Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File:                     7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier:          W1azVyPCpRu/EkTqQKesVWP9+zQH5rQW1r3PD+2jggM=
Subject key identifier:   97:1E:F1:C8:52:B1:9A:BA:8A:DF:49:1F:57:81:9B:BC:1D:2D:85:09
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer:       /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial:       01A1642159CD469A8C59857AA2818C474A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number:          0BF0
Signing time:             Thu 22 Oct 2026 15:01:09 +0000
Manifest this update:     Thu 22 Oct 2026 15:01:09 +0000
Manifest next update:     Fri 23 Oct 2026 15:01:09 +0000
Files and hashes:         1: 1-OYnNzXr6Vo5v0tdTY5uXPebeXE.roa (hash: HvTSCO8dnKWpIGNv0ZhtPHvjO7rUBO8uy6VJMUgGVj0=)
                          2: 5DTG2pQHtM0QiGmSH96_4M3Hn5k.roa (hash: ITY7NiqI6LopyqA5OlrdJTOTC/MthEeeabjTB3wyEhU=)
                          3: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: gg4DhFSoG9OYgFWhWW0WX7cBhQvUmI674namP5jfkZQ=)
                          4: HWAM-MP9Ze0w76qcATO1xRJuWtc.roa (hash: TaCCd0Xt7zh78QinemtfXlY1Vqciias4lUqG0PdBamI=)
                          5: Rb9KBoBLJn6K8gQhZg2wL_hnX2Q.roa (hash: Pnn1XhHhvI1FVLr7IXQzdyTXVT364mukcsmYH/cxMhg=)
                          6: _NcN0_srf3O704WXy9JSPPzoAPI.roa (hash: de1At12GY0xzd9iJZD6XKMewvGBkIyLz1ARkXv3a1oE=)
                          7: djl4yLaR492a1MyY0DtkNwyzb78.roa (hash: ej60VYUqOdqHjFm3piE4ykWKGCUfy0gAqtpywAR05qI=)
                          8: x8PuWJNPJBC35K_SG-mLe9gxJtA.roa (hash: i+jPp0P0KxStb0wvP/NjPbGbfQidMuZ2R8mV3ecH7IA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 15:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:64:21:59:cd:46:9a:8c:59:85:7a:a2:81:8c:47:4a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
        Validity
            Not Before: Oct 22 15:01:09 2026 GMT
            Not After : Oct 23 15:01:09 2026 GMT
        Subject: CN=971ef1c852b19aba8adf491f57819bbc1d2d8509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:73:7c:57:6b:52:bd:94:b1:68:02:a1:2d:
                    bd:bf:d4:47:f9:0d:00:93:41:4a:32:00:b1:d1:76:
                    49:46:eb:9f:c9:6a:2f:8d:eb:2c:f2:9e:00:22:3f:
                    ca:c3:69:30:3b:3e:1f:ba:db:d7:b5:f1:9e:c7:53:
                    75:a1:ea:a9:93:e8:cd:d4:07:1b:00:69:22:7b:19:
                    07:27:89:c2:50:e8:88:2e:26:db:e0:e3:32:e7:cb:
                    94:05:49:cd:c3:99:1c:3e:df:20:05:d4:69:2f:57:
                    be:f6:4b:54:8d:72:9e:d9:1f:44:0f:5a:81:54:17:
                    ab:18:26:92:58:b6:c4:23:43:6a:55:fe:f9:97:f9:
                    1d:35:40:d6:6b:a8:a1:59:8b:21:4b:8a:28:f8:22:
                    a1:a1:ca:45:31:37:e8:46:01:a1:5e:72:db:9b:b0:
                    9b:7c:d4:ac:9c:e5:82:31:7d:38:05:2e:92:55:85:
                    5f:44:c1:2e:d5:3d:45:a8:76:cc:7d:b9:a5:ee:a7:
                    f7:b7:0b:c9:ad:ad:8a:c1:79:fa:8a:45:b9:06:bf:
                    04:eb:34:1a:96:f2:c2:0e:e5:18:76:50:2a:37:2f:
                    0a:f0:12:e3:37:7a:b9:bc:f6:1c:8d:10:80:d3:58:
                    35:65:e4:14:b9:76:ff:cc:c6:f1:e3:16:1b:ab:2f:
                    92:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1E:F1:C8:52:B1:9A:BA:8A:DF:49:1F:57:81:9B:BC:1D:2D:85:09
            X509v3 Authority Key Identifier:
                keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:5a:fe:0a:4b:65:79:83:50:22:00:f3:bd:35:55:b8:df:8a:
         8a:5a:ff:32:d0:4a:57:e5:7e:5a:2b:5a:84:eb:b2:16:8e:af:
         9c:d8:85:ee:2c:8a:4a:92:2c:6e:bc:5d:e6:cd:33:fb:8c:ad:
         84:f2:c1:82:f5:4d:47:e8:f9:83:53:e1:8d:a8:94:aa:8c:40:
         44:f0:fe:41:fe:e1:39:e3:b4:48:f4:7f:05:01:34:11:28:d8:
         d8:d6:f1:2d:3c:f5:a2:c5:08:1a:2d:ea:eb:87:38:31:f1:ac:
         f7:28:ba:25:e4:0c:9e:ce:8d:6b:c0:07:29:5d:a0:e1:3c:47:
         24:a2:3b:6c:7b:62:d2:27:57:bf:c8:9b:fa:32:53:44:b3:80:
         0f:a3:42:f3:af:64:15:2c:f0:b5:33:3f:1f:13:54:49:ce:17:
         8c:85:7b:56:d6:5d:38:b9:30:03:0f:8e:24:e5:0b:56:e1:d1:
         87:d9:88:f1:64:0c:be:c0:98:0b:49:26:95:de:59:a5:60:c6:
         90:a8:96:83:d3:1a:c1:76:9e:6d:21:e1:39:1c:26:cf:df:74:
         8a:8f:9c:c6:1f:c2:d9:5b:36:5f:90:c1:a7:d1:57:1e:35:e5:
         84:13:fd:04:32:42:53:38:56:1a:de:04:1c:f3:64:5d:e1:ec:
         a8:8f:99:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 00:28:23 2026 by rpki-client