Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
File:                     7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft (raw, json)
Hash identifier:          CGE3Ww4fMYrmmkT8A3JOvItbWLKS+sIsO6dTTTkJQio=
Subject key identifier:   57:B4:41:FD:4A:6C:EB:8A:76:AB:14:37:E7:F9:3C:E7:0D:9B:86:03
Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
Certificate issuer:       /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Certificate serial:       01A14872BA6766A03A7C19A36EA8A8A5FDCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
Manifest number:          1AAB
Signing time:             Sat 17 Oct 2026 06:00:40 +0000
Manifest this update:     Sat 17 Oct 2026 06:00:40 +0000
Manifest next update:     Sun 18 Oct 2026 06:00:40 +0000
Files and hashes:         1: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl (hash: 5fZZI2+DSomhPgQlVY6e037abfXwmwnk1kut2AXgIUE=)
                          2: LBTtiJAp5O6Ow7kEVp8kVmTM7Gw.roa (hash: N4Dq+gbQXVdAatGtvXXu2yj7TOMEElBVnNjMgumVWCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:72:ba:67:66:a0:3a:7c:19:a3:6e:a8:a8:a5:fd:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
        Validity
            Not Before: Oct 17 06:00:40 2026 GMT
            Not After : Oct 18 06:00:40 2026 GMT
        Subject: CN=57b441fd4a6ceb8a76ab1437e7f93ce70d9b8603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:1c:91:9e:6d:96:39:36:ca:fc:ee:ab:ed:
                    f5:f0:f1:81:9e:ae:0a:73:5b:24:2e:93:b6:8e:e6:
                    11:fc:7d:9a:ed:81:8a:1a:b9:3d:5e:d5:71:6c:24:
                    1a:4f:37:fe:c6:a2:d8:13:c8:6f:6d:ef:22:0d:12:
                    f0:a0:56:e9:c9:42:0c:3f:5c:e3:94:c9:3a:a3:5f:
                    a2:7f:9e:07:82:55:a5:96:dc:8e:95:aa:3f:62:e7:
                    e9:7f:7e:00:fd:ae:da:48:05:68:b7:45:73:04:e4:
                    d4:33:62:5a:34:42:74:8d:42:23:bf:0b:81:8d:b6:
                    e5:07:b9:ca:c5:0f:7b:02:03:75:06:92:06:9a:71:
                    b3:f0:54:c6:66:a1:f1:f5:16:2d:de:55:09:91:e5:
                    0c:1f:ba:cd:e3:59:f2:19:e2:f7:a2:6b:aa:a9:89:
                    9d:b2:66:1b:8a:68:e2:a3:1d:cb:5d:5f:c2:05:dc:
                    9c:44:d1:fa:76:20:88:d0:ad:17:d9:d8:eb:f9:97:
                    7f:ce:22:5b:9a:88:f7:c9:1f:b6:97:f9:05:b4:03:
                    36:74:e2:57:4a:22:20:e7:4e:45:32:c1:6a:d4:c9:
                    40:6b:5e:0e:44:0d:05:63:cd:89:8f:a7:d1:9f:99:
                    d8:e5:ab:fb:df:18:51:a1:fb:36:8e:41:f5:37:df:
                    13:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B4:41:FD:4A:6C:EB:8A:76:AB:14:37:E7:F9:3C:E7:0D:9B:86:03
            X509v3 Authority Key Identifier:
                keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:95:e8:cc:80:0c:a2:07:eb:a7:53:aa:c5:d2:77:a5:34:55:
         25:ae:28:4e:30:16:79:8d:1a:30:f6:20:55:b0:62:bb:8a:33:
         6c:98:d6:58:9e:a2:29:1f:84:93:02:a8:52:a6:d1:f6:db:5f:
         93:d1:52:2d:c2:a1:e0:17:b2:65:21:21:8b:77:a6:06:cc:1c:
         f9:c6:d1:20:4d:a4:2c:db:65:9a:91:68:51:35:47:24:6f:c4:
         21:b1:ef:f9:dc:f2:02:ff:42:6d:c4:f0:b7:d4:d5:8a:37:32:
         3e:0c:71:e6:8f:6b:c9:ab:10:ea:0c:72:cc:e4:5e:65:6e:cf:
         a5:b3:db:ca:81:8e:ea:43:1f:66:ee:00:e2:84:39:78:93:c5:
         2d:02:92:32:3a:93:1e:7b:2e:39:6e:be:05:f7:83:f5:63:ea:
         d3:6e:d3:4f:ea:0a:91:e3:18:e7:d2:c4:94:66:76:fd:13:ca:
         f0:af:0c:e8:f5:6d:c7:1b:3e:c1:5f:c3:4e:91:95:32:4f:bc:
         9d:82:68:04:f5:e0:22:12:cf:6a:55:a0:72:06:aa:7c:14:02:
         d7:fe:65:41:3d:24:c4:85:ae:d3:da:85:f4:d5:dc:8c:ff:ac:
         e2:50:ae:5a:16:ca:c7:6c:a6:82:29:c8:f9:e6:16:b3:f7:91:
         2c:4d:70:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFIcrpnZqA6fBmjbqiopf3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjM2NlNGUyYjFhZDI5MDg2N2RkYzc3ZjMxZTVmMTUzZTli
MjA4ODcwHhcNMjYxMDE3MDYwMDQwWhcNMjYxMDE4MDYwMDQwWjAzMTEwLwYDVQQD
Eyg1N2I0NDFmZDRhNmNlYjhhNzZhYjE0MzdlN2Y5M2NlNzBkOWI4NjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhkckZ5tljk2yvzuq+318PGBnq4K
c1skLpO2juYR/H2a7YGKGrk9XtVxbCQaTzf+xqLYE8hvbe8iDRLwoFbpyUIMP1zj
lMk6o1+if54HglWlltyOlao/Yufpf34A/a7aSAVot0VzBOTUM2JaNEJ0jUIjvwuB
jbblB7nKxQ97AgN1BpIGmnGz8FTGZqHx9RYt3lUJkeUMH7rN41nyGeL3omuqqYmd
smYbimjiox3LXV/CBdycRNH6diCI0K0X2djr+Zd/ziJbmoj3yR+2l/kFtAM2dOJX
SiIg505FMsFq1MlAa14ORA0FY82Jj6fRn5nY5av73xhRofs2jkH1N98TlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFe0Qf1KbOuKdqsUN+f5POcNm4YDMB8GA1UdIwQY
MBaAFOw85OKxrSkIZ93HfzHl8VPpsgiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUt
ZjUzYWQ0NmNhZjNjLzEvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUtZjUzYWQ0NmNhZjNj
LzEvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpXozIAM
ogfrp1OqxdJ3pTRVJa4oTjAWeY0aMPYgVbBiu4ozbJjWWJ6iKR+EkwKoUqbR9ttf
k9FSLcKh4BeyZSEhi3emBswc+cbRIE2kLNtlmpFoUTVHJG/EIbHv+dzyAv9CbcTw
t9TVijcyPgxx5o9ryasQ6gxyzOReZW7PpbPbyoGO6kMfZu4A4oQ5eJPFLQKSMjqT
HnsuOW6+BfeD9WPq027TT+oKkeMY59LElGZ2/RPK8K8M6PVtxxs+wV/DTpGVMk+8
nYJoBPXgIhLPalWgcgaqfBQC1/5lQT0kxIWu09qF9NXcjP+s4lCuWhbKx2ymginI
+eYWs/eRLE1wCA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 11:21:27 2026 by rpki-client