Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
File:                     fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft (raw, json)
Hash identifier:          ThUvGRMwVz76Hbjs457Yk+0hCy6ACWbsWPbwmHYCngU=
Subject key identifier:   0A:46:CB:12:2F:55:B7:8A:23:2D:41:73:1D:65:38:AE:ED:39:A8:D5
Authority key identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
Certificate issuer:       /CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Certificate serial:       01A18C41378C8BC11B8B33E80A3071C483D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
Manifest number:          0E24
Signing time:             Fri 30 Oct 2026 10:00:46 +0000
Manifest this update:     Fri 30 Oct 2026 10:00:46 +0000
Manifest next update:     Sat 31 Oct 2026 10:00:46 +0000
Files and hashes:         1: 2Vg8mtqhtEjY6JU3zi44laQwebs.roa (hash: Uc9g1r54C8yp0GXiH0sU3THCD+1hgCm7+9g2Pk5/hcs=)
                          2: fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl (hash: 7ILkbCq2DFH0Dpr0stM+ET3OH8uqAvIQVzPoEUpz7DQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8c:41:37:8c:8b:c1:1b:8b:33:e8:0a:30:71:c4:83:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
        Validity
            Not Before: Oct 30 10:00:46 2026 GMT
            Not After : Oct 31 10:00:46 2026 GMT
        Subject: CN=0a46cb122f55b78a232d41731d6538aeed39a8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:be:3c:65:b1:13:2a:88:a1:4e:a0:f9:d1:
                    9c:9a:9b:c0:83:df:99:09:e1:63:00:1f:5b:f9:36:
                    2c:39:08:fb:bb:36:bd:b1:78:a1:21:ff:c9:cc:eb:
                    c2:8f:22:e3:95:b3:72:1f:fc:4a:23:b7:ae:1f:05:
                    af:5d:57:93:7e:cd:22:02:2c:17:00:82:1b:f5:0a:
                    e3:84:fe:dd:12:86:fd:6c:e5:6c:6c:35:97:6a:a8:
                    e6:35:69:dc:a4:29:f0:1b:47:6f:0e:07:86:96:da:
                    14:90:f9:bc:7c:a3:e4:af:a8:7a:44:f1:bb:6f:8c:
                    27:e1:4d:4f:3f:b0:c8:22:1f:60:69:b8:32:1a:40:
                    88:b3:c7:f1:62:f8:ab:ee:50:c6:34:85:5b:c1:fa:
                    18:17:ab:63:84:a5:c0:c6:0c:c6:33:2b:68:e4:76:
                    38:57:5f:72:9e:cf:6e:33:08:60:3e:1a:91:44:c9:
                    09:aa:d9:a0:77:58:3f:50:11:95:a3:3a:f7:ca:34:
                    f7:43:30:f5:ba:f0:8d:a8:9e:1c:fa:30:12:ee:52:
                    e0:97:9c:8d:2c:b0:f9:6d:5d:03:fe:fc:c2:0d:6a:
                    a2:db:58:a3:a2:ec:51:d6:c7:94:de:f0:ec:97:ce:
                    f5:d5:66:4d:5f:84:78:70:b0:23:34:42:f2:6d:8c:
                    eb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:46:CB:12:2F:55:B7:8A:23:2D:41:73:1D:65:38:AE:ED:39:A8:D5
            X509v3 Authority Key Identifier:
