Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
File:                     7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft (raw, json)
Hash identifier:          I3Q6PbYgTwMBcr+s8LjbwZB2tsrBwvG0BEwEXXroNwQ=
Subject key identifier:   D7:2B:D1:CC:44:37:9A:80:E6:57:52:58:73:E8:C1:BF:31:D3:E3:68
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Certificate issuer:       /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial:       01A1837515EBC82EC6E359C7A25CFC0DB07E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
Manifest number:          187D
Signing time:             Wed 28 Oct 2026 17:00:50 +0000
Manifest this update:     Wed 28 Oct 2026 17:00:50 +0000
Manifest next update:     Thu 29 Oct 2026 17:00:50 +0000
Files and hashes:         1: 1-eh-1pXGI5Cgf4EfxZ3-rrSgEiA.roa (hash: j6+XhxL67BgzWzBRQ/eSUIWdiMYbHn8AWKsJCtSBwfk=)
                          2: 4IET8yl_woCchuqCTBWMPicM5KQ.roa (hash: 7K7f9sxo1G7QU9QaeJu7IX3YPOqGh9AR3j3++XJopHY=)
                          3: 6qq-XP4ny-ZL6xPgXFHSsRpCuwM.roa (hash: IK596nydspVw6R5w8rD7i/ctSKHG7IK4tKm38ELlVcI=)
                          4: 7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl (hash: AA4LsRRsjRmRoYXGPuih9bb6UezjT6AK6p+UfnabWXM=)
                          5: DoUjRDq4f4RlSd01A91vUzIaXbc.roa (hash: WDggBQaa6iXBE9B1fTjOHIHynycu3WL+FvqiiQoyk0M=)
                          6: PLNxljvNbMULWVPOWC0uQS--Ges.roa (hash: gYcn3gceVAs9xiJbc+bC+drgufGqfvNkY6jlU9pioCM=)
                          7: jbel_872plfGoKA9YwYLfXTnbKA.roa (hash: uorV1dM+0LVUebt/LsRmXGvEIO0+6YrUmXE7E+mdUis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:75:15:eb:c8:2e:c6:e3:59:c7:a2:5c:fc:0d:b0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
        Validity
            Not Before: Oct 28 17:00:50 2026 GMT
            Not After : Oct 29 17:00:50 2026 GMT
        Subject: CN=d72bd1cc44379a80e657525873e8c1bf31d3e368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:9d:90:80:65:d1:26:ee:aa:b3:c7:0b:4d:
                    32:76:e0:b9:ad:ba:a5:bf:b2:c6:bb:73:0e:cf:ed:
                    c1:e7:95:4c:72:2b:e0:11:62:8f:03:23:69:61:9c:
                    99:30:00:0c:ef:2a:9d:00:44:54:2a:99:f1:ab:5c:
                    4c:ee:b5:11:3a:9a:b0:33:4a:45:6d:5e:5b:74:ab:
                    b4:76:1e:56:48:b5:b6:9f:ef:c0:6d:b0:ec:10:48:
                    9b:8f:13:d8:e8:53:31:be:5f:b8:a2:89:b2:f2:90:
                    1e:32:89:c6:fc:6e:4e:9a:8b:2a:5f:9b:6f:07:de:
                    85:c1:ba:0f:61:36:8a:7a:65:d1:f2:3e:85:8d:d7:
                    5e:f6:dd:88:ed:ff:5a:e7:90:9e:68:53:86:db:46:
                    0c:f2:55:2d:bd:52:5a:c9:81:ee:59:98:ee:f4:5c:
                    8f:3d:4b:27:c9:89:a9:c8:96:06:8f:f9:03:34:fc:
                    87:c2:da:d9:fb:00:5a:95:a4:af:1a:ec:8b:87:d2:
                    71:88:09:60:85:24:fc:a2:bf:ca:36:0b:0a:1c:97:
                    dd:a4:bb:3e:cf:5d:30:25:91:a1:39:a6:ba:c4:47:
                    05:41:6c:9b:7d:90:b0:30:1c:de:be:a1:b4:40:04:
                    4c:41:cd:2e:75:de:85:5b:fb:7c:8f:bb:67:9c:2f:
                    31:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2B:D1:CC:44:37:9A:80:E6:57:52:58:73:E8:C1:BF:31:D3:E3:68
            X509v3 Authority Key Identifier:
                keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:82:c6:c1:2a:fe:b1:b2:6c:37:8a:d2:3d:ea:ac:72:54:8c:
         23:32:34:37:cd:68:20:b2:87:2b:ca:50:76:bd:72:5b:df:bb:
         3a:92:a8:5e:10:5d:58:75:0b:d9:b3:c3:31:21:42:7b:ed:7d:
         5c:07:f3:d2:8f:43:04:81:f3:2b:9d:23:a0:37:5d:5b:95:d4:
         99:fd:73:5b:3f:c5:6b:c8:f8:bb:47:04:f2:40:5d:75:e3:19:
         bc:c6:ea:6d:5d:88:6b:65:78:03:06:05:ad:97:30:9d:be:8c:
         45:80:28:39:13:4b:6e:95:ec:f1:6e:29:19:3d:bc:2d:a4:0f:
         9e:f5:73:ca:3d:18:aa:dd:40:17:99:47:c8:57:2a:3d:43:95:
         3c:ff:b8:a4:4c:d6:42:1d:67:00:48:e0:e7:80:5e:59:c3:47:
         96:39:4a:4a:95:02:81:d3:b5:76:0c:48:73:b3:e1:01:70:77:
         de:04:98:89:0b:34:71:6b:95:3d:36:84:c1:62:60:6c:f5:35:
         01:31:95:0a:27:d6:da:74:06:17:93:84:ea:fc:4a:50:03:0a:
         d6:7d:cd:97:ef:1d:9d:49:8a:b6:e5:37:00:03:e6:e2:1d:b9:
         f7:25:bf:22:39:a3:ac:f5:15:c3:44:90:f8:bb:88:c3:dc:45:
         c2:24:38:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:49:11 2026 by rpki-client