Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
File:                     7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft (raw, json)
Hash identifier:          Q+PKM0BoLVzjab3Rhdr0BOQDP28blCD/PnYl7MeoqjY=
Subject key identifier:   2A:16:1E:A3:2D:F1:97:D4:3C:A8:69:1E:9B:9B:7E:A2:79:FE:13:BC
Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
Certificate issuer:       /CN=ecee470bf5109976934f51e7eaef210779a2c4de
Certificate serial:       01A0D3EF789AD6118BC380DDEB47ABFDE358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 15:01:21 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:21 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:21 +0000
Files and hashes:         1: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl (hash: jydW6Uim/+2w71JpZ5ikr6JlPwiNJOljuUoYIBU85CY=)
                          2: i9futBXgsX5FN5Oy7LRhwMH28E8.roa (hash: O7Qfk152zcRaRv43cCEp1BeLvPwD5mzKuSykiTRHSEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:78:9a:d6:11:8b:c3:80:dd:eb:47:ab:fd:e3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de
        Validity
            Not Before: Sep 24 15:01:21 2026 GMT
            Not After : Sep 25 15:01:21 2026 GMT
        Subject: CN=2a161ea32df197d43ca8691e9b9b7ea279fe13bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:a1:b5:0f:9d:60:b2:e7:87:a0:fd:44:c0:
                    91:70:82:0b:3e:b2:f2:b1:a6:be:40:6f:bb:f8:fc:
                    b9:d0:2d:d1:99:a6:b9:d9:c9:e4:35:af:4d:b7:02:
                    6c:ce:1f:50:eb:3e:86:16:57:7c:a9:f4:a0:ca:f9:
                    36:b5:c1:8d:6e:a4:17:7e:7d:c8:e1:ba:92:a5:2d:
                    e9:bb:55:fe:b3:f2:0a:15:07:f3:69:0c:08:36:c9:
                    04:1b:17:91:45:b0:ea:6f:7b:d7:7e:e2:4f:c1:53:
                    65:09:8e:74:f4:e9:ab:7b:b8:2d:8d:96:42:3a:e9:
                    9d:79:e7:fe:76:fc:53:fb:e6:7b:d9:99:96:da:e4:
                    65:e1:48:38:a6:3f:92:bb:71:4a:45:42:98:7d:84:
                    2c:ec:8d:ad:49:91:f8:45:14:79:e9:bb:79:ee:8c:
                    93:6f:67:92:13:9f:0f:6e:49:47:70:60:cf:40:cf:
                    ff:b8:9a:3a:60:67:b6:2f:81:28:05:25:ac:c1:f9:
                    46:a5:e2:62:91:1b:0a:24:d9:d8:b6:2a:25:e1:79:
                    72:98:86:92:be:b2:ef:8a:e7:87:1a:08:2a:06:4b:
                    89:0a:2c:6e:1f:81:14:67:ff:4a:78:0c:14:86:d8:
                    32:bd:ee:ec:df:f7:b6:4a:fe:83:8b:86:98:69:f2:
                    40:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:16:1E:A3:2D:F1:97:D4:3C:A8:69:1E:9B:9B:7E:A2:79:FE:13:BC
            X509v3 Authority Key Identifier:
                keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:f2:f5:19:cd:c0:c0:5f:6a:2d:53:a8:22:a4:80:8c:94:d7:
         a4:42:ba:07:de:69:08:9e:08:2c:3d:0b:c5:f7:48:20:d2:c8:
         14:8e:ac:69:44:98:81:59:cf:a8:32:d1:1c:d5:2e:fe:d2:25:
         7f:b5:0a:74:44:2d:ea:5f:27:00:e7:a5:16:12:fd:bf:f5:c3:
         1a:a8:d6:65:99:2b:9e:e3:a3:00:b5:27:24:12:f7:ef:96:2b:
         a3:e1:ea:60:8b:a1:ad:06:6c:1d:ef:43:44:a4:d9:d3:cf:81:
         7a:50:eb:3b:34:54:7c:e0:be:5d:d1:22:73:1f:95:d8:94:de:
         38:6e:c5:eb:2a:52:85:21:b3:b3:7f:68:2b:db:97:01:12:c4:
         af:1a:5e:a8:94:fe:5b:d1:d5:35:88:85:84:f0:68:4f:c7:38:
         8b:80:45:59:93:7c:bf:ed:12:8c:c1:21:13:74:79:8a:b7:93:
         a6:01:06:20:fe:fa:b4:70:ec:7e:2a:5b:81:19:f7:15:27:92:
         a5:a0:46:87:0d:5a:d8:cd:83:63:70:9f:9b:14:bc:1a:96:6a:
         c6:12:d0:e5:33:3f:bf:cc:2b:b4:e8:4d:52:5d:61:16:15:2b:
         e1:f2:3f:43:b0:bc:28:5f:b7:0e:ad:5a:20:78:8c:06:2f:1a:
         f0:de:e8:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT73ia1hGLw4Dd60er/eNYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZWU0NzBiZjUxMDk5NzY5MzRmNTFlN2VhZWYyMTA3Nzlh
MmM0ZGUwHhcNMjYwOTI0MTUwMTIxWhcNMjYwOTI1MTUwMTIxWjAzMTEwLwYDVQQD
EygyYTE2MWVhMzJkZjE5N2Q0M2NhODY5MWU5YjliN2VhMjc5ZmUxM2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk2htQ+dYLLnh6D9RMCRcIILPrLy
saa+QG+7+Py50C3Rmaa52cnkNa9NtwJszh9Q6z6GFld8qfSgyvk2tcGNbqQXfn3I
4bqSpS3pu1X+s/IKFQfzaQwINskEGxeRRbDqb3vXfuJPwVNlCY509Omre7gtjZZC
Oumdeef+dvxT++Z72ZmW2uRl4Ug4pj+Su3FKRUKYfYQs7I2tSZH4RRR56bt57oyT
b2eSE58PbklHcGDPQM//uJo6YGe2L4EoBSWswflGpeJikRsKJNnYtiol4XlymIaS
vrLviueHGggqBkuJCixuH4EUZ/9KeAwUhtgyve7s3/e2Sv6Di4aYafJAQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoWHqMt8ZfUPKhpHpubfqJ5/hO8MB8GA1UdIwQY
MBaAFOzuRwv1EJl2k09R5+rvIQd5osTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN081SENfVVFtWGFUVDFIbjZ1OGhCM21peE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zZjk1ZDUtYWU2OS00M2JiLWI1MzEt
NDE4NGVkMzMxYjc1LzEvN081SENfVVFtWGFUVDFIbjZ1OGhCM21peE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zZjk1ZDUtYWU2OS00M2JiLWI1MzEtNDE4NGVkMzMxYjc1
LzEvN081SENfVVFtWGFUVDFIbjZ1OGhCM21peE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvPL1Gc3A
wF9qLVOoIqSAjJTXpEK6B95pCJ4ILD0LxfdIINLIFI6saUSYgVnPqDLRHNUu/tIl
f7UKdEQt6l8nAOelFhL9v/XDGqjWZZkrnuOjALUnJBL375Yro+HqYIuhrQZsHe9D
RKTZ08+BelDrOzRUfOC+XdEicx+V2JTeOG7F6ypShSGzs39oK9uXARLErxpeqJT+
W9HVNYiFhPBoT8c4i4BFWZN8v+0SjMEhE3R5ireTpgEGIP76tHDsfipbgRn3FSeS
paBGhw1a2M2DY3CfmxS8GpZqxhLQ5TM/v8wrtOhNUl1hFhUr4fI/Q7C8KF+3Dq1a
IHiMBi8a8N7o/Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:54:20 2026 by rpki-client