Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
File:                     7edmLVl_r8lt12VXdQjD7QKdZWc.mft (raw, json)
Hash identifier:          0m6jk95sJsfr3A85SVdQdnHajmLiEVFU4HCqZx60Ef4=
Subject key identifier:   AF:92:F9:DA:E8:A3:F4:8D:90:E8:B4:61:AA:47:AF:4B:07:DD:A1:2F
Authority key identifier: ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
Certificate issuer:       /CN=ede7662d597fafc96dd765577508c3ed029d6567
Certificate serial:       01A13ECBAFBE60FFC0F0DEFD1C5B9D66B388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
Manifest number:          1AA5
Signing time:             Thu 15 Oct 2026 09:01:38 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:38 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:38 +0000
Files and hashes:         1: 3OMBkOzT06rmiiUnS5LEcdnXd4E.roa (hash: TjjnmhASdsxVvkkPJGFd8+LbQbz+nLBXswxcPbrOPCQ=)
                          2: 7edmLVl_r8lt12VXdQjD7QKdZWc.crl (hash: 4OOySUDyniGDCpxQ+oc5zhq2PI7WAC21ciyUBjmFqgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:af:be:60:ff:c0:f0:de:fd:1c:5b:9d:66:b3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede7662d597fafc96dd765577508c3ed029d6567
        Validity
            Not Before: Oct 15 09:01:38 2026 GMT
            Not After : Oct 16 09:01:38 2026 GMT
        Subject: CN=af92f9dae8a3f48d90e8b461aa47af4b07dda12f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:4b:ff:27:43:43:dd:c3:17:3f:4b:a6:05:
                    2b:eb:f3:ee:dc:75:e2:23:a9:38:e3:a9:94:b1:41:
                    01:36:be:05:a0:75:05:0e:25:5b:c6:4f:c2:20:ef:
                    a9:49:42:65:75:02:c5:80:a5:6f:f6:e4:9f:05:1c:
                    f2:dd:b7:48:89:99:eb:e0:24:67:38:6c:54:91:e7:
                    ad:e1:6b:86:61:8a:25:58:8b:17:10:76:d5:ba:b8:
                    f2:45:f2:e6:c9:72:47:40:7e:d7:51:88:5d:a8:2e:
                    50:ca:a0:36:96:f5:86:cb:22:1a:97:15:b5:86:06:
                    89:51:1e:c5:d9:70:84:58:59:e8:33:f9:ad:74:c6:
                    aa:70:35:91:44:96:c2:9c:82:06:70:35:3c:cf:54:
                    bd:2a:ff:42:e2:24:13:05:7c:01:ea:2b:9d:bf:07:
                    91:9e:86:ea:88:da:0c:99:8d:fd:11:3a:c1:18:ca:
                    3e:90:8d:53:42:28:46:c8:9a:f3:4e:43:a4:e0:ef:
                    ca:12:64:99:55:52:a4:44:cb:3d:3e:ba:fc:6a:a1:
                    17:74:19:a5:ea:e8:a1:62:d6:3c:e3:db:b4:6b:b4:
                    d6:fd:72:9d:bf:16:ba:6e:ad:35:84:e5:df:02:90:
                    7f:33:d6:4a:e2:4f:68:fa:24:09:b0:73:6e:c6:a0:
                    1c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:92:F9:DA:E8:A3:F4:8D:90:E8:B4:61:AA:47:AF:4B:07:DD:A1:2F
