Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
File:                     7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json)
Hash identifier:          C50iy9iIfG8ziJWERsOGd9z4JaOSywmdcYwQy5/lOp4=
Subject key identifier:   80:35:2A:65:71:D8:1F:4A:F7:ED:61:CE:ED:26:65:B1:DD:C5:A7:90
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Certificate issuer:       /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial:       01A1A30041B871F3CEF3F2419D6ACE23D898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
Manifest number:          1B06
Signing time:             Tue 03 Nov 2026 20:01:05 +0000
Manifest this update:     Tue 03 Nov 2026 20:01:05 +0000
Manifest next update:     Wed 04 Nov 2026 20:01:05 +0000
Files and hashes:         1: 29odbuprtCj7WPL5-_schDbHgm8.roa (hash: XIIoYS6NjJtTvrEkYnxIIAAx80iEEjwxP71SPrAr+8o=)
                          2: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: g+YNgr2kCuuxtcUR0tU07x1cOC2slLOKitfmWQe/Et4=)
                          3: C49vSVt4dfdT17Z5kZxdlV_lY_Y.roa (hash: 6HfpvHUMJisoBNoMG7lySqZtsVK9Z40fSQ9YGkMMFF0=)
                          4: CYTlKlzSJSqB3jTzZOH673qv2os.roa (hash: nMYpBRNUUmqx48+xTuVDjH9QkSUeA9v7hDY4KWKCBCQ=)
                          5: DIVTK05T8Vdhwjp7g0z7MnF1TQQ.roa (hash: 6vlsDL0j8NnBvb9Ab/QGUCQui9hFjQ/teVqIFOEkwLQ=)
                          6: ENla5OgKBu9uunWqxWQAfu7kwx0.roa (hash: Fbmqrk8r0alDCgWyzCOzHqp7tHL/3UqhpNT6d1lPtlY=)
                          7: IamjYw1vikCzZIhDeU8H0NMAjHs.roa (hash: M+kmsNXkFSxnu0j1QJUyRMfdThsPZBpSXk2/kSsLWUY=)
                          8: Iyt7Ob_snKf1ZPop-eeEldXM0fQ.roa (hash: 9XeUKSaM919H72Lo2RzCdmjP30DLuCdA4txuvCcKAVk=)
                          9: Q5HfXdIQnusnCwKJeNtcbaxYKRw.roa (hash: cgDqaBa5oL7jHKKM1uUVRVvnMYGroeNLDuSFwDAGhy8=)
                          10: Xqk8Uz-n6K8gn3JGWZDD2ygTwPs.asa (hash: ciV3WQr4P4tvz14Lw1wTS5h/d3hEB2JhoVNcPSmkw+I=)
                          11: Zqcb5O8rFX9zl4QnpgFxwAPkSnw.roa (hash: PxO9Gffmo66KLSDjItc0OadV8hhOTt+St3p6W/DJEgM=)
                          12: _izOulmhuUBG3FatKk1kjhEzI5I.roa (hash: D2Y24n1qrh+NyvYt/hta8znqPyvAoiiYcPgWq6TG2zI=)
                          13: bnpbPX_ctt0kqkwx6ukV-j4WTGM.roa (hash: 730AnutRLa9Haz+ZMN+qGZx6PYPOqH6zu3NH8XC/47k=)
                          14: gTyFz4o7qq-mz7kkyhI4YQAE3F8.roa (hash: ql1a+n9u4sT8twi+Ey5tWWvsl/zO/3fN4L8B2DWoXrk=)
                          15: h2mTI89G79vzZdTXcNgpiY_bSuE.roa (hash: qa2BzNyouPFY7/V6+HRcQ7umJPtaaWKwpg9jeFVJFSE=)
                          16: hhAxTUm-YLDfu5gnVbj74LIg_xE.roa (hash: 5lrRMZNGyqCPeI3ughaZF3pVN6T3OxbFiijuNyO2VPw=)
                          17: hnvqiTRhzx1k1I5Yz-RLdIbMdZo.roa (hash: AKpiyiynsGZBYcwDRapdMlbndDnrttHO5UZeZsvk6ck=)
                          18: j8JXlUTEd1j_9VoERc0ZtsXM8O8.roa (hash: A11q2a+vMmn2Uc3d6mAqUut0tGh3JvhOP0a9hwmGjMs=)
                          19: lru0bK1pFWTdlNh3tSeVRy2RxB4.roa (hash: D3uDWSg2oVhHneIgFjvyT24SUbp4OtxjQr0JkAH/IGY=)
