Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File:                     7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier:          9byFjabHUKJ1Mz+w67sJHBDkX0r8PXo3roS0zKrwKr4=
Subject key identifier:   3A:B1:34:AC:E8:F3:C3:9C:1A:9F:4A:96:2F:D9:9E:EE:15:FE:D2:22
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer:       /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial:       01A1016D5235BBB4A271FE18A714730382C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number:          188C
Signing time:             Sat 03 Oct 2026 11:01:44 +0000
Manifest this update:     Sat 03 Oct 2026 11:01:44 +0000
Manifest next update:     Sun 04 Oct 2026 11:01:44 +0000
Files and hashes:         1: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: XDZjrZelb2edpHa6trSbTUxbTOLzv59Q0k8CUlA5CKM=)
                          2: CM5yTRt39UsRzQIWzuT7HO7bzSE.roa (hash: RH4eRmyLdVDmBQ+RCsFz+zVNIdYG+Aj2Xj1CkOhS/oI=)
                          3: LxSQP0g5iT2gsfHgEm-ts-WDJF8.roa (hash: bMz5HXK6775JKPVW+G1i9ymi7O9XK+msuKRHy3NE0Qk=)
                          4: psWOMQeMbdYZeEJwNKNEAJmZbBU.roa (hash: Kwf/BATNuOaMCMQQKCC+7fI7j3/5LLVOOW7HAw/+s1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:6d:52:35:bb:b4:a2:71:fe:18:a7:14:73:03:82:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
        Validity
            Not Before: Oct  3 11:01:44 2026 GMT
            Not After : Oct  4 11:01:44 2026 GMT
        Subject: CN=3ab134ace8f3c39c1a9f4a962fd99eee15fed222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:0a:8a:74:e3:7a:1f:4d:28:69:11:b1:63:
                    ed:81:d6:58:ba:ff:f9:a6:c3:4b:e6:2d:99:10:b6:
                    ca:9f:e9:0e:57:70:91:00:0c:02:03:1d:e5:3f:52:
                    dc:9e:0e:d0:84:04:cc:01:34:5d:4f:87:5f:57:ac:
                    34:f6:eb:2a:cb:4f:3d:32:1e:db:cd:96:2a:8b:9b:
                    5f:ac:5e:fd:07:23:1c:9f:86:aa:7c:0c:fd:77:21:
                    ae:2b:1f:87:f7:d8:35:29:29:d3:49:d0:19:49:37:
                    e2:1c:41:45:f5:0a:fe:c6:ee:27:bb:9a:65:6b:52:
                    75:77:e8:00:1f:d2:02:a5:48:a8:e5:5b:46:39:53:
                    f4:d0:16:c2:0e:dd:11:a0:64:ff:5c:a6:ef:1f:dc:
                    b3:47:e2:f5:a0:97:7b:06:58:e5:ef:bb:1d:df:b4:
                    a4:e3:75:ac:70:fa:28:d9:6a:45:92:a4:f1:ec:03:
                    37:b7:1a:e4:9a:58:9a:84:14:26:6c:34:97:09:4e:
                    2b:fd:81:a7:00:1a:db:e7:83:81:fa:6a:8d:fe:1e:
                    94:25:8b:9c:21:e0:19:0e:df:4e:17:63:b5:fb:e8:
                    6e:97:7d:c3:d8:bd:8d:92:81:f4:c8:bb:78:73:c7:
                    13:29:72:25:ee:3e:ab:b9:7e:63:04:9d:f6:a5:85:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B1:34:AC:E8:F3:C3:9C:1A:9F:4A:96:2F:D9:9E:EE:15:FE:D2:22
            X509v3 Authority Key Identifier:
                keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:1d:c3:bc:17:c3:4c:9e:58:fc:87:d4:45:98:9f:00:59:98:
         aa:00:12:e8:56:d1:4a:3f:db:cf:1b:76:fb:14:39:8b:19:ca:
         f8:e1:e6:fb:a6:09:b8:00:3b:22:0f:f3:a7:14:34:56:04:b8:
         6d:46:e1:3d:25:1a:1a:a3:31:28:13:73:dc:73:07:64:7a:ff:
         cf:fd:af:1a:cb:0c:31:75:e5:77:3a:c6:d6:c0:c9:fb:ad:0b:
         46:fa:ac:24:c5:82:53:93:15:bf:50:b1:90:d4:3e:52:b7:d3:
         dd:59:63:c2:94:a7:b5:8a:53:d3:82:b8:52:2d:7f:3e:bb:6a:
         e1:b1:21:35:8e:57:d8:65:8a:34:d9:26:1f:c6:2f:e4:89:b5:
         2d:63:99:21:b7:10:5e:b8:6f:31:41:67:3c:22:9f:b8:7c:a1:
         35:36:47:47:54:b3:a8:d7:72:c2:7f:56:c0:b9:8e:f1:91:dd:
         55:03:c1:0d:66:d5:95:76:a2:1b:81:e9:be:84:41:b4:d2:af:
         b0:19:cb:ea:f4:8f:24:8c:f0:be:8a:12:21:6e:bc:3f:4c:9b:
         cf:89:7d:a7:e6:36:37:dd:12:33:a1:30:99:91:06:f5:21:5d:
         c9:c3:cf:46:89:f8:0d:64:b0:52:3c:5a:94:5f:51:26:d2:78:
         e8:fa:06:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:40:45 2026 by rpki-client