                keyid:7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:32:43:24:48:3b:50:1f:3e:39:1b:e7:6d:8d:ef:de:56:ac:
         21:a2:d1:34:db:8d:a2:db:40:2d:bd:74:4a:3e:85:22:7d:ca:
         25:97:b6:53:47:4f:6a:ec:19:b1:17:9f:c6:79:fe:4c:60:7f:
         c7:03:cb:3d:a3:1f:58:1c:60:cc:f7:d2:ce:40:0b:af:1a:a6:
         f0:6a:ea:d9:43:e2:6f:a3:a9:33:da:c5:4e:a5:2c:63:ff:f7:
         b0:f0:1e:5d:fd:c0:8d:f7:61:1e:7f:1a:5b:ad:97:42:a3:12:
         15:9b:ac:9f:78:39:26:c7:c3:ab:c9:07:e6:ff:70:18:57:89:
         50:21:24:3d:b2:f1:a2:04:32:1d:74:8f:e7:22:87:80:e9:bb:
         92:ef:22:78:37:bd:f4:de:85:29:31:da:49:cf:17:99:33:7d:
         72:0d:19:56:a5:e8:2b:4f:94:06:66:ee:29:8a:2d:8b:9a:15:
         67:52:c8:ff:e7:35:40:53:99:88:05:25:85:00:9a:26:26:eb:
         d3:06:e9:7e:be:48:2a:72:fb:73:a0:bb:ff:bb:a1:fc:d1:de:
         8c:00:be:fa:a0:21:1b:2a:fc:c7:a0:3a:b9:fc:7e:e7:e7:a6:
         f9:1e:59:22:d9:d6:e4:c9:c4:37:27:b3:65:9e:cf:40:ac:c5:
         e0:84:e1:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGMQTeMi8EbizPoCjBxxIPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOTEyOWFhZGIyMDMzNTRkMTVmZjU2YTI3ZThkYmFkYWY4
ZDA3MDUwHhcNMjYxMDMwMTAwMDQ2WhcNMjYxMDMxMTAwMDQ2WjAzMTEwLwYDVQQD
EygwYTQ2Y2IxMjJmNTViNzhhMjMyZDQxNzMxZDY1MzhhZWVkMzlhOGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgW+PGWxEyqIoU6g+dGcmpvAg9+Z
CeFjAB9b+TYsOQj7uza9sXihIf/JzOvCjyLjlbNyH/xKI7euHwWvXVeTfs0iAiwX
AIIb9QrjhP7dEob9bOVsbDWXaqjmNWncpCnwG0dvDgeGltoUkPm8fKPkr6h6RPG7
b4wn4U1PP7DIIh9gabgyGkCIs8fxYvir7lDGNIVbwfoYF6tjhKXAxgzGMyto5HY4
V19yns9uMwhgPhqRRMkJqtmgd1g/UBGVozr3yjT3QzD1uvCNqJ4c+jAS7lLgl5yN
LLD5bV0D/vzCDWqi21ijouxR1seU3vDsl8711WZNX4R4cLAjNELybYzrzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApGyxIvVbeKIy1Bcx1lOK7tOajVMB8GA1UdIwQY
MBaAFHyRKarbIDNU0V/1aifo262vjQcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkpFcHF0c2dNMVRSWF9WcUotamJyYS1OQndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82ZTRmZWQtNjZjOC00ZDI0LWFhNjYt
ZjJjNGM5Y2ExNTU2LzEvZkpFcHF0c2dNMVRSWF9WcUotamJyYS1OQndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82ZTRmZWQtNjZjOC00ZDI0LWFhNjYtZjJjNGM5Y2ExNTU2
LzEvZkpFcHF0c2dNMVRSWF9WcUotamJyYS1OQndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADJDJEg7
UB8+ORvnbY3v3lasIaLRNNuNottALb10Sj6FIn3KJZe2U0dPauwZsRefxnn+TGB/
xwPLPaMfWBxgzPfSzkALrxqm8Grq2UPib6OpM9rFTqUsY//3sPAeXf3AjfdhHn8a
W62XQqMSFZusn3g5JsfDq8kH5v9wGFeJUCEkPbLxogQyHXSP5yKHgOm7ku8ieDe9
9N6FKTHaSc8XmTN9cg0ZVqXoK0+UBmbuKYoti5oVZ1LI/+c1QFOZiAUlhQCaJibr
0wbpfr5IKnL7c6C7/7uh/NHejAC++qAhGyr8x6A6ufx+5+em+R5ZItnW5MnENyez
ZZ7PQKzF4ITh7A==
-----END CERTIFICATE-----
Generated at Fri Oct 30 15:40:16 2026 by rpki-client