Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
File:                     7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft (raw, json)
Hash identifier:          X1LlWNDd17DDhjJ8Ai6FN26NtUJRXzbWWUD9uWG/+5o=
Subject key identifier:   69:F4:5F:B1:F5:4F:51:CD:71:96:21:04:1C:FB:FB:83:A2:81:CB:76
Authority key identifier: EC:E1:B7:BD:C9:F5:70:EC:58:35:99:95:DE:A4:F7:39:FC:FC:06:52
Certificate issuer:       /CN=ece1b7bdc9f570ec58359995dea4f739fcfc0652
Certificate serial:       01A151E3C3415BA9D807C4A4D340178AEB90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
Manifest number:          01DE
Signing time:             Mon 19 Oct 2026 02:00:43 +0000
Manifest this update:     Mon 19 Oct 2026 02:00:43 +0000
Manifest next update:     Tue 20 Oct 2026 02:00:43 +0000
Files and hashes:         1: 7OG3vcn1cOxYNZmV3qT3Ofz8BlI.crl (hash: E5CaaQYOHmW1aqQuVW2YW9XJCVs96W2RpHXWc/VjJxY=)
                          2: PaSCSViEAOmnkxIlKs2oejLqNDc.roa (hash: C95nSsqwtFhFODAGdM0T/xTl1c5zR83Twu0Y8s23u5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:51:e3:c3:41:5b:a9:d8:07:c4:a4:d3:40:17:8a:eb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ece1b7bdc9f570ec58359995dea4f739fcfc0652
        Validity
            Not Before: Oct 19 02:00:43 2026 GMT
            Not After : Oct 20 02:00:43 2026 GMT
        Subject: CN=69f45fb1f54f51cd719621041cfbfb83a281cb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:47:e7:3d:86:a0:a3:ed:94:41:7a:64:f4:12:
                    9e:fb:79:b9:53:f8:c7:8d:e7:57:5d:bc:7c:18:74:
                    66:5c:67:9d:73:59:d8:72:2e:e3:f0:ad:49:69:4a:
                    1a:40:59:18:1c:b8:13:bd:31:28:dd:c4:7d:26:02:
                    ac:de:28:72:e0:bf:f1:a2:81:f6:93:9e:e2:4e:25:
                    ad:6d:0a:6b:8d:a4:76:6b:7f:da:58:46:17:77:aa:
                    60:cb:4c:18:fd:f3:32:b9:f5:de:5b:99:a9:de:d7:
                    8d:0a:07:ba:4d:0f:38:ba:10:59:74:29:18:86:42:
                    36:93:b7:34:aa:bd:83:44:08:fb:84:96:40:58:55:
                    06:7c:14:30:4a:3d:1f:81:d2:2f:91:06:89:71:7f:
                    a6:47:25:d6:f5:9b:5c:5a:56:e3:4d:93:24:a7:d2:
                    1c:92:1e:da:9f:19:19:e6:72:25:e7:4a:2b:1e:be:
                    93:83:a5:1d:30:08:06:45:3a:86:0f:ea:c4:8a:81:
                    65:a4:72:96:a6:65:91:e3:8d:1e:8b:1d:9e:f4:9b:
                    cc:48:fe:40:9a:d3:8c:d9:3f:b2:10:c4:7b:94:c2:
                    21:0f:6a:b2:11:40:5f:72:69:4b:b7:6a:ad:46:7d:
                    4a:c1:11:ec:3d:a2:99:cc:24:3d:4a:ff:8f:1c:cc:
