Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File:                     7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier:          rfHQU43TtmNaL2DqvhSPCRBKI19eah3fFzZ0/5Eu8Dw=
Subject key identifier:   78:AD:64:EE:0F:14:77:70:56:6F:03:62:C5:C8:41:51:AB:35:21:19
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer:       /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial:       01A13E5CBD7326786BC1D7E48D91B2228994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number:          0F0A
Signing time:             Thu 15 Oct 2026 07:00:27 +0000
Manifest this update:     Thu 15 Oct 2026 07:00:27 +0000
Manifest next update:     Fri 16 Oct 2026 07:00:27 +0000
Files and hashes:         1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: Tg0KBcIUUKAmkyaHYpp7ReSBBV7w0MrOLKG7lVD2c74=)
                          2: Mt1633RiBIpuKnZW3jSMaHpSdRI.roa (hash: 6BNDp2CLnyhsZWA//die5Cd+w8BRp6sCkxu8tySEnX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:5c:bd:73:26:78:6b:c1:d7:e4:8d:91:b2:22:89:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
        Validity
            Not Before: Oct 15 07:00:27 2026 GMT
            Not After : Oct 16 07:00:27 2026 GMT
        Subject: CN=78ad64ee0f147770566f0362c5c84151ab352119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3d:89:be:f5:d9:bf:13:bc:05:fa:7d:7c:d7:
                    47:60:28:8c:b5:47:53:e4:ce:9d:eb:09:76:fb:57:
                    db:c0:22:ef:dd:42:5d:ca:e7:01:3b:de:6f:b6:76:
                    24:bb:d9:bc:d1:4c:8b:2d:7e:1b:5c:65:b0:3c:09:
                    83:2a:d6:63:b3:ad:0c:fb:87:ab:4a:47:d8:ee:dc:
                    69:f5:37:1d:61:e1:15:5e:98:56:79:59:7e:f1:ac:
                    df:3f:ed:5e:6c:8f:19:9b:31:f1:58:f0:07:49:c4:
                    02:69:60:10:9f:e4:a7:82:b2:f9:8b:2d:37:f0:bf:
                    3d:d6:2b:dc:60:32:25:0a:b4:5a:9e:68:a5:b2:6c:
                    c2:11:7c:02:00:a2:48:d7:f3:00:fc:50:cb:09:cb:
                    7d:e5:af:e3:1f:38:fa:7c:3a:61:eb:c1:0c:96:4c:
                    54:3a:06:ca:19:24:3d:cf:c2:24:ba:e5:3c:0f:0e:
                    95:71:94:86:2a:8a:ce:25:bf:f6:fe:6d:d0:5d:10:
                    12:3d:52:44:3b:f3:d4:9c:62:e5:45:96:c1:60:df:
                    ac:be:c7:66:0b:76:cf:b1:cd:f1:3f:a2:96:a5:65:
                    1a:86:8c:c0:b9:1e:16:ea:2b:67:cb:e8:cb:0b:a2:
                    b9:4b:06:d5:5a:ac:6b:7b:62:1c:a5:71:0a:8f:e0:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AD:64:EE:0F:14:77:70:56:6F:03:62:C5:C8:41:51:AB:35:21:19
            X509v3 Authority Key Identifier:
                keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:15:9c:f7:77:16:52:7f:4e:54:8c:8f:98:77:a7:68:93:
         9b:04:fb:7e:62:d7:96:14:be:d9:91:ba:9b:9e:28:bb:ad:7f:
         9c:ea:ef:74:58:4a:b5:6f:84:ad:79:aa:1b:68:28:ff:0c:72:
         f2:2d:e4:56:fe:a5:47:1e:99:18:63:8b:a0:f8:7c:e5:bc:e2:
         d2:f9:bd:4a:52:f0:42:2c:3a:a4:43:bb:31:c2:46:b8:01:57:
         66:86:b7:da:2c:29:2b:a8:d8:fa:35:73:f4:cc:00:54:fc:15:
         c8:72:35:9a:9d:9d:dd:41:9d:4f:ad:62:fe:c0:bd:b7:6b:89:
         20:4c:6c:41:f1:8c:83:e7:02:8e:b6:7e:45:68:d6:47:0f:cc:
         ef:80:8b:0b:a0:a7:fd:a1:f6:5b:b1:fb:12:24:ec:f1:46:cb:
         f5:03:67:21:c9:01:cb:97:e2:d1:1e:f3:78:81:31:bf:e9:d5:
         cf:fc:6f:6b:68:a7:a6:99:3a:5c:e4:5f:df:ce:e8:c5:3f:32:
         87:60:76:41:16:6f:51:1c:29:17:28:de:3e:2f:92:ff:d0:e5:
         56:2d:30:72:a9:ef:d1:d6:29:f7:d7:b7:b9:95:0e:85:5e:fa:
         39:be:2b:59:72:d5:8b:0c:fd:c4:53:6f:f6:63:7f:eb:e9:e2:
         98:b8:08:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+XL1zJnhrwdfkjZGyIomUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYWRhYTYzMzkxMDNiZGI1NTY2ZDgzMjcxZDNjNDdjMDA1
YzI1MGQwHhcNMjYxMDE1MDcwMDI3WhcNMjYxMDE2MDcwMDI3WjAzMTEwLwYDVQQD
Eyg3OGFkNjRlZTBmMTQ3NzcwNTY2ZjAzNjJjNWM4NDE1MWFiMzUyMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz2JvvXZvxO8Bfp9fNdHYCiMtUdT
5M6d6wl2+1fbwCLv3UJdyucBO95vtnYku9m80UyLLX4bXGWwPAmDKtZjs60M+4er
SkfY7txp9TcdYeEVXphWeVl+8azfP+1ebI8ZmzHxWPAHScQCaWAQn+SngrL5iy03
8L891ivcYDIlCrRanmilsmzCEXwCAKJI1/MA/FDLCct95a/jHzj6fDph68EMlkxU
OgbKGSQ9z8IkuuU8Dw6VcZSGKorOJb/2/m3QXRASPVJEO/PUnGLlRZbBYN+svsdm
C3bPsc3xP6KWpWUahozAuR4W6itny+jLC6K5SwbVWqxre2IcpXEKj+BYXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHitZO4PFHdwVm8DYsXIQVGrNSEZMB8GA1UdIwQY
MBaAFO6tqmM5EDvbVWbYMnHTxHwAXCUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mNTAwZTEtMjQxMi00MmU1LWE4YTMt
MjE0MmMwYzQzODVmLzEvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mNTAwZTEtMjQxMi00MmU1LWE4YTMtMjE0MmMwYzQzODVm
LzEvN3EycVl6a1FPOXRWWnRneWNkUEVmQUJjSlEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEoVnPd3
FlJ/TlSMj5h3p2iTmwT7fmLXlhS+2ZG6m54ou61/nOrvdFhKtW+ErXmqG2go/wxy
8i3kVv6lRx6ZGGOLoPh85bzi0vm9SlLwQiw6pEO7McJGuAFXZoa32iwpK6jY+jVz
9MwAVPwVyHI1mp2d3UGdT61i/sC9t2uJIExsQfGMg+cCjrZ+RWjWRw/M74CLC6Cn
/aH2W7H7EiTs8UbL9QNnIckBy5fi0R7zeIExv+nVz/xva2inppk6XORf387oxT8y
h2B2QRZvURwpFyjePi+S/9DlVi0wcqnv0dYp99e3uZUOhV76Ob4rWXLViwz9xFNv
9mN/6+nimLgIDQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:00 2026 by rpki-client