Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File:                     RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier:          6B9yEbIjRcQYnZHltE429IHWRc/zQ6+VGb92u8nCguo=
Subject key identifier:   A7:41:36:BE:15:5F:07:70:20:52:4A:7B:01:1C:0C:D6:BA:64:7C:FD
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer:       /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial:       01A1811972DCC8E633A7B59729F45011006A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number:          1ACC
Signing time:             Wed 28 Oct 2026 06:01:30 +0000
Manifest this update:     Wed 28 Oct 2026 06:01:30 +0000
Manifest next update:     Thu 29 Oct 2026 06:01:30 +0000
Files and hashes:         1: 1YcgvSymvxOWwOClUpJsxRVgsgw.roa (hash: sV7ICeqsuRRmvPB4Ud9P6m1LHMPN2hapMGG1EN+z2ws=)
                          2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: RJ0m43NwcLkodV9ymHNYoDdDurc0fxrqjDoeCKaf8lQ=)
                          3: cWNFEgb5xBu8gcFLrQKsIN_qlUo.roa (hash: 64u+n0vfU41PR2W4WUgYuL5mbl/6P/UD0NVgWR/oiEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 06:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:19:72:dc:c8:e6:33:a7:b5:97:29:f4:50:11:00:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
        Validity
            Not Before: Oct 28 06:01:30 2026 GMT
            Not After : Oct 29 06:01:30 2026 GMT
        Subject: CN=a74136be155f077020524a7b011c0cd6ba647cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:33:71:be:f0:9a:0d:df:aa:db:ca:9e:4b:
                    e0:d6:2a:96:57:35:f3:c8:86:71:5c:0b:dc:b7:b1:
                    08:3f:f9:f4:21:e5:8a:fd:eb:b2:c7:ff:22:02:17:
                    d3:bc:9d:a5:f0:8e:81:e3:a5:1a:2d:58:f7:85:b5:
                    02:fe:1f:02:f8:a4:0d:56:c3:44:76:99:d4:56:25:
                    4c:8f:01:e6:20:e6:ad:38:0f:7b:1e:01:91:06:33:
                    50:e4:85:42:ac:97:ce:ff:a9:87:51:45:7e:cc:a8:
                    f6:66:9f:2f:37:7c:32:cb:78:e3:c1:09:21:37:c6:
                    43:18:20:3f:c9:c9:66:75:e6:bb:17:26:e9:c7:64:
                    ee:63:0d:4d:4f:9a:cb:84:5f:7b:98:aa:42:25:82:
                    9b:58:3b:89:be:f8:23:88:8a:ce:54:d7:ae:35:ed:
                    07:23:de:68:ec:ce:6b:32:b5:eb:0b:db:fd:2f:8f:
                    d2:37:d0:a4:65:5d:21:e4:d2:26:6f:05:3a:45:27:
                    40:16:4c:c5:a0:de:04:a7:14:a3:9a:15:1f:e3:69:
                    03:10:a6:d4:82:b6:5a:fc:43:e1:07:e5:3f:17:2a:
                    66:9f:95:88:b0:5f:6c:ad:34:8d:28:03:bb:cb:ee:
                    42:ad:09:c0:cf:1e:5d:66:21:d3:02:42:d8:5e:fa:
                    b6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:41:36:BE:15:5F:07:70:20:52:4A:7B:01:1C:0C:D6:BA:64:7C:FD
