Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
File:                     7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json)
Hash identifier:          4CyyFty1GH99gaCsJVHxuLH57dRoK1jD1sYIJjx95jU=
Subject key identifier:   77:94:A5:66:63:F4:52:F2:0E:74:DC:89:0C:5A:59:A3:82:1F:EE:63
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Certificate issuer:       /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial:       01A13E5CF5697311BC71C211296409C664A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
Manifest number:          143C
Signing time:             Thu 15 Oct 2026 07:00:41 +0000
Manifest this update:     Thu 15 Oct 2026 07:00:41 +0000
Manifest next update:     Fri 16 Oct 2026 07:00:41 +0000
Files and hashes:         1: 6UcUmEautvpvMnTzbqlUFFqwHPk.roa (hash: ixisQXZ4Rb1bn7n/nHLhuuBXi93MfJ/FXdmklcMC01w=)
                          2: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: QYnvyM38zHG7Sgc9+YSt9+NRsq9rrl5NcuApOfYqxvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:5c:f5:69:73:11:bc:71:c2:11:29:64:09:c6:64:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
        Validity
            Not Before: Oct 15 07:00:41 2026 GMT
            Not After : Oct 16 07:00:41 2026 GMT
        Subject: CN=7794a56663f452f20e74dc890c5a59a3821fee63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7f:85:3b:3e:0c:b3:46:f2:ad:70:df:44:1f:
                    05:4d:80:74:5d:3e:0a:41:bd:07:9b:d3:95:bf:98:
                    94:51:4e:35:12:1b:98:9d:80:a9:10:ca:3b:55:0a:
                    3a:bd:07:1c:69:93:03:3d:c8:73:28:4f:33:65:cb:
                    79:bf:8b:b3:86:6f:ad:ff:1a:fc:af:77:3c:a2:61:
                    ca:1a:f8:58:2f:23:ec:89:d8:4d:41:5e:0e:14:ec:
                    68:15:ac:82:18:9c:8a:e8:90:78:4a:aa:e2:68:e9:
                    5c:0f:3a:c9:1c:23:a5:2a:25:f7:59:de:b6:36:67:
                    d4:21:cb:00:24:31:01:45:58:9d:f2:bb:76:5b:14:
                    f2:d7:5c:3d:86:bb:6c:14:40:4b:0b:0c:8f:6e:73:
                    bd:36:8c:21:3d:71:61:5e:19:bb:c7:35:92:ef:86:
                    1f:07:36:4c:84:9d:20:ae:8f:73:ba:4a:f5:bc:11:
                    0e:07:2f:7f:64:a1:9d:b5:3b:bb:54:33:05:ba:74:
                    f2:5f:25:c0:d1:9b:0b:75:53:02:f9:af:b6:ab:98:
                    7c:d2:34:ee:97:0e:2f:7c:7c:69:5c:2a:88:6c:4c:
                    51:8d:c6:83:a6:f5:e3:b3:a4:1c:22:44:b3:09:51:
                    bf:2d:7c:f1:cd:de:c8:ad:42:13:25:b0:45:11:1f:
                    f0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:94:A5:66:63:F4:52:F2:0E:74:DC:89:0C:5A:59:A3:82:1F:EE:63
            X509v3 Authority Key Identifier:
                keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:fa:d8:67:eb:d5:1a:6c:9b:98:37:4b:1b:61:8b:5e:e9:78:
         16:5e:b5:64:92:4b:a7:94:ad:63:f4:03:23:18:33:eb:85:c3:
         71:cc:19:93:e1:b8:d4:8f:39:9e:e0:de:04:8f:9b:23:8d:78:
         16:cf:2e:4c:75:29:07:27:36:41:bf:5b:8b:75:7e:86:16:d9:
         0f:06:22:b3:92:c4:c4:41:37:17:27:d0:01:a0:cc:2b:ef:0a:
         c9:b9:11:59:ea:30:62:4c:8d:3f:40:07:22:7e:f7:7a:b3:95:
         7c:1f:17:c8:f1:ac:ee:db:26:80:4d:97:fc:ce:6a:c7:fd:6b:
         84:45:5a:96:fb:03:1f:b7:5a:17:73:c3:00:9b:f1:83:45:75:
         0c:f1:26:ca:2c:fd:88:cd:05:f3:f5:6d:1c:b7:7d:77:94:b2:
         db:00:4a:9a:07:e5:f6:24:58:44:52:da:88:5c:7d:aa:26:fb:
         f0:06:6e:e2:6c:85:87:30:24:84:dc:3c:44:17:93:63:05:9c:
         26:c9:a4:c1:06:14:91:02:ad:09:bb:bb:07:a1:38:22:bb:14:
         47:05:e3:41:31:7c:e3:d0:14:31:67:e6:89:7f:e7:a0:9d:a1:
         64:bc:ea:aa:47:54:e2:79:82:a3:38:f4:c4:2c:4a:1d:c7:7c:
         b4:f6:c4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:21:25 2026 by rpki-client