Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File:                     fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier:          L7iS2u/ASGPDe9iGCJfjXg+uz75UPr23NJa0lzpgk5w=
Subject key identifier:   AB:4D:56:2F:BA:0B:F4:AA:88:1D:73:CD:A1:B4:5A:4C:97:71:7E:7E
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer:       /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial:       01A13B24B61DE69941DF9994D60053A36466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number:          07BC
Signing time:             Wed 14 Oct 2026 16:00:23 +0000
Manifest this update:     Wed 14 Oct 2026 16:00:23 +0000
Manifest next update:     Thu 15 Oct 2026 16:00:23 +0000
Files and hashes:         1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: 8wutnGXcPCitYGnPnmepzkTJVYsqomTzUr/j/mqJGXU=)
                          2: v5j62T31CGbyesihQ2ZxZfpouT0.roa (hash: /9+S8FBh2KrNLclqntL3l149SX/pG8FSBZ5MZAy4TsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:24:b6:1d:e6:99:41:df:99:94:d6:00:53:a3:64:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
        Validity
            Not Before: Oct 14 16:00:23 2026 GMT
            Not After : Oct 15 16:00:23 2026 GMT
        Subject: CN=ab4d562fba0bf4aa881d73cda1b45a4c97717e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f1:02:09:ed:47:04:4a:eb:9b:ae:e0:10:62:
                    b7:df:9c:ab:12:c6:22:6e:81:26:2c:5e:6c:6b:16:
                    a2:27:0c:a0:ae:09:24:00:08:88:4c:0a:a8:9f:b0:
                    e2:ac:72:47:8d:5e:f1:ec:0f:7a:82:42:bf:20:b8:
                    3e:c3:5c:e9:22:2f:f6:b1:e0:c3:1d:ab:94:23:9a:
                    01:72:4f:f5:32:3d:9c:a8:a8:a0:9f:06:1a:df:99:
                    b9:c1:6e:d0:64:e0:45:0d:9d:66:a4:ab:8d:3c:0c:
                    21:96:9d:5b:2d:16:d3:e1:58:c4:6d:a1:83:16:4b:
                    58:14:05:6a:23:98:63:e3:a3:6a:a6:24:c1:6d:3f:
                    8e:1c:05:46:82:3c:e8:6c:61:f1:e0:98:33:ab:57:
                    ce:14:3a:ef:d7:e0:14:e4:71:06:38:40:75:3b:c3:
                    89:dd:3e:4b:39:f7:97:df:a3:34:f8:38:2c:2a:2d:
                    89:9e:72:30:9b:28:a4:23:51:8c:85:ca:e7:ef:62:
                    46:e8:02:e1:38:5f:22:1e:5d:c7:ec:2a:9e:70:91:
                    03:9a:36:4c:6c:f0:16:9c:a9:6e:10:6f:96:b0:aa:
                    2e:c2:8b:4c:82:5b:77:74:d3:8f:45:f8:ee:ed:a2:
                    2e:4c:f3:49:21:96:f8:c0:3a:d8:61:39:66:fe:64:
                    10:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4D:56:2F:BA:0B:F4:AA:88:1D:73:CD:A1:B4:5A:4C:97:71:7E:7E
            X509v3 Authority Key Identifier:
                keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d1:7e:67:cf:9b:76:42:da:e7:c4:3b:03:42:55:fb:df:43:
         9f:ef:df:61:3f:db:89:fa:3f:8a:bd:6f:63:a0:87:81:5a:7b:
         44:f0:2d:8b:65:cc:c5:52:c3:11:0d:5e:60:48:18:01:8a:86:
         0a:ae:05:fe:ab:03:4c:95:27:4d:43:9e:de:b8:51:7f:17:30:
         1a:ac:89:cc:fc:a1:1a:8e:34:88:23:c1:6f:8d:38:c5:f0:b8:
         2f:00:ff:dd:ab:d6:78:ef:6c:61:66:ab:2a:bf:ca:f5:aa:34:
         c1:cf:44:8e:72:8e:c8:ff:4f:90:07:37:f1:d0:39:7e:38:46:
         5f:c2:34:7f:90:15:32:2e:d1:01:e0:1e:91:af:cc:af:d0:35:
         60:13:b3:be:2c:d9:59:f8:72:e2:00:2e:c1:1a:8a:0d:b0:1e:
         0a:da:ac:a5:70:3d:85:25:d8:0f:22:7d:eb:61:46:60:c0:93:
         5d:2a:61:78:21:9d:2c:2d:0a:13:3e:ff:e3:70:5f:25:5e:d0:
         d7:a5:be:97:52:7f:cd:43:83:44:bc:25:13:5c:82:0c:5e:91:
         06:cd:2b:45:4e:1f:4d:e8:d5:73:a2:dd:3b:fa:e5:48:3a:db:
         bb:6a:0e:dd:4d:e0:21:da:32:5c:3d:60:a1:ae:df:d3:da:1c:
         19:68:d2:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE7JLYd5plB35mU1gBTo2RmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMDdkYmRjNzFmMTJiZGE3YmI3ZmE4MGNhZGMyZWQ5YTJm
ZWVmZWIwHhcNMjYxMDE0MTYwMDIzWhcNMjYxMDE1MTYwMDIzWjAzMTEwLwYDVQQD
EyhhYjRkNTYyZmJhMGJmNGFhODgxZDczY2RhMWI0NWE0Yzk3NzE3ZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPECCe1HBErrm67gEGK335yrEsYi
boEmLF5saxaiJwygrgkkAAiITAqon7DirHJHjV7x7A96gkK/ILg+w1zpIi/2seDD
HauUI5oBck/1Mj2cqKignwYa35m5wW7QZOBFDZ1mpKuNPAwhlp1bLRbT4VjEbaGD
FktYFAVqI5hj46NqpiTBbT+OHAVGgjzobGHx4Jgzq1fOFDrv1+AU5HEGOEB1O8OJ
3T5LOfeX36M0+DgsKi2JnnIwmyikI1GMhcrn72JG6ALhOF8iHl3H7CqecJEDmjZM
bPAWnKluEG+WsKouwotMglt3dNOPRfju7aIuTPNJIZb4wDrYYTlm/mQQVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtNVi+6C/SqiB1zzaG0WkyXcX5+MB8GA1UdIwQY
MBaAFHwH29xx8Svae7f6gMrcLtmi/u/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUt
ODk1YjBkM2M0YjQ1LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUtODk1YjBkM2M0YjQ1
LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntF+Z8+b
dkLa58Q7A0JV+99Dn+/fYT/bifo/ir1vY6CHgVp7RPAti2XMxVLDEQ1eYEgYAYqG
Cq4F/qsDTJUnTUOe3rhRfxcwGqyJzPyhGo40iCPBb404xfC4LwD/3avWeO9sYWar
Kr/K9ao0wc9EjnKOyP9PkAc38dA5fjhGX8I0f5AVMi7RAeAeka/Mr9A1YBOzvizZ
Wfhy4gAuwRqKDbAeCtqspXA9hSXYDyJ962FGYMCTXSpheCGdLC0KEz7/43BfJV7Q
16W+l1J/zUODRLwlE1yCDF6RBs0rRU4fTejVc6LdO/rlSDrbu2oO3U3gIdoyXD1g
oa7f09ocGWjSjg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 02:07:24 2026 by rpki-client