            X509v3 Authority Key Identifier:
                keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:49:8f:45:a0:13:9e:6c:f6:46:f3:96:98:5f:05:73:27:54:
         0c:75:f2:70:e4:ab:55:93:5b:aa:89:b9:d1:a1:c2:2d:25:09:
         c8:2a:b4:2d:7c:0d:fb:24:05:d1:bc:93:5b:ae:e4:44:d1:2d:
         f7:07:cd:79:81:2f:bc:5e:13:57:27:39:74:26:b3:ee:01:f3:
         04:38:ad:d2:7e:06:e8:b1:72:d2:a6:8d:06:d7:ea:68:89:fd:
         7d:6f:26:8b:e1:af:9b:0e:48:51:f8:cc:55:27:f5:41:27:5e:
         71:42:c3:56:4f:db:e1:0a:a5:29:9c:f9:39:e0:a8:39:ae:24:
         5f:e0:82:a7:96:89:8f:e8:74:4e:b6:1c:99:6f:f7:a7:5a:65:
         cd:2c:50:73:bc:9d:45:cc:6a:b3:34:4a:e1:12:20:62:ce:d2:
         8a:b5:da:8b:ca:f8:48:85:39:53:f2:d9:4c:ea:ac:e6:b5:fb:
         a9:90:b0:97:fb:91:e4:6f:f3:b0:0c:f4:ff:b6:f7:a5:51:37:
         f8:5f:ce:9e:c9:87:44:a9:fb:3b:b2:74:9c:b2:86:f7:82:78:
         66:18:bc:77:af:b9:af:43:bc:b3:eb:5b:08:fe:81:c9:f4:cd:
         d0:20:f4:a2:f7:6b:54:03:cb:c6:bf:e0:66:d5:a8:2a:bb:96:
         48:f2:f9:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBGXLcyOYzp7WXKfRQEQBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NmVjYjNiZTEwNjVlMWU3MTU4OTUwOGJlYzZkNzRiNWE3
YjFlZDcwHhcNMjYxMDI4MDYwMTMwWhcNMjYxMDI5MDYwMTMwWjAzMTEwLwYDVQQD
EyhhNzQxMzZiZTE1NWYwNzcwMjA1MjRhN2IwMTFjMGNkNmJhNjQ3Y2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwugzcb7wmg3fqtvKnkvg1iqWVzXz
yIZxXAvct7EIP/n0IeWK/euyx/8iAhfTvJ2l8I6B46UaLVj3hbUC/h8C+KQNVsNE
dpnUViVMjwHmIOatOA97HgGRBjNQ5IVCrJfO/6mHUUV+zKj2Zp8vN3wyy3jjwQkh
N8ZDGCA/yclmdea7Fybpx2TuYw1NT5rLhF97mKpCJYKbWDuJvvgjiIrOVNeuNe0H
I95o7M5rMrXrC9v9L4/SN9CkZV0h5NImbwU6RSdAFkzFoN4EpxSjmhUf42kDEKbU
grZa/EPhB+U/Fypmn5WIsF9srTSNKAO7y+5CrQnAzx5dZiHTAkLYXvq27QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdBNr4VXwdwIFJKewEcDNa6ZHz9MB8GA1UdIwQY
MBaAFEVuyzvhBl4ecViVCL7G10taex7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlc3TE8tRUdYaDV4V0pVSXZzYlhTMXA3SHRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNjcxNWEtMzJmYy00ZTlmLWE1Nzct
NWFjNzRkYmExN2I4LzEvUlc3TE8tRUdYaDV4V0pVSXZzYlhTMXA3SHRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNjcxNWEtMzJmYy00ZTlmLWE1NzctNWFjNzRkYmExN2I4
LzEvUlc3TE8tRUdYaDV4V0pVSXZzYlhTMXA3SHRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0mPRaAT
nmz2RvOWmF8FcydUDHXycOSrVZNbqom50aHCLSUJyCq0LXwN+yQF0byTW67kRNEt
9wfNeYEvvF4TVyc5dCaz7gHzBDit0n4G6LFy0qaNBtfqaIn9fW8mi+Gvmw5IUfjM
VSf1QSdecULDVk/b4QqlKZz5OeCoOa4kX+CCp5aJj+h0TrYcmW/3p1plzSxQc7yd
RcxqszRK4RIgYs7SirXai8r4SIU5U/LZTOqs5rX7qZCwl/uR5G/zsAz0/7b3pVE3
+F/OnsmHRKn7O7J0nLKG94J4Zhi8d6+5r0O8s+tbCP6ByfTN0CD0ovdrVAPLxr/g
ZtWoKruWSPL5PA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 10:18:07 2026 by rpki-client