Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
File:                     7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft (raw, json)
Hash identifier:          90/QYq+VSqjZu5CrdkbzA6KUed1LaMpdRO5kJvJXHrQ=
Subject key identifier:   72:DA:E6:CA:B4:E8:EE:53:07:2C:B2:44:50:68:94:4A:F5:D5:EC:BB
Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
Certificate issuer:       /CN=ecee470bf5109976934f51e7eaef210779a2c4de
Certificate serial:       01A10248A0420B7C39B6CEBB7E7C06A7CF5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
Manifest number:          1A86
Signing time:             Sat 03 Oct 2026 15:01:16 +0000
Manifest this update:     Sat 03 Oct 2026 15:01:16 +0000
Manifest next update:     Sun 04 Oct 2026 15:01:16 +0000
Files and hashes:         1: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl (hash: UdxjGNoLQ36zLMVB8FAbB/Nl+q8q6OvTkQoK6ec0zeU=)
                          2: i9futBXgsX5FN5Oy7LRhwMH28E8.roa (hash: O7Qfk152zcRaRv43cCEp1BeLvPwD5mzKuSykiTRHSEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:48:a0:42:0b:7c:39:b6:ce:bb:7e:7c:06:a7:cf:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de
        Validity
            Not Before: Oct  3 15:01:16 2026 GMT
            Not After : Oct  4 15:01:16 2026 GMT
        Subject: CN=72dae6cab4e8ee53072cb2445068944af5d5ecbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:be:db:f2:5b:07:c5:54:c7:7e:84:a2:9c:25:
                    86:c4:dc:8f:b5:10:98:ea:5f:ba:2f:f1:8e:17:c8:
                    ad:dc:4b:74:c9:0e:8d:8b:87:95:29:95:cb:0a:5b:
                    bb:be:08:a9:4b:73:16:fb:ae:58:59:3a:87:aa:eb:
                    10:87:56:d4:b0:38:f1:59:b7:2e:bd:cc:91:22:99:
                    f8:9f:bc:db:e7:b7:04:a9:1a:c0:d3:ab:24:ca:99:
                    7e:26:c6:b8:83:ce:73:08:76:de:e7:88:45:67:50:
                    5c:d8:69:e5:4c:5e:ef:50:8b:94:13:a8:ba:26:08:
                    1b:85:29:f1:1f:11:ad:fd:98:a4:ed:96:da:1f:cd:
                    57:10:34:bc:02:a8:10:12:69:89:89:ad:06:ba:76:
                    c6:13:05:24:a0:cb:62:29:1c:55:85:4a:10:5c:8f:
                    22:b7:28:7f:e5:74:6c:59:ad:95:5f:e6:82:e7:f8:
                    6b:e2:38:93:79:2f:32:78:7f:d0:0b:83:2a:ef:07:
                    0b:7e:52:68:f6:93:52:28:f0:34:c4:c4:24:32:42:
                    cc:eb:0b:75:fa:a4:74:24:02:26:cc:90:ff:6d:9c:
                    1a:1f:76:75:f3:ac:44:a2:b9:54:ad:7b:8c:0a:09:
                    51:5c:c4:c6:6d:f3:c1:11:15:7e:b2:82:7e:49:f1:
                    d1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DA:E6:CA:B4:E8:EE:53:07:2C:B2:44:50:68:94:4A:F5:D5:EC:BB
            X509v3 Authority Key Identifier:
                keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d9:15:78:99:9f:ef:f8:15:36:9d:c3:58:33:36:5c:3b:cd:
         7c:be:6a:36:9f:7a:fa:b6:73:ef:b0:7b:bf:09:3d:93:d7:30:
         34:14:a8:40:ae:29:ca:26:7e:e1:1e:79:f3:79:26:38:e5:d5:
         4c:c6:ea:e9:74:09:86:9c:29:cf:a3:7e:f4:a7:85:23:78:09:
         45:80:91:68:5b:4e:0e:98:86:b9:5a:87:57:7d:50:b7:3d:7e:
         22:49:30:68:b6:94:76:94:b6:d1:4e:93:0d:f8:42:2b:a7:01:
         d3:03:1e:70:30:0b:a7:51:cd:ab:9c:af:53:c2:f9:3f:ee:e7:
         94:35:55:9d:96:c2:8a:ce:c5:80:9a:e8:4d:88:17:a5:8e:04:
         50:e9:9a:fc:0d:ad:6a:45:cc:1e:6c:e1:ce:f4:ac:d4:69:f1:
         b1:a3:7a:0b:7f:08:cc:76:d8:1e:6e:60:31:71:2d:1c:23:42:
         c2:03:c3:5b:92:26:36:55:ff:57:7c:8a:70:fa:46:98:85:46:
         ae:d0:b3:30:42:3a:f1:a6:b1:e1:08:1e:7e:34:31:15:31:20:
         2c:12:28:ef:05:cb:69:47:2b:ad:a7:e3:5e:5d:03:89:d1:58:
         f8:f1:16:cb:f0:31:ae:5c:73:bf:2e:23:c3:72:b9:bf:9b:25:
         d5:67:c9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:46:15 2026 by rpki-client