Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
File:                     R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft (raw, json)
Hash identifier:          LNdpBMzd9f1AiJsT6Wart7zEAZ5HLZqpf66e5CdWyiU=
Subject key identifier:   5E:8A:9A:1F:DF:DC:74:F5:DC:D1:8E:5B:96:8E:E4:50:5D:B7:8B:07
Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Certificate issuer:       /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Certificate serial:       01A1A6386CC138391AB86A2DFFDD8CCCC57A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
Manifest number:          157E
Signing time:             Wed 04 Nov 2026 11:01:18 +0000
Manifest this update:     Wed 04 Nov 2026 11:01:18 +0000
Manifest next update:     Thu 05 Nov 2026 11:01:18 +0000
Files and hashes:         1: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl (hash: JqAFw1LJYVJHc7/X5CD0rSPjZ0djqbiYcYlCdw2Jyao=)
                          2: RWhg5dykMAyiD73Q4T3IDgPuoVY.roa (hash: btU2vDOWfazE6wfyTegJ86hgsn+iO0cAhM7Jywody24=)
                          3: RsFe9krKRUtkC3L7-MC9WR0bVdM.roa (hash: lbqH6pbmwmSHgVXzsms7NFLtSzq9IEJtOR+CsCDKF1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a6:38:6c:c1:38:39:1a:b8:6a:2d:ff:dd:8c:cc:c5:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
        Validity
            Not Before: Nov  4 11:01:18 2026 GMT
            Not After : Nov  5 11:01:18 2026 GMT
        Subject: CN=5e8a9a1fdfdc74f5dcd18e5b968ee4505db78b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c4:3f:a5:f4:10:16:ed:54:6a:38:a7:b6:e2:
                    6b:74:b3:81:e0:e8:72:90:41:e5:a9:4d:b0:3f:9a:
                    e0:6b:8a:5a:b3:33:2f:ad:20:a1:12:8c:61:25:80:
                    07:f1:09:60:80:7f:f8:1c:e7:6c:d5:e1:90:f0:17:
                    c3:ce:af:58:36:dd:c2:d0:bf:a3:18:26:79:34:75:
                    55:ab:28:a5:2d:c3:11:01:18:ea:6b:7c:6a:2a:90:
                    68:b8:02:75:6e:e7:ea:15:ec:d9:66:a6:b3:55:dc:
                    ed:16:6b:b0:bd:78:76:27:8d:b3:be:9a:f7:4f:39:
                    cc:62:30:f3:fa:5c:85:73:d3:2e:b0:62:3a:eb:10:
                    26:24:d5:22:50:40:f2:0d:30:79:69:46:26:86:91:
                    54:34:cf:b1:c2:a0:06:0b:a2:4c:e9:84:75:0d:81:
                    d8:1d:59:50:24:ac:a0:2f:e4:69:6a:ee:9d:26:7d:
                    3e:a8:9f:7d:2d:b1:f7:02:55:fa:2c:ff:33:bf:56:
                    bc:70:42:8b:63:e7:81:b2:de:b5:b4:b2:92:11:00:
                    92:3d:bc:42:27:65:9f:5f:bb:1f:10:e9:e6:6d:cc:
                    b9:eb:4a:54:e9:d7:cd:f3:ee:f1:45:15:de:2e:7d:
                    9c:68:5d:42:2e:15:80:0b:e7:91:16:18:35:4c:0c:
                    f3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8A:9A:1F:DF:DC:74:F5:DC:D1:8E:5B:96:8E:E4:50:5D:B7:8B:07
