Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
File:                     7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft (raw, json)
Hash identifier:          4BqfxgU7dI7c63jdqCeSCJZKutxc+E6TPIpA1Q/J1PE=
Subject key identifier:   C7:7A:C6:5B:F3:41:15:C8:AE:4E:B6:44:55:0E:5F:48:84:2F:8E:21
Authority key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
Certificate issuer:       /CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Certificate serial:       01A1401558701DEAEE121202D500860FCA51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
Manifest number:          1AA1
Signing time:             Thu 15 Oct 2026 15:01:43 +0000
Manifest this update:     Thu 15 Oct 2026 15:01:43 +0000
Manifest next update:     Fri 16 Oct 2026 15:01:43 +0000
Files and hashes:         1: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl (hash: iJyPBa+ZeO56oGRVDzeVZYCyF25LgnJ5YBiWfYZy13Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 15:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:15:58:70:1d:ea:ee:12:12:02:d5:00:86:0f:ca:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
        Validity
            Not Before: Oct 15 15:01:43 2026 GMT
            Not After : Oct 16 15:01:43 2026 GMT
        Subject: CN=c77ac65bf34115c8ae4eb644550e5f48842f8e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:09:4c:51:e9:71:c6:21:49:7d:38:41:e5:
                    74:c5:2a:5c:1c:1d:be:10:2e:e3:a0:a0:a0:2b:6e:
                    45:09:26:72:43:86:97:08:76:e3:82:a7:58:c4:34:
                    10:a4:66:21:18:a7:d9:29:0e:bc:a9:42:e7:e1:96:
                    03:3d:3b:c2:b3:10:ca:05:de:8a:f2:63:10:6c:0d:
                    24:bc:38:10:50:be:ed:e3:99:86:d1:5b:1f:88:0d:
                    c9:7d:fc:ce:b0:fc:06:10:1d:3a:8a:87:7c:0e:13:
                    f6:33:8b:71:2c:43:28:fa:10:c0:45:68:89:26:dd:
                    d9:63:33:22:9e:79:3c:4c:5c:7c:65:d8:36:70:9c:
                    52:7a:d5:2b:bb:0b:80:ae:8f:58:1e:66:74:e3:74:
                    f3:2a:cc:ad:de:45:f9:23:3d:44:cf:e2:ad:92:7f:
                    e9:e0:a7:59:a1:13:ef:b1:d2:7f:16:80:42:cd:0b:
                    e9:b3:dc:95:0e:73:7b:2d:99:f8:a2:e6:1b:e5:90:
                    ad:da:79:50:42:8b:1f:4b:ad:da:23:40:5e:a3:b8:
                    b4:91:fe:01:01:2e:55:35:5e:17:7d:d2:4d:6c:f1:
                    56:0d:ce:9b:91:51:64:55:49:c4:19:79:aa:5a:93:
                    6d:ce:1e:57:85:e2:1d:c3:f7:e4:a2:6c:2e:0a:59:
                    09:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7A:C6:5B:F3:41:15:C8:AE:4E:B6:44:55:0E:5F:48:84:2F:8E:21
            X509v3 Authority Key Identifier:
                keyid:EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:3d:6b:dc:95:05:02:de:42:d1:91:ac:f1:3c:61:da:d1:d0:
         a2:4c:f4:25:84:73:12:6f:ac:f8:26:0d:b1:07:7e:c4:6a:51:
         ea:3b:d2:5a:fc:6d:1f:8e:23:6f:e9:a2:25:7c:6c:4f:a4:87:
         7e:ec:e3:6f:22:f0:c5:c6:49:27:6e:ad:06:a5:44:c4:4f:c5:
         4e:41:3c:bb:04:2f:e5:45:96:cb:25:ea:47:48:ac:36:8f:e1:
         76:ca:4f:50:d6:94:5e:53:05:09:45:30:c1:82:af:04:1f:3c:
         8f:68:8e:bf:d9:28:1d:f8:e3:47:aa:7a:4e:c7:f6:5e:fd:8f:
         b2:b9:a4:90:41:cc:63:81:48:29:73:4d:ef:e0:29:6e:5c:ac:
         70:ea:a7:10:cc:f0:d5:9a:8f:cb:d0:31:92:38:7c:14:0c:8b:
         86:7c:0f:73:1a:c7:4a:4b:a9:eb:10:0f:58:ce:e5:54:05:ae:
         12:b6:2c:bc:f8:bb:2c:34:52:39:c4:14:82:82:96:b1:ff:c1:
         4a:96:7c:35:db:d8:ac:42:89:d2:4d:fa:cf:48:e1:ca:95:6f:
         40:44:02:9f:f5:60:3b:49:76:a8:f2:40:05:ae:82:81:a8:fb:
         5d:bf:80:f1:a4:50:9d:00:bd:a1:19:d2:1e:8f:3e:7e:3f:b4:
         63:57:58:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAFVhwHeruEhIC1QCGD8pRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjExYjU0NTA4YTA2Mjg5YjBlZDA2YjE3MTg4YWQ2M2Y0
ZmNmZWEwHhcNMjYxMDE1MTUwMTQzWhcNMjYxMDE2MTUwMTQzWjAzMTEwLwYDVQQD
EyhjNzdhYzY1YmYzNDExNWM4YWU0ZWI2NDQ1NTBlNWY0ODg0MmY4ZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQMJTFHpccYhSX04QeV0xSpcHB2+
EC7joKCgK25FCSZyQ4aXCHbjgqdYxDQQpGYhGKfZKQ68qULn4ZYDPTvCsxDKBd6K
8mMQbA0kvDgQUL7t45mG0VsfiA3JffzOsPwGEB06iod8DhP2M4txLEMo+hDARWiJ
Jt3ZYzMinnk8TFx8Zdg2cJxSetUruwuAro9YHmZ043TzKsyt3kX5Iz1Ez+Ktkn/p
4KdZoRPvsdJ/FoBCzQvps9yVDnN7LZn4ouYb5ZCt2nlQQosfS63aI0Beo7i0kf4B
AS5VNV4XfdJNbPFWDc6bkVFkVUnEGXmqWpNtzh5XheIdw/fkomwuClkJUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMd6xlvzQRXIrk62RFUOX0iEL44hMB8GA1UdIwQY
MBaAFOyxG1RQigYomw7QaxcYitY/T8/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xFYlZGQ0tCaWliRHRCckZ4aUsxajlQei1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xNGQwOTktOGU0NS00NDc5LTg0N2Ut
NzQxMjZiNWMzYWI2LzEvN0xFYlZGQ0tCaWliRHRCckZ4aUsxajlQei1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xNGQwOTktOGU0NS00NDc5LTg0N2UtNzQxMjZiNWMzYWI2
LzEvN0xFYlZGQ0tCaWliRHRCckZ4aUsxajlQei1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOT1r3JUF
At5C0ZGs8Txh2tHQokz0JYRzEm+s+CYNsQd+xGpR6jvSWvxtH44jb+miJXxsT6SH
fuzjbyLwxcZJJ26tBqVExE/FTkE8uwQv5UWWyyXqR0isNo/hdspPUNaUXlMFCUUw
wYKvBB88j2iOv9koHfjjR6p6Tsf2Xv2PsrmkkEHMY4FIKXNN7+ApblyscOqnEMzw
1ZqPy9Axkjh8FAyLhnwPcxrHSkup6xAPWM7lVAWuErYsvPi7LDRSOcQUgoKWsf/B
SpZ8NdvYrEKJ0k36z0jhypVvQEQCn/VgO0l2qPJABa6Cgaj7Xb+A8aRQnQC9oRnS
Ho8+fj+0Y1dYOA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:17 2026 by rpki-client