                    9e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F4:5F:B1:F5:4F:51:CD:71:96:21:04:1C:FB:FB:83:A2:81:CB:76
            X509v3 Authority Key Identifier:
                keyid:EC:E1:B7:BD:C9:F5:70:EC:58:35:99:95:DE:A4:F7:39:FC:FC:06:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:14:6f:cd:fa:08:d8:3e:4e:6b:c1:8a:7f:73:1d:4f:3c:63:
         40:62:a8:48:3e:f4:46:59:d8:5f:58:7f:cb:ba:d5:d2:f1:d9:
         82:94:fc:34:67:05:51:ad:8a:5f:36:19:df:72:a5:15:7e:c5:
         7d:24:79:d6:ae:0b:2b:e2:44:ca:2c:eb:80:ef:d4:18:f8:5b:
         1d:d9:83:99:35:13:24:1d:71:83:61:92:68:80:77:fe:89:88:
         2a:41:84:97:04:b5:71:9b:ee:ff:6e:2e:89:ce:bb:7a:8e:d6:
         08:1b:69:84:d6:bd:d8:ba:9e:55:aa:d6:79:e9:ad:b3:c8:ae:
         18:62:90:ef:c7:2d:29:88:e4:36:a7:5d:08:2a:99:02:9c:5e:
         93:78:af:3e:82:11:08:f7:30:ce:7f:05:63:2c:95:67:38:8f:
         a5:80:7b:bd:fb:b8:27:59:c0:67:e0:c6:01:da:6b:2a:47:4c:
         2b:a5:3c:e5:49:7e:2f:cd:f5:5e:d8:2e:d8:ee:b2:9a:0a:c8:
         9f:da:90:e0:41:35:e4:c0:96:0c:2b:98:e8:47:86:80:31:5f:
         8f:7c:4f:32:4d:1e:26:71:40:9a:da:55:3f:95:a4:dc:02:4c:
         bc:3b:44:43:7d:1b:7f:54:24:d2:6f:2b:05:ac:03:9e:51:17:
         00:78:85:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFR48NBW6nYB8Sk00AXiuuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZTFiN2JkYzlmNTcwZWM1ODM1OTk5NWRlYTRmNzM5ZmNm
YzA2NTIwHhcNMjYxMDE5MDIwMDQzWhcNMjYxMDIwMDIwMDQzWjAzMTEwLwYDVQQD
Eyg2OWY0NWZiMWY1NGY1MWNkNzE5NjIxMDQxY2ZiZmI4M2EyODFjYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEfnPYago+2UQXpk9BKe+3m5U/jH
jedXXbx8GHRmXGedc1nYci7j8K1JaUoaQFkYHLgTvTEo3cR9JgKs3ihy4L/xooH2
k57iTiWtbQprjaR2a3/aWEYXd6pgy0wY/fMyufXeW5mp3teNCge6TQ84uhBZdCkY
hkI2k7c0qr2DRAj7hJZAWFUGfBQwSj0fgdIvkQaJcX+mRyXW9ZtcWlbjTZMkp9Ic
kh7anxkZ5nIl50orHr6Tg6UdMAgGRTqGD+rEioFlpHKWpmWR440eix2e9JvMSP5A
mtOM2T+yEMR7lMIhD2qyEUBfcmlLt2qtRn1KwRHsPaKZzCQ9Sv+PHMye6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn0X7H1T1HNcZYhBBz7+4Oigct2MB8GA1UdIwQY
MBaAFOzht73J9XDsWDWZld6k9zn8/AZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN09HM3ZjbjFjT3hZTlptVjNxVDNPZno4QmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85NjEzNjktODQ2My00OGQ3LTkyOGIt
Y2Q4OGU2YTI1NzUyLzEvN09HM3ZjbjFjT3hZTlptVjNxVDNPZno4QmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS85NjEzNjktODQ2My00OGQ3LTkyOGItY2Q4OGU2YTI1NzUy
LzEvN09HM3ZjbjFjT3hZTlptVjNxVDNPZno4QmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6xRvzfoI
2D5Oa8GKf3MdTzxjQGKoSD70RlnYX1h/y7rV0vHZgpT8NGcFUa2KXzYZ33KlFX7F
fSR51q4LK+JEyizrgO/UGPhbHdmDmTUTJB1xg2GSaIB3/omIKkