Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.mft
File:                     Scc7ws4hVAJgNLw7kL1jgx94sAU.mft (raw, json)
Hash identifier:          Vv/Bc3OGpYosR39U2HK77C+BseRd6C0q7Zo6Ip51zn0=
Subject key identifier:   77:79:1D:97:15:E6:60:BF:8F:FF:22:B5:98:65:98:2B:50:EB:5E:FF
Authority key identifier: 49:C7:3B:C2:CE:21:54:02:60:34:BC:3B:90:BD:63:83:1F:78:B0:05
Certificate issuer:       /CN=49c73bc2ce2154026034bc3b90bd63831f78b005
Certificate serial:       01A173CB41C5A52D1C84C42EC04A6AF76F8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Scc7ws4hVAJgNLw7kL1jgx94sAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.mft
Manifest number:          8A
Signing time:             Sun 25 Oct 2026 16:01:02 +0000
Manifest this update:     Sun 25 Oct 2026 16:01:02 +0000
Manifest next update:     Mon 26 Oct 2026 16:01:02 +0000
Files and hashes:         1: Scc7ws4hVAJgNLw7kL1jgx94sAU.crl (hash: 7jEd75sYvnj8O3yYKNI2OtW+8GHxmyPzoV06F6ubwcY=)
                          2: eMmjxl2ax4RboNyy7t7DciWI2GY.roa (hash: OxpJEytqLM1clRPMJ3w5XoDWzMhouly5oIX7Pec1B2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Scc7ws4hVAJgNLw7kL1jgx94sAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:73:cb:41:c5:a5:2d:1c:84:c4:2e:c0:4a:6a:f7:6f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c73bc2ce2154026034bc3b90bd63831f78b005
        Validity
            Not Before: Oct 25 16:01:02 2026 GMT
            Not After : Oct 26 16:01:02 2026 GMT
        Subject: CN=77791d9715e660bf8fff22b59865982b50eb5eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e5:a5:13:94:c3:de:77:eb:0e:46:af:13:3c:
                    2b:be:f6:21:79:27:a0:1e:01:5d:56:5b:28:cd:90:
                    25:6b:f0:b6:1f:34:d1:44:8e:41:a9:b0:26:0d:48:
                    a4:92:bc:80:cc:fb:14:70:c3:f4:a4:11:b2:12:e1:
                    d9:c2:92:02:82:5a:51:a7:2a:c6:fb:7c:a5:ac:c1:
                    47:84:49:6a:fc:58:f1:d9:75:57:e8:b1:81:9a:64:
                    73:00:69:63:a7:7c:73:b8:ba:35:f0:86:29:41:cc:
                    d1:b2:a0:86:38:84:33:fe:ee:fe:59:d6:01:17:81:
                    55:ca:15:c5:14:85:d9:15:4c:50:18:94:94:84:ff:
                    b0:5c:88:5c:27:a8:44:e4:a6:05:8e:30:f5:c6:88:
                    e3:ff:fd:c5:9e:87:f2:c2:c9:d7:b7:8e:82:b8:36:
                    88:5e:51:12:1a:6b:c5:1a:5e:74:d1:e9:17:ce:62:
                    2f:02:04:8a:69:67:2f:fb:1b:bd:8d:75:b9:2c:24:
                    42:7e:a4:92:26:de:9f:c1:72:f6:70:8d:a2:e2:01:
                    f7:05:d9:06:00:93:70:07:12:15:4b:9d:fc:ca:3a:
                    c4:a1:d2:93:1c:65:e6:11:6e:f7:11:fc:6b:a8:52:
                    38:cf:6c:93:d5:89:5f:d9:d3:11:ee:35:40:b9:18:
                    5e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:79:1D:97:15:E6:60:BF:8F:FF:22:B5:98:65:98:2B:50:EB:5E:FF
