Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
File:                     7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft (raw, json)
Hash identifier:          nIiP640+YVHclHtpD5MxdOF1BfLJx49TRw6ft2s+PAI=
Subject key identifier:   6C:7C:44:52:BD:CD:78:98:01:59:6F:99:47:C8:B0:1B:79:A9:02:36
Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Certificate issuer:       /CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Certificate serial:       01A14805352CE21AB28996F34E719E880B21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
Manifest number:          184D
Signing time:             Sat 17 Oct 2026 04:01:03 +0000
Manifest this update:     Sat 17 Oct 2026 04:01:03 +0000
Manifest next update:     Sun 18 Oct 2026 04:01:03 +0000
Files and hashes:         1: 2tKSrvE8w4OPUMtHHmn4NBgdIN0.roa (hash: xtQTDappKS+L7HJWwmh8B32VXucrBAKNvYHP3fwsAXE=)
                          2: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl (hash: TCklVbwItdCSKOHyM86RlgWnudDq5l7LOxfj+Gm/WJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:05:35:2c:e2:1a:b2:89:96:f3:4e:71:9e:88:0b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
        Validity
            Not Before: Oct 17 04:01:03 2026 GMT
            Not After : Oct 18 04:01:03 2026 GMT
        Subject: CN=6c7c4452bdcd789801596f9947c8b01b79a90236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:fd:20:95:7b:2f:3c:75:a1:0e:c8:a9:13:0c:
                    3c:5f:e5:70:8b:91:85:8c:6b:fd:65:db:a2:13:44:
                    64:30:51:af:62:9d:4e:d3:f5:69:42:3f:6a:8a:a5:
                    99:9a:83:09:38:2e:ff:aa:31:10:fa:8b:0d:87:ea:
                    4d:70:30:a6:2d:35:83:6b:a1:5c:f6:3a:04:79:26:
                    42:d2:47:08:c0:3d:52:7c:0b:7b:31:d9:65:8e:45:
                    37:48:8d:0a:2e:cf:bb:72:32:40:93:3d:7c:71:e8:
                    2f:34:10:9f:f5:00:90:fc:a9:fb:dd:2c:f6:74:2b:
                    79:8e:e1:42:cc:d7:e6:87:a8:72:cd:87:64:63:16:
                    60:94:e0:0f:69:66:0c:ca:b0:c2:4b:69:f3:53:27:
                    da:8c:fe:e3:f2:38:07:76:02:c5:54:58:de:b6:79:
                    dc:52:f5:51:c0:b4:c2:a3:78:ee:95:48:58:52:53:
                    31:fc:56:e7:dd:04:5f:95:91:0a:d0:82:63:b4:da:
                    7a:09:bc:ad:7c:9e:85:f4:8f:c9:53:a0:0d:de:02:
                    d8:16:3f:51:09:8a:d8:47:4a:4e:f7:7a:56:03:18:
                    6e:28:45:0e:c7:fd:f1:cc:37:4d:49:c4:f8:fd:cd:
                    70:77:65:d4:ff:bf:21:3f:88:00:3f:71:06:95:4a:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7C:44:52:BD:CD:78:98:01:59:6F:99:47:C8:B0:1B:79:A9:02:36
            X509v3 Authority Key Identifier:
                keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:42:12:1f:d2:c8:09:d6:25:f8:86:cb:81:b0:13:78:f2:
         f1:d5:8d:05:f4:86:9e:f4:53:b3:52:b2:f3:98:ad:34:bf:e6:
         ff:28:80:bb:f2:62:c7:ca:b4:bd:9b:48:86:f4:d8:dd:c0:66:
         95:40:08:09:c9:d4:62:e9:ff:a2:3f:4b:7c:48:2f:02:9e:b6:
         71:ba:2d:62:b8:93:36:4f:4e:c4:56:bc:b9:0d:0c:88:ae:86:
         91:7f:e3:e7:2c:3f:d7:70:34:a4:76:16:27:72:8c:7b:07:40:
         bb:5f:59:a4:ce:dd:82:6f:65:fb:23:c5:fa:49:4e:ff:e4:05:
         53:7c:a4:c0:8a:23:f1:77:9b:d4:09:fc:55:56:57:a3:94:6c:
         0c:cb:89:69:84:66:35:3a:3b:14:b4:d8:62:d3:e4:6f:2e:e6:
         e7:88:35:cf:9c:2c:fd:49:ea:a6:dd:78:e8:39:98:ad:b4:1f:
         36:16:e8:0f:d7:3e:00:eb:6a:19:1e:b8:e0:25:f5:10:3c:82:
         d8:e4:4c:5f:fa:76:b4:2f:4f:7f:0a:27:ce:68:ec:7d:89:8f:
         01:c3:cb:8b:42:50:c8:76:21:30:35:9d:8e:19:a4:24:fb:90:
         eb:99:8e:5e:c1:66:ec:ae:ee:84:0a:b9:03:18:4a:48:4a:b1:
         a0:68:00:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFIBTUs4hqyiZbzTnGeiAshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlOGE5NTMyNzE4N2MzMDg4MGY1YmJmM2MzNzI4OWVlMzEx
YzU5MjAwHhcNMjYxMDE3MDQwMTAzWhcNMjYxMDE4MDQwMTAzWjAzMTEwLwYDVQQD
Eyg2YzdjNDQ1MmJkY2Q3ODk4MDE1OTZmOTk0N2M4YjAxYjc5YTkwMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9f0glXsvPHWhDsipEww8X+Vwi5GF
jGv9ZduiE0RkMFGvYp1O0/VpQj9qiqWZmoMJOC7/qjEQ+osNh+pNcDCmLTWDa6Fc
9joEeSZC0kcIwD1SfAt7MdlljkU3SI0KLs+7cjJAkz18cegvNBCf9QCQ/Kn73Sz2
dCt5juFCzNfmh6hyzYdkYxZglOAPaWYMyrDCS2nzUyfajP7j8jgHdgLFVFjetnnc
UvVRwLTCo3julUhYUlMx/Fbn3QRflZEK0IJjtNp6CbytfJ6F9I/JU6AN3gLYFj9R
CYrYR0pO93pWAxhuKEUOx/3xzDdNScT4/c1wd2XU/78hP4gAP3EGlUqfuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGx8RFK9zXiYAVlvmUfIsBt5qQI2MB8GA1UdIwQY
MBaAFO6KlTJxh8MIgPW788Nyie4xHFkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29xVk1uR0h3d2lBOWJ2enczS0o3akVjV1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iZjA5YjctNzFjNC00OTljLTlmZDYt
NTQ3NTEzNWYxOTA1LzEvN29xVk1uR0h3d2lBOWJ2enczS0o3akVjV1NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9iZjA5YjctNzFjNC00OTljLTlmZDYtNTQ3NTEzNWYxOTA1
LzEvN29xVk1uR0h3d2lBOWJ2enczS0o3akVjV1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbFCEh/S
yAnWJfiGy4GwE3jy8dWNBfSGnvRTs1Ky85itNL/m/yiAu/Jix8q0vZtIhvTY3cBm
lUAICcnUYun/oj9LfEgvAp62cbotYriTNk9OxFa8uQ0MiK6GkX/j5yw/13A0pHYW
J3KMewdAu19ZpM7dgm9l+yPF+klO/+QFU3ykwIoj8Xeb1An8VVZXo5RsDMuJaYRm
NTo7FLTYYtPkby7m54g1z5ws/Unqpt146DmYrbQfNhboD9c+AOtqGR644CX1EDyC
2ORMX/p2tC9PfwonzmjsfYmPAcPLi0JQyHYhMDWdjhmkJPuQ65mOXsFm7K7uhAq5
AxhKSEqxoGgA/w==
-----END CERTIFICATE-----
Generated at Sat Oct 17 05:54:31 2026 by rpki-client