Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File:                     v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier:          8e4J9UrWdW2ic2WiFNk4huM4NIot/WUbsXxI9T8oxJo=
Subject key identifier:   A9:51:63:88:75:7C:85:8D:7B:4B:D9:D4:1E:06:5B:BC:CB:53:24:F6
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer:       /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial:       01A13E262A4FF294686568436789DBC77FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number:          0F54
Signing time:             Thu 15 Oct 2026 06:00:50 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:50 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:50 +0000
Files and hashes:         1: 5qCGbZj0fFzeN9z8gSaICT7yMA8.roa (hash: G66CwDSwPZ1mdj+oT5dw0nJbDcfnWDDiijDE5PcBGVI=)
                          2: W6VRxWMjY9RGYyNWUZ2Zrt5iGrQ.roa (hash: yDioc2gm4HKxpifXJms6Im9q4otOwWsYrylm+7dKp/8=)
                          3: Xts4DhBp7ZAXfoRbGSvo9y0epuw.roa (hash: +l+O+f+RgDS0P2v4v/Eiuo9qo0STO/EOfvPlMPBfz4M=)
                          4: ba0ulzzlxoKj7mmyIENd0mKkNQw.roa (hash: p7fb2fAb3ItubjjP5l3VBGCbn7g/XTc7585asMeO0R0=)
                          5: c5q6TPwm54z2LvrJGvcWXn2lLuc.roa (hash: PfHyIuw7JwnsE13vLHW24JJ5nVp6Ybi/KbqXWAmiqzc=)
                          6: ck5nzW7UcSxKWzHP2H-a3ylVN5E.roa (hash: OEda1WOM4ctfo76KkiHy1LOUWsgAZX7lWi/0FxF3rRA=)
                          7: dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa (hash: Lm0/M7odPEdXSXGeFcgguujGj4w0jC2wgnprNlK79t8=)
                          8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: rt/MESs/76g+jhxV4BZ8rwscOc04Z8eT2HZ+yOpyJbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:2a:4f:f2:94:68:65:68:43:67:89:db:c7:7f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
        Validity
            Not Before: Oct 15 06:00:50 2026 GMT
            Not After : Oct 16 06:00:50 2026 GMT
        Subject: CN=a9516388757c858d7b4bd9d41e065bbccb5324f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:b5:95:1e:ac:b9:1b:bf:6e:8e:99:fa:2e:
                    da:ff:87:d1:1b:13:1c:bd:58:51:04:d6:aa:de:1e:
                    da:29:a4:24:b8:f4:45:8a:f6:75:7f:c0:e2:8d:c9:
                    19:1b:68:11:01:61:b5:a9:fb:a7:2e:ad:a0:ed:87:
                    86:77:6f:20:64:9c:e4:38:40:e0:07:45:a2:21:39:
                    61:64:f4:e4:93:80:cc:c1:4b:bf:8e:cb:93:32:eb:
                    d3:ef:36:8e:39:e9:c4:c2:22:da:01:b2:e8:65:32:
                    e3:39:77:dd:eb:da:bc:70:25:09:29:f4:66:1b:9b:
                    7c:6f:1e:6d:51:a2:2e:ec:74:3c:15:d3:d1:43:4e:
                    30:40:4d:5f:af:16:6b:b3:ae:d0:82:b6:aa:04:4c:
                    ef:64:30:c6:a8:d4:19:fc:e2:7c:35:b3:8f:93:1d:
                    62:86:16:75:b4:7b:c3:08:8c:e9:70:ac:9d:bc:d4:
                    dd:ef:d2:3d:50:3d:ab:c9:bf:cf:39:22:c7:36:48:
                    8d:aa:af:4d:ac:68:c3:5a:85:ce:3b:bd:7b:c6:0f:
                    f6:a0:6d:ee:b6:be:8b:6f:75:fc:25:bd:0b:5e:7c:
                    13:3c:96:3b:02:cf:58:c5:00:10:77:fb:f6:bb:9b:
                    91:ad:56:8d:da:f4:de:e6:86:dc:4e:c3:a9:b5:03:
                    1d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:51:63:88:75:7C:85:8D:7B:4B:D9:D4:1E:06:5B:BC:CB:53:24:F6
            X509v3 Authority Key Identifier:
                keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:2c:9b:1e:c6:8b:bf:20:0e:c8:85:31:e6:4a:64:f7:a8:e8:
         85:fc:c7:d6:b2:be:2f:aa:1c:58:cf:08:f4:27:04:e9:17:76:
         50:58:90:25:ad:1d:c6:52:e8:f2:c4:f9:ba:4c:b2:1d:23:a6:
         32:f7:d3:ac:73:bb:16:66:e2:4b:1c:9e:13:e0:70:b9:d6:d5:
         17:b8:ea:9d:26:de:15:06:2a:c1:89:db:2d:03:4c:7b:61:50:
         45:b3:94:2e:8a:36:ff:1f:ae:c9:4e:75:7f:83:04:99:e0:5d:
         a7:90:83:28:cd:15:cf:a5:9e:2f:4d:34:eb:7d:e4:c1:fc:32:
         58:e8:67:73:b2:7f:a2:86:87:fb:3e:dd:e3:04:31:57:1c:e0:
         e7:c0:cc:57:a6:78:cd:a4:b5:fc:c0:f7:9f:83:46:95:89:b3:
         8c:af:97:93:a4:dc:b5:4f:c1:91:af:a6:5d:86:c7:5d:32:86:
         6f:ad:57:8a:3a:5f:ba:75:f5:7c:0e:04:d0:02:2c:24:c9:a2:
         17:31:6d:02:46:8d:4b:3e:32:64:89:1f:74:87:73:8f:5e:b1:
         4e:3d:04:d9:80:28:30:17:3f:5f:54:de:24:75:ca:4c:07:dd:
         b6:34:26:56:76:97:a6:6a:79:a4:a8:b8:d0:11:af:2b:45:23:
         e9:5e:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:23:11 2026 by rpki-client