            X509v3 Authority Key Identifier:
                keyid:49:C7:3B:C2:CE:21:54:02:60:34:BC:3B:90:BD:63:83:1F:78:B0:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Scc7ws4hVAJgNLw7kL1jgx94sAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:de:f5:bf:6d:f0:45:a0:d3:62:64:32:1e:b2:09:ad:6d:4b:
         78:27:a6:46:b1:1d:a0:0a:e4:73:48:3e:f7:db:fe:78:0e:80:
         51:f6:94:43:6f:a2:cb:17:7e:1d:4f:6c:3e:b7:de:a4:1d:ed:
         07:a9:d2:88:ec:ae:dc:0a:61:ff:52:17:a8:30:b4:1a:64:f6:
         79:d5:90:a2:43:82:c7:fe:66:bd:59:58:ed:9c:49:32:3e:ed:
         17:f1:fa:24:c3:41:e8:bb:73:70:37:a0:8e:67:a8:bf:ae:2e:
         fb:32:2d:a0:34:9a:14:bf:8f:ab:c0:8c:5e:c3:ed:ae:3f:5b:
         2b:fc:0d:28:85:ac:a8:10:5d:d1:0c:5d:e0:6f:a3:4c:2b:9f:
         2b:e6:29:c3:38:6c:4b:c0:fd:bb:98:24:c5:ec:c1:e5:7f:1f:
         18:fc:45:64:bb:55:24:80:60:10:49:e0:d1:5a:12:9e:1a:82:
         2c:11:04:82:c4:b0:58:92:20:a9:1b:80:7e:1c:ca:c7:58:dc:
         b4:43:0a:bd:df:79:ed:fa:70:ac:f1:97:05:e6:66:7c:b5:58:
         18:aa:fb:d1:72:b2:9b:8e:db:5b:2c:ed:5d:b8:4f:3c:25:ee:
         f9:58:3b:ce:7e:0b:c8:1a:26:05:30:15:34:8b:dc:dc:7c:de:
         48:de:5b:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFzy0HFpS0chMQuwEpq92+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YzczYmMyY2UyMTU0MDI2MDM0YmMzYjkwYmQ2MzgzMWY3
OGIwMDUwHhcNMjYxMDI1MTYwMTAyWhcNMjYxMDI2MTYwMTAyWjAzMTEwLwYDVQQD
Eyg3Nzc5MWQ5NzE1ZTY2MGJmOGZmZjIyYjU5ODY1OTgyYjUwZWI1ZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+WlE5TD3nfrDkavEzwrvvYheSeg
HgFdVlsozZAla/C2HzTRRI5BqbAmDUikkryAzPsUcMP0pBGyEuHZwpICglpRpyrG
+3ylrMFHhElq/Fjx2XVX6LGBmmRzAGljp3xzuLo18IYpQczRsqCGOIQz/u7+WdYB
F4FVyhXFFIXZFUxQGJSUhP+wXIhcJ6hE5KYFjjD1xojj//3FnofywsnXt46CuDaI
XlESGmvFGl500ekXzmIvAgSKaWcv+xu9jXW5LCRCfqSSJt6fwXL2cI2i4gH3BdkG
AJNwBxIVS538yjrEodKTHGXmEW73EfxrqFI4z2yT1Ylf2dMR7jVAuRhejQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHd5HZcV5mC/j/8itZhlmCtQ617/MB8GA1UdIwQY
MBaAFEnHO8LOIVQCYDS8O5C9Y4MfeLAFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2NjN3dzNGhWQUpnTkx3N2tMMWpneDk0c0FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS84M2EzNzMtYzQ1YS00NTdkLTg2ODct
Y2EwYzhlNWRjODQ5LzEvU2NjN3dzNGhWQUpnTkx3N2tMMWpneDk0c0FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS84M2EzNzMtYzQ1YS00NTdkLTg2ODctY2EwYzhlNWRjODQ5
LzEvU2NjN3dzNGhWQUpnTkx3N2tMMWpneDk0c0FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAed71v23w
RaDTYmQyHrIJrW1LeCemRrEdoArkc0g+99v+eA6AUfaUQ2+iyxd+HU9sPrfepB3t
B6nSiOyu3Aph/1IXqDC0GmT2edWQokOCx/5mvVlY7ZxJMj7tF/H6JMNB6LtzcDeg
jmeov64u+zItoDSaFL+Pq8CMXsPtrj9bK/wNKIWsqBBd0Qxd4G+jTCufK+Ypwzhs
S8D9u5gkxezB5X8fGPxFZLtVJIBgEEng0VoSnhqCLBEEgsSwWJIgqRuAfhzKx1jc
tEMKvd957fpwrPGXBeZmfLVYGKr70XKym47bWyztXbhPPCXu+Vg7zn4LyBomBTAV
NIvc3HzeSN5bEA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:13:10 2026 by rpki-client