Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
File:                     7WRpHDGJLMmRrU6alnEUd1nkF6s.mft (raw, json)
Hash identifier:          Svvh2+7ODzPass6c8zxyoBMU0CTUctsTMHSeL+CObls=
Subject key identifier:   45:64:AA:AC:FE:E7:1A:00:C8:41:FE:97:6F:22:4E:A9:37:2E:2C:2D
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Certificate issuer:       /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial:       01A18006333B216BED3059F8EB59AD14AADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
Manifest number:          0D88
Signing time:             Wed 28 Oct 2026 01:00:52 +0000
Manifest this update:     Wed 28 Oct 2026 01:00:52 +0000
Manifest next update:     Thu 29 Oct 2026 01:00:52 +0000
Files and hashes:         1: 7WRpHDGJLMmRrU6alnEUd1nkF6s.crl (hash: wCll8rHNfjidVY2wFli0nIegCHFCV46zwtqUOFfnAjk=)
                          2: Ap1ypGYwOd85RPP0rGtzYj0aIKY.roa (hash: JnRnLw8/ZcrmuU2tq5TD695w7gD8V5C+7Y/KLO3u2VI=)
                          3: DtHmL0rokL7c-p02LOHjQTrN7kg.roa (hash: gPbfcqQYpn62UlyXYqjLBcG/M0G99TZSgQIuqpuaZVI=)
                          4: R9ygrs2HQAtVQtcaZVu-dTXrCYk.roa (hash: 0HmtZ9l4leo/3Gwg/43c5IyXs8a6XOT9tX3GF2i1ZMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:06:33:3b:21:6b:ed:30:59:f8:eb:59:ad:14:aa:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
        Validity
            Not Before: Oct 28 01:00:52 2026 GMT
            Not After : Oct 29 01:00:52 2026 GMT
        Subject: CN=4564aaacfee71a00c841fe976f224ea9372e2c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:6c:dc:dc:2c:85:71:5c:de:00:29:0f:80:
                    03:06:79:af:c5:ce:c2:67:2d:2f:63:72:38:09:fb:
                    8a:15:c0:99:b3:01:19:8a:5e:d9:81:42:20:83:da:
                    de:79:bc:df:03:d1:a7:27:3a:12:12:ae:1d:70:87:
                    e9:6a:46:51:b4:f5:1a:c5:85:ae:61:f9:fe:45:ac:
                    a1:53:82:72:4f:b7:ce:56:d7:e2:90:bf:be:a9:db:
                    46:02:4c:b4:b6:0c:f6:c7:86:29:d1:b8:d5:92:82:
                    46:76:82:c6:99:f2:04:f3:9d:ec:83:fa:8d:63:1a:
                    33:f3:85:ac:43:5c:cb:71:7b:b2:cf:2c:73:3c:7a:
                    16:67:8d:0d:0e:9f:28:25:98:57:b3:75:d1:5f:09:
                    e0:c6:2a:a2:eb:ef:8d:32:4c:9b:7f:3b:04:6d:47:
                    bd:b7:11:fb:05:2d:9d:49:72:22:3d:e0:60:ed:0a:
                    05:32:8b:8e:e6:35:eb:93:fe:2d:ea:c9:52:9b:88:
                    3e:02:56:c6:c4:7c:8b:6f:1c:73:6e:05:b3:bb:1e:
                    f8:43:10:30:4a:a3:d1:78:64:99:10:31:8d:07:5f:
                    91:42:17:bb:f3:5e:2c:33:e5:7c:08:2e:4c:20:35:
                    48:f7:61:88:a4:7d:16:b4:e0:4a:a2:8f:21:dd:d6:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:64:AA:AC:FE:E7:1A:00:C8:41:FE:97:6F:22:4E:A9:37:2E:2C:2D
            X509v3 Authority Key Identifier:
                keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:11:49:5d:04:4c:33:c1:bb:86:f8:c7:a6:df:35:32:24:65:
         59:41:e5:e9:77:3d:ca:ce:8b:43:6d:b1:5f:b7:44:04:1c:0d:
         b8:f7:60:c2:3e:0e:d3:3f:41:f6:bd:f5:68:7d:4f:a2:bd:0e:
         47:0d:67:06:5e:72:fa:2e:d4:2a:64:bd:88:27:81:54:0c:65:
         76:82:cb:cc:5d:1e:94:20:89:71:1b:65:8c:0b:0c:32:05:94:
         a4:54:34:d8:17:9c:1f:e2:8c:6e:5e:07:35:83:d3:11:15:8b:
         14:a4:20:71:d0:10:01:f7:41:19:b5:b8:4c:b0:71:44:4e:4c:
         d5:b8:c4:d4:38:c2:50:32:c6:b5:cb:31:df:76:c5:08:68:e2:
         26:57:d8:6e:a8:9c:a4:87:cb:9e:19:d7:79:b2:02:89:9b:aa:
         78:c1:48:6e:8e:46:f4:bf:02:f9:62:6b:b6:0f:7c:d6:a7:be:
         d7:06:51:04:af:2b:36:80:87:d2:8a:a0:47:15:59:81:af:e1:
         56:d1:dc:43:03:c3:ed:c3:f3:d1:ed:c8:d4:65:3a:fd:a4:f1:
         da:3e:88:55:55:1f:38:61:04:20:9b:45:52:8d:48:bc:7d:aa:
         79:01:e6:66:71:c3:bb:70:4a:17:a5:1c:1a:d1:e5:b5:6b:48:
         94:29:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:20:45 2026 by rpki-client