Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
File:                     j7lyrwthAUecHUYZkSh4p6ylX5s.mft (raw, json)
Hash identifier:          AY180T9zeFdr3VXOJvlV09bdhEnTiXG3jezNGT6FMUA=
Subject key identifier:   F5:BB:1D:51:63:96:D9:CD:59:E1:6A:73:AB:8C:44:4C:EE:42:10:75
Authority key identifier: 8F:B9:72:AF:0B:61:01:47:9C:1D:46:19:91:28:78:A7:AC:A5:5F:9B
Certificate issuer:       /CN=8fb972af0b6101479c1d4619912878a7aca55f9b
Certificate serial:       01A17DE1708FF15C9E042DBCFBF15BF785BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
Manifest number:          013F
Signing time:             Tue 27 Oct 2026 15:01:28 +0000
Manifest this update:     Tue 27 Oct 2026 15:01:28 +0000
Manifest next update:     Wed 28 Oct 2026 15:01:28 +0000
Files and hashes:         1: j7lyrwthAUecHUYZkSh4p6ylX5s.crl (hash: ltaUHExocCMGvBIvdd8K/jpOscXQQTTxVchKyW9ofs0=)
                          2: kxoI3tnE9aYoA4v-ZLKv8i_BQx4.roa (hash: l4BQilcKqCp6clXu8XgqddZ6lxjo67lqHjYTl9GbYZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:e1:70:8f:f1:5c:9e:04:2d:bc:fb:f1:5b:f7:85:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb972af0b6101479c1d4619912878a7aca55f9b
        Validity
            Not Before: Oct 27 15:01:28 2026 GMT
            Not After : Oct 28 15:01:28 2026 GMT
        Subject: CN=f5bb1d516396d9cd59e16a73ab8c444cee421075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:56:c1:f6:cc:cd:80:85:20:23:7d:21:69:ce:
                    de:14:39:ce:a0:5c:70:b7:15:5a:40:31:d5:d2:45:
                    27:9d:30:47:45:ba:ea:d7:ce:84:65:55:1b:13:36:
                    cf:42:35:ac:81:0e:14:28:cc:8d:7d:a3:13:48:61:
                    01:08:36:db:a9:e9:67:03:46:61:0b:61:80:43:a4:
                    e1:98:f5:7f:4c:d2:ed:9d:bc:9e:57:f5:7d:c0:7e:
                    b2:a5:9c:87:3b:59:c0:b2:fe:df:1a:cb:56:18:e5:
                    66:2a:62:32:57:db:77:dc:f3:ab:91:4a:41:67:e4:
                    89:b0:8e:8f:29:0a:51:fe:2c:a0:c3:29:37:a3:57:
                    d5:56:4c:38:6c:21:5b:ec:3d:ff:b0:9f:0f:b8:34:
                    11:4a:05:b6:b0:55:58:b9:82:e9:ab:d9:d8:56:ca:
                    46:12:95:e1:81:a5:2b:fd:a9:9f:d2:5d:85:43:24:
                    61:9e:e4:68:00:ad:d7:c5:69:a0:69:b5:40:a8:88:
                    65:6d:9a:17:7a:3c:bd:a4:f8:27:f8:bc:27:15:d6:
                    5f:29:0e:e3:3e:64:e7:8a:e3:55:b1:bd:41:c6:9f:
                    97:08:a4:be:dc:47:9f:02:ad:84:58:79:be:e1:67:
                    ed:ad:f8:53:62:97:a1:b6:12:da:de:51:f4:94:6b:
                    55:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BB:1D:51:63:96:D9:CD:59:E1:6A:73:AB:8C:44:4C:EE:42:10:75
            X509v3 Authority Key Identifier:
                keyid:8F:B9:72:AF:0B:61:01:47:9C:1D:46:19:91:28:78:A7:AC:A5:5F:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:51:cd:99:09:05:81:09:06:2b:33:7c:17:2d:de:37:e3:09:
         01:d7:d8:fd:51:07:39:c3:d9:13:3d:7e:f7:26:ef:ca:57:5b:
         fd:58:30:49:a9:97:0b:21:8e:85:84:4d:7f:c8:16:7f:58:63:
         04:60:9b:b1:d3:2c:db:7f:20:60:16:00:bf:20:f4:32:18:49:
         bd:73:b5:1f:eb:2a:28:3e:54:45:d6:35:2c:8b:f0:f8:2f:27:
         42:16:d3:50:a3:69:a1:9d:bf:08:a2:f6:32:95:46:07:49:e4:
         3c:c4:71:7f:b2:4a:22:ed:43:f1:1f:b6:d9:92:6b:2d:ca:87:
         64:1f:3a:b3:2b:d8:62:c2:0a:6d:14:41:d1:b0:92:d2:c9:a4:
         fd:08:9b:9c:cb:00:db:e0:c2:54:bf:44:81:d9:c3:05:0e:0c:
         50:de:e4:6a:ed:9b:8d:64:6f:90:79:6f:6d:64:0b:5a:5e:19:
         4b:d7:8e:c5:c7:45:c3:64:0a:90:c4:68:9b:16:aa:0b:f1:19:
         d8:6c:16:49:20:f2:e2:70:af:92:18:0c:27:3b:57:01:0c:66:
         74:11:85:6b:3e:41:56:88:62:dd:27:51:00:c4:b3:01:fd:b3:
         c8:20:f1:e9:3a:90:16:64:72:d7:27:35:b7:3e:9a:cc:40:a9:
         fe:9a:9a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:19:05 2026 by rpki-client