Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
File:                     79rqxvigN0g5cw_IVnlXCeGO2RY.mft (raw, json)
Hash identifier:          JGgxasOTEy+HcpjIq+4aN2k/0ruZOXJwWM+8M+yZYHA=
Subject key identifier:   E9:B3:39:6B:5A:DC:96:9B:BF:89:20:81:58:24:CA:97:09:11:42:D8
Authority key identifier: EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
Certificate issuer:       /CN=efdaeac6f8a0374839730fc856795709e18ed916
Certificate serial:       01A17BBAF6E9507F640C61C794F4EC3DCAD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
Manifest number:          1A55
Signing time:             Tue 27 Oct 2026 05:00:12 +0000
Manifest this update:     Tue 27 Oct 2026 05:00:12 +0000
Manifest next update:     Wed 28 Oct 2026 05:00:12 +0000
Files and hashes:         1: 79rqxvigN0g5cw_IVnlXCeGO2RY.crl (hash: 3/F2ke9Ck8YLSCv76Bg3WfnJNSJ3K7W+9RSfb+9y604=)
                          2: oXioQd61dHXxrQktudDX7mhO5jM.roa (hash: WotYCxCvc5bTkZKJ4SaRQI3ZLywSWPDXJlcekc+/TXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:ba:f6:e9:50:7f:64:0c:61:c7:94:f4:ec:3d:ca:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdaeac6f8a0374839730fc856795709e18ed916
        Validity
            Not Before: Oct 27 05:00:12 2026 GMT
            Not After : Oct 28 05:00:12 2026 GMT
        Subject: CN=e9b3396b5adc969bbf8920815824ca97091142d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:30:dc:b0:b4:01:1a:ac:fc:df:1f:c3:70:
                    97:35:08:07:32:a3:64:76:55:67:d7:f5:b6:74:3b:
                    35:6f:88:71:01:69:07:37:a0:7a:11:49:52:93:54:
                    3d:0e:39:c7:19:80:2a:61:4b:b9:81:9d:75:69:4e:
                    7c:94:90:90:2b:c3:35:65:76:fe:9a:df:4f:c0:89:
                    f7:4b:1a:47:7d:e4:72:2c:25:45:dc:ba:4d:9a:fc:
                    ae:a7:68:83:42:55:66:0b:f9:ec:13:e2:0c:87:e4:
                    26:5f:bc:2b:d4:c9:85:1a:94:ba:22:2f:bd:f5:b3:
                    d6:8c:f3:65:3f:93:eb:5c:91:28:89:80:20:50:37:
                    06:22:dd:b2:7d:6f:97:f7:ae:27:a4:d7:c8:dd:72:
                    6c:43:3f:ff:9a:e3:6c:1f:39:60:0f:1a:99:54:62:
                    bc:48:45:15:00:4e:0e:03:9d:21:af:4c:49:65:ba:
                    b6:1b:a7:55:1d:f1:ea:d1:30:7b:43:be:a2:38:26:
                    34:ad:81:04:e6:f5:63:9f:e6:3e:31:f8:63:f1:bc:
                    0b:78:9e:16:a3:06:69:59:ad:f7:1f:de:8d:cd:7c:
                    e2:7d:82:c3:c9:21:2c:f1:76:d8:09:41:17:ff:5f:
                    dc:24:c7:d1:ac:ea:0d:04:c3:d1:2f:89:e7:0c:99:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B3:39:6B:5A:DC:96:9B:BF:89:20:81:58:24:CA:97:09:11:42:D8
            X509v3 Authority Key Identifier:
                keyid:EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:3e:27:b5:67:db:0d:e0:39:03:b6:01:2a:e9:fd:35:2d:29:
         e2:b6:86:1a:d7:32:8b:a6:bb:49:49:3d:81:79:9d:87:cf:b9:
         7b:b3:9f:05:32:0f:3c:19:a8:4c:d0:c6:28:3a:3d:4f:f9:5b:
         6f:56:30:4d:c2:92:72:f9:58:a6:15:35:20:d6:9c:8c:38:f9:
         e8:a3:c8:a0:a5:ea:d1:63:c5:f9:51:56:d9:97:15:c0:f8:57:
         45:c8:0d:64:07:7a:59:83:b9:71:99:3a:be:ab:de:63:fd:dc:
         39:7f:8c:4e:67:0c:1b:46:ae:b5:30:7c:fc:74:08:7c:ba:34:
         3a:5f:03:b2:c0:8f:75:f4:48:7e:0a:53:ec:b1:20:91:8c:28:
         25:30:77:df:5c:5e:d4:b7:a2:d6:be:d4:aa:f4:63:39:3a:00:
         2e:ea:95:e3:3c:4e:70:3e:75:ae:cb:98:ea:aa:13:9a:0d:1f:
         e1:1a:d0:5e:a1:7a:fa:e1:a3:d0:7e:65:ef:fb:c7:cb:ae:91:
         97:38:c3:99:df:ea:98:8d:77:9b:e1:6c:5e:1f:ad:ac:5d:f7:
         f9:70:7d:46:31:a4:31:15:f8:fb:e2:85:9e:84:03:69:44:ff:
         47:f5:74:ad:a5:34:e6:7d:c1:05:f3:c1:3a:f8:63:bd:6e:dc:
         39:f9:fc:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7uvbpUH9kDGHHlPTsPcrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZGFlYWM2ZjhhMDM3NDgzOTczMGZjODU2Nzk1NzA5ZTE4
ZWQ5MTYwHhcNMjYxMDI3MDUwMDEyWhcNMjYxMDI4MDUwMDEyWjAzMTEwLwYDVQQD
EyhlOWIzMzk2YjVhZGM5NjliYmY4OTIwODE1ODI0Y2E5NzA5MTE0MmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4sw3LC0ARqs/N8fw3CXNQgHMqNk
dlVn1/W2dDs1b4hxAWkHN6B6EUlSk1Q9DjnHGYAqYUu5gZ11aU58lJCQK8M1ZXb+
mt9PwIn3SxpHfeRyLCVF3LpNmvyup2iDQlVmC/nsE+IMh+QmX7wr1MmFGpS6Ii+9
9bPWjPNlP5PrXJEoiYAgUDcGIt2yfW+X964npNfI3XJsQz//muNsHzlgDxqZVGK8
SEUVAE4OA50hr0xJZbq2G6dVHfHq0TB7Q76iOCY0rYEE5vVjn+Y+Mfhj8bwLeJ4W
owZpWa33H96NzXzifYLDySEs8XbYCUEX/1/cJMfRrOoNBMPRL4nnDJm4PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmzOWta3Jabv4kggVgkypcJEULYMB8GA1UdIwQY
MBaAFO/a6sb4oDdIOXMPyFZ5VwnhjtkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzlycXh2aWdOMGc1Y3dfSVZubFhDZUdPMlJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82ZDNhM2UtMDA1My00MzU3LWIxYjQt
Zjk5MmJhMDU4ZTMxLzEvNzlycXh2aWdOMGc1Y3dfSVZubFhDZUdPMlJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82ZDNhM2UtMDA1My00MzU3LWIxYjQtZjk5MmJhMDU4ZTMx
LzEvNzlycXh2aWdOMGc1Y3dfSVZubFhDZUdPMlJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPj4ntWfb
DeA5A7YBKun9NS0p4raGGtcyi6a7SUk9gXmdh8+5e7OfBTIPPBmoTNDGKDo9T/lb
b1YwTcKScvlYphU1INacjDj56KPIoKXq0WPF+VFW2ZcVwPhXRcgNZAd6WYO5cZk6
vqveY/3cOX+MTmcMG0autTB8/HQIfLo0Ol8DssCPdfRIfgpT7LEgkYwoJTB331xe
1Lei1r7UqvRjOToALuqV4zxOcD51rsuY6qoTmg0f4RrQXqF6+uGj0H5l7/vHy66R
lzjDmd/qmI13m+FsXh+trF33+XB9RjGkMRX4++KFnoQDaUT/R/V0raU05n3BBfPB
OvhjvW7cOfn8zw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 11:40:00 2026 by rpki-client