Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
File:                     oet7cZVO3_yjWEyF-gj7EiQv7NU.mft (raw, json)
Hash identifier:          7SEcwhp9ai9qZrIqFs4FEq6F12f7qkOswo1PND38e60=
Subject key identifier:   7A:78:8F:83:6D:C4:AB:94:E4:4E:89:62:22:2A:19:AC:E9:85:E6:CD
Authority key identifier: A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5
Certificate issuer:       /CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
Certificate serial:       01A131B4A254F8A241E0AB9B93B95C0ED3F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
Manifest number:          036F
Signing time:             Mon 12 Oct 2026 20:01:23 +0000
Manifest this update:     Mon 12 Oct 2026 20:01:23 +0000
Manifest next update:     Tue 13 Oct 2026 20:01:23 +0000
Files and hashes:         1: lE1Kxf9PJiSztZNrzwwBPAVYUcU.roa (hash: jNZxU5D1EKLny/wqaNa70XGzWgiNnFCUNtLqg86RKFE=)
                          2: oet7cZVO3_yjWEyF-gj7EiQv7NU.crl (hash: fm+jAFeNqVHxHGDSw54RW9gPddx83fdqdK9D5qFJ81k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:b4:a2:54:f8:a2:41:e0:ab:9b:93:b9:5c:0e:d3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
        Validity
            Not Before: Oct 12 20:01:23 2026 GMT
            Not After : Oct 13 20:01:23 2026 GMT
        Subject: CN=7a788f836dc4ab94e44e8962222a19ace985e6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:72:d0:90:2a:bb:b6:29:17:ae:08:0f:8d:
                    19:ac:fc:3a:7d:3b:b7:2d:0d:13:a6:f0:fe:79:de:
                    08:a1:4e:72:de:27:f8:da:6a:dd:7e:33:ce:d5:fb:
                    7d:15:b1:26:c2:7b:f3:c5:d9:c3:00:0b:1e:ed:0b:
                    85:f8:c7:45:23:cb:03:b5:e3:26:a0:3d:4b:97:b3:
                    ff:90:84:a3:37:80:66:4e:82:29:80:96:11:87:ed:
                    a1:a0:dd:24:59:49:7a:03:52:b0:39:ce:19:5d:47:
                    6d:b4:e0:61:dc:bb:cb:58:3d:bf:63:b5:70:3f:30:
                    78:1f:b5:8d:50:cd:1c:4f:60:42:14:be:5f:db:15:
                    62:f8:1e:9d:21:2c:3b:e4:c0:d5:7c:59:04:87:2d:
                    d5:88:0e:b0:47:e2:9d:06:3b:84:cc:80:e0:ca:f2:
                    98:91:31:d5:cf:89:1f:74:0e:7f:5a:f0:9b:14:fb:
                    b5:3e:1c:55:18:27:a8:d8:ec:46:c9:f2:d8:af:08:
                    3d:6a:2e:a4:1c:45:69:67:f6:97:ee:6d:58:9b:78:
                    2a:25:68:e8:b0:e1:16:37:e0:e7:68:e8:ba:30:81:
                    f1:26:e0:83:77:00:5d:7b:26:4c:bf:49:2a:4b:14:
                    88:27:e7:f9:a6:f9:40:5f:fb:71:fe:0c:44:0b:f6:
                    4e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:78:8F:83:6D:C4:AB:94:E4:4E:89:62:22:2A:19:AC:E9:85:E6:CD