                          20: x9kxYUUdYs3Vc1XQvx9EJnJhrDs.roa (hash: Xjj2UlUQT0tIyuN4wzeBBIdle7HnaFZ9oWTYHnJPnD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Nov 2026 20:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a3:00:41:b8:71:f3:ce:f3:f2:41:9d:6a:ce:23:d8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
        Validity
            Not Before: Nov  3 20:01:05 2026 GMT
            Not After : Nov  4 20:01:05 2026 GMT
        Subject: CN=80352a6571d81f4af7ed61ceed2665b1ddc5a790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b2:56:eb:72:fc:a5:47:4a:76:2c:d7:f7:cf:
                    ad:fe:17:9b:80:94:d7:4c:bd:07:cf:27:11:9f:aa:
                    18:5a:a0:72:a4:6c:7c:c2:36:7e:c6:78:f5:fa:c3:
                    43:a7:d1:4d:39:f1:99:93:75:b4:f0:40:fc:a0:23:
                    32:92:7f:ec:99:29:82:21:b5:57:91:66:89:4b:e9:
                    4e:7f:19:2f:69:07:e7:54:1a:a4:12:8a:da:4b:cd:
                    36:4c:5d:5a:17:66:f8:90:8d:f4:b7:40:e2:e3:5c:
                    bc:7c:ca:4e:34:cf:be:99:cd:e7:4c:84:b0:2e:37:
                    0c:28:00:b7:ef:d5:a4:fb:9a:f4:a8:4f:da:8a:fc:
                    d9:b3:d4:d6:28:e0:5d:d3:2a:96:01:db:69:fe:e1:
                    6f:c0:39:ce:52:c2:ff:9d:1c:93:8f:b5:8c:43:8f:
                    05:d4:7d:bb:63:0c:4e:8e:16:05:03:4b:6f:04:22:
                    f6:d6:cf:98:68:59:0f:26:10:e1:a2:73:40:da:19:
                    12:03:f9:f2:b8:f8:2d:50:ae:e4:f0:ed:fb:3b:40:
                    f7:9e:98:d4:91:b9:d2:a2:d4:a0:36:cc:5c:a7:21:
                    b7:42:ec:79:f2:43:2e:72:5d:07:c3:8b:d2:51:47:
                    07:66:f7:fe:2b:6e:d6:a2:79:b6:60:43:ac:13:64:
                    a9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:35:2A:65:71:D8:1F:4A:F7:ED:61:CE:ED:26:65:B1:DD:C5:A7:90
            X509v3 Authority Key Identifier:
                keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:13:7a:19:e5:75:a6:36:75:73:ab:8b:34:92:ca:f6:3c:a4:
         6e:b9:e5:e7:8b:3c:2d:0f:63:2f:49:fe:fa:ba:f0:bf:93:38:
         08:42:fa:e3:07:63:3e:5d:95:32:ca:1a:22:2f:50:77:f8:13:
         b8:75:b2:a8:3c:d2:d5:30:2e:e1:9d:3d:a6:10:41:ea:0b:c1:
         2f:76:2a:fb:25:34:f1:73:97:91:13:41:2e:fa:21:31:70:f3:
         c7:b8:c5:18:cb:b4:80:a2:01:b1:a6:57:d3:e9:32:ed:42:7b:
         7c:13:0c:23:ef:b4:cb:e7:1d:63:dd:de:fb:e2:54:e6:2a:63:
         98:a7:34:db:ad:49:57:65:2c:63:7d:48:b3:6a:19:83:e0:4a:
         12:13:b1:35:fa:a9:e8:8e:e8:bf:b9:32:4b:f1:3b:aa:ef:b0:
         6f:d7:7a:1d:2b:ba:1b:4b:bb:64:bb:ff:d2:a9:8d:2e:58:ec:
         05:b7:95:48:26:9f:5a:ed:1b:37:26:38:87:a4:ee:02:15:38:
         26:72:67:ee:db:d6:5a:c4:76:70:6b:7e:fa:cc:ea:63:a1:b1:
         7b:b0:3d:24:f5:27:01:7a:81:74:fa:eb:04:29:d6:a8:86:42:
         03:e4:f3:19:aa:f7:d6:68:22:65:b3:2d:c8:6e:b2:37:0f:b6:
         4b:37:51:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:39:35 2026 by rpki-client