Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
File:                     63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json)
Hash identifier:          OfcdWCK/citv8C4q8ZHv3NAuCKk89BUFIqZbSEm+O2w=
Subject key identifier:   60:F4:C5:A8:74:06:B9:50:56:13:8D:F4:D4:24:0B:B1:AF:AF:4D:16
Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D
Certificate issuer:       /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
Certificate serial:       01A14ACEF3AB505E248BA849D5678EBA1974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
Manifest number:          15B3
Signing time:             Sat 17 Oct 2026 17:00:39 +0000
Manifest this update:     Sat 17 Oct 2026 17:00:39 +0000
Manifest next update:     Sun 18 Oct 2026 17:00:39 +0000
Files and hashes:         1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: +CGkmszvBZCTRNBNkWhB3fNZZOR8v/A6nyI9tjxtc34=)
                          2: vUFwfEY11W7JpynTF9BbfUWs9-w.roa (hash: eu7mWQahLyPxvPg5BFYa4l+E4W1NHB0xDJbdLJnBmrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4a:ce:f3:ab:50:5e:24:8b:a8:49:d5:67:8e:ba:19:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
        Validity
            Not Before: Oct 17 17:00:39 2026 GMT
            Not After : Oct 18 17:00:39 2026 GMT
        Subject: CN=60f4c5a87406b95056138df4d4240bb1afaf4d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:16:b4:0a:9e:59:e3:ae:3d:47:a1:31:ee:
                    44:5a:f9:a3:d8:09:66:42:6a:95:a4:ab:cd:3a:87:
                    17:0c:fb:e5:a5:c3:e7:bb:ae:90:77:95:88:fc:26:
                    8b:5d:37:41:f9:ea:a8:07:a0:4c:6f:41:9b:85:ea:
                    d3:8e:53:f4:4f:3c:94:2d:21:b0:fc:c5:1f:82:33:
                    a2:8b:6a:74:e5:f0:e1:03:d4:e0:95:7d:bf:81:91:
                    2d:c0:63:91:15:ab:f0:b2:35:8c:5b:b7:d4:60:61:
                    e5:6d:1a:e0:0c:13:56:aa:c0:7d:13:e8:b2:d8:f9:
                    02:1b:c9:54:d1:70:b6:c8:f2:28:21:58:73:5f:2f:
                    a1:10:cc:08:e5:52:34:b3:d8:d7:28:d7:e9:cf:25:
                    57:17:26:c1:d1:d2:04:83:83:7e:6e:6c:46:43:d2:
                    dc:50:af:89:0c:02:97:06:30:6c:e0:1f:be:7f:47:
                    6d:8b:e8:24:da:f0:dd:b3:92:a7:f0:e5:92:bd:3d:
                    cc:66:f6:da:2a:56:07:b9:c6:d2:cb:b1:2e:50:ff:
                    a5:98:de:30:f1:44:cc:63:64:b1:a7:56:40:19:99:
                    62:1c:f7:87:40:72:5d:af:93:1e:2d:10:68:d0:83:
                    69:99:8f:d9:91:d5:34:cd:a1:56:71:6e:52:6a:7f:
                    fc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F4:C5:A8:74:06:B9:50:56:13:8D:F4:D4:24:0B:B1:AF:AF:4D:16
            X509v3 Authority Key Identifier:
                keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2b:89:b3:08:fb:3f:c8:0c:8e:42:1e:7b:d0:4a:1a:d6:b9:
         3b:6b:81:4d:34:46:16:f4:ce:ce:37:5a:14:72:bf:b1:4e:2b:
         f7:d9:37:1f:a2:81:ba:fd:6d:a6:dc:86:40:9a:55:23:da:80:
         37:06:28:56:b4:32:08:5a:f8:1b:f3:a4:62:68:5d:86:26:d8:
         87:32:df:a1:01:9a:d6:f8:87:c7:51:cf:67:4f:56:df:15:34:
         ab:51:00:4f:15:29:0f:50:e3:f8:ea:0d:d8:87:6e:5c:22:a0:
         de:bf:3e:7c:02:e9:0c:a0:c6:1a:1f:e7:62:07:0f:06:5b:eb:
         34:74:5e:a8:52:28:82:f0:fd:f4:36:38:a0:27:01:9f:23:98:
         6c:fa:93:e0:b4:e1:af:fc:d8:97:8c:d9:92:cd:47:4f:76:49:
         a0:9d:94:89:24:5a:e1:a0:a9:ea:77:e3:2a:f0:96:0a:e5:1c:
         8e:6a:be:9c:61:fd:b0:2a:d4:e5:19:4d:64:ae:d4:85:98:27:
         12:39:cb:82:91:c1:39:b8:fc:e5:d1:68:fc:56:ec:16:9a:d9:
         49:70:b6:89:ef:9b:66:0a:ee:92:59:70:59:1f:d3:7e:81:8d:
         26:86:06:99:13:43:1f:62:5c:fc:15:0a:e1:d1:74:59:35:b1:
         03:8c:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:26:40 2026 by rpki-client