:1c:76:6e:
         61:2e:89:b6:97:f3:2a:69:26:cd:10:5c:67:61:7f:92:e7:3d:
         3c:b7:c9:c6:98:17:a7:6e:fe:d4:e6:6c:7c:4a:d4:21:17:a1:
         e2:fb:e2:78:bd:80:d7:e5:0c:3d:07:c6:d2:ab:27:89:a3:3f:
         90:31:2b:be:c6:e1:0d:d0:23:79:70:1a:cb:72:b9:32:3d:9d:
         e6:df:e1:95:4c:df:16:08:cb:58:10:40:1d:33:90:9a:49:6a:
         42:e9:c4:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEdtcYybL2ja113iOip7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODIzOTUwMDFiMDNjNjYzNTA5OTA5OTc5ZGZiNzg0NDVi
M2Q5YzQwHhcNMjYwOTIzMjEwMDI2WhcNMjYwOTI0MjEwMDI2WjAzMTEwLwYDVQQD
EygzN2E2YjE5NjM0NzU0MGYxMzRjNDA3ODdhZmRmM2E5NGVlYWYyZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dkK2di8rGA3dxdQjbLNzPTFvpVP
4Nf/+CJtvB4XCWwOxXBqp9jdPNqDPtdwuI9xoQmK3zQaUuH1SGSWnKlr5ezREjAF
GRZ0yg/rEQ0715X5XJgUsKW9TQoxRBtqne8MUBNfthZpzLw8Bq7pmSnmwFqcizCo
xY13z8eByyLH9JEscsqU8Ab0qF6pwcbgQvMsHkSZxEsVePWiavuGLtMLtB+s7jTV
/+6OoXlkdKMc5Fda3BaurCWxpBw27HZ5k1jsKJfLlDqIp8Gggqc6vHdolgO6xCk4
rqM7jB8YHCAwKmXaNqt133K8hCUA0NoPMxCst0ei23ei91geBTEHIovV6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDemsZY0dUDxNMQHh6/fOpTury2hMB8GA1UdIwQY
MBaAFO6COVABsDxmNQmQmXnft4RFs9nEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29JNVVBR3dQR1kxQ1pDWmVkLTNoRVd6MmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZjJhMDEtZDhjYS00Yjk0LThmNjct
NzhlYTgzZDIxMjQ5LzEvN29JNVVBR3dQR1kxQ1pDWmVkLTNoRVd6MmNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lZjJhMDEtZDhjYS00Yjk0LThmNjctNzhlYTgzZDIxMjQ5
LzEvN29JNVVBR3dQR1kxQ1pDWmVkLTNoRVd6MmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABULFJv0F
M7vIfk8cu+cjVOzmM2nFqFK1UqQtPmGh3RxbxDg3geOGqGZLXy1ufv8E46GDnjrV
H9d3R6gheNuPMBdvUNKgSTuv2HRThGIUH4hsplBfK00c8YkVFstHE4OROVPLSjO7
BlAQsfg/pK4Yi0FhZivv++4D7gS91VOx9h2xIHQKjK+ipUoHDd9XezHJ8mxD1em9
DQUP7hRaLrQeHHZuYS6JtpfzKmkmzRBcZ2F/kuc9PLfJxpgXp27+1OZsfErUIReh
4vvieL2A1+UMPQfG0qsniaM/kDErvsbhDdAjeXAay3K5Mj2d5t/hlUzfFgjLWBBA
HTOQmklqQunEKA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:03:58 2026 by rpki-client