Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
File:                     7JezJx8tLSwHdy-q0BM8VG5JdAg.mft (raw, json)
Hash identifier:          Z3BBPL5b7SWD7BuSd8U+HMxwcrDYG1WmfJiqJRpkjOw=
Subject key identifier:   44:EC:0F:12:79:3A:72:06:C1:D2:22:01:9C:11:D8:0D:92:E8:20:64
Authority key identifier: EC:97:B3:27:1F:2D:2D:2C:07:77:2F:AA:D0:13:3C:54:6E:49:74:08
Certificate issuer:       /CN=ec97b3271f2d2d2c07772faad0133c546e497408
Certificate serial:       01A18C78B7D52D36FE7C943A370CAF0E0269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
Manifest number:          02BD
Signing time:             Fri 30 Oct 2026 11:01:23 +0000
Manifest this update:     Fri 30 Oct 2026 11:01:23 +0000
Manifest next update:     Sat 31 Oct 2026 11:01:23 +0000
Files and hashes:         1: 7JezJx8tLSwHdy-q0BM8VG5JdAg.crl (hash: HlKzKKlgd85jTYGZpGNELrB3mbKCIkAEqRTHGfm728Y=)
                          2: tZzd-4vJwTNaHI1mDTSbAye9aUg.roa (hash: WUVxikPavSYyUIB2ehZCr1awJETbczoTgfaX/AVFzSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8c:78:b7:d5:2d:36:fe:7c:94:3a:37:0c:af:0e:02:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec97b3271f2d2d2c07772faad0133c546e497408
        Validity
            Not Before: Oct 30 11:01:23 2026 GMT
            Not After : Oct 31 11:01:23 2026 GMT
        Subject: CN=44ec0f12793a7206c1d222019c11d80d92e82064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:c1:57:42:21:bd:19:3b:30:28:1b:49:33:
                    18:06:48:5f:ae:f0:8d:c6:f5:90:05:07:5e:66:b8:
                    aa:3e:96:a3:a4:ac:c6:15:80:db:9d:f7:50:9d:1f:
                    e1:69:8f:c1:0f:8e:29:cb:2e:16:88:57:d0:b1:f6:
                    80:ad:af:a7:87:a0:eb:37:43:51:b8:a7:38:5f:6c:
                    51:4e:9d:b5:7a:2a:59:1f:b0:b9:0c:02:58:43:a2:
                    68:81:f2:bd:c7:5f:79:78:2f:80:c1:5c:9f:fa:8d:
                    25:4a:4e:42:f0:3f:a3:58:d5:5c:b0:45:7e:73:12:
                    96:49:cd:dc:58:6b:72:8c:08:a3:fe:e3:3c:09:d1:
                    d2:92:32:ab:73:79:fb:3f:fa:c5:1c:94:2d:dd:83:
                    2f:d2:f6:d5:ad:2a:fc:79:8d:50:02:f0:c2:07:38:
                    8e:70:0b:3c:1f:78:03:8c:cc:99:27:ba:ba:5a:2b:
                    b3:af:eb:d4:4f:ec:f5:e5:82:17:5c:56:ee:b6:d5:
                    03:57:26:0c:a3:59:a0:19:99:e7:7e:e5:76:11:f2:
                    cc:69:1b:a3:49:e0:ec:f4:b6:35:09:60:5f:d6:12:
                    8e:70:e2:04:47:cd:45:d7:63:1e:6f:02:fc:8e:60:
                    11:02:29:8c:ab:99:91:e9:62:d5:15:e8:e9:7d:49:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EC:0F:12:79:3A:72:06:C1:D2:22:01:9C:11:D8:0D:92:E8:20:64
            X509v3 Authority Key Identifier:
                keyid:EC:97:B3:27:1F:2D:2D:2C:07:77:2F:AA:D0:13:3C:54:6E:49:74:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7f:8b:1a:79:b2:c4:50:c0:2b:19:6f:de:02:d5:e5:95:dc:
         ec:c8:18:ff:fe:9c:fd:9e:d8:26:21:ca:bd:38:9a:12:b0:12:
         dd:5c:8c:c6:8c:84:3d:cc:18:a1:9d:11:1b:67:e3:c6:61:c1:
         e7:97:87:3b:de:db:ae:a0:d9:e9:91:3a:da:43:13:72:e4:fc:
         86:12:49:90:26:e2:0e:f1:9b:6a:09:6f:ed:1b:31:a2:eb:3b:
         0d:58:a3:dd:e2:7f:13:d8:a4:8b:44:ea:8c:05:d1:09:3e:50:
         80:4c:71:22:17:8c:4e:35:82:68:ac:53:10:27:32:61:0b:b7:
         82:32:46:ae:a8:5e:22:a4:df:7d:33:a0:4d:d7:03:7e:84:bb:
         ea:5d:1a:74:e2:05:9c:ec:c2:74:9e:15:c7:f0:90:5d:a4:c5:
         15:25:82:1c:aa:eb:cd:98:ee:9c:47:e8:e4:a0:cc:66:bb:2c:
         48:3c:84:e4:5f:01:97:e5:f0:ef:3b:af:b4:75:79:7d:49:99:
         02:38:0a:a7:fd:46:37:ba:03:ef:72:e1:e8:f6:cd:0b:ec:7a:
         df:a2:18:cd:be:28:0f:33:24:e0:c7:22:b4:df:2b:fe:50:c3:
         79:bf:98:d0:15:97:5c:7b:09:f9:11:aa:25:b2:fb:d9:df:bb:
         e4:fa:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:41:41 2026 by rpki-client