Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
File:                     5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json)
Hash identifier:          cFN8UPzqzsNNPOlhDATokn9WidtDxiAA7/0mFb1NIr0=
Subject key identifier:   FC:7B:52:6A:47:B1:B4:EE:BB:A4:65:3C:8E:7F:DA:81:F2:70:12:44
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Certificate issuer:       /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial:       01A1A4810B01DE53FAA3B9FF86B0C8A0DDB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
Manifest number:          1AA7
Signing time:             Wed 04 Nov 2026 03:01:22 +0000
Manifest this update:     Wed 04 Nov 2026 03:01:22 +0000
Manifest next update:     Thu 05 Nov 2026 03:01:22 +0000
Files and hashes:         1: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: 2kQlNFqaR7WwH1nWglAvGxOzj65MEBhcqEJkaMkySxs=)
                          2: 6RiDdnednlszc5nfc-ANOJUv2-o.roa (hash: jp3uEswNG4RA6H4G2MDNF+CFUPavRhXT4rfyfKyq6LE=)
                          3: G7ks3AJNnsjk17JxOkHVEm7hjp4.roa (hash: 4kzHcc5N6LWqaFd0TB8ArCnvPg7g52fAUaR1DMry250=)
                          4: ObexSGVy696Wkd2DRhwt2_VaBs8.roa (hash: Ly1Ec9X97SiqjYPYhofzign3IKjIwUM2uHbt0VCXmE4=)
                          5: PKlb6VDsvBbuTHToTkzI1zYOVgI.roa (hash: PUoXoXykfOtN2lep2bypeJ0mbCli8D8WzE7obvsrDmI=)
                          6: XJkwKQw1uwsNaMGPHoEZmHJ7ln0.roa (hash: 4mMJPUkmp2WBHWIYLKvvJ35kZmLlEY53pxDsemE3rMA=)
                          7: Y236QjVhGrl24C2bEpBZTpmsO9g.roa (hash: roo618zomZv/80bpPa5A4SKzRxktEgno100+FqWeWZU=)
                          8: teSjGmrvY_tu6RkdG_34GiE8KM0.roa (hash: yc8bd5ePK4M8XX+rsAFOZYDdIrq94apPIscjQGUl9lw=)
                          9: yWZ-5OdaSQI1LPfjNeNs7tCX608.roa (hash: esuWPq3Xg5U/Su3ABpCWC8pkIxvEw4LQCmVfV8WC2QE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 01:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a4:81:0b:01:de:53:fa:a3:b9:ff:86:b0:c8:a0:dd:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
        Validity
            Not Before: Nov  4 03:01:22 2026 GMT
            Not After : Nov  5 03:01:22 2026 GMT
        Subject: CN=fc7b526a47b1b4eebba4653c8e7fda81f2701244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:0f:05:67:f6:6a:ec:8d:17:8a:ab:5b:24:
                    e9:83:90:e0:d2:e1:c0:cc:69:18:78:a5:62:cf:b6:
                    92:46:65:d7:54:4e:09:e4:2b:a6:9f:b3:88:19:76:
                    85:f3:5f:b6:2e:03:91:11:e1:6d:28:da:cf:36:a1:
                    7c:70:80:55:a8:37:72:16:91:c1:f4:6e:72:77:d6:
                    51:76:3a:d2:c6:ce:3f:b2:57:bb:8a:fd:7d:ea:4e:
                    99:48:2f:9a:ef:ce:2f:02:e2:95:d7:70:90:f8:f1:
                    d1:0b:96:6d:6d:15:93:bc:84:4e:d9:0b:65:22:04:
                    88:1b:92:5e:eb:05:f1:5d:8a:ec:3f:99:9c:81:6a:
                    ba:3c:d7:d2:35:2d:95:b8:34:53:cc:0b:8d:81:39:
                    40:b8:93:dc:29:ec:b8:af:32:ec:64:04:39:8b:06:
                    2a:ce:29:28:03:10:7a:f0:64:2f:63:8e:87:0e:c7:
                    7e:11:d0:08:61:5d:b0:9b:27:4f:69:f3:1a:b2:5b:
                    b2:e2:83:dd:a5:bc:da:53:bd:37:5f:85:89:b6:39:
                    26:75:51:68:c1:6c:a0:f6:cb:45:79:00:08:32:e5:
                    e7:79:4b:31:83:71:6f:42:78:d9:44:c7:22:c8:b7:
                    3b:83:58:f4:10:33:85:e0:af:59:37:53:fe:05:5a:
                    e7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7B:52:6A:47:B1:B4:EE:BB:A4:65:3C:8E:7F:DA:81:F2:70:12:44
            X509v3 Authority Key Identifier:
                keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c3:00:0b:3d:c8:65:ee:0f:b1:6b:54:c0:39:6a:2d:02:07:
         ec:6f:d8:31:15:73:3f:d7:0d:40:59:14:22:63:d6:b3:7d:92:
         65:d0:57:d1:37:79:02:9f:c1:8c:e6:eb:03:58:eb:2b:02:73:
         1c:90:2a:08:bf:8c:43:9b:bb:3b:20:15:2f:c5:e0:5d:d4:4e:
         77:02:16:e6:a5:7a:ca:22:51:61:4d:8d:cc:f6:94:41:f3:eb:
         16:29:de:0e:5f:19:0f:97:0e:67:61:53:62:d6:4b:fa:e3:56:
         71:d1:c9:bb:08:9e:c0:41:e5:20:62:11:b9:0f:44:bd:9e:16:
         f2:7f:cc:74:04:b2:83:d2:f6:58:73:68:f3:7f:cf:7b:29:92:
         7b:90:c6:6d:20:cc:95:45:b7:8d:c1:94:2d:d2:2d:2c:b7:78:
         81:9b:ee:70:f7:a8:48:e3:0a:22:a8:7d:a2:84:f4:04:16:9b:
         77:03:9a:26:67:d7:2f:06:e8:ca:a0:82:7d:35:0d:2c:b9:18:
         fc:11:36:6a:92:07:d9:83:d0:7c:03:4a:57:42:68:a7:13:25:
         b5:37:79:a4:fd:7e:0d:3d:b6:c3:0e:f4:11:85:01:39:5e:da:
         08:4b:24:ca:48:3f:44:ee:4d:fb:d4:f3:e8:6b:bc:5d:4b:3b:
         ff:5c:45:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGkgQsB3lP6o7n/hrDIoN22MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjYxMTA0MDMwMTIyWhcNMjYxMTA1MDMwMTIyWjAzMTEwLwYDVQQD
EyhmYzdiNTI2YTQ3YjFiNGVlYmJhNDY1M2M4ZTdmZGE4MWYyNzAxMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY0PBWf2auyNF4qrWyTpg5Dg0uHA
zGkYeKViz7aSRmXXVE4J5Cumn7OIGXaF81+2LgOREeFtKNrPNqF8cIBVqDdyFpHB
9G5yd9ZRdjrSxs4/sle7iv196k6ZSC+a784vAuKV13CQ+PHRC5ZtbRWTvIRO2Qtl
IgSIG5Je6wXxXYrsP5mcgWq6PNfSNS2VuDRTzAuNgTlAuJPcKey4rzLsZAQ5iwYq
zikoAxB68GQvY46HDsd+EdAIYV2wmydPafMasluy4oPdpbzaU703X4WJtjkmdVFo
wWyg9stFeQAIMuXneUsxg3FvQnjZRMciyLc7g1j0EDOF4K9ZN1P+BVrngwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPx7UmpHsbTuu6RlPI5/2oHycBJEMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcMACz3I
Ze4PsWtUwDlqLQIH7G/YMRVzP9cNQFkUImPWs32SZdBX0Td5Ap/BjObrA1jrKwJz
HJAqCL+MQ5u7OyAVL8XgXdROdwIW5qV6yiJRYU2NzPaUQfPrFineDl8ZD5cOZ2FT
YtZL+uNWcdHJuwiewEHlIGIRuQ9EvZ4W8n/MdASyg9L2WHNo83/PeymSe5DGbSDM
lUW3jcGULdItLLd4gZvucPeoSOMKIqh9ooT0BBabdwOaJmfXLwboyqCCfTUNLLkY
/BE2apIH2YPQfANKV0JopxMltTd5pP1+DT22ww70EYUBOV7aCEskykg/RO5N+9Tz
6Gu8XUs7/1xFdw==
-----END CERTIFICATE-----
Generated at Wed Nov 4 12:51:20 2026 by rpki-client