            X509v3 Authority Key Identifier:
                keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:62:23:92:93:d1:98:c8:15:fa:23:aa:de:db:36:f8:da:16:
         5e:3e:55:3b:03:e1:ca:13:61:a7:b9:9c:96:cf:3b:e8:0f:e0:
         97:f7:a2:30:e8:15:a1:15:4d:0d:0f:ff:09:b5:90:41:5e:38:
         66:54:51:39:1c:17:08:b8:f7:41:9c:40:f1:96:1b:2e:a6:92:
         7e:2f:ba:5d:77:04:62:8c:af:f0:d9:c2:13:36:5b:f7:b1:90:
         a7:c7:ac:11:47:19:8e:6a:ff:1a:80:2a:92:18:df:6c:3d:1a:
         5e:cb:79:cd:92:2f:65:b6:2b:dc:d7:5e:f1:dd:cf:2d:f7:11:
         fe:dc:b7:ea:1e:ac:8e:e9:6f:0c:17:db:af:91:cc:5a:11:ab:
         d4:c3:42:0e:12:86:ff:0f:4b:54:ab:c5:07:e9:fd:ce:d3:84:
         5e:c9:ec:37:d7:d8:65:ad:e6:e5:32:39:91:cb:77:e2:ab:f4:
         4a:84:8b:50:a2:f1:2c:cb:36:5b:5b:10:18:b5:44:90:96:1a:
         bb:36:5c:a9:c0:5d:f0:53:15:a5:cb:c5:72:21:b7:d4:e9:80:
         a5:6a:a1:f3:82:6f:a5:76:d8:85:89:ee:af:62:08:92:c4:06:
         00:29:c2:b3:f8:62:d0:e2:f6:e0:5f:40:a3:64:ea:96:0f:88:
         da:34:6d:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGmOGzBODkauGot/92MzMV6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YmNkNzcwZjhlYTNkNDhlY2JiNGMzZWFiODk1ZjQyMmZm
YWM5MGQwHhcNMjYxMTA0MTEwMTE4WhcNMjYxMTA1MTEwMTE4WjAzMTEwLwYDVQQD
Eyg1ZThhOWExZmRmZGM3NGY1ZGNkMThlNWI5NjhlZTQ1MDVkYjc4YjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8Q/pfQQFu1UajintuJrdLOB4Ohy
kEHlqU2wP5rga4paszMvrSChEoxhJYAH8QlggH/4HOds1eGQ8BfDzq9YNt3C0L+j
GCZ5NHVVqyilLcMRARjqa3xqKpBouAJ1bufqFezZZqazVdztFmuwvXh2J42zvpr3
TznMYjDz+lyFc9MusGI66xAmJNUiUEDyDTB5aUYmhpFUNM+xwqAGC6JM6YR1DYHY
HVlQJKygL+Rpau6dJn0+qJ99LbH3AlX6LP8zv1a8cEKLY+eBst61tLKSEQCSPbxC
J2WfX7sfEOnmbcy560pU6dfN8+7xRRXeLn2caF1CLhWAC+eRFhg1TAzzOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6Kmh/f3HT13NGOW5aO5FBdt4sHMB8GA1UdIwQY
MBaAFEe813D46j1I7LtMPquJX0Iv+skNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjd6WGNQanFQVWpzdTB3LXE0bGZRaV82eVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85N2E1YzktNmIyOC00YzYxLTk2ZTEt
YTZkMDAwMjAzZmI1LzEvUjd6WGNQanFQVWpzdTB3LXE0bGZRaV82eVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85N2E1YzktNmIyOC00YzYxLTk2ZTEtYTZkMDAwMjAzZmI1
LzEvUjd6WGNQanFQVWpzdTB3LXE0bGZRaV82eVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmIjkpPR
mMgV+iOq3ts2+NoWXj5VOwPhyhNhp7mcls876A/gl/eiMOgVoRVNDQ//CbWQQV44
ZlRRORwXCLj3QZxA8ZYbLqaSfi+6XXcEYoyv8NnCEzZb97GQp8esEUcZjmr/GoAq
khjfbD0aXst5zZIvZbYr3Nde8d3PLfcR/ty36h6sjulvDBfbr5HMWhGr1MNCDhKG
/w9LVKvFB+n9ztOEXsnsN9fYZa3m5TI5kct34qv0SoSLUKLxLMs2W1sQGLVEkJYa
uzZcqcBd8FMVpcvFciG31OmApWqh84JvpXbYhYnur2IIksQGACnCs/hi0OL24F9A
o2Tqlg+I2jRtLg==
-----END CERTIFICATE-----
Generated at Wed Nov 4 17:05:01 2026 by rpki-client