Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
File:                     7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json)
Hash identifier:          iQeobK8kSz17JPP2oMoBtwzG+vd0UcKxNyYYVdvBL3Q=
Subject key identifier:   E6:E9:B3:D9:D6:B6:87:D2:AF:52:10:90:39:E7:73:CE:78:EF:67:4C
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Certificate issuer:       /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial:       01A148AA6A7F4A927D2233DE6108130D8E11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
Manifest number:          19DA
Signing time:             Sat 17 Oct 2026 07:01:30 +0000
Manifest this update:     Sat 17 Oct 2026 07:01:30 +0000
Manifest next update:     Sun 18 Oct 2026 07:01:30 +0000
Files and hashes:         1: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: k0T8AX1jvrqyGgV2YJJqCrjZMdrLvsG2NLKwzQUIhoY=)
                          2: WxQ64uv-zX-eye9sRlN7C2cRqwI.roa (hash: H3Nchr9jYSxejrjh37X3oEL6arcb0RjMrAm9O9pSwMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 07:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:aa:6a:7f:4a:92:7d:22:33:de:61:08:13:0d:8e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
        Validity
            Not Before: Oct 17 07:01:30 2026 GMT
            Not After : Oct 18 07:01:30 2026 GMT
        Subject: CN=e6e9b3d9d6b687d2af52109039e773ce78ef674c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7a:82:04:d4:7f:cb:66:12:e2:1a:9a:47:58:
                    35:ee:2d:ca:6c:0f:4b:f2:eb:aa:92:f2:83:72:6c:
                    27:eb:9a:f5:e1:16:61:ca:2c:e6:9e:1f:e9:f8:5b:
                    59:3d:0f:a0:37:2a:0f:fd:ae:a5:99:54:c5:3f:71:
                    96:f5:7c:b2:24:11:72:54:6e:3c:c6:f8:1d:d5:f2:
                    fd:c0:ec:83:16:d8:f1:79:e7:bd:8f:37:24:ae:df:
                    43:67:c3:80:e2:b6:cd:3f:20:ec:f5:2a:0d:a5:bd:
                    23:36:ce:8d:21:ea:50:b9:17:09:ff:6d:95:b7:fa:
                    7e:1e:60:84:92:64:76:24:e1:e1:92:47:6a:bf:17:
                    97:28:9e:30:f8:67:fd:2a:28:7b:d4:dd:08:12:99:
                    27:8e:b1:b7:43:ae:03:f7:42:b0:2e:80:fe:76:d7:
                    25:e7:9b:29:7a:e1:c3:60:d1:11:98:57:b8:43:f6:
                    9d:fd:59:98:43:11:b5:54:ce:ed:51:1f:99:5d:8f:
                    63:be:ee:0d:95:fd:db:bf:89:8e:0e:71:c5:93:16:
                    62:7d:61:d4:03:10:8e:c8:03:8b:8b:44:76:3c:cc:
                    55:2d:83:0b:2e:08:96:4a:2a:16:57:09:42:98:e1:
                    8a:42:e4:b9:00:8b:2d:d9:ec:70:44:e4:60:d6:9f:
                    f4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E9:B3:D9:D6:B6:87:D2:AF:52:10:90:39:E7:73:CE:78:EF:67:4C
            X509v3 Authority Key Identifier:
                keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:df:db:1d:48:cd:77:4c:4a:c7:51:53:ed:1d:4e:30:54:df:
         e5:e5:83:40:8e:f6:f7:6c:fb:60:3b:bf:fb:50:d9:8d:ec:4b:
         1a:6b:27:8e:55:04:1a:ca:9f:8c:e6:09:e7:98:4c:7b:c7:b5:
         59:64:1a:cd:0f:8f:ac:d2:db:9c:f4:99:e7:39:5e:be:5c:51:
         36:b7:60:b0:2e:ab:7b:d2:7a:a3:63:73:88:2b:46:bf:c2:fd:
         cc:25:d2:02:9e:22:89:6f:0b:26:5f:cd:89:c3:7a:85:b6:b1:
         5d:fd:dc:51:1b:a8:dc:21:93:8e:11:83:e4:61:81:56:3a:40:
         9b:a5:22:8e:b4:75:b8:1a:6a:0c:74:05:0e:d4:18:d6:60:8a:
         59:09:f9:47:00:0e:8c:20:ee:93:4a:3f:2c:e3:65:12:df:ea:
         41:1c:48:c6:32:67:31:01:61:c1:d5:0f:41:ab:25:ff:08:df:
         21:10:1f:44:0b:95:c4:b9:b7:4f:3b:a9:a0:17:e9:de:91:6d:
         df:0a:15:d3:28:5b:89:f2:64:41:4c:bd:13:c9:c7:12:2c:be:
         02:c7:19:2e:f4:9a:d8:73:f8:48:19:a4:4c:9b:8e:ed:ee:f9:
         fa:4f:3f:fa:10:4a:32:2c:91:d0:b6:db:9d:77:ce:8e:1a:f0:
         78:5e:f8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:28:10 2026 by rpki-client