Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File:                     7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier:          esdQCrjW/BE7sPQlgM3vyeN/ChDmL7Ofq8GPPkkb/1c=
Subject key identifier:   59:9F:21:08:B6:8E:72:D3:BE:5B:EB:52:97:EA:58:44:66:AA:0A:78
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer:       /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial:       01A13DEEE8DB6623C5AF1FAAAAB6BAD5D4DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number:          0737
Signing time:             Thu 15 Oct 2026 05:00:29 +0000
Manifest this update:     Thu 15 Oct 2026 05:00:29 +0000
Manifest next update:     Fri 16 Oct 2026 05:00:29 +0000
Files and hashes:         1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: mLEAIUImnZbmaMTlboCfz7eQ4Sd7rOy4mUCv5Gk5CMw=)
                          2: 9agfB9dVL-Kd6aIq8hf6VJQFr-c.roa (hash: 0rqJmTL+IHF4zuPR+5EuCzywtP32Y0FzvoOjmasnRjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:ee:e8:db:66:23:c5:af:1f:aa:aa:b6:ba:d5:d4:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
        Validity
            Not Before: Oct 15 05:00:29 2026 GMT
            Not After : Oct 16 05:00:29 2026 GMT
        Subject: CN=599f2108b68e72d3be5beb5297ea584466aa0a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:60:ac:e6:8e:41:9d:27:b5:ef:4b:5e:6c:b9:
                    8f:df:3e:4e:48:58:2f:fa:34:f5:d2:15:c3:19:d4:
                    c9:72:34:20:db:f2:2c:8f:f5:d7:88:e8:d7:2e:38:
                    93:e1:c1:4a:fa:16:96:9f:8c:82:90:5c:31:2b:79:
                    ab:ef:03:81:c0:8c:14:72:ae:7a:10:77:5d:ee:54:
                    83:fd:1d:e8:38:c1:94:31:f3:54:9e:62:9e:4a:c3:
                    62:73:72:0b:1b:d3:42:56:8b:a9:43:37:fd:e0:67:
                    36:77:fd:ca:5c:a0:a4:fc:5b:c2:ed:35:bc:cf:3d:
                    64:35:73:94:4e:67:4d:c4:cd:a0:d5:ba:39:e8:0f:
                    22:37:cf:d4:57:a1:1e:2d:f8:ae:78:82:bf:0c:06:
                    a2:58:11:c6:a1:ae:5d:7d:8e:4a:63:98:79:8a:13:
                    2c:59:98:1e:cf:48:5e:f6:fb:16:6c:21:62:0f:ba:
                    2c:dc:3d:9a:32:9a:3d:5a:64:d7:02:38:b7:c1:a7:
                    b9:ef:68:74:41:fb:9d:ea:a8:7f:e6:36:81:e6:ad:
                    d7:58:f3:f3:3a:bc:a3:a0:1d:11:03:18:10:12:ba:
                    2a:b1:c7:30:03:68:65:38:4a:1d:0f:17:87:d5:e4:
                    bb:10:45:67:dd:fb:81:bc:06:3e:78:66:63:62:f0:
                    15:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9F:21:08:B6:8E:72:D3:BE:5B:EB:52:97:EA:58:44:66:AA:0A:78
            X509v3 Authority Key Identifier:
                keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:84:4d:6c:af:48:81:27:39:3b:25:89:d5:25:18:41:f2:84:
         19:4c:56:8f:9b:54:77:e0:a1:9f:88:1a:8b:f5:43:89:7f:fd:
         d1:e6:61:ba:cf:90:03:ea:d9:2f:1b:3b:76:2a:71:29:fa:7b:
         67:1d:23:f6:f4:d7:66:3e:c7:c0:a1:f4:7f:5e:87:7b:b9:1e:
         29:a1:30:af:c2:c8:54:d0:45:8b:33:07:f6:7e:e9:44:5f:08:
         a6:59:09:f3:f6:4f:ad:1e:60:74:b9:67:89:a8:a4:17:63:a5:
         87:47:3f:25:3f:9d:14:ef:15:e8:b8:09:f8:cf:82:63:91:ad:
         da:cf:a1:10:aa:f9:20:60:00:aa:30:8e:f1:9f:a8:3e:17:47:
         80:54:08:ca:cf:d4:55:ae:97:4f:e7:db:ac:99:78:a3:4a:8b:
         fc:68:b8:f7:a4:76:ac:12:56:ff:e8:d4:43:54:dc:3e:34:42:
         6e:e2:75:9a:2b:9e:43:fb:1d:1d:10:02:96:7e:d8:ec:e9:64:
         0a:c0:67:ff:f6:81:24:69:17:2f:2e:d1:31:b8:49:91:bf:1a:
         bc:0a:bc:8d:d9:79:ba:69:f5:74:33:33:a9:f8:f5:97:0f:9b:
         67:0d:75:55:53:21:7c:a0:6c:89:88:cd:11:43:b8:c6:fe:ab:
         60:77:3f:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE97ujbZiPFrx+qqra61dTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzk2N2FkMGE0NThiODI4MjllZTllMmNjZDZhZTk2MzFk
NTQyMTIwHhcNMjYxMDE1MDUwMDI5WhcNMjYxMDE2MDUwMDI5WjAzMTEwLwYDVQQD
Eyg1OTlmMjEwOGI2OGU3MmQzYmU1YmViNTI5N2VhNTg0NDY2YWEwYTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmCs5o5BnSe170tebLmP3z5OSFgv
+jT10hXDGdTJcjQg2/Isj/XXiOjXLjiT4cFK+haWn4yCkFwxK3mr7wOBwIwUcq56
EHdd7lSD/R3oOMGUMfNUnmKeSsNic3ILG9NCVoupQzf94Gc2d/3KXKCk/FvC7TW8
zz1kNXOUTmdNxM2g1bo56A8iN8/UV6EeLfiueIK/DAaiWBHGoa5dfY5KY5h5ihMs
WZgez0he9vsWbCFiD7os3D2aMpo9WmTXAji3wae572h0Qfud6qh/5jaB5q3XWPPz
OryjoB0RAxgQEroqsccwA2hlOEodDxeH1eS7EEVn3fuBvAY+eGZjYvAVwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmfIQi2jnLTvlvrUpfqWERmqgp4MB8GA1UdIwQY
MBaAFO45Z60KRYuCgp7p4szWrpYx1UISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQt
MmYzMjgxNmU3NzYwLzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQtMmYzMjgxNmU3NzYw
LzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4RNbK9I
gSc5OyWJ1SUYQfKEGUxWj5tUd+Chn4gai/VDiX/90eZhus+QA+rZLxs7dipxKfp7
Zx0j9vTXZj7HwKH0f16He7keKaEwr8LIVNBFizMH9n7pRF8IplkJ8/ZPrR5gdLln
iaikF2Olh0c/JT+dFO8V6LgJ+M+CY5Gt2s+hEKr5IGAAqjCO8Z+oPhdHgFQIys/U
Va6XT+fbrJl4o0qL/Gi496R2rBJW/+jUQ1TcPjRCbuJ1miueQ/sdHRACln7Y7Olk
CsBn//aBJGkXLy7RMbhJkb8avAq8jdl5umn1dDMzqfj1lw+bZw11VVMhfKBsiYjN
EUO4xv6rYHc/mA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 13:25:13 2026 by rpki-client