Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File:                     7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier:          1WSrkuskBwn7mBqvz/X6ups6YP0MFCSM5h7x52efzEI=
Subject key identifier:   7F:10:7E:AC:96:D9:4E:26:16:54:E7:5A:10:FE:5A:C6:A6:C8:A3:0C
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer:       /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial:       01A13FA75ED5DED8780D0059EE609B6A487D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number:          0EB1
Signing time:             Thu 15 Oct 2026 13:01:35 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:35 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:35 +0000
Files and hashes:         1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: CYO7OMh1al98JqMAbxfuJSbOAVVrPOpQS+22aJ2gQVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:5e:d5:de:d8:78:0d:00:59:ee:60:9b:6a:48:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
        Validity
            Not Before: Oct 15 13:01:35 2026 GMT
            Not After : Oct 16 13:01:35 2026 GMT
        Subject: CN=7f107eac96d94e261654e75a10fe5ac6a6c8a30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:e2:b5:e8:ad:c7:63:ab:23:dc:65:e2:46:
                    30:63:8c:d5:36:d3:31:13:4e:52:14:c7:d2:77:e2:
                    b0:e2:b7:a9:9e:49:eb:9b:8b:c1:6f:2f:c6:d8:c8:
                    bd:77:37:53:65:23:4a:62:35:89:ea:98:0b:35:84:
                    81:8f:07:bb:3e:ab:4d:49:c7:8d:af:25:a8:62:6a:
                    41:55:06:87:98:ce:8e:7a:09:c7:82:8d:f8:69:06:
                    ee:fd:6e:e2:32:89:81:98:e5:8f:33:ec:aa:ee:24:
                    05:ff:ea:10:b7:a5:cd:20:d9:0f:56:90:31:b7:ec:
                    a4:14:7d:13:b7:8b:6c:9e:9e:a8:57:9d:f7:39:5f:
                    70:c4:76:7e:8b:9b:57:5a:19:dc:31:8f:0b:10:53:
                    b1:b0:12:f6:ef:a3:7d:65:56:36:08:95:45:53:c3:
                    57:41:50:92:e3:76:57:8f:55:6a:e6:68:4b:f3:12:
                    bd:9b:f9:a8:e7:31:4d:fe:a2:da:94:11:67:b7:c8:
                    96:c7:ac:bd:43:f8:22:da:57:a6:29:38:45:c9:6f:
                    63:52:0e:77:8f:20:f0:f2:dc:55:5a:90:33:4c:74:
                    44:72:f5:31:e8:98:68:19:9b:62:19:90:f2:d9:63:
                    a2:17:65:f2:8d:03:3d:1f:63:88:d0:84:80:c1:48:
                    8e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:10:7E:AC:96:D9:4E:26:16:54:E7:5A:10:FE:5A:C6:A6:C8:A3:0C
            X509v3 Authority Key Identifier:
                keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ba:84:d8:31:e4:3d:d7:9b:cb:ba:71:29:fa:a9:31:53:0a:
         bc:b7:3b:e2:35:2d:7c:10:d6:5f:f2:f5:0b:a2:81:f1:9a:ca:
         a6:ea:dd:d0:e3:3e:1a:92:60:35:6a:52:6d:24:c3:16:01:be:
         7d:64:92:b8:71:14:bf:22:ba:67:c8:ac:79:b9:18:f1:dd:04:
         6a:c3:5d:be:26:09:e3:32:5d:73:2b:fc:8f:fc:cc:8f:c4:d6:
         3f:97:f2:a0:4a:ca:85:5e:d3:0e:e1:9c:56:04:ca:9e:72:e8:
         c8:52:30:b9:5c:3e:08:7b:44:a4:81:60:74:b1:48:b2:b1:48:
         ca:45:c6:da:3c:23:a4:f0:84:7a:dc:01:95:ba:ef:0f:80:28:
         2c:05:3b:ab:ec:30:88:3a:99:5d:8f:e0:ea:74:bf:d5:ae:46:
         47:f1:54:d0:ac:58:e5:8a:62:ef:71:85:ee:6a:63:b4:0c:08:
         c1:a1:0c:a8:0e:a6:d9:ed:bb:6d:55:0d:15:3c:a5:cf:08:c6:
         60:e7:cc:04:f3:b4:60:7d:a1:c2:72:47:df:c7:4e:44:ad:84:
         9f:8d:4b:f6:39:a1:ee:6e:5d:8f:48:f7:37:61:c1:49:bb:99:
         25:25:37:7f:69:da:0a:86:08:12:f6:b3:9e:47:15:24:ec:0c:
         c2:9e:59:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/p17V3th4DQBZ7mCbakh9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODAwNDJlYTNjYjM0ODczZGVkMGViMDY0OTU5NGUyZmYy
MzkwODEwHhcNMjYxMDE1MTMwMTM1WhcNMjYxMDE2MTMwMTM1WjAzMTEwLwYDVQQD
Eyg3ZjEwN2VhYzk2ZDk0ZTI2MTY1NGU3NWExMGZlNWFjNmE2YzhhMzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx43iteitx2OrI9xl4kYwY4zVNtMx
E05SFMfSd+Kw4repnknrm4vBby/G2Mi9dzdTZSNKYjWJ6pgLNYSBjwe7PqtNSceN
ryWoYmpBVQaHmM6OegnHgo34aQbu/W7iMomBmOWPM+yq7iQF/+oQt6XNINkPVpAx
t+ykFH0Tt4tsnp6oV533OV9wxHZ+i5tXWhncMY8LEFOxsBL276N9ZVY2CJVFU8NX
QVCS43ZXj1Vq5mhL8xK9m/mo5zFN/qLalBFnt8iWx6y9Q/gi2lemKThFyW9jUg53
jyDw8txVWpAzTHREcvUx6JhoGZtiGZDy2WOiF2XyjQM9H2OI0ISAwUiOVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8QfqyW2U4mFlTnWhD+WsamyKMMMB8GA1UdIwQY
MBaAFO6ABC6jyzSHPe0OsGSVlOL/I5CBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQt
ZDUxNjE3ZTAyOTgzLzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQtZDUxNjE3ZTAyOTgz
LzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbqE2DHk
Pdeby7pxKfqpMVMKvLc74jUtfBDWX/L1C6KB8ZrKpurd0OM+GpJgNWpSbSTDFgG+
fWSSuHEUvyK6Z8isebkY8d0EasNdviYJ4zJdcyv8j/zMj8TWP5fyoErKhV7TDuGc
VgTKnnLoyFIwuVw+CHtEpIFgdLFIsrFIykXG2jwjpPCEetwBlbrvD4AoLAU7q+ww
iDqZXY/g6nS/1a5GR/FU0KxY5Ypi73GF7mpjtAwIwaEMqA6m2e27bVUNFTylzwjG
YOfMBPO0YH2hwnJH38dORK2En41L9jmh7m5dj0j3N2HBSbuZJSU3f2naCoYIEvaz
nkcVJOwMwp5ZbA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:44 2026 by rpki-client