Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
File:                     C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft (raw, json)
Hash identifier:          mscczd3RueSaaskQx9ray7z4PXs07vj8iXeHNzB2Tl4=
Subject key identifier:   F4:7C:FD:4A:2F:94:9E:F8:11:C1:CD:CC:D6:7D:8D:02:5A:E9:A5:ED
Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
Certificate issuer:       /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Certificate serial:       01A13E25DFDF3991E8457A0DD2D1A8DEFC91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
Manifest number:          19E7
Signing time:             Thu 15 Oct 2026 06:00:31 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:31 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:31 +0000
Files and hashes:         1: 61ugHkbatEiWTW_1eKYKqCu8qbY.roa (hash: 8Ns+XB7ZudJ9zzWr083jFxqXZ3ELplfe29YSHWs6xj0=)
                          2: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl (hash: q8bYXtGBqy/HKNJKpGiaXPknzoLH3tUSLUHMncZ5TaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:25:df:df:39:91:e8:45:7a:0d:d2:d1:a8:de:fc:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
        Validity
            Not Before: Oct 15 06:00:31 2026 GMT
            Not After : Oct 16 06:00:31 2026 GMT
        Subject: CN=f47cfd4a2f949ef811c1cdccd67d8d025ae9a5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:1b:af:bb:4c:7b:b1:88:58:50:89:89:69:
                    fa:6c:75:b3:a2:d2:3f:c0:6b:f3:b4:cb:ca:fd:7b:
                    a4:94:e1:06:9b:31:48:ed:9d:1e:06:f2:6d:56:de:
                    60:e5:5c:b1:88:26:44:d3:8e:fc:91:da:f2:20:f0:
                    33:ea:74:d9:7e:9b:4f:db:9e:b9:b1:12:04:39:b9:
                    f1:ac:8c:fe:52:ed:5e:53:84:fd:1e:39:2d:3e:f4:
                    10:87:7d:8f:16:96:f5:37:a2:17:b6:de:46:4e:28:
                    d9:93:03:db:37:72:c6:fe:6a:dc:e8:d4:96:ec:7b:
                    93:5d:91:08:eb:9b:e3:d8:0d:24:7d:27:a6:04:c9:
                    f5:90:63:01:66:46:79:06:e7:7c:6a:c2:9e:93:34:
                    a8:cb:29:79:4b:8b:95:48:c5:3f:db:55:e4:d7:ad:
                    a7:6b:67:e1:ad:23:2d:4a:3e:fb:fa:7d:e7:38:3d:
                    f1:af:57:77:05:9e:fa:d0:f3:89:fc:68:43:d7:ab:
                    db:e7:26:64:a5:f3:53:f3:ae:d8:d6:a3:07:89:0f:
                    1a:e6:e8:51:55:8e:0f:0b:b8:3a:ce:89:13:12:2c:
                    db:66:2e:e1:93:ff:21:41:74:40:bf:c0:76:fb:21:
                    30:8b:f7:62:89:b5:41:31:43:68:f3:dc:9b:14:f5:
                    b5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7C:FD:4A:2F:94:9E:F8:11:C1:CD:CC:D6:7D:8D:02:5A:E9:A5:ED
            X509v3 Authority Key Identifier:
                keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:db:87:a1:8c:1e:48:71:65:86:53:7a:33:af:94:2f:33:a0:
         05:6d:c7:7a:e2:44:88:5e:25:71:26:14:65:6b:20:d0:60:d1:
         0a:98:1d:e0:6e:53:b2:0e:35:d8:87:e0:ab:64:49:1c:dc:92:
         ef:3f:27:e7:ee:84:f2:0c:57:3e:ef:76:bc:a9:f5:e1:67:61:
         7b:50:2e:77:a8:0b:24:39:8c:07:c4:62:25:c6:61:1a:7c:f5:
         4e:2d:db:29:38:0a:82:74:84:c7:8c:f0:cd:0d:cf:b9:94:7c:
         31:37:28:12:0c:ce:01:9b:9d:46:c2:fc:1f:88:2f:f7:39:cc:
         3a:34:60:95:c9:12:a4:de:94:ae:ab:bb:c7:f1:1c:6e:e9:d5:
         65:1f:7a:f6:0e:64:be:5e:c5:18:d6:c6:4a:50:89:7f:ea:21:
         1b:80:c1:0e:03:1e:a7:10:3c:40:8e:09:c9:19:b3:3a:53:d5:
         ff:95:15:10:3c:63:97:a6:a7:9c:9e:92:c8:d5:91:24:e3:13:
         b0:75:db:d3:ff:28:25:39:34:38:ed:e7:0d:76:17:37:c3:36:
         84:b5:93:79:c2:d8:39:46:00:df:ee:a0:07:cc:3c:72:f6:d5:
         b3:75:66:da:92:44:c4:c1:45:3b:d0:51:fb:75:9a:37:2e:b6:
         c2:0f:b6:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+Jd/fOZHoRXoN0tGo3vyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjcxZTQyNjRjZTYyYzM1ZTFjZWU2NGQxODc2NWQzMzI5
MGYyYTQwHhcNMjYxMDE1MDYwMDMxWhcNMjYxMDE2MDYwMDMxWjAzMTEwLwYDVQQD
EyhmNDdjZmQ0YTJmOTQ5ZWY4MTFjMWNkY2NkNjdkOGQwMjVhZTlhNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqwbr7tMe7GIWFCJiWn6bHWzotI/
wGvztMvK/XuklOEGmzFI7Z0eBvJtVt5g5VyxiCZE0478kdryIPAz6nTZfptP2565
sRIEObnxrIz+Uu1eU4T9HjktPvQQh32PFpb1N6IXtt5GTijZkwPbN3LG/mrc6NSW
7HuTXZEI65vj2A0kfSemBMn1kGMBZkZ5Bud8asKekzSoyyl5S4uVSMU/21Xk162n
a2fhrSMtSj77+n3nOD3xr1d3BZ760POJ/GhD16vb5yZkpfNT867Y1qMHiQ8a5uhR
VY4PC7g6zokTEizbZi7hk/8hQXRAv8B2+yEwi/diibVBMUNo89ybFPW1WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPR8/UovlJ74EcHNzNZ9jQJa6aXtMB8GA1UdIwQY
MBaAFAu3HkJkzmLDXhzuZNGHZdMykPKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMt
Y2E1NDU4MzhhZmMwLzEvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMtY2E1NDU4MzhhZmMw
LzEvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXduHoYwe
SHFlhlN6M6+ULzOgBW3HeuJEiF4lcSYUZWsg0GDRCpgd4G5Tsg412Ifgq2RJHNyS
7z8n5+6E8gxXPu92vKn14Wdhe1Aud6gLJDmMB8RiJcZhGnz1Ti3bKTgKgnSEx4zw
zQ3PuZR8MTcoEgzOAZudRsL8H4gv9znMOjRglckSpN6Urqu7x/EcbunVZR969g5k
vl7FGNbGSlCJf+ohG4DBDgMepxA8QI4JyRmzOlPV/5UVEDxjl6annJ6SyNWRJOMT
sHXb0/8oJTk0OO3nDXYXN8M2hLWTecLYOUYA3+6gB8w8cvbVs3Vm2pJExMFFO9BR
+3WaNy62wg+2Pw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:32 2026 by rpki-client