Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
File:                     7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft (raw, json)
Hash identifier:          om/0f7ZgXRYj6VoKcmgYyqtVLTURnmSvs7GFA6RoOD8=
Subject key identifier:   B5:95:FC:B7:5C:61:04:DC:BC:55:7F:CF:B3:E8:90:BD:40:6A:F8:33
Authority key identifier: EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
Certificate issuer:       /CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Certificate serial:       01A13C6E88693AECF420129617266D8489BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
Manifest number:          0E2D
Signing time:             Wed 14 Oct 2026 22:00:39 +0000
Manifest this update:     Wed 14 Oct 2026 22:00:39 +0000
Manifest next update:     Thu 15 Oct 2026 22:00:39 +0000
Files and hashes:         1: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl (hash: 6B8GEq0TsSiMEy6oVO2dUkk91WXIiSCM8iYnBWwY52w=)
                          2: 7LE1DEYT1ICWfMHoKNZXPCeUJQo.roa (hash: 6GDVwV7rQonMcBZu/ABynfjZj1iMGkNFh4pVQikYnrw=)
                          3: QxJ6dEmDHiw3lmS5PxMFumYPnck.roa (hash: aqxNNZjWenyXEE3qtSl1nU9WOF/JQO83RlkjXS7clZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:6e:88:69:3a:ec:f4:20:12:96:17:26:6d:84:89:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
        Validity
            Not Before: Oct 14 22:00:39 2026 GMT
            Not After : Oct 15 22:00:39 2026 GMT
        Subject: CN=b595fcb75c6104dcbc557fcfb3e890bd406af833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:19:7e:41:13:94:40:28:0f:1b:56:09:04:5c:
                    1b:bb:bb:90:01:7d:19:94:e0:57:03:34:f3:ea:cb:
                    1d:88:8e:cb:9b:18:4c:c2:54:5a:1f:34:ba:1e:2f:
                    bd:f9:ae:d5:20:a6:f8:eb:40:b4:69:84:a8:16:c1:
                    4f:b1:2e:7f:7f:4a:5c:c5:9a:b6:e9:16:7e:16:b2:
                    a5:ce:06:68:fd:35:7c:c8:70:55:e3:91:e9:d9:57:
                    48:1a:36:0a:fd:bc:1b:70:97:41:dc:e2:22:03:e6:
                    e6:11:1c:d3:57:b6:e5:ea:5e:b0:07:23:6d:f3:f3:
                    07:4d:de:2b:7b:52:60:23:15:90:0c:76:60:26:a0:
                    db:c2:58:f6:46:89:a4:d4:0d:c3:03:f4:94:a8:1d:
                    5c:49:71:a2:c6:6c:c7:b0:9c:b4:4d:e7:62:27:4a:
                    71:f4:0f:f3:3e:ce:d9:84:62:c0:2e:85:54:32:a3:
                    ec:37:97:16:77:bb:56:22:2c:66:e3:8a:35:1e:bf:
                    fa:74:ac:af:7f:45:0d:0e:02:f7:8c:86:8b:5f:ea:
                    c0:89:9f:10:bb:b3:58:6f:0c:e5:c5:da:40:1b:5a:
                    3e:fc:35:0e:6a:89:56:15:bc:ed:c8:c6:a9:e4:4b:
                    7f:cb:1b:e0:a0:d5:a1:cb:b5:0a:f3:02:7a:68:2a:
                    95:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:95:FC:B7:5C:61:04:DC:BC:55:7F:CF:B3:E8:90:BD:40:6A:F8:33
            X509v3 Authority Key Identifier:
                keyid:EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0f:79:17:1e:01:c7:f6:49:80:5b:40:6e:af:a1:a9:70:30:
         65:75:e4:f5:f1:35:51:a5:ee:24:b9:e5:f7:1b:33:22:99:cf:
         42:62:16:56:32:e9:b0:4a:37:1e:57:c5:0c:ec:55:c7:ff:b0:
         a9:22:8e:f8:1b:63:1b:45:21:71:69:85:dd:c3:b0:01:61:4d:
         67:b0:e1:f0:51:a3:e7:28:7b:0d:53:6d:ef:31:18:c5:e3:05:
         c9:ce:e7:24:9c:f4:bd:2c:b3:d1:4f:2f:a3:55:e5:cc:54:22:
         cc:6d:a3:54:04:d2:5e:bf:5e:94:f1:32:c5:49:88:66:3a:1d:
         f2:b8:e8:85:8d:a3:6b:95:ee:a7:28:fe:eb:8a:8c:7b:87:34:
         f2:14:66:c3:f3:b6:aa:62:50:c4:91:b9:03:8d:93:bc:aa:44:
         54:6b:c2:35:75:ca:ce:e7:e6:e2:c6:19:3e:ed:e8:b7:81:79:
         da:c2:9a:c0:92:e6:eb:2b:07:95:f3:4b:1b:9a:5f:ec:6c:64:
         c1:c3:c6:08:97:5f:19:ad:c1:2b:88:02:ef:ec:c1:d6:3f:ce:
         bd:eb:35:67:0c:84:9f:3b:4c:80:16:33:db:04:f3:94:8c:7d:
         9a:e5:00:9d:b0:4d:53:81:8b:66:4a:16:4b:37:3a:cd:68:b8:
         d9:41:2b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:46 2026 by rpki-client