Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
File:                     E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft (raw, json)
Hash identifier:          7HTUr+yr2QBftHYRDO/1+e3ZXthHxDS6/f3U86TFXDs=
Subject key identifier:   8D:C8:F5:95:5D:03:B4:7C:DF:02:86:F3:25:C7:D1:5F:A6:ED:99:AE
Authority key identifier: 13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F
Certificate issuer:       /CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f
Certificate serial:       01A14082C2F835609BC749C5549E84E10DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
Manifest number:          06F1
Signing time:             Thu 15 Oct 2026 17:01:13 +0000
Manifest this update:     Thu 15 Oct 2026 17:01:13 +0000
Manifest next update:     Fri 16 Oct 2026 17:01:13 +0000
Files and hashes:         1: E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl (hash: mLMKpgEFxgj5YBZpukPnw4JkbmfCKB19dJV7MAkfP7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:82:c2:f8:35:60:9b:c7:49:c5:54:9e:84:e1:0d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f
        Validity
            Not Before: Oct 15 17:01:13 2026 GMT
            Not After : Oct 16 17:01:13 2026 GMT
        Subject: CN=8dc8f5955d03b47cdf0286f325c7d15fa6ed99ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:30:53:c8:93:df:89:59:f4:cc:a8:17:1f:
                    ca:4c:27:f2:85:e6:8b:47:8e:66:50:a1:58:1a:2d:
                    65:51:7b:53:2b:e4:52:87:dd:1a:fd:52:7f:c4:75:
                    5e:ec:62:63:3f:a5:c6:22:32:6d:f2:d5:02:7e:73:
                    95:53:95:2c:34:43:0a:d1:cb:ec:64:f1:f1:0a:30:
                    f6:00:ed:34:ba:96:5f:43:9d:84:d6:5d:e2:d6:21:
                    e3:38:18:87:76:2f:23:fe:c3:23:cb:1d:14:76:02:
                    c3:b3:72:52:7e:d3:bd:72:ab:cf:2f:e0:d8:61:51:
                    35:60:54:e4:67:17:92:d8:d2:69:44:61:bc:8f:e6:
                    40:b8:69:0d:d9:8c:27:ba:93:b5:58:74:bb:fe:80:
                    aa:63:c1:8a:18:00:57:09:7c:2e:51:b0:02:9f:f2:
                    06:08:28:cf:e7:e4:45:fc:19:50:ba:88:98:9e:c7:
                    9c:87:82:5e:7d:a6:01:32:10:cf:67:b5:5d:3d:38:
                    ee:d7:89:20:24:fb:f2:ad:b9:51:81:ac:f1:34:03:
                    bf:f0:b7:af:4f:6c:b4:54:fe:fe:92:73:9b:d9:29:
                    27:52:99:7f:d4:e8:44:d7:59:1b:1e:97:3e:0c:30:
                    7b:03:56:ae:46:d6:39:00:61:01:a9:57:81:fc:ca:
                    47:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C8:F5:95:5D:03:B4:7C:DF:02:86:F3:25:C7:D1:5F:A6:ED:99:AE
            X509v3 Authority Key Identifier:
                keyid:13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3f:70:86:47:ae:3d:5d:60:dd:3f:3f:47:d8:f8:61:e5:4a:
         82:7f:c4:5f:49:2f:fb:2f:d6:87:17:ab:d7:8f:71:f4:a5:3e:
         4c:da:c0:3c:08:ec:95:73:51:e1:b3:26:4e:99:10:03:59:04:
         d2:cd:a9:d6:f6:12:e5:db:77:0d:d6:d3:cd:6f:96:34:20:f5:
         3c:b4:f5:70:6d:76:3f:21:51:04:1f:e0:a3:17:b2:16:54:a0:
         f5:b4:ab:ab:4c:53:bb:b1:07:37:86:9b:62:38:f5:50:de:d4:
         90:22:90:97:4f:89:6f:dc:8b:fe:2d:2f:99:e9:05:19:70:19:
         7d:ea:24:ac:e4:12:2c:03:78:3f:14:4e:6f:0d:71:7c:b9:0c:
         5b:3e:8f:72:0c:04:bd:af:28:c0:b1:53:63:60:51:a8:c4:db:
         75:2a:3d:44:60:d0:94:d2:81:f1:51:5a:9a:82:d5:28:5a:6c:
         52:61:af:c2:5c:96:b5:90:5e:7d:41:cd:0a:57:1c:5c:c6:da:
         73:96:12:23:4a:5f:41:7c:15:eb:04:55:9e:bf:cd:7a:6f:87:
         09:54:ff:51:84:f5:1c:86:66:7c:8d:b2:42:93:f4:48:cc:e5:
         04:b4:f0:55:f2:3e:62:77:56:2d:4f:22:01:48:4f:7b:58:c1:
         6c:09:be:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAgsL4NWCbx0nFVJ6E4Q3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYjQyMWI4MmFiN2JiYTZlMmY1NWU5MDJhOWZiODFmYTNh
ZjI5OGYwHhcNMjYxMDE1MTcwMTEzWhcNMjYxMDE2MTcwMTEzWjAzMTEwLwYDVQQD
Eyg4ZGM4ZjU5NTVkMDNiNDdjZGYwMjg2ZjMyNWM3ZDE1ZmE2ZWQ5OWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdkwU8iT34lZ9MyoFx/KTCfyheaL
R45mUKFYGi1lUXtTK+RSh90a/VJ/xHVe7GJjP6XGIjJt8tUCfnOVU5UsNEMK0cvs
ZPHxCjD2AO00upZfQ52E1l3i1iHjOBiHdi8j/sMjyx0UdgLDs3JSftO9cqvPL+DY
YVE1YFTkZxeS2NJpRGG8j+ZAuGkN2YwnupO1WHS7/oCqY8GKGABXCXwuUbACn/IG
CCjP5+RF/BlQuoiYnsech4JefaYBMhDPZ7VdPTju14kgJPvyrblRgazxNAO/8Lev
T2y0VP7+knOb2SknUpl/1OhE11kbHpc+DDB7A1auRtY5AGEBqVeB/MpHrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3I9ZVdA7R83wKG8yXH0V+m7ZmuMB8GA1UdIwQY
MBaAFBO0Ibgqt7um4vVekCqfuB+jrymPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTdRaHVDcTN1NmJpOVY2UUtwLTRINk92S1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wNTMzMTAtMDNhZi00NDM0LTgzMDct
ZGZhNzA3OTQwNTM3LzEvRTdRaHVDcTN1NmJpOVY2UUtwLTRINk92S1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wNTMzMTAtMDNhZi00NDM0LTgzMDctZGZhNzA3OTQwNTM3
LzEvRTdRaHVDcTN1NmJpOVY2UUtwLTRINk92S1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAID9whkeu
PV1g3T8/R9j4YeVKgn/EX0kv+y/Whxer149x9KU+TNrAPAjslXNR4bMmTpkQA1kE
0s2p1vYS5dt3DdbTzW+WNCD1PLT1cG12PyFRBB/goxeyFlSg9bSrq0xTu7EHN4ab
Yjj1UN7UkCKQl0+Jb9yL/i0vmekFGXAZfeokrOQSLAN4PxRObw1xfLkMWz6PcgwE
va8owLFTY2BRqMTbdSo9RGDQlNKB8VFamoLVKFpsUmGvwlyWtZBefUHNClccXMba
c5YSI0pfQXwV6wRVnr/Nem+HCVT/UYT1HIZmfI2yQpP0SMzlBLTwVfI+YndWLU8i
AUhPe1jBbAm+MA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:38:24 2026 by rpki-client