Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
File:                     97nZe5f9TLrO2oHEQG50rW1TkyY.mft (raw, json)
Hash identifier:          r4dlPZg2BUyq2bJ6HeVyQx9xvODV3bU8Ozocopdt0hI=
Subject key identifier:   5A:5C:C0:DE:1B:F0:AE:0C:AB:0B:33:0C:BB:55:73:0E:C9:21:71:89
Authority key identifier: F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
Certificate issuer:       /CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Certificate serial:       01A1551C2AE0A63661D4D1014C6C506AB6FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
Manifest number:          07F8
Signing time:             Mon 19 Oct 2026 17:01:11 +0000
Manifest this update:     Mon 19 Oct 2026 17:01:11 +0000
Manifest next update:     Tue 20 Oct 2026 17:01:11 +0000
Files and hashes:         1: 97nZe5f9TLrO2oHEQG50rW1TkyY.crl (hash: Ud0fxxJLSct3FxKPpA+Jb95++LQgcfQnrZewRlD3wVk=)
                          2: iz9gbVygmSBHL3t3PdATnT2zJmk.roa (hash: mrKo3a/hS44Co32MTqj4k1lL3E23S3iMQm9u18Qtexo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:55:1c:2a:e0:a6:36:61:d4:d1:01:4c:6c:50:6a:b6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
        Validity
            Not Before: Oct 19 17:01:11 2026 GMT
            Not After : Oct 20 17:01:11 2026 GMT
        Subject: CN=5a5cc0de1bf0ae0cab0b330cbb55730ec9217189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:88:8e:37:3a:56:87:0c:b3:e9:5a:54:ae:
                    7c:a1:a4:f4:74:c5:69:f3:c6:6f:9a:44:04:4f:37:
                    b3:84:2e:dd:16:35:68:97:7d:c1:63:79:ed:54:09:
                    81:4e:6a:21:6c:a2:0d:04:81:06:ee:6f:8d:cd:6d:
                    98:83:ff:1c:9a:c3:a6:4c:0f:98:6c:d9:1f:02:97:
                    ef:20:40:1f:e5:f3:89:89:65:b3:5c:ed:40:bd:e9:
                    81:30:91:26:03:cc:d6:e0:a5:c5:d7:dd:71:66:b2:
                    51:bb:0c:f3:86:f1:a5:40:9f:9c:97:dd:e9:be:32:
                    62:1e:d6:04:ef:b6:d1:99:36:fe:cb:34:a2:da:d2:
                    05:96:13:85:57:32:82:57:75:bc:12:0e:31:fd:d2:
                    28:63:1c:60:52:c1:66:da:97:3c:0f:eb:22:bb:d8:
                    6e:32:0d:5c:df:ce:b4:38:85:71:9e:44:40:d5:47:
                    07:35:7d:c7:ac:5c:9e:67:c7:55:a0:8c:bb:52:45:
                    6c:24:0b:ea:aa:3d:d8:fb:df:cf:ac:4d:ef:23:06:
                    2b:3b:6c:d9:29:cb:22:70:f7:08:fe:49:fd:87:b4:
                    bd:f7:b8:e7:17:22:13:69:3c:88:ab:53:67:4f:12:
                    a8:65:60:fd:b4:b2:33:57:2b:e8:ec:8b:90:eb:e1:
                    d2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5C:C0:DE:1B:F0:AE:0C:AB:0B:33:0C:BB:55:73:0E:C9:21:71:89
            X509v3 Authority Key Identifier:
                keyid:F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:06:0a:92:a2:b0:34:0e:14:fb:cc:bd:4e:a1:cd:e3:bd:c4:
         3d:06:35:f6:6e:18:42:b2:7e:7e:eb:48:60:09:d1:c4:6c:e5:
         8a:40:56:7f:9b:8c:b5:61:82:07:7f:ce:ea:d5:26:c4:af:94:
         d1:9b:bb:6c:e9:e3:2e:9e:a6:9d:55:3a:f6:b4:58:c7:4b:38:
         03:aa:14:5c:68:65:a7:17:2b:e2:87:69:2a:f5:8c:69:f9:a3:
         9f:52:06:c3:8f:25:d5:1f:eb:0e:fb:80:4e:51:53:c6:a0:81:
         8c:5f:81:a3:ef:db:9d:50:a2:37:8f:a8:53:91:ab:b5:85:62:
         77:a9:5e:1d:5e:05:f5:1a:ed:80:9d:94:e6:d3:20:ac:7c:3e:
         c0:2a:e2:a8:13:5b:c4:29:25:2b:c0:08:ce:e6:a3:02:1f:93:
         32:01:a7:8b:2a:61:7d:ed:a6:33:41:79:03:34:8a:5a:10:d0:
         90:65:fe:4f:9d:53:13:54:0a:bd:1c:e3:0e:f2:29:dd:f2:54:
         5e:87:7c:fe:20:15:88:23:20:d9:95:4f:cf:27:85:f7:0e:fb:
         6f:26:fd:94:70:c4:2c:ec:8c:b0:1d:be:da:e4:68:3b:ee:0c:
         b5:ba:ba:54:d2:9c:10:6f:af:a6:b9:f1:55:ec:92:f4:b4:aa:
         a5:f4:8d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:34:47 2026 by rpki-client