Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File:                     12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier:          mDlmrilQcr+dzRh/s38uGwsNXUZPFFisnai9tNiY3b8=
Subject key identifier:   7F:85:1E:4C:7A:00:25:2B:77:C6:AF:96:CF:CA:37:D3:4A:68:D1:92
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer:       /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial:       01A13E268A4E9DD8038C0F3ABD0102C5575B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number:          07A1
Signing time:             Thu 15 Oct 2026 06:01:15 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:15 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:15 +0000
Files and hashes:         1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: o1s4CPPPnKzli/CcxROgFEcuMR3xS0FxndfE/5EcP2k=)
                          2: FoEw3sSBgl3t0ttG82J0ACX5bo8.roa (hash: MuH9TiWx0hlkjcPkeOxwnOHNyUeFkmZNNs45DwxLq/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:8a:4e:9d:d8:03:8c:0f:3a:bd:01:02:c5:57:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
        Validity
            Not Before: Oct 15 06:01:15 2026 GMT
            Not After : Oct 16 06:01:15 2026 GMT
        Subject: CN=7f851e4c7a00252b77c6af96cfca37d34a68d192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dd:30:5a:75:0d:ea:9c:bc:a6:9e:97:f2:1e:
                    c4:52:09:91:cf:f5:83:d3:9b:10:17:13:6f:eb:11:
                    fe:9b:35:89:e0:c1:67:1c:a1:18:fb:09:a6:47:f1:
                    03:e4:3f:d9:f7:c3:b3:3f:b7:9e:07:bf:26:e2:ee:
                    f2:41:28:7f:31:f0:1e:a4:55:fb:ec:bc:0e:0e:03:
                    1f:8d:cb:8f:d2:25:c0:d5:15:41:c2:35:fa:18:13:
                    8c:a7:bb:e8:74:ce:bc:fe:26:e1:4c:32:2a:99:ee:
                    6f:31:7f:f4:6c:b0:d5:a0:54:16:61:02:0c:64:07:
                    a5:00:65:89:51:54:71:6d:40:65:86:fd:77:8d:3c:
                    12:c5:6b:89:a5:ca:2f:03:fe:f7:d4:8c:28:19:79:
                    0d:0e:1c:c0:c5:ab:8d:63:ca:54:64:c7:87:de:a1:
                    c2:51:c2:fb:66:4f:db:c9:8d:73:d4:64:29:62:30:
                    67:4c:7b:b5:66:23:e7:2a:e0:7b:ee:b2:9e:ba:e2:
                    f1:20:ef:4d:19:3f:4b:d0:98:07:9b:1e:85:41:15:
                    04:ff:d7:24:0c:44:e4:18:ed:61:80:88:1a:2f:49:
                    c2:33:6d:41:dc:41:d3:77:b4:ac:03:f8:88:3f:9d:
                    35:41:72:c8:a9:a2:c6:3f:56:78:3d:0f:0f:70:0d:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:85:1E:4C:7A:00:25:2B:77:C6:AF:96:CF:CA:37:D3:4A:68:D1:92
            X509v3 Authority Key Identifier:
                keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:64:1e:c6:1b:1f:13:4e:cd:78:48:9c:18:01:28:64:d7:c7:
         23:52:56:ce:33:b6:8a:84:05:a6:89:9f:ec:cc:8c:87:ed:15:
         b7:c7:95:cd:c0:e0:d9:5a:57:a1:de:7b:07:f7:f0:e2:c1:a9:
         54:e3:3f:6a:80:c1:d1:49:b5:f4:eb:c4:37:dc:99:87:d8:90:
         2e:67:d1:0a:4f:82:18:aa:fe:b4:42:b7:bf:ce:fb:6c:b5:6e:
         86:f2:e3:95:17:66:bd:1c:ad:70:d1:7e:40:2c:07:df:e4:df:
         6e:00:cc:a2:4c:e3:db:16:5b:85:28:fe:c5:93:d7:cf:ca:d1:
         86:7f:68:24:d1:ac:fb:5d:ca:e5:7f:20:e6:c1:2b:ef:45:66:
         69:4b:22:5d:4a:c1:8d:dd:8a:9d:f4:1a:31:c0:b8:59:70:93:
         f6:b4:45:64:7a:b2:58:f4:20:0b:94:c6:39:5c:f3:ad:61:26:
         5e:ac:4d:8d:c6:2d:ba:e8:1d:57:b5:85:9a:4d:66:55:3d:bb:
         0f:28:85:39:98:af:0a:94:e4:33:df:fc:a4:9e:14:ff:d7:fc:
         b9:c9:27:9c:0d:1f:47:de:be:75:55:75:93:27:02:52:a4:31:
         cd:19:1a:a6:27:e9:92:66:c1:67:77:ad:f2:8c:35:c1:46:62:
         96:13:ef:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JopOndgDjA86vQECxVdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjIyYmU4OGE1Y2VhZWY4YzMzMGQ3ZTk2ZmZmNDM1ZTgy
MDUzYjQwHhcNMjYxMDE1MDYwMTE1WhcNMjYxMDE2MDYwMTE1WjAzMTEwLwYDVQQD
Eyg3Zjg1MWU0YzdhMDAyNTJiNzdjNmFmOTZjZmNhMzdkMzRhNjhkMTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod0wWnUN6py8pp6X8h7EUgmRz/WD
05sQFxNv6xH+mzWJ4MFnHKEY+wmmR/ED5D/Z98OzP7eeB78m4u7yQSh/MfAepFX7
7LwODgMfjcuP0iXA1RVBwjX6GBOMp7vodM68/ibhTDIqme5vMX/0bLDVoFQWYQIM
ZAelAGWJUVRxbUBlhv13jTwSxWuJpcovA/731IwoGXkNDhzAxauNY8pUZMeH3qHC
UcL7Zk/byY1z1GQpYjBnTHu1ZiPnKuB77rKeuuLxIO9NGT9L0JgHmx6FQRUE/9ck
DETkGO1hgIgaL0nCM21B3EHTd7SsA/iIP501QXLIqaLGP1Z4PQ8PcA0q9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+FHkx6ACUrd8avls/KN9NKaNGSMB8GA1UdIwQY
MBaAFNdiK+iKXOrvjDMNfpb/9DXoIFO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jMGE5NzEtZDk2Zi00M2Q0LWE4YmMt
MzA2MjUzMTc0MzBkLzEvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jMGE5NzEtZDk2Zi00M2Q0LWE4YmMtMzA2MjUzMTc0MzBk
LzEvMTJJcjZJcGM2dS1NTXcxLWx2XzBOZWdnVTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmQexhsf
E07NeEicGAEoZNfHI1JWzjO2ioQFpomf7MyMh+0Vt8eVzcDg2VpXod57B/fw4sGp
VOM/aoDB0Um19OvEN9yZh9iQLmfRCk+CGKr+tEK3v877bLVuhvLjlRdmvRytcNF+
QCwH3+TfbgDMokzj2xZbhSj+xZPXz8rRhn9oJNGs+13K5X8g5sEr70VmaUsiXUrB
jd2KnfQaMcC4WXCT9rRFZHqyWPQgC5TGOVzzrWEmXqxNjcYtuugdV7WFmk1mVT27
DyiFOZivCpTkM9/8pJ4U/9f8ucknnA0fR96+dVV1kycCUqQxzRkapifpkmbBZ3et
8ow1wUZilhPvzw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:55 2026 by rpki-client