Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
File:                     e27QJ9N71hCaAxHihp00StlZNfk.mft (raw, json)
Hash identifier:          GrYg3RtLxtqJAyqhSQup5mNb59b/6L/mMECG+KBqMHA=
Subject key identifier:   F0:F0:72:B4:C9:55:A0:21:88:BA:08:3D:5D:6B:CC:2D:64:22:89:12
Authority key identifier: 7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9
Certificate issuer:       /CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
Certificate serial:       01A18E9DBFDDE43551C2914243A104F0ED1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
Manifest number:          160C
Signing time:             Fri 30 Oct 2026 21:01:05 +0000
Manifest this update:     Fri 30 Oct 2026 21:01:05 +0000
Manifest next update:     Sat 31 Oct 2026 21:01:05 +0000
Files and hashes:         1: e27QJ9N71hCaAxHihp00StlZNfk.crl (hash: qMMVMURZVuIW/lwhn7pmPsJK9cWUWQ5jMw0TaPgySkA=)
                          2: mqkbXzrPajAciz1rznIJtOvpuyM.roa (hash: tQe8xgR/BeAjkQiY4TisIF6fbpojr1Hl6k10jQeFvwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8e:9d:bf:dd:e4:35:51:c2:91:42:43:a1:04:f0:ed:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
        Validity
            Not Before: Oct 30 21:01:05 2026 GMT
            Not After : Oct 31 21:01:05 2026 GMT
        Subject: CN=f0f072b4c955a02188ba083d5d6bcc2d64228912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:dd:dc:91:b2:8c:ad:b5:28:46:a0:40:db:
                    0d:51:db:dc:80:3a:ba:45:39:4e:52:b4:dc:ef:31:
                    56:ee:8f:af:36:4a:da:91:ed:fc:1b:93:09:68:1e:
                    58:87:1f:66:dc:ab:d6:cf:73:0c:b2:6f:b0:ab:4b:
                    fc:e7:b1:dd:c5:c7:ec:06:47:04:4f:b3:a6:88:f7:
                    89:3d:c0:26:c8:e3:ba:ea:ba:09:5c:df:31:d5:f5:
                    fa:9f:fc:b7:36:59:0f:2d:eb:0c:8b:ac:e6:a9:8c:
                    e4:31:21:60:5f:08:1a:90:fc:88:ae:89:4a:dc:09:
                    38:56:91:e0:2f:4d:52:7c:a4:d6:5f:ac:5f:c2:d6:
                    58:61:d4:0c:74:cf:33:66:a1:cc:a6:80:71:27:c3:
                    20:7e:95:a4:3a:52:e3:23:4e:f2:9d:a5:c1:05:bf:
                    1e:f3:08:7b:1b:eb:c5:b8:7f:d0:af:09:60:63:50:
                    0b:63:4c:fe:d0:07:8e:0a:32:5e:68:b1:52:60:6b:
                    7b:82:52:e0:0c:4d:87:a9:eb:e5:f8:a3:3d:28:aa:
                    b9:47:43:21:d1:b5:38:e7:74:cb:53:6b:cf:2e:1e:
                    81:de:4e:66:3a:da:a7:cb:26:81:9c:68:e7:35:d2:
                    5d:0e:0f:dc:1e:3b:7f:3f:f3:fc:85:0f:10:94:a2:
                    57:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F0:72:B4:C9:55:A0:21:88:BA:08:3D:5D:6B:CC:2D:64:22:89:12
            X509v3 Authority Key Identifier:
                keyid:7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:0e:7f:33:d5:56:33:16:f0:b8:7a:f8:4f:78:9d:d2:4b:fa:
         06:3e:f5:e9:c8:05:db:55:e5:89:a1:35:3f:56:6a:e2:01:ab:
         a3:b5:b3:5a:ec:e5:b6:02:b4:d0:99:74:cc:db:39:f1:91:7b:
         e8:7f:87:6e:c8:a9:26:42:ef:d5:65:dc:11:cc:4f:1d:36:4a:
         10:f0:50:98:14:da:d5:75:2b:6b:ed:d8:85:ed:9c:b2:2b:39:
         a8:93:22:c5:d2:00:9d:e2:63:b8:fe:a5:27:c4:60:2f:b6:5d:
         fe:99:0f:b3:2a:82:9e:55:5c:b2:13:3a:6c:1c:55:db:8e:cd:
         f2:98:e4:8b:f0:4a:82:79:db:3d:60:57:9e:c8:96:63:de:4f:
         af:a2:2a:ef:dd:74:7c:c0:13:6f:dd:17:04:5a:be:ab:7e:ae:
         c4:81:2a:e6:ad:0b:f8:6c:dd:5b:b6:b4:54:e0:54:5c:44:03:
         6b:b4:26:43:b3:87:68:ed:fe:8b:b0:54:01:c8:42:f6:a2:6b:
         c6:65:7f:b5:5b:69:71:12:15:31:d7:be:43:8e:11:aa:48:cd:
         00:cb:14:ad:2d:af:f7:fb:57:33:1b:5b:8f:a9:5b:e0:77:2c:
         21:84:83:ac:71:5c:e8:1d:cb:a5:9d:71:ea:9c:00:be:ca:57:
         f8:be:ff:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGOnb/d5DVRwpFCQ6EE8O0fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNmVkMDI3ZDM3YmQ2MTA5YTAzMTFlMjg2OWQzNDRhZDk1
OTM1ZjkwHhcNMjYxMDMwMjEwMTA1WhcNMjYxMDMxMjEwMTA1WjAzMTEwLwYDVQQD
EyhmMGYwNzJiNGM5NTVhMDIxODhiYTA4M2Q1ZDZiY2MyZDY0MjI4OTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm3d3JGyjK21KEagQNsNUdvcgDq6
RTlOUrTc7zFW7o+vNkrake38G5MJaB5Yhx9m3KvWz3MMsm+wq0v857HdxcfsBkcE
T7OmiPeJPcAmyOO66roJXN8x1fX6n/y3NlkPLesMi6zmqYzkMSFgXwgakPyIrolK
3Ak4VpHgL01SfKTWX6xfwtZYYdQMdM8zZqHMpoBxJ8MgfpWkOlLjI07ynaXBBb8e
8wh7G+vFuH/QrwlgY1ALY0z+0AeOCjJeaLFSYGt7glLgDE2Hqevl+KM9KKq5R0Mh
0bU453TLU2vPLh6B3k5mOtqnyyaBnGjnNdJdDg/cHjt/P/P8hQ8QlKJXJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDwcrTJVaAhiLoIPV1rzC1kIokSMB8GA1UdIwQY
MBaAFHtu0CfTe9YQmgMR4oadNErZWTX5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTI3UUo5TjcxaENhQXhIaWhwMDBTdGxaTmZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81OTdlNDUtY2RlNC00YzM0LThiZWEt
Yzk3ZTM3M2Q3MDRjLzEvZTI3UUo5TjcxaENhQXhIaWhwMDBTdGxaTmZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy81OTdlNDUtY2RlNC00YzM0LThiZWEtYzk3ZTM3M2Q3MDRj
LzEvZTI3UUo5TjcxaENhQXhIaWhwMDBTdGxaTmZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjA5/M9VW
MxbwuHr4T3id0kv6Bj716cgF21XliaE1P1Zq4gGro7WzWuzltgK00Jl0zNs58ZF7
6H+HbsipJkLv1WXcEcxPHTZKEPBQmBTa1XUra+3Yhe2csis5qJMixdIAneJjuP6l
J8RgL7Zd/pkPsyqCnlVcshM6bBxV247N8pjki/BKgnnbPWBXnsiWY95Pr6Iq7910
fMATb90XBFq+q36uxIEq5q0L+GzdW7a0VOBUXEQDa7QmQ7OHaO3+i7BUAchC9qJr
xmV/tVtpcRIVMde+Q44RqkjNAMsUrS2v9/tXMxtbj6lb4HcsIYSDrHFc6B3LpZ1x
6pwAvspX+L7/1A==
-----END CERTIFICATE-----
Generated at Sat Oct 31 05:18:25 2026 by rpki-client