            X509v3 Authority Key Identifier:
                keyid:A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:47:cf:f5:c6:25:9d:10:93:22:a7:a9:fa:ec:62:02:35:db:
         8c:ee:c2:83:d5:ff:13:ec:ed:5f:05:39:dc:fd:43:c6:03:16:
         a7:f5:1b:7e:c6:41:68:a7:83:0e:25:9d:8f:2b:f6:44:3b:42:
         63:5f:52:d6:bd:fd:68:f0:7a:d9:49:46:ed:f8:36:dd:8f:58:
         2c:99:9a:e9:2e:14:ee:df:8d:37:14:0d:af:c3:64:db:cf:34:
         a3:03:19:77:67:5c:71:7e:97:b6:df:d8:68:a2:47:79:ce:9a:
         68:11:f7:e1:47:c2:81:f1:35:14:b7:c4:e3:8e:58:00:44:9a:
         fc:93:86:26:8f:85:54:4e:5a:6d:38:c7:86:0e:41:d0:94:d8:
         b5:84:34:7e:91:fe:85:ca:96:bb:26:1f:04:f7:06:d8:0c:38:
         99:3b:c0:39:54:0d:d2:f0:7c:b5:3c:1d:d4:2f:7d:75:0c:c0:
         7e:d6:4f:e7:22:6e:3e:51:39:a8:32:d9:85:3a:3e:5f:4d:d5:
         32:0e:93:21:6b:67:81:fa:07:f4:b1:7d:2d:cf:ca:0e:d8:ae:
         62:ac:30:4d:fc:5c:a0:d0:56:e0:0e:d1:a4:a0:49:84:22:e3:
         b8:68:72:b9:70:80:00:29:5e:63:31:7c:e6:63:6d:8c:05:02:
         04:b0:53:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaExtKJU+KJB4Kubk7lcDtPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZWI3YjcxOTU0ZWRmZmNhMzU4NGM4NWZhMDhmYjEyMjQy
ZmVjZDUwHhcNMjYxMDEyMjAwMTIzWhcNMjYxMDEzMjAwMTIzWjAzMTEwLwYDVQQD
Eyg3YTc4OGY4MzZkYzRhYjk0ZTQ0ZTg5NjIyMjJhMTlhY2U5ODVlNmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkBy0JAqu7YpF64ID40ZrPw6fTu3
LQ0TpvD+ed4IoU5y3if42mrdfjPO1ft9FbEmwnvzxdnDAAse7QuF+MdFI8sDteMm
oD1Ll7P/kISjN4BmToIpgJYRh+2hoN0kWUl6A1KwOc4ZXUdttOBh3LvLWD2/Y7Vw
PzB4H7WNUM0cT2BCFL5f2xVi+B6dISw75MDVfFkEhy3ViA6wR+KdBjuEzIDgyvKY
kTHVz4kfdA5/WvCbFPu1PhxVGCeo2OxGyfLYrwg9ai6kHEVpZ/aX7m1Ym3gqJWjo
sOEWN+DnaOi6MIHxJuCDdwBdeyZMv0kqSxSIJ+f5pvlAX/tx/gxEC/ZONQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHp4j4NtxKuU5E6JYiIqGazphebNMB8GA1UdIwQY
MBaAFKHre3GVTt/8o1hMhfoI+xIkL+zVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iNmM1MDUtZWY0Ny00ODA5LWI1ZmMt
MGVkMTdhNjk4MDBmLzEvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9iNmM1MDUtZWY0Ny00ODA5LWI1ZmMtMGVkMTdhNjk4MDBm
LzEvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUfP9cYl
nRCTIqep+uxiAjXbjO7Cg9X/E+ztXwU53P1DxgMWp/UbfsZBaKeDDiWdjyv2RDtC
Y19S1r39aPB62UlG7fg23Y9YLJma6S4U7t+NNxQNr8Nk2880owMZd2dccX6Xtt/Y
aKJHec6aaBH34UfCgfE1FLfE445YAESa/JOGJo+FVE5abTjHhg5B0JTYtYQ0fpH+
hcqWuyYfBPcG2Aw4mTvAOVQN0vB8tTwd1C99dQzAftZP5yJuPlE5qDLZhTo+X03V
Mg6TIWtngfoH9LF9Lc/KDtiuYqwwTfxcoNBW4A7RpKBJhCLjuGhyuXCAACleYzF8
5mNtjAUCBLBT9A==
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:04:23 2026 by rpki-client