Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
File:                     l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft (raw, json)
Hash identifier:          RXdl6tq+z0Q38s+9zRPgk/T45NlOHlLUtFk3Nt2R1fE=
Subject key identifier:   AD:F0:22:A5:19:27:C4:56:44:F5:FA:8E:08:18:0D:32:8B:5C:34:33
Authority key identifier: 97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44
Certificate issuer:       /CN=978f41e290285473c2a1e2be7f66f63452ed4644
Certificate serial:       01A178F10547EFEC8DD3659BEAE3F5026C7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
Manifest number:          19F7
Signing time:             Mon 26 Oct 2026 16:00:23 +0000
Manifest this update:     Mon 26 Oct 2026 16:00:23 +0000
Manifest next update:     Tue 27 Oct 2026 16:00:23 +0000
Files and hashes:         1: l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl (hash: aEjbFpsMPAETSFnSrE77BftpuwCrbPz9Sx5hT+emVRc=)
                          2: nND7jF-o9OkvAL1phsl_cTtcTB0.roa (hash: AQ6W42SUBOPzvlMA3LCx6a7jc2ujNqo1gbFLMnC35vc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:f1:05:47:ef:ec:8d:d3:65:9b:ea:e3:f5:02:6c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978f41e290285473c2a1e2be7f66f63452ed4644
        Validity
            Not Before: Oct 26 16:00:23 2026 GMT
            Not After : Oct 27 16:00:23 2026 GMT
        Subject: CN=adf022a51927c45644f5fa8e08180d328b5c3433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:b4:10:8b:fd:c4:4d:c2:7a:72:64:d8:cc:
                    3c:92:aa:71:75:e1:1f:64:d7:72:e9:43:c7:63:e1:
                    0f:6c:72:49:12:73:a3:b5:5d:68:73:82:86:3e:16:
                    0f:aa:ac:03:cb:68:5b:80:a6:e0:e7:eb:df:f1:ca:
                    49:b6:6b:60:04:e4:63:3c:25:36:ea:a7:f6:cc:a6:
                    45:ba:d2:dc:cc:92:c7:aa:1b:53:08:8d:91:d2:33:
                    4b:2f:2b:b3:3b:4b:27:59:81:1c:59:58:9e:61:a1:
                    f4:59:3d:da:7d:25:ef:2c:a4:44:d6:39:49:d9:e2:
                    b3:0a:56:59:02:98:1f:97:41:97:a2:a5:5c:40:d1:
                    f0:aa:6f:64:a4:7e:b0:f8:aa:ba:46:20:a6:e9:97:
                    9d:ee:97:fe:f3:97:4e:70:05:81:cb:cf:2c:e0:33:
                    87:ef:37:8f:a2:57:5b:69:c2:ee:b7:db:2b:1a:7e:
                    a1:08:23:97:d1:40:36:37:65:9f:cb:d8:60:bd:91:
                    66:22:e4:92:02:f0:2c:d7:da:7d:cc:2b:af:31:15:
                    b6:61:8d:48:cf:4f:2e:fb:04:e8:7e:af:e1:79:7c:
                    92:ad:fa:2b:f3:55:99:2d:fc:f5:5d:f9:6d:a5:8d:
                    47:f4:32:fa:7e:a2:96:e2:ab:23:a1:1a:dc:ce:95:
                    82:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F0:22:A5:19:27:C4:56:44:F5:FA:8E:08:18:0D:32:8B:5C:34:33
