Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
File:                     nHEi8vf6UwvxqP_Plqkw9psw94Y.mft (raw, json)
Hash identifier:          fBaW7fJLtln/QYlbUVTc6heNDNX9Zx3hCYFVNtx/dEw=
Subject key identifier:   07:81:7E:49:44:F4:AE:BF:29:62:BD:07:36:51:EA:09:77:12:03:E6
Authority key identifier: 9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86
Certificate issuer:       /CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
Certificate serial:       01A17EBCE64ED9BC226066952E3127C6CF18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
Manifest number:          07CF
Signing time:             Tue 27 Oct 2026 19:01:11 +0000
Manifest this update:     Tue 27 Oct 2026 19:01:11 +0000
Manifest next update:     Wed 28 Oct 2026 19:01:11 +0000
Files and hashes:         1: OaB0sF_DG1oCcACaDc2S0cOTPyY.roa (hash: 8hxNSUa4DXJC3bleGJw9ujGj0JeZTS3ixlRBoywpPho=)
                          2: nHEi8vf6UwvxqP_Plqkw9psw94Y.crl (hash: Jqm3zGQ2jS0sRsJgELh28fB0FoQTnzjHg/YOEhhBtCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:bc:e6:4e:d9:bc:22:60:66:95:2e:31:27:c6:cf:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
        Validity
            Not Before: Oct 27 19:01:11 2026 GMT
            Not After : Oct 28 19:01:11 2026 GMT
        Subject: CN=07817e4944f4aebf2962bd073651ea09771203e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:ed:8f:87:5e:4c:71:c4:d9:a1:84:92:39:
                    ef:70:8d:23:f6:ea:9f:b4:e9:2b:ec:11:78:f3:19:
                    d9:73:59:8a:53:fa:b5:4a:f1:a2:03:b0:5a:60:83:
                    46:b4:2e:79:f2:ee:a2:2e:aa:0c:d3:f7:37:fa:4e:
                    01:4e:ff:f4:3d:ed:10:34:7d:04:16:c1:a0:f9:2f:
                    f2:b6:cd:4e:ab:5d:a6:c8:82:76:46:88:51:a7:e9:
                    5c:f5:cb:ae:d7:33:89:8f:a1:e4:40:e9:99:8b:40:
                    9e:40:e3:7a:f4:7e:50:69:9c:3a:a1:4e:be:95:87:
                    6b:aa:ee:c8:df:b4:58:b6:1d:01:03:56:a8:80:87:
                    58:48:63:7a:7c:45:4e:69:00:c8:51:d1:fe:45:7d:
                    d7:de:54:1c:72:80:6c:89:db:65:eb:5d:38:c3:a9:
                    9e:36:b4:59:bd:b2:70:36:45:74:20:6c:53:ad:ab:
                    90:63:6f:89:82:36:e1:61:9c:e8:b4:6c:19:5d:03:
                    84:71:7c:44:bf:6e:9e:8d:8c:c5:50:39:7a:2d:ea:
                    d2:5c:0f:2a:a3:3c:64:e3:b2:63:34:bd:f2:ae:50:
                    41:5b:97:65:b1:6c:3b:02:72:a2:68:09:f4:55:02:
                    b9:ad:3c:79:bb:da:f4:5a:86:69:b0:e5:52:eb:f6:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:81:7E:49:44:F4:AE:BF:29:62:BD:07:36:51:EA:09:77:12:03:E6
            X509v3 Authority Key Identifier:
                keyid:9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f2:b6:9f:68:22:a9:1a:f5:22:a3:22:73:0a:be:18:e9:8a:
         59:b4:4b:fc:e0:ff:54:b7:69:48:1d:a8:92:4f:b8:cf:84:80:
         5a:32:8a:6a:61:0c:17:c0:33:3a:6c:b7:85:f3:13:4b:cc:2a:
         19:b2:32:72:64:bc:76:89:73:d7:b1:e1:0d:53:04:c5:be:63:
         8b:08:4d:b5:7e:f3:6e:f1:65:50:28:00:17:5b:52:dd:84:6d:
         93:ae:90:e4:99:d6:b4:1f:cd:45:98:3a:4a:1e:b4:5a:db:e5:
         66:30:27:4b:26:1b:2a:f5:90:63:9d:9f:75:d9:9f:49:38:7c:
         07:a9:2a:94:4f:b7:2e:aa:c4:dd:0c:b4:a1:8a:89:61:de:5d:
         fa:0e:e2:2d:dd:82:e9:be:4b:ab:c7:13:97:03:2a:4e:c5:1c:
         48:1b:86:21:e6:67:9e:92:39:77:17:a4:85:60:ae:b1:09:85:
         f2:f1:4f:d2:1d:e7:1e:17:92:6f:07:78:0c:4f:40:af:fa:ad:
         a7:19:ee:9a:14:77:eb:3e:c0:a2:d2:b3:1f:c1:e9:29:6c:38:
         fa:85:cd:a8:c5:dd:71:c3:6a:0a:83:00:a6:72:a4:42:87:00:
         4e:4d:bc:d6:9a:4a:5c:89:80:1c:97:96:b6:b6:e1:70:d2:1b:
         dd:18:56:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:35:34 2026 by rpki-client