Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/7sBlrFvrrKEGl1MM5JJI1dptoQc.mft
File:                     7sBlrFvrrKEGl1MM5JJI1dptoQc.mft (raw, json)
Hash identifier:          f1oMUJjnz1lrqbLdGYF9hbEqE55gncbKpoYBpBf5eeM=
Subject key identifier:   56:D8:88:D7:B9:26:C6:AC:9E:E6:B5:54:FA:A2:D3:2A:82:61:73:6A
Authority key identifier: EE:C0:65:AC:5B:EB:AC:A1:06:97:53:0C:E4:92:48:D5:DA:6D:A1:07
Certificate issuer:       /CN=eec065ac5bebaca10697530ce49248d5da6da107
Certificate serial:       01A17BF27CDB8DB2CF3753A3FEAAE7F4304E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sBlrFvrrKEGl1MM5JJI1dptoQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/7sBlrFvrrKEGl1MM5JJI1dptoQc.mft
Manifest number:          013E
Signing time:             Tue 27 Oct 2026 06:00:51 +0000
Manifest this update:     Tue 27 Oct 2026 06:00:51 +0000
Manifest next update:     Wed 28 Oct 2026 06:00:51 +0000
Files and hashes:         1: 7sBlrFvrrKEGl1MM5JJI1dptoQc.crl (hash: Yn1fBlsUbfmR+Xb+MnrI5taOfzijP8lScLdVuxAv3ok=)
                          2: EjuWCIO7Su2NnfM_TKSm6cVJS2E.roa (hash: lDPHJWEQfEmp7NBAGbbbMceakMklzS1moiIjqevgRr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/7sBlrFvrrKEGl1MM5JJI1dptoQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/7sBlrFvrrKEGl1MM5JJI1dptoQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7sBlrFvrrKEGl1MM5JJI1dptoQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:f2:7c:db:8d:b2:cf:37:53:a3:fe:aa:e7:f4:30:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec065ac5bebaca10697530ce49248d5da6da107
        Validity
            Not Before: Oct 27 06:00:51 2026 GMT
            Not After : Oct 28 06:00:51 2026 GMT
        Subject: CN=56d888d7b926c6ac9ee6b554faa2d32a8261736a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:cc:84:6f:59:c6:81:0b:aa:1e:48:6f:e2:
                    eb:c8:1e:af:e4:a3:b9:e4:da:b4:42:e4:ab:7c:ac:
                    1f:04:e6:05:b6:3e:c2:89:bb:6e:d5:77:32:86:c1:
                    9e:cd:e6:ee:24:69:4f:32:7a:6b:79:64:2d:11:d8:
                    2d:ad:eb:ed:13:12:70:d7:0e:35:a6:f1:0b:17:3d:
                    b9:f1:b6:d5:f3:bc:40:d3:af:75:4a:5f:81:00:33:
                    9f:d9:9a:5e:56:a8:23:71:04:1d:75:d5:33:13:4d:
                    b6:ff:31:64:97:f2:e7:e4:45:24:05:bc:18:6c:0e:
                    dc:b7:78:e4:ab:8e:4f:99:ed:0f:d5:bb:ee:d7:4a:
                    ec:7d:7d:dd:db:9b:b5:f0:7f:5e:9b:4c:3e:3e:78:
                    77:a0:fb:1b:b5:18:d6:3b:b2:b7:3e:71:7e:91:62:
                    2f:10:6f:a7:0b:3d:2e:6c:44:85:f1:99:23:a1:39:
                    da:d2:c0:79:7d:12:d1:4e:d7:6a:ab:c7:d8:34:6e:
                    bc:7c:3b:db:a5:5c:e4:14:fd:c3:65:49:04:05:dc:
                    34:6c:34:1b:20:10:78:ff:ff:1e:98:3f:21:d1:ad:
                    24:03:49:5a:3a:12:4a:b2:8a:4d:7a:87:88:b8:89:
                    44:84:6e:1f:cf:bc:16:22:9d:cc:19:1b:60:2e:37:
                    aa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D8:88:D7:B9:26:C6:AC:9E:E6:B5:54:FA:A2:D3:2A:82:61:73:6A
