Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
File:                     7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json)
Hash identifier:          zWV6FDaEq/ZHn5jqva6n20ZubK8JZkjVpBMnCwFIZBQ=
Subject key identifier:   CB:15:35:B8:63:B3:75:BF:AB:B2:2F:60:3A:49:A9:FE:61:7B:01:ED
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Certificate issuer:       /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial:       01A16FB727ECF4265B6D111EDF269E15EDE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
Manifest number:          085E
Signing time:             Sat 24 Oct 2026 21:00:36 +0000
Manifest this update:     Sat 24 Oct 2026 21:00:36 +0000
Manifest next update:     Sun 25 Oct 2026 21:00:36 +0000
Files and hashes:         1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: 1yKPAdtXPsuENvs6x3LKS30V7bbOmC+48eIJR8DPcgs=)
                          2: t5LOWwENqQioKciGyoMxLyNCNN8.roa (hash: zlv1UWEx5L67DFS1Ff+3kq6sBK6VPzVmabPisFcvJBk=)
                          3: wiLmfdGgzijMr6H7FRSYjpbRctE.roa (hash: Z51vNTE/VSPJwzjerq5rKZBcW7aBhn2nt4GaxW27CY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6f:b7:27:ec:f4:26:5b:6d:11:1e:df:26:9e:15:ed:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
        Validity
            Not Before: Oct 24 21:00:36 2026 GMT
            Not After : Oct 25 21:00:36 2026 GMT
        Subject: CN=cb1535b863b375bfabb22f603a49a9fe617b01ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:5b:19:01:42:ac:df:27:77:8b:f1:d6:fa:
                    51:40:cb:3e:90:3e:0a:fd:41:60:28:43:a8:7e:8f:
                    50:ed:e3:77:4c:bd:03:0c:0b:08:60:aa:a8:28:20:
                    23:d5:20:e5:0c:68:bd:7b:f1:57:d0:fd:b7:2a:61:
                    4a:1b:da:b6:f7:80:3c:6b:d4:ba:48:99:91:98:59:
                    82:2e:23:65:25:4b:1e:cc:78:dc:97:39:bd:49:fa:
                    db:cb:34:8a:10:80:e8:8f:18:99:50:c0:0d:fa:2a:
                    b4:7b:ba:57:10:36:e9:d5:64:22:1f:00:10:dd:0e:
                    b5:67:bf:af:eb:5c:3f:01:e3:79:8e:45:ac:d1:bb:
                    8b:d9:2b:64:ff:9e:6c:37:b0:c7:dc:b7:4b:99:73:
                    e1:fb:66:b4:d9:b5:6f:a8:13:08:91:fe:ff:0b:c5:
                    3e:33:56:a6:0a:58:0f:33:3c:99:e9:bd:db:45:c1:
                    40:ce:f1:08:2a:95:bf:17:c0:ca:a7:1c:86:2b:c1:
                    9b:4d:95:06:87:df:82:e7:46:35:c2:86:d3:2c:e3:
                    70:de:d5:53:a6:a6:28:e8:15:e5:61:43:0f:6e:fc:
                    71:d6:1b:ef:2d:7a:1d:eb:b1:cb:32:8d:81:a8:41:
                    10:df:0b:42:0d:40:a1:0d:e9:44:12:c3:12:f3:cb:
                    26:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:15:35:B8:63:B3:75:BF:AB:B2:2F:60:3A:49:A9:FE:61:7B:01:ED
            X509v3 Authority Key Identifier:
                keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2b:a6:1b:4c:4d:85:72:4f:12:f0:68:bb:b4:ea:85:f5:fc:
         8a:2f:77:76:94:48:75:47:90:9c:e8:bb:02:5f:72:df:7d:48:
         02:0b:26:1d:2b:4f:6c:0e:55:0b:d9:5f:ba:f5:89:14:ec:33:
         4d:77:04:8b:67:df:38:11:59:ba:a8:0b:b1:ba:ef:5a:d0:ca:
         30:fc:13:c9:3f:59:de:56:be:8d:e3:d9:54:5c:4a:0d:88:bd:
         72:7b:79:38:8c:90:3b:ef:95:8c:76:0c:12:9d:b6:49:2c:3e:
         6b:52:3b:34:25:fe:60:47:d6:fa:50:9c:c1:86:b5:b6:5d:93:
         bb:4b:0b:d4:29:26:a2:5c:a6:0f:30:3a:e8:3d:2c:89:eb:09:
         7c:8d:5c:7c:d2:e3:70:d6:64:1b:b6:2d:9a:2f:84:7b:3b:a8:
         77:74:a7:2c:fb:5f:4c:f1:ad:a8:6b:7b:f4:ec:d6:2b:69:a5:
         3a:55:7b:c5:67:24:fd:8f:d3:64:63:c8:76:90:3c:fc:8c:b5:
         c9:5a:b0:ce:6b:5f:8a:67:28:b3:09:12:de:4c:08:44:3e:fa:
         0f:0e:62:2b:2d:7f:96:4a:2b:29:12:0f:90:7d:e6:99:df:f9:
         c7:b3:f1:c6:73:cd:c8:03:1b:fa:d6:5d:5c:1d:37:d8:8b:40:
         38:01:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:07:42 2026 by rpki-client