Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File:                     7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier:          oYhkm9OBod3e/8Wgm78SMmK1fqL/SWJu+XtN4qLcNH4=
Subject key identifier:   E9:D3:CC:60:C7:0F:FA:ED:08:48:B7:75:EB:43:AD:84:0B:7D:CB:27
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer:       /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial:       01A1DFF0E1C9E3F97FFB3530FDE01D31BCB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number:          0D6E
Signing time:             Sun 15 Nov 2026 16:01:07 +0000
Manifest this update:     Sun 15 Nov 2026 16:01:07 +0000
Manifest next update:     Mon 16 Nov 2026 16:01:07 +0000
Files and hashes:         1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: FVCG3oSSHl9/MN6w5VT7ryRhgKfqBwFhg/8vEXYHTgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:f0:e1:c9:e3:f9:7f:fb:35:30:fd:e0:1d:31:bc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
        Validity
            Not Before: Nov 15 16:01:07 2026 GMT
            Not After : Nov 16 16:01:07 2026 GMT
        Subject: CN=e9d3cc60c70ffaed0848b775eb43ad840b7dcb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:bf:41:22:8d:98:3f:6f:3c:4a:6a:98:13:
                    c7:16:0b:c4:05:83:de:df:1e:7a:2b:77:4d:31:9f:
                    1b:ee:b9:97:29:48:ad:f8:01:06:f8:62:c2:2e:50:
                    6a:6d:48:41:e7:82:c1:2c:a0:97:6f:c2:d6:da:80:
                    74:c6:c5:ef:4c:d2:cf:35:19:c5:4b:75:1e:33:f6:
                    c3:24:fb:cf:18:9d:37:0d:8c:9d:3a:7e:45:17:d5:
                    86:56:34:86:f7:eb:86:e3:81:5f:77:f8:dc:28:6f:
                    4a:50:b0:52:0e:86:d8:b9:07:a7:81:5c:83:66:fa:
                    28:67:84:05:8d:67:66:7a:d8:49:7a:ac:db:7a:b0:
                    17:66:bc:61:d0:da:2a:2e:17:14:53:4d:e6:e1:12:
                    28:47:2f:5a:3b:14:81:0b:bc:f5:11:3b:16:53:ca:
                    5f:f0:8b:89:1d:d6:fb:4f:40:8a:71:64:28:47:78:
                    05:f6:89:99:99:5e:6a:8d:31:26:12:eb:91:bd:a1:
                    18:82:ab:75:0a:26:e1:9e:22:25:88:94:d1:90:39:
                    2a:16:3f:8e:93:66:8c:23:c8:2b:1c:72:40:52:11:
                    66:23:ec:9d:b2:2b:f2:52:0f:2a:27:3d:37:3e:29:
                    17:70:13:6c:ce:02:73:20:c6:59:22:ec:fc:27:8a:
                    10:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D3:CC:60:C7:0F:FA:ED:08:48:B7:75:EB:43:AD:84:0B:7D:CB:27
            X509v3 Authority Key Identifier:
                keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:11:bf:b7:e7:fb:ef:ce:41:bb:bd:13:55:a7:46:b0:b1:c7:
         66:c8:ec:e5:3b:a7:c9:d3:82:12:81:d3:c3:18:6f:0b:69:f4:
         44:a9:66:7e:7f:53:c4:78:6d:02:dc:b0:56:c7:3f:d4:9b:d8:
         4e:15:ed:38:3b:99:9b:6e:7f:65:be:f8:2a:c7:4a:8d:78:d9:
         1c:47:ad:0e:01:2f:2d:6c:90:b4:cb:21:05:b8:6c:59:f5:67:
         a0:a4:b0:e2:99:e1:50:24:76:77:11:0b:68:22:6d:ef:82:44:
         cc:a9:08:0e:71:a8:4b:2c:78:52:e4:0c:2a:d7:79:d8:78:1c:
         6d:f7:7b:ec:87:10:8e:ff:a4:03:4f:7c:0d:c1:16:fc:03:64:
         5e:af:a2:a5:00:c7:6e:df:09:e9:47:4a:ff:89:e3:0f:ec:e6:
         71:dc:cc:8b:57:83:5f:39:16:95:b0:1b:bd:2d:6b:ad:31:f5:
         9a:e5:a7:5f:da:02:1d:62:d0:1c:3d:e5:1e:b1:4d:0d:f9:c1:
         66:a4:72:1f:a6:7f:3a:84:86:95:d2:0d:1d:a9:4e:a1:96:05:
         0b:d0:d8:50:de:b9:6d:e7:9b:f4:d7:bb:02:e7:ad:68:9c:5b:
         65:4c:8e:fd:68:ba:2d:fe:a2:f8:0e:f9:d2:c9:5d:fe:f1:0e:
         51:7f:27:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHf8OHJ4/l/+zUw/eAdMby0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZjA0NGMzNjNkNzg4ZTc0MzM0ZTEzNmUwM2NjN2ZkMWU0
OWEyMTYwHhcNMjYxMTE1MTYwMTA3WhcNMjYxMTE2MTYwMTA3WjAzMTEwLwYDVQQD
EyhlOWQzY2M2MGM3MGZmYWVkMDg0OGI3NzVlYjQzYWQ4NDBiN2RjYjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGm/QSKNmD9vPEpqmBPHFgvEBYPe
3x56K3dNMZ8b7rmXKUit+AEG+GLCLlBqbUhB54LBLKCXb8LW2oB0xsXvTNLPNRnF
S3UeM/bDJPvPGJ03DYydOn5FF9WGVjSG9+uG44Ffd/jcKG9KULBSDobYuQengVyD
ZvooZ4QFjWdmethJeqzberAXZrxh0NoqLhcUU03m4RIoRy9aOxSBC7z1ETsWU8pf
8IuJHdb7T0CKcWQoR3gF9omZmV5qjTEmEuuRvaEYgqt1CibhniIliJTRkDkqFj+O
k2aMI8grHHJAUhFmI+ydsivyUg8qJz03PikXcBNszgJzIMZZIuz8J4oQfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnTzGDHD/rtCEi3detDrYQLfcsnMB8GA1UdIwQY
MBaAFO3wRMNj14jnQzThNuA8x/0eSaIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZCRXcyUFhpT2RETk9FMjREekhfUjVKb2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zNDA0OTEtZDFkMi00MzJjLTk1NmQt
MmZlMTU5NGRkYzljLzEvN2ZCRXcyUFhpT2RETk9FMjREekhfUjVKb2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zNDA0OTEtZDFkMi00MzJjLTk1NmQtMmZlMTU5NGRkYzlj
LzEvN2ZCRXcyUFhpT2RETk9FMjREekhfUjVKb2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRG/t+f7
785Bu70TVadGsLHHZsjs5TunydOCEoHTwxhvC2n0RKlmfn9TxHhtAtywVsc/1JvY
ThXtODuZm25/Zb74KsdKjXjZHEetDgEvLWyQtMshBbhsWfVnoKSw4pnhUCR2dxEL
aCJt74JEzKkIDnGoSyx4UuQMKtd52Hgcbfd77IcQjv+kA098DcEW/ANkXq+ipQDH
bt8J6UdK/4njD+zmcdzMi1eDXzkWlbAbvS1rrTH1muWnX9oCHWLQHD3lHrFNDfnB
ZqRyH6Z/OoSGldINHalOoZYFC9DYUN65beeb9Ne7AuetaJxbZUyO/Wi6Lf6i+A75
0sld/vEOUX8nvA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:36:02 2026 by rpki-client