            X509v3 Authority Key Identifier:
                keyid:EE:C0:65:AC:5B:EB:AC:A1:06:97:53:0C:E4:92:48:D5:DA:6D:A1:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sBlrFvrrKEGl1MM5JJI1dptoQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/7sBlrFvrrKEGl1MM5JJI1dptoQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/7sBlrFvrrKEGl1MM5JJI1dptoQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4d:33:a2:f9:bd:c4:d1:e2:a9:0a:52:3b:54:57:4e:f7:a3:
         e9:13:bd:f8:e3:5a:d4:fb:74:eb:60:5f:2d:8c:88:7f:9a:72:
         38:b6:91:d8:eb:bc:17:e4:4b:69:d5:20:5a:d6:c7:12:3c:f8:
         53:d6:5b:71:bc:a3:f5:b6:65:44:ab:c9:44:98:50:bc:dd:96:
         f6:92:9e:94:bc:c9:a4:52:b2:18:0d:4f:60:84:50:5a:61:8e:
         28:b7:35:65:8c:c5:8b:04:41:09:28:75:48:56:ca:62:2b:5a:
         99:75:84:b9:0b:10:e8:82:4f:fe:a1:b1:7c:f2:c0:7f:98:17:
         f7:d6:18:56:4a:a1:fb:ae:64:5d:2a:24:97:05:cd:4c:0b:64:
         12:fb:df:65:e9:2e:d6:3c:11:6a:9b:40:a5:77:1a:c1:ed:48:
         d7:07:f4:2b:bf:12:df:97:0e:e3:03:97:36:ba:91:bf:7b:ce:
         67:9d:2b:7a:77:27:fb:4b:78:b7:c0:7f:dc:01:90:7b:b1:b9:
         1d:93:bb:44:60:78:40:81:22:50:17:41:8a:33:bc:c0:b7:0a:
         64:f7:f5:65:1a:74:07:d2:0f:02:a1:69:64:d1:18:2e:96:0f:
         5e:b7:58:44:bb:e8:73:f0:f8:ea:ca:8e:3e:64:27:d1:01:df:
         de:9b:4b:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78nzbjbLPN1Oj/qrn9DBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYzA2NWFjNWJlYmFjYTEwNjk3NTMwY2U0OTI0OGQ1ZGE2
ZGExMDcwHhcNMjYxMDI3MDYwMDUxWhcNMjYxMDI4MDYwMDUxWjAzMTEwLwYDVQQD
Eyg1NmQ4ODhkN2I5MjZjNmFjOWVlNmI1NTRmYWEyZDMyYTgyNjE3MzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuHMhG9ZxoELqh5Ib+LryB6v5KO5
5Nq0QuSrfKwfBOYFtj7Cibtu1XcyhsGezebuJGlPMnpreWQtEdgtrevtExJw1w41
pvELFz258bbV87xA0691Sl+BADOf2ZpeVqgjcQQdddUzE022/zFkl/Ln5EUkBbwY
bA7ct3jkq45Pme0P1bvu10rsfX3d25u18H9em0w+Pnh3oPsbtRjWO7K3PnF+kWIv
EG+nCz0ubESF8ZkjoTna0sB5fRLRTtdqq8fYNG68fDvbpVzkFP3DZUkEBdw0bDQb
IBB4//8emD8h0a0kA0laOhJKsopNeoeIuIlEhG4fz7wWIp3MGRtgLjeqFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbYiNe5Jsasnua1VPqi0yqCYXNqMB8GA1UdIwQY
MBaAFO7AZaxb66yhBpdTDOSSSNXabaEHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3NCbHJGdnJyS0VHbDFNTTVKSkkxZHB0b1FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGIt
M2IwNjhkYjQxMTQwLzEvN3NCbHJGdnJyS0VHbDFNTTVKSkkxZHB0b1FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81ODExODMtN2E4My00Y2FiLWJkOGItM2IwNjhkYjQxMTQw
LzEvN3NCbHJGdnJyS0VHbDFNTTVKSkkxZHB0b1FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkE0zovm9
xNHiqQpSO1RXTvej6RO9+ONa1Pt062BfLYyIf5pyOLaR2Ou8F+RLadUgWtbHEjz4
U9Zbcbyj9bZlRKvJRJhQvN2W9pKelLzJpFKyGA1PYIRQWmGOKLc1ZYzFiwRBCSh1
SFbKYitamXWEuQsQ6IJP/qGxfPLAf5gX99YYVkqh+65kXSoklwXNTAtkEvvfZeku
1jwRaptApXcawe1I1wf0K78S35cO4wOXNrqRv3vOZ50rencn+0t4t8B/3AGQe7G5
HZO7RGB4QIEiUBdBijO8wLcKZPf1ZRp0B9IPAqFpZNEYLpYPXrdYRLvoc/D46sqO
PmQn0QHf3ptL6w==
-----END CERTIFICATE-----
Generated at Tue Oct 27 11:11:17 2026 by rpki-client