Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
File:                     7enwFkj2hDY4I6bY7srOV5unt_8.mft (raw, json)
Hash identifier:          uQbNfCHwjCLft1rw4oFN30V945FXp6+YGSaU5IJanTM=
Subject key identifier:   3C:EC:2A:9C:47:18:A3:C8:B6:3D:2C:37:DB:63:71:96:FD:78:0A:35
Authority key identifier: ED:E9:F0:16:48:F6:84:36:38:23:A6:D8:EE:CA:CE:57:9B:A7:B7:FF
Certificate issuer:       /CN=ede9f01648f684363823a6d8eecace579ba7b7ff
Certificate serial:       01A1845119825B2335D58018266AB806C768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
Manifest number:          0143
Signing time:             Wed 28 Oct 2026 21:01:09 +0000
Manifest this update:     Wed 28 Oct 2026 21:01:09 +0000
Manifest next update:     Thu 29 Oct 2026 21:01:09 +0000
Files and hashes:         1: 7enwFkj2hDY4I6bY7srOV5unt_8.crl (hash: WlYIM+myzpQ1awDPPdgt+xQwMxQkxEdgtxNghdLKt4A=)
                          2: dxcriHpnMC3z1_baM-SBKqHJxJQ.asa (hash: JYMNhTiUT4SD2V1x5WbHQcAoHvJgKRNJbfsi4S0Fjq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:84:51:19:82:5b:23:35:d5:80:18:26:6a:b8:06:c7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede9f01648f684363823a6d8eecace579ba7b7ff
        Validity
            Not Before: Oct 28 21:01:09 2026 GMT
            Not After : Oct 29 21:01:09 2026 GMT
        Subject: CN=3cec2a9c4718a3c8b63d2c37db637196fd780a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:aa:e0:52:2d:c9:50:69:ce:57:d3:78:a4:d4:
                    fa:04:67:b5:af:d7:04:4d:70:3f:aa:e8:25:0e:3c:
                    d3:ae:9d:32:d6:db:5f:56:a9:e8:ec:cd:e1:e6:14:
                    35:ef:5e:07:12:c2:d5:73:d2:71:bf:4c:95:94:85:
                    96:a8:16:69:52:8f:c2:5c:21:4d:d8:ee:15:1c:39:
                    55:22:59:ee:e8:3f:07:34:f0:a9:a9:d8:72:bc:a6:
                    28:b0:f2:d0:7b:bb:45:29:32:2c:1d:5d:bf:d9:2c:
                    9c:10:7b:05:61:f3:49:6a:1a:4f:0b:86:77:fd:34:
                    14:99:78:8a:76:c3:38:70:b4:ba:71:3a:ec:71:86:
                    66:8c:5e:18:b0:d3:08:f5:79:05:a6:d1:ee:9d:f0:
                    98:41:97:58:2a:02:44:aa:db:16:40:b1:9f:81:59:
                    be:cd:9c:a5:da:0b:95:2c:31:d6:50:d6:88:3b:5e:
                    49:6d:ad:e1:4c:bc:5d:26:84:6a:00:21:cc:53:c1:
                    1a:ba:03:bb:62:cd:88:18:5c:bd:79:64:20:4f:cb:
                    06:37:20:79:1b:22:cb:1e:8b:79:0a:3f:48:b1:d6:
                    56:42:f7:cf:62:40:2b:a3:a9:27:91:a2:47:83:3d:
                    e0:c1:4f:69:9b:d7:45:8e:7d:c5:69:ea:d9:ff:fd:
                    0a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EC:2A:9C:47:18:A3:C8:B6:3D:2C:37:DB:63:71:96:FD:78:0A:35
            X509v3 Authority Key Identifier:
                keyid:ED:E9:F0:16:48:F6:84:36:38:23:A6:D8:EE:CA:CE:57:9B:A7:B7:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:28:46:db:c5:70:13:1e:e3:25:ee:91:cd:34:b6:d4:b0:3e:
         d6:c5:d1:c7:fd:69:94:dd:34:4e:92:4a:f9:38:69:03:38:1a:
         07:65:83:e7:18:09:30:7e:24:47:c2:ea:84:1d:fe:c9:78:63:
         b8:cd:26:bd:0a:66:8e:c1:cd:c9:1d:b3:93:3a:ab:18:27:2e:
         80:da:80:7f:9b:e9:f4:9f:61:3c:30:b8:5c:07:55:40:38:a4:
         92:fd:21:e5:9a:12:c0:2f:17:b5:45:26:24:8c:79:03:d4:83:
         fd:ca:a7:04:c2:fb:94:24:fc:af:99:6f:20:f8:eb:84:bd:d7:
         61:0e:47:a9:1e:86:0d:4c:ff:68:6a:8b:e5:d5:11:84:68:4b:
         03:25:b0:e6:74:71:ec:70:8c:f7:48:54:80:fd:6f:60:d9:dd:
         50:2d:b8:97:6c:87:11:59:67:ee:2a:51:6d:b8:85:5c:43:d2:
         fc:50:13:63:6e:37:1f:99:08:ad:10:79:b1:d1:c5:05:9e:a5:
         c2:2a:21:6c:d4:4c:45:67:b9:ce:3c:ac:b3:6d:70:1c:4d:98:
         b0:24:e9:cb:2a:5c:23:26:8d:e9:b9:ec:01:38:98:55:66:dd:
         a4:69:37:07:6b:a7:3a:b7:f5:bb:d3:60:28:17:e2:53:0e:98:
         4b:81:45:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGEURmCWyM11YAYJmq4BsdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZTlmMDE2NDhmNjg0MzYzODIzYTZkOGVlY2FjZTU3OWJh
N2I3ZmYwHhcNMjYxMDI4MjEwMTA5WhcNMjYxMDI5MjEwMTA5WjAzMTEwLwYDVQQD
EygzY2VjMmE5YzQ3MThhM2M4YjYzZDJjMzdkYjYzNzE5NmZkNzgwYTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzargUi3JUGnOV9N4pNT6BGe1r9cE
TXA/quglDjzTrp0y1ttfVqno7M3h5hQ1714HEsLVc9Jxv0yVlIWWqBZpUo/CXCFN
2O4VHDlVIlnu6D8HNPCpqdhyvKYosPLQe7tFKTIsHV2/2SycEHsFYfNJahpPC4Z3
/TQUmXiKdsM4cLS6cTrscYZmjF4YsNMI9XkFptHunfCYQZdYKgJEqtsWQLGfgVm+
zZyl2guVLDHWUNaIO15Jba3hTLxdJoRqACHMU8EaugO7Ys2IGFy9eWQgT8sGNyB5
GyLLHot5Cj9IsdZWQvfPYkAro6knkaJHgz3gwU9pm9dFjn3FaerZ//0K+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzsKpxHGKPItj0sN9tjcZb9eAo1MB8GA1UdIwQY
MBaAFO3p8BZI9oQ2OCOm2O7Kzlebp7f/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2Vud0ZrajJoRFk0STZiWTdzck9WNXVudF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84OTQzZWYtMDQyYi00NDI3LTkwNTkt
MTQyMWQ3YzU0ZmE1LzEvN2Vud0ZrajJoRFk0STZiWTdzck9WNXVudF84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84OTQzZWYtMDQyYi00NDI3LTkwNTktMTQyMWQ3YzU0ZmE1
LzEvN2Vud0ZrajJoRFk0STZiWTdzck9WNXVudF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyhG28Vw
Ex7jJe6RzTS21LA+1sXRx/1plN00TpJK+ThpAzgaB2WD5xgJMH4kR8LqhB3+yXhj
uM0mvQpmjsHNyR2zkzqrGCcugNqAf5vp9J9hPDC4XAdVQDikkv0h5ZoSwC8XtUUm
JIx5A9SD/cqnBML7lCT8r5lvIPjrhL3XYQ5HqR6GDUz/aGqL5dURhGhLAyWw5nRx
7HCM90hUgP1vYNndUC24l2yHEVln7ipRbbiFXEPS/FATY243H5kIrRB5sdHFBZ6l
wiohbNRMRWe5zjyss21wHE2YsCTpyypcIyaN6bnsATiYVWbdpGk3B2unOrf1u9Ng
KBfiUw6YS4FFSw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 22:50:21 2026 by rpki-client