Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
File:                     x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft (raw, json)
Hash identifier:          LJJrfrS/EcER6lbvP+XlnRkf0RoQm+9wii6/lVL6j14=
Subject key identifier:   AE:21:18:67:FA:0A:93:AC:B2:98:A2:B8:C7:8D:67:E5:FB:0A:1A:76
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Certificate issuer:       /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial:       01A136DA672201C208ACD5C96B9D21E7BEC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
Manifest number:          1AA0
Signing time:             Tue 13 Oct 2026 20:00:45 +0000
Manifest this update:     Tue 13 Oct 2026 20:00:45 +0000
Manifest next update:     Wed 14 Oct 2026 20:00:45 +0000
Files and hashes:         1: wWaQX5rvrS24Hznd7N3fDWXJd9I.roa (hash: fT4yvetY/MA9WwLBmvhYQk4S1AH3yU1r+ty6ON2yEVY=)
                          2: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl (hash: VL7iadWTUPQVd3fOldARFVVQSWvYN8BzgjO4AsnToz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:36:da:67:22:01:c2:08:ac:d5:c9:6b:9d:21:e7:be:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
        Validity
            Not Before: Oct 13 20:00:45 2026 GMT
            Not After : Oct 14 20:00:45 2026 GMT
        Subject: CN=ae211867fa0a93acb298a2b8c78d67e5fb0a1a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5d:4c:fd:b5:29:f8:d1:65:96:21:28:08:37:
                    f2:c6:54:b3:31:05:b5:2b:a6:f6:a6:69:95:06:77:
                    58:76:bf:54:ef:a1:b4:fb:22:b7:02:ca:71:5f:8d:
                    08:ff:0b:c1:8b:d0:0d:62:1b:cf:0b:79:f5:21:4c:
                    67:af:bd:0f:d0:34:f4:5c:c5:42:dc:e5:80:8a:09:
                    c6:57:b6:78:11:83:f6:b1:55:dc:27:79:95:18:f1:
                    a6:b1:8d:d2:4b:40:b5:80:38:27:1c:c5:a5:c7:ab:
                    5a:bf:11:ec:af:09:de:a4:5c:b9:d6:e4:cb:d2:54:
                    c2:c1:c2:56:ae:bc:17:79:bf:90:33:5c:d3:72:89:
                    49:bb:e8:28:bb:06:48:47:fb:bc:87:91:e6:21:18:
                    bd:5d:fb:be:2b:47:2b:f3:81:ae:fc:18:00:16:cb:
                    e4:a1:78:7f:49:36:f2:e8:50:22:e3:55:ae:c1:53:
                    00:61:4b:ac:a9:da:a4:dc:b0:c7:1e:61:c2:30:18:
                    c1:63:9f:61:8c:5b:8a:b5:ef:90:8e:ef:37:d7:53:
                    0d:0b:ec:62:bb:0b:8b:d0:21:14:65:c2:0a:a2:cd:
                    65:ed:d4:96:fd:bb:be:12:9a:84:ce:80:aa:33:e2:
                    55:4a:9a:ed:ca:a3:22:15:e6:90:84:b9:39:dd:d8:
                    e4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:21:18:67:FA:0A:93:AC:B2:98:A2:B8:C7:8D:67:E5:FB:0A:1A:76
            X509v3 Authority Key Identifier:
                keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1d:37:23:29:32:cd:e0:71:3b:9c:76:e9:e8:96:3c:01:49:
         02:af:a8:d3:cc:51:5b:8a:d6:40:74:89:6e:28:5c:e6:8c:3b:
         c2:b7:b1:14:c3:0a:5c:0a:40:95:24:b0:7b:11:0f:40:56:7d:
         e1:71:72:fb:94:99:a7:0d:05:fb:16:ed:68:96:62:a4:3e:e6:
         54:c9:0e:f9:74:bb:2a:3a:01:ec:c0:67:b9:7d:cf:53:9a:7c:
         18:02:bc:64:ad:05:8f:bf:de:b0:46:3c:05:da:eb:0d:04:6a:
         18:af:c7:0d:f8:62:f3:c9:a2:14:08:c0:cf:36:f7:72:67:75:
         3a:a9:45:ad:2e:bd:58:ce:a7:ef:88:50:48:8b:19:21:2f:df:
         f0:b3:43:31:70:3d:38:be:1c:4f:7b:0d:78:7b:36:3f:49:d1:
         32:81:5c:3f:11:32:b3:6c:9b:9c:90:d7:f2:94:4a:f9:cc:fd:
         c8:9b:1f:6e:61:49:29:64:48:cc:2f:d1:08:f5:23:86:e1:e7:
         a7:0f:cb:35:c5:9c:dd:15:99:0a:8e:3b:0b:c4:dc:f2:ce:3c:
         09:dd:db:1b:c9:35:d0:f2:77:d0:16:46:70:8c:e4:e9:db:f7:
         91:59:ea:82:4d:37:f7:89:c7:26:65:ef:88:e4:0f:70:cd:1b:
         ae:05:75:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:53:12 2026 by rpki-client