            X509v3 Authority Key Identifier:
                keyid:97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:7b:67:ce:e1:90:db:ba:14:c8:3c:50:89:9f:59:09:ae:bc:
         d5:8c:ae:76:a8:e4:07:b3:1e:66:18:f6:b2:bc:55:81:98:38:
         32:5c:e7:6a:86:e7:36:88:54:c6:d3:3c:4b:74:9a:dd:e3:41:
         97:1f:2b:cf:51:2e:ee:3e:6b:d7:68:60:c3:f4:82:53:19:84:
         5e:1f:ad:54:84:1a:ed:38:74:70:83:03:cc:69:cd:08:21:ae:
         2f:59:87:5d:7b:3c:a9:1a:00:58:de:9b:af:f1:a9:42:99:21:
         f5:12:88:84:f6:84:20:52:70:18:80:4e:8d:aa:e7:6f:ca:23:
         6a:ff:1e:ea:d7:3a:6d:cc:3e:97:65:b3:16:94:89:62:0c:15:
         db:cb:0a:99:0b:4c:c7:a1:b3:54:e1:7d:dd:cd:85:78:88:d0:
         6f:41:fb:cd:a0:fa:97:b9:d7:d9:f8:0b:96:bd:14:64:e6:12:
         14:ac:46:af:37:d8:b2:6c:5c:0c:08:f0:7d:e7:87:b5:d9:58:
         fe:cf:6f:03:28:de:ca:24:7d:0f:6d:3f:a6:86:0e:a7:65:d5:
         77:86:9a:7e:a4:e9:bb:ec:ba:ac:7f:a5:f4:9b:51:4f:27:fa:
         1f:d3:5e:6d:8b:51:f9:96:19:a8:16:73:e1:18:68:dd:12:8a:
         a2:3e:f1:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF48QVH7+yN02Wb6uP1Amx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OGY0MWUyOTAyODU0NzNjMmExZTJiZTdmNjZmNjM0NTJl
ZDQ2NDQwHhcNMjYxMDI2MTYwMDIzWhcNMjYxMDI3MTYwMDIzWjAzMTEwLwYDVQQD
EyhhZGYwMjJhNTE5MjdjNDU2NDRmNWZhOGUwODE4MGQzMjhiNWMzNDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXy0EIv9xE3CenJk2Mw8kqpxdeEf
ZNdy6UPHY+EPbHJJEnOjtV1oc4KGPhYPqqwDy2hbgKbg5+vf8cpJtmtgBORjPCU2
6qf2zKZFutLczJLHqhtTCI2R0jNLLyuzO0snWYEcWVieYaH0WT3afSXvLKRE1jlJ
2eKzClZZApgfl0GXoqVcQNHwqm9kpH6w+Kq6RiCm6Zed7pf+85dOcAWBy88s4DOH
7zePoldbacLut9srGn6hCCOX0UA2N2Wfy9hgvZFmIuSSAvAs19p9zCuvMRW2YY1I
z08u+wTofq/heXySrfor81WZLfz1XfltpY1H9DL6fqKW4qsjoRrczpWC2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3wIqUZJ8RWRPX6jggYDTKLXDQzMB8GA1UdIwQY
MBaAFJePQeKQKFRzwqHivn9m9jRS7UZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDQ5QjRwQW9WSFBDb2VLLWYyYjJORkx0UmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9mMTQ4MGYtNzZlOS00YzhlLWFjMzIt
MzU3N2IxZWZkYzc4LzEvbDQ5QjRwQW9WSFBDb2VLLWYyYjJORkx0UmtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9mMTQ4MGYtNzZlOS00YzhlLWFjMzItMzU3N2IxZWZkYzc4
LzEvbDQ5QjRwQW9WSFBDb2VLLWYyYjJORkx0UmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvHtnzuGQ
27oUyDxQiZ9ZCa681YyudqjkB7MeZhj2srxVgZg4MlznaobnNohUxtM8S3Sa3eNB
lx8rz1Eu7j5r12hgw/SCUxmEXh+tVIQa7Th0cIMDzGnNCCGuL1mHXXs8qRoAWN6b
r/GpQpkh9RKIhPaEIFJwGIBOjarnb8ojav8e6tc6bcw+l2WzFpSJYgwV28sKmQtM
x6GzVOF93c2FeIjQb0H7zaD6l7nX2fgLlr0UZOYSFKxGrzfYsmxcDAjwfeeHtdlY
/s9vAyjeyiR9D20/poYOp2XVd4aafqTpu+y6rH+l9JtRTyf6H9NebYtR+ZYZqBZz
4Rho3RKKoj7xxw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:55:23 2026 by rpki-client