Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
File:                     j7lyrwthAUecHUYZkSh4p6ylX5s.mft (raw, json)
Hash identifier:          9JuIJnHuVUybjh2SEMZwj58ev+KoskgQW86rsPT7b14=
Subject key identifier:   49:31:A3:77:E5:42:9A:75:89:62:89:4C:AA:27:83:D6:2A:F0:A2:E5
Authority key identifier: 8F:B9:72:AF:0B:61:01:47:9C:1D:46:19:91:28:78:A7:AC:A5:5F:9B
Certificate issuer:       /CN=8fb972af0b6101479c1d4619912878a7aca55f9b
Certificate serial:       01A17BF25DE0DA139E4A8A18992513C38075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
Manifest number:          013E
Signing time:             Tue 27 Oct 2026 06:00:43 +0000
Manifest this update:     Tue 27 Oct 2026 06:00:43 +0000
Manifest next update:     Wed 28 Oct 2026 06:00:43 +0000
Files and hashes:         1: j7lyrwthAUecHUYZkSh4p6ylX5s.crl (hash: 53dCxIm1X617BKsNP+6dS8n9TFNWhBknsPfvvP4j4GY=)
                          2: kxoI3tnE9aYoA4v-ZLKv8i_BQx4.roa (hash: l4BQilcKqCp6clXu8XgqddZ6lxjo67lqHjYTl9GbYZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:f2:5d:e0:da:13:9e:4a:8a:18:99:25:13:c3:80:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb972af0b6101479c1d4619912878a7aca55f9b
        Validity
            Not Before: Oct 27 06:00:43 2026 GMT
            Not After : Oct 28 06:00:43 2026 GMT
        Subject: CN=4931a377e5429a758962894caa2783d62af0a2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:70:ae:11:5c:f5:53:15:1e:9a:67:63:46:
                    45:83:21:27:a5:2b:41:c8:bc:8d:50:8b:1e:09:a9:
                    ed:7e:5b:f1:e8:2d:0a:e6:f8:74:b5:5c:1c:9a:92:
                    1a:7b:9b:ed:c7:0a:d9:8a:2b:5a:e8:d2:fb:1d:87:
                    6a:d3:85:9f:73:fe:ec:8a:9f:4c:13:1b:79:7c:fc:
                    29:d1:c6:69:76:63:c2:a0:40:20:d3:82:28:be:b8:
                    c7:09:e8:33:41:cc:d2:1a:82:22:bd:e1:8d:03:6a:
                    c4:e0:29:54:9c:39:3f:e0:eb:ee:1d:3b:01:73:be:
                    82:30:73:4a:f2:67:3a:93:45:ca:9f:6d:ed:08:24:
                    90:ad:66:8a:b7:05:86:18:05:23:c2:39:8e:5c:98:
                    60:ce:27:f4:70:2e:70:25:82:12:14:03:aa:11:0e:
                    b9:39:13:2e:ae:1c:4e:b4:99:51:45:c3:70:00:47:
                    99:d3:a8:2e:f2:98:2b:c0:62:82:53:00:96:bd:77:
                    1e:38:fc:df:13:5b:6a:5f:e7:8e:fc:30:fa:8c:0a:
                    d4:f4:48:88:43:83:b4:3b:f3:4c:dd:da:fc:a0:3a:
                    f9:5e:45:37:b7:fd:ba:cb:22:2b:d8:c8:66:b1:7a:
                    ec:f4:2e:02:4d:25:ac:09:34:13:1e:72:c3:5b:f5:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:31:A3:77:E5:42:9A:75:89:62:89:4C:AA:27:83:D6:2A:F0:A2:E5
            X509v3 Authority Key Identifier:
                keyid:8F:B9:72:AF:0B:61:01:47:9C:1D:46:19:91:28:78:A7:AC:A5:5F:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7lyrwthAUecHUYZkSh4p6ylX5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/j7lyrwthAUecHUYZkSh4p6ylX5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:fa:61:37:27:96:f0:7c:75:37:a0:de:3f:23:e6:12:e8:4d:
         ec:71:86:43:c3:b8:7f:02:d1:9b:59:20:8f:66:4e:0e:34:75:
         06:5a:34:59:6e:fa:02:50:48:59:5c:19:8c:f0:d4:3e:6b:65:
         d2:34:72:22:8b:7a:29:55:b1:30:b9:b1:85:0d:df:b1:8d:53:
         5c:6d:ee:b0:9b:ed:23:48:31:18:43:58:63:8f:02:10:70:d3:
         b6:ab:44:4d:3b:18:e9:ac:73:3b:4b:5d:3c:52:6a:8f:80:4b:
         1d:99:66:09:6d:d4:ca:76:63:56:30:e5:e4:f5:bd:fc:cc:56:
         0b:ed:55:8a:b5:48:6b:e3:b7:18:fa:cd:c2:95:1e:26:d3:d3:
         f9:91:0e:dc:58:07:af:f8:a0:9d:e1:19:a4:ee:c4:24:05:f0:
         09:3a:0e:a9:89:b5:8a:66:67:72:08:9a:30:a0:62:16:92:88:
         c3:2e:d6:ff:e2:cd:53:ef:26:e8:6b:d0:7b:36:93:a2:31:9d:
         8d:04:a8:e3:68:c8:f2:a2:5b:b1:21:68:2b:45:89:8f:ac:e8:
         31:ee:54:a9:1d:5c:31:14:06:1d:02:14:e5:ea:b6:a2:ff:1f:
         5b:c1:2a:3f:9b:83:71:b6:5c:50:e1:88:52:a7:16:8d:6c:45:
         17:8a:12:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78l3g2hOeSooYmSUTw4B1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYjk3MmFmMGI2MTAxNDc5YzFkNDYxOTkxMjg3OGE3YWNh
NTVmOWIwHhcNMjYxMDI3MDYwMDQzWhcNMjYxMDI4MDYwMDQzWjAzMTEwLwYDVQQD
Eyg0OTMxYTM3N2U1NDI5YTc1ODk2Mjg5NGNhYTI3ODNkNjJhZjBhMmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+1wrhFc9VMVHppnY0ZFgyEnpStB
yLyNUIseCantflvx6C0K5vh0tVwcmpIae5vtxwrZiita6NL7HYdq04Wfc/7sip9M
Ext5fPwp0cZpdmPCoEAg04IovrjHCegzQczSGoIiveGNA2rE4ClUnDk/4OvuHTsB
c76CMHNK8mc6k0XKn23tCCSQrWaKtwWGGAUjwjmOXJhgzif0cC5wJYISFAOqEQ65
ORMurhxOtJlRRcNwAEeZ06gu8pgrwGKCUwCWvXceOPzfE1tqX+eO/DD6jArU9EiI
Q4O0O/NM3dr8oDr5XkU3t/26yyIr2MhmsXrs9C4CTSWsCTQTHnLDW/WP7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkxo3flQpp1iWKJTKong9Yq8KLlMB8GA1UdIwQY
MBaAFI+5cq8LYQFHnB1GGZEoeKespV+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajdseXJ3dGhBVWVjSFVZWmtTaDRwNnlsWDVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NWIxODYtZjJiYS00YzgzLWI2MzAt
OGY5NWI4NTI0YzM1LzEvajdseXJ3dGhBVWVjSFVZWmtTaDRwNnlsWDVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85NWIxODYtZjJiYS00YzgzLWI2MzAtOGY5NWI4NTI0YzM1
LzEvajdseXJ3dGhBVWVjSFVZWmtTaDRwNnlsWDVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvphNyeW
8Hx1N6DePyPmEuhN7HGGQ8O4fwLRm1kgj2ZODjR1Blo0WW76AlBIWVwZjPDUPmtl
0jRyIot6KVWxMLmxhQ3fsY1TXG3usJvtI0gxGENYY48CEHDTtqtETTsY6axzO0td
PFJqj4BLHZlmCW3UynZjVjDl5PW9/MxWC+1VirVIa+O3GPrNwpUeJtPT+ZEO3FgH
r/igneEZpO7EJAXwCToOqYm1imZncgiaMKBiFpKIwy7W/+LNU+8m6GvQezaTojGd
jQSo42jI8qJbsSFoK0WJj6zoMe5UqR1cMRQGHQIU5eq2ov8fW8EqP5uDcbZcUOGI
UqcWjWxFF4oS5Q==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:40:44 2026 by rpki-client