Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File:                     7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier:          0EZDsEu+9TdCiNoKKchM8KXkN/Mb1ieM9CJSSG3y7jU=
Subject key identifier:   D0:79:9C:3A:D1:24:15:E5:12:B6:FE:4A:D6:31:A3:71:5B:58:1B:3E
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer:       /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial:       01A13D4A09AA2DCA21B51D5AB7B7448406CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number:          1A38
Signing time:             Thu 15 Oct 2026 02:00:24 +0000
Manifest this update:     Thu 15 Oct 2026 02:00:24 +0000
Manifest next update:     Fri 16 Oct 2026 02:00:24 +0000
Files and hashes:         1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: ZV4dOrfdsLxlxjTVjkOSmUNNWPIn253zvZi767pB2WM=)
                          2: guibBNdYNmYjs3BhZ4d37Us7C4k.roa (hash: ERVCfgK3qCQAc++yH8oVuuxPI5EAT0LJxo2iXgCuAbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:4a:09:aa:2d:ca:21:b5:1d:5a:b7:b7:44:84:06:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
        Validity
            Not Before: Oct 15 02:00:24 2026 GMT
            Not After : Oct 16 02:00:24 2026 GMT
        Subject: CN=d0799c3ad12415e512b6fe4ad631a3715b581b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:a2:b5:65:9d:cb:2a:38:62:20:66:f1:ba:
                    a3:36:8d:a8:3b:17:e8:f0:46:1f:f9:3e:98:90:92:
                    f8:af:33:8b:03:54:e6:06:08:dd:97:dc:97:5e:7f:
                    8b:57:72:97:b0:55:56:53:88:10:9a:95:ca:aa:8c:
                    ec:96:57:ff:7a:19:c0:15:61:ce:72:8c:ca:37:3c:
                    0a:22:11:85:df:14:47:c7:32:03:94:fa:5e:33:02:
                    2e:91:97:23:be:05:ab:bc:a0:d1:8f:0a:39:7d:1d:
                    64:ba:db:23:e1:53:98:34:b2:4c:b5:cf:ea:e4:00:
                    89:28:ab:76:ea:5f:a1:14:e7:5a:5a:49:9c:a9:a1:
                    a2:e0:16:0e:40:f5:c3:f7:92:22:ab:a4:5d:79:e0:
                    b8:3b:98:d8:52:1a:16:c2:40:e9:cc:59:00:25:77:
                    ab:35:ac:0a:a2:2d:54:8e:45:10:99:57:54:4c:9a:
                    a7:0c:3b:bc:08:92:c4:6c:72:9e:3b:0c:d6:80:8e:
                    8b:86:ae:d0:ad:db:54:47:21:c0:0f:4d:5f:a4:29:
                    b8:a7:fb:71:a5:a4:eb:1f:f0:41:64:c2:56:79:dc:
                    9a:d0:15:b2:49:43:7a:cb:34:ba:81:37:eb:e9:fe:
                    c4:a7:d1:b3:6f:75:52:50:b2:78:83:2f:35:f1:87:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:79:9C:3A:D1:24:15:E5:12:B6:FE:4A:D6:31:A3:71:5B:58:1B:3E
            X509v3 Authority Key Identifier:
                keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a3:c7:0f:37:39:28:42:c7:f5:dc:8b:a2:ac:28:14:d9:87:
         aa:07:34:d8:24:ea:24:ca:83:00:5e:47:b4:ec:f7:8a:8d:aa:
         1f:28:9c:20:00:51:b1:d5:63:7f:be:b9:1a:ab:dd:c3:5a:7e:
         de:d9:a2:61:e0:55:26:de:28:a8:98:bd:57:0b:c7:fc:51:87:
         ec:2e:96:c5:a1:80:7d:e6:a9:6e:e8:06:44:21:94:e7:dc:60:
         71:2f:da:55:38:28:fc:e4:92:24:83:83:76:29:91:fe:40:ff:
         58:63:a4:fb:e2:e4:ea:c2:97:47:3d:3b:a2:96:23:23:56:3b:
         01:b0:98:8f:c0:90:14:ac:42:b8:ca:05:22:4f:a3:93:0b:21:
         96:f4:fe:ba:4f:6c:a2:e5:94:c4:65:c5:d4:c7:1c:01:f9:52:
         e0:40:1c:84:bd:17:07:b9:a5:d2:5a:f0:71:fb:50:dc:93:c1:
         0a:3e:f0:12:28:21:5c:aa:1b:3e:2e:19:87:58:58:5c:9f:9a:
         6c:7b:3a:fd:c8:50:2d:cf:a3:02:91:65:23:47:50:3d:b2:86:
         73:17:e8:89:4c:4a:84:e3:18:53:95:ed:fa:a1:eb:6c:0a:73:
         c3:4a:a2:fa:41:bf:c0:c1:bb:15:97:7b:5d:cb:1e:71:6b:2d:
         8f:9c:53:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:13:49 2026 by rpki-client