Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
File:                     7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json)
Hash identifier:          P+OYDNkSakkUuZP4BfApN099J9TJxLYYMOZdZs8vb/w=
Subject key identifier:   A9:F7:DB:56:2C:8D:8C:3D:2E:E3:18:EB:67:86:1B:6B:0A:48:E0:B6
Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
Certificate issuer:       /CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Certificate serial:       01A13D80E4B3303A8E753B6304595324AB91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
Manifest number:          1AA2
Signing time:             Thu 15 Oct 2026 03:00:19 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:19 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:19 +0000
Files and hashes:         1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: SVB5RfgpWmBCptbbfx/Vo9Wp0cYLkY0JpuhwpjLzgxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:80:e4:b3:30:3a:8e:75:3b:63:04:59:53:24:ab:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96
        Validity
            Not Before: Oct 15 03:00:19 2026 GMT
            Not After : Oct 16 03:00:19 2026 GMT
        Subject: CN=a9f7db562c8d8c3d2ee318eb67861b6b0a48e0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:6e:b1:29:d2:f7:19:18:d1:1d:20:eb:8f:
                    a9:97:c6:d9:72:5d:24:68:89:8d:07:22:d6:29:7d:
                    ab:54:57:2b:6d:1c:a5:7e:0c:cb:9f:52:9e:df:cc:
                    37:ab:2d:78:64:2b:7f:2a:4c:6e:7f:63:ad:f9:b2:
                    2e:6d:38:c1:f5:b1:88:33:d2:bf:85:53:aa:18:be:
                    1e:47:df:ef:9e:3c:fe:e7:cb:e6:ae:47:84:9d:c0:
                    b1:c3:b3:ce:c3:40:40:4f:79:d4:2a:e3:3a:2f:6a:
                    db:1b:19:5d:cb:4b:e8:c8:71:7f:a8:06:26:5a:13:
                    93:bc:79:78:e7:43:89:a2:f8:8f:c1:84:df:64:77:
                    9d:65:05:8d:9e:5e:d1:56:5a:4b:5a:68:c5:f9:04:
                    6e:b2:5e:da:97:2d:e2:dc:01:f3:c5:ba:f5:f5:06:
                    4e:d4:ac:10:de:7e:37:e6:71:8b:21:6f:d9:56:c5:
                    0f:e8:1c:d7:6a:f2:dc:bb:78:15:94:76:d6:f9:3d:
                    74:66:5a:eb:06:48:72:38:18:bd:6b:0a:97:fe:df:
                    07:f3:38:90:70:7c:96:05:ea:1e:40:ad:b8:39:2f:
                    f2:bb:bf:45:90:31:ea:c1:78:8e:ca:e0:30:b7:d4:
                    44:1d:a4:23:d5:6c:a9:95:25:56:e2:ec:aa:bf:02:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F7:DB:56:2C:8D:8C:3D:2E:E3:18:EB:67:86:1B:6B:0A:48:E0:B6
            X509v3 Authority Key Identifier:
                keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fc:b2:fa:55:b6:44:c8:69:3b:20:29:f9:ad:d9:42:0b:e2:
         f9:fc:5f:02:0f:1c:cd:f7:af:1d:1f:0f:70:74:eb:1e:fa:ca:
         1c:e1:52:72:60:59:fe:5c:20:85:b6:77:98:2d:83:29:68:16:
         ff:ec:8c:b6:ec:8b:64:99:c6:ac:c6:4e:79:fe:ec:4c:40:c9:
         08:86:88:9a:9d:c3:60:38:b6:18:9e:3a:75:cf:e8:15:0e:b3:
         6d:a4:f1:c4:78:08:80:c0:40:da:b0:40:0c:5c:83:66:53:57:
         25:3f:7e:69:53:ed:45:86:01:e2:e3:92:26:e9:89:57:28:7f:
         92:02:15:7e:b7:2b:ae:a4:22:c6:52:85:12:31:d4:5c:56:23:
         86:a4:4c:35:7c:0f:51:7f:75:26:f5:34:42:2e:f4:74:af:14:
         27:c9:e2:16:9c:e3:50:a5:d8:4c:6a:9c:18:11:06:43:48:da:
         67:d2:a7:23:03:c2:aa:ed:d6:75:2d:1e:66:6c:59:29:ef:6a:
         2c:98:52:34:93:d8:6b:80:76:1c:a7:f2:34:02:dc:23:7b:66:
         2a:9c:8a:d9:31:74:9e:16:f0:36:74:09:0a:2c:29:e0:b5:8e:
         28:6d:7f:c2:f8:00:f1:64:81:7c:ef:ce:76:1e:40:80:4d:9b:
         a7:c2:c1:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9gOSzMDqOdTtjBFlTJKuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzQwNzAyMjQ3YTJmZWFjY2RlYmUxM2E5ODQyY2ZmZDNi
NDBjOTYwHhcNMjYxMDE1MDMwMDE5WhcNMjYxMDE2MDMwMDE5WjAzMTEwLwYDVQQD
EyhhOWY3ZGI1NjJjOGQ4YzNkMmVlMzE4ZWI2Nzg2MWI2YjBhNDhlMGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxtusSnS9xkY0R0g64+pl8bZcl0k
aImNByLWKX2rVFcrbRylfgzLn1Ke38w3qy14ZCt/Kkxuf2Ot+bIubTjB9bGIM9K/
hVOqGL4eR9/vnjz+58vmrkeEncCxw7POw0BAT3nUKuM6L2rbGxldy0voyHF/qAYm
WhOTvHl450OJoviPwYTfZHedZQWNnl7RVlpLWmjF+QRusl7aly3i3AHzxbr19QZO
1KwQ3n435nGLIW/ZVsUP6BzXavLcu3gVlHbW+T10ZlrrBkhyOBi9awqX/t8H8ziQ
cHyWBeoeQK24OS/yu79FkDHqwXiOyuAwt9REHaQj1WyplSVW4uyqvwIE2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKn321YsjYw9LuMY62eGG2sKSOC2MB8GA1UdIwQY
MBaAFO10BwIkei/qzN6+E6mELP/TtAyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hRSEFpUjZMLXJNM3I0VHFZUXNfOU8wREpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80NzdjZGUtZWM3MS00NzhhLThhNmYt
NWNkYzNmNGI2MmJlLzEvN1hRSEFpUjZMLXJNM3I0VHFZUXNfOU8wREpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80NzdjZGUtZWM3MS00NzhhLThhNmYtNWNkYzNmNGI2MmJl
LzEvN1hRSEFpUjZMLXJNM3I0VHFZUXNfOU8wREpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavyy+lW2
RMhpOyAp+a3ZQgvi+fxfAg8czfevHR8PcHTrHvrKHOFScmBZ/lwghbZ3mC2DKWgW
/+yMtuyLZJnGrMZOef7sTEDJCIaImp3DYDi2GJ46dc/oFQ6zbaTxxHgIgMBA2rBA
DFyDZlNXJT9+aVPtRYYB4uOSJumJVyh/kgIVfrcrrqQixlKFEjHUXFYjhqRMNXwP
UX91JvU0Qi70dK8UJ8niFpzjUKXYTGqcGBEGQ0jaZ9KnIwPCqu3WdS0eZmxZKe9q
LJhSNJPYa4B2HKfyNALcI3tmKpyK2TF0nhbwNnQJCiwp4LWOKG1/wvgA8WSBfO/O
dh5AgE2bp8LBRA==
-----END CERTIFICATE-----