Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
File:                     7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft (raw, json)
Hash identifier:          55rQ9nXy2I651kaeomq2u3EudauW5YH1VHk3a7ywqxY=
Subject key identifier:   C2:71:10:80:A5:EE:BE:22:2E:F7:5A:56:8A:60:BB:54:B6:6C:C2:6A
Authority key identifier: EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
Certificate issuer:       /CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Certificate serial:       01A1219C708C1E00D488A18660D694619D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
Manifest number:          0111
Signing time:             Fri 09 Oct 2026 17:01:02 +0000
Manifest this update:     Fri 09 Oct 2026 17:01:02 +0000
Manifest next update:     Sat 10 Oct 2026 17:01:02 +0000
Files and hashes:         1: 2Zslfn__QIhx6OX48_NKfIqrzSc.roa (hash: VYnOK+rc+xOxyoEFqSm+yquuiXcM9YH3Y4gu3Gh6hXg=)
                          2: 7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl (hash: 4iMGRiJWb5sh56wJW81FWrXthe4WDdisaKD5L1Jnqs4=)
                          3: U_aK72jJa-ON6gMyyHq3rWjkxhU.roa (hash: /1YQ5iJbTHBFdQHsTl7LBGFueR1LkqoE0aary4QG3rs=)
                          4: afRxnYS9xX0pCvGVtIiS73I1z44.roa (hash: 3LuTMNKBz2sfRa7X5G714MtGThF0TEEgGy5wQUhxdjE=)
                          5: vRS2jZFjxoSx-tm8vDYCL3R4utg.roa (hash: Pn3uKydeyTx0VUXK/a6rHQd1kChS2y8vCNb98B0FpoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:21:9c:70:8c:1e:00:d4:88:a1:86:60:d6:94:61:9d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
        Validity
            Not Before: Oct  9 17:01:02 2026 GMT
            Not After : Oct 10 17:01:02 2026 GMT
        Subject: CN=c2711080a5eebe222ef75a568a60bb54b66cc26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c0:ac:b6:ec:7b:9c:ec:73:3e:21:67:6d:bd:
                    91:1c:e5:9e:c3:9e:fb:00:41:cb:ce:3c:16:8b:37:
                    96:3c:0c:cc:06:06:cd:c6:e4:f6:1c:ed:fb:f5:ed:
                    82:e9:b3:3b:67:40:23:47:bb:71:a1:76:38:2e:4a:
                    47:e4:12:61:12:e8:5a:89:86:40:72:5a:1f:ae:e7:
                    d5:96:0d:3c:2f:c1:42:8c:f7:4d:cf:87:0a:92:33:
                    b0:50:5e:a8:88:2b:cf:ce:1e:44:9e:c6:3e:b7:04:
                    5c:5e:37:0f:1a:25:08:42:c3:a8:99:76:9f:42:aa:
                    68:94:fe:8f:d5:4b:a4:24:d6:75:e7:f8:4b:9b:8e:
                    5a:6d:ac:2a:17:34:56:f4:2f:2c:0a:dc:27:68:84:
                    99:17:ff:67:85:79:b8:3d:d7:da:09:00:1a:9f:41:
                    fb:d3:6c:93:67:8e:3e:a9:e1:7a:7e:12:54:fd:a4:
                    16:7b:ac:65:9b:ba:0c:77:9f:b0:c8:51:c8:64:5a:
                    fc:c2:2e:0a:ba:9a:ce:8d:e0:fc:54:78:c2:85:c6:
                    e5:19:ce:d5:e8:13:ca:50:3b:8f:d9:90:11:36:97:
                    1a:db:c9:ea:82:da:73:51:cb:24:b8:dd:d9:37:9f:
                    51:6b:ba:e2:e4:05:cc:41:7f:72:f8:34:b2:b6:13:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:71:10:80:A5:EE:BE:22:2E:F7:5A:56:8A:60:BB:54:B6:6C:C2:6A
            X509v3 Authority Key Identifier:
                keyid:EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:5e:4b:50:42:b7:14:d4:cf:29:7b:56:8c:f8:2e:5a:f7:78:
         30:a1:b3:db:34:8d:80:31:e6:9d:23:a7:52:ad:e6:89:d9:2b:
         25:9b:bc:7a:93:cd:28:65:f8:a4:dc:43:06:53:9e:8b:70:33:
         e5:e8:04:b6:49:1e:d0:22:fd:2d:8d:00:12:83:55:68:9a:1b:
         ab:ae:12:cd:9a:d4:aa:54:f9:c4:75:df:ab:5b:df:52:ee:c1:
         df:25:ab:ea:ec:7e:3c:73:b2:67:17:2e:a3:0b:92:af:13:e9:
         81:18:53:91:ec:60:4d:5e:c5:6e:f3:cb:eb:67:5c:84:b5:e4:
         4f:e1:b0:5a:6b:81:16:92:c3:86:82:4c:76:0b:8f:5f:89:74:
         39:9f:6b:74:9a:27:b4:39:f5:d5:58:a1:3a:67:48:41:73:74:
         16:13:b7:91:34:4a:3a:45:f5:51:cd:a9:82:aa:a9:e4:57:80:
         66:05:4d:67:07:45:57:01:bf:62:a9:87:2f:eb:28:dd:31:ec:
         6f:ed:ec:73:9d:e0:19:1b:d2:91:9c:17:25:b6:0b:1e:2b:cf:
         4d:0e:cd:5b:17:9d:89:f5:4a:50:60:d6:a8:70:77:a5:30:f6:
         fe:80:a3:bd:6e:04:aa:a7:92:23:9b:cb:fd:37:61:4f:bf:ee:
         fe:b7:53:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 19:57:22 2026 by rpki-client