Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
File:                     7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft (raw, json)
Hash identifier:          nzlI1pNBKnpYOnypaIFyW1PxiUkhGM60FH3MbygtOoc=
Subject key identifier:   37:DA:70:C0:A0:E7:40:7D:63:83:F9:0B:C6:53:BC:19:81:D9:85:ED
Authority key identifier: EE:9F:FE:53:E6:2E:29:EA:A5:BD:6A:A8:17:89:8D:3C:38:F8:FC:A4
Certificate issuer:       /CN=ee9ffe53e62e29eaa5bd6aa817898d3c38f8fca4
Certificate serial:       01A18D54DFD6801A2549D25F89C5D6B1229C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
Manifest number:          0147
Signing time:             Fri 30 Oct 2026 15:01:52 +0000
Manifest this update:     Fri 30 Oct 2026 15:01:52 +0000
Manifest next update:     Sat 31 Oct 2026 15:01:52 +0000
Files and hashes:         1: 7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl (hash: oC5VuNO20vqwxJhlmkxcdOWcXM48YQAJeJXRGOZp4kk=)
                          2: HknPQh-0Yk6yaxmwcZa5py8_zl0.roa (hash: wuIV5US3SZC05FFGszlUmrIVNWyDFMwcOW0Vs4e0MUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8d:54:df:d6:80:1a:25:49:d2:5f:89:c5:d6:b1:22:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee9ffe53e62e29eaa5bd6aa817898d3c38f8fca4
        Validity
            Not Before: Oct 30 15:01:52 2026 GMT
            Not After : Oct 31 15:01:52 2026 GMT
        Subject: CN=37da70c0a0e7407d6383f90bc653bc1981d985ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:78:ea:58:65:54:1b:d2:9c:40:a8:2c:d6:4b:
                    58:ae:2b:17:cd:f1:0d:aa:42:bb:8a:92:f4:c2:8f:
                    95:64:f3:6f:ab:47:8e:07:9a:d8:e0:4b:e4:e3:49:
                    bf:f7:85:0b:51:a2:61:d4:f4:8a:20:34:c4:6a:6c:
                    bb:6b:42:94:e0:42:cf:45:c7:13:10:6a:ed:1a:ed:
                    3a:d3:bf:5d:9b:39:fe:06:a2:aa:37:30:24:e2:93:
                    21:f1:06:3a:38:e8:9b:16:9b:af:77:9d:68:e9:ca:
                    30:fe:10:a5:74:f7:94:59:41:fa:a0:0b:b9:5e:b9:
                    12:f1:e9:5c:5b:0f:15:bc:28:31:7d:93:25:23:2b:
                    fc:e7:17:7e:26:23:76:9b:54:87:52:7c:1a:6d:51:
                    df:d0:2a:c6:46:ba:e7:56:1a:5a:a2:f5:89:74:c1:
                    1c:8c:a4:9c:e0:a5:8e:3a:49:35:43:e5:55:e7:3a:
                    ae:a7:22:fe:6c:a9:3d:fc:da:b9:dc:36:1a:74:4c:
                    ec:92:4a:22:83:aa:52:43:97:33:d2:1b:1b:6e:fd:
                    d9:c1:39:21:45:4e:c2:ce:11:d8:df:3f:21:40:56:
                    c4:e5:e1:5b:33:cc:4f:d9:b0:02:a5:af:4e:1f:85:
                    51:f7:bb:32:df:be:6b:52:52:c9:07:55:45:08:dc:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DA:70:C0:A0:E7:40:7D:63:83:F9:0B:C6:53:BC:19:81:D9:85:ED
            X509v3 Authority Key Identifier:
                keyid:EE:9F:FE:53:E6:2E:29:EA:A5:BD:6A:A8:17:89:8D:3C:38:F8:FC:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b85fc7-b80b-4652-96fd-efdf24177659/1/7p_-U-YuKeqlvWqoF4mNPDj4_KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:cd:cf:2c:cd:4d:b9:01:ae:11:22:68:f6:39:f4:69:7c:01:
         01:fa:66:af:f7:40:b7:88:04:d1:c8:95:0b:58:a6:f1:ec:90:
         6d:6d:30:2e:3c:7c:d3:09:de:d3:14:a2:68:1e:48:1f:5a:60:
         c5:06:59:77:0d:30:be:14:d2:27:f5:25:c1:27:ad:19:f5:1f:
         1d:8f:1b:e1:16:4e:dd:8a:dd:2a:5f:b6:76:7b:47:ae:da:64:
         2a:32:b6:9c:0a:0b:a3:09:4a:6b:2b:90:67:f7:88:42:82:74:
         9b:cc:0a:8a:e1:b6:0e:ca:89:13:7e:92:00:db:53:6b:ec:13:
         51:c4:68:3a:36:34:b5:b6:6e:64:d2:d5:c8:e2:60:c1:ce:81:
         36:32:36:fe:d4:a3:81:4a:c3:99:90:38:de:f0:e9:88:47:01:
         e5:b8:2e:dd:18:8d:6d:35:fe:8d:2b:9e:b4:04:5d:66:92:e7:
         77:f9:81:55:a0:ef:68:ea:ac:57:53:68:e8:f2:90:cb:8f:ad:
         87:47:25:a1:4e:32:bd:90:b2:c8:70:f9:a4:54:83:9d:c3:ad:
         70:43:bb:b2:e8:c1:74:16:80:86:3f:5c:20:1c:4f:e3:d8:f9:
         d0:f3:8f:70:93:f3:86:dd:45:ec:1b:36:10:43:a2:9c:0d:4a:
         04:d5:67:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:07:13 2026 by rpki-client