            X509v3 Authority Key Identifier:
                keyid:ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ba:93:9b:c1:cb:44:a5:69:b9:ce:7f:f7:52:89:a9:69:b5:
         24:60:32:e6:3f:2c:28:66:37:c3:cc:46:39:d8:80:b1:47:ae:
         b3:5a:2e:62:0e:1f:12:4b:49:80:3e:19:7f:6f:40:73:f4:1f:
         f7:fe:70:6a:a9:ac:33:33:16:8a:86:0e:bc:ff:ca:24:75:a6:
         d3:53:f8:33:23:aa:c8:3f:df:ea:c3:50:b5:2c:33:47:3a:1e:
         a3:16:0b:c2:2f:28:ec:e9:79:87:08:36:e5:ae:0f:67:b4:cc:
         01:4b:f2:64:35:f1:99:98:ff:79:0b:52:34:8f:dc:43:24:da:
         9a:ac:17:ef:04:e7:a4:38:ab:31:3d:02:ce:c0:4f:ea:c6:ee:
         0d:3f:8b:f6:d8:64:f0:c6:45:57:96:9f:12:cf:d8:d8:ee:39:
         2f:99:f8:05:9b:55:d3:32:b0:ea:11:42:bf:ba:81:6c:02:e4:
         1b:d9:e1:2d:47:b6:9b:7d:01:dd:4d:08:da:3b:8a:63:9c:37:
         9c:59:f4:b2:cd:c5:29:68:6a:35:c6:3e:6b:4b:5d:57:77:a9:
         8d:aa:57:82:d6:0f:08:a4:8a:f5:37:92:38:52:f2:f0:6b:cc:
         92:bc:24:90:6e:12:c7:9d:e4:d5:c5:c6:03:45:a9:0d:87:cd:
         a2:e4:67:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+y6++YP/A8N79HFudZrOIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZTc2NjJkNTk3ZmFmYzk2ZGQ3NjU1Nzc1MDhjM2VkMDI5
ZDY1NjcwHhcNMjYxMDE1MDkwMTM4WhcNMjYxMDE2MDkwMTM4WjAzMTEwLwYDVQQD
EyhhZjkyZjlkYWU4YTNmNDhkOTBlOGI0NjFhYTQ3YWY0YjA3ZGRhMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHhL/ydDQ93DFz9LpgUr6/Pu3HXi
I6k446mUsUEBNr4FoHUFDiVbxk/CIO+pSUJldQLFgKVv9uSfBRzy3bdIiZnr4CRn
OGxUkeet4WuGYYolWIsXEHbVurjyRfLmyXJHQH7XUYhdqC5QyqA2lvWGyyIalxW1
hgaJUR7F2XCEWFnoM/mtdMaqcDWRRJbCnIIGcDU8z1S9Kv9C4iQTBXwB6iudvweR
nobqiNoMmY39ETrBGMo+kI1TQihGyJrzTkOk4O/KEmSZVVKkRMs9Prr8aqEXdBml
6uihYtY849u0a7TW/XKdvxa6bq01hOXfApB/M9ZK4k9o+iQJsHNuxqAcKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+S+droo/SNkOi0YapHr0sH3aEvMB8GA1UdIwQY
MBaAFO3nZi1Zf6/JbddlV3UIw+0CnWVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yZGNlMDQtNzQ3YS00YTRkLTk2YTIt
ZDM1N2Y1YWVlYjg1LzEvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yZGNlMDQtNzQ3YS00YTRkLTk2YTItZDM1N2Y1YWVlYjg1
LzEvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbqTm8HL
RKVpuc5/91KJqWm1JGAy5j8sKGY3w8xGOdiAsUeus1ouYg4fEktJgD4Zf29Ac/Qf
9/5waqmsMzMWioYOvP/KJHWm01P4MyOqyD/f6sNQtSwzRzoeoxYLwi8o7Ol5hwg2
5a4PZ7TMAUvyZDXxmZj/eQtSNI/cQyTamqwX7wTnpDirMT0CzsBP6sbuDT+L9thk
8MZFV5afEs/Y2O45L5n4BZtV0zKw6hFCv7qBbALkG9nhLUe2m30B3U0I2juKY5w3
nFn0ss3FKWhqNcY+a0tdV3epjapXgtYPCKSK9TeSOFLy8GvMkrwkkG4Sx53k1cXG
A0WpDYfNouRnfA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:06:16 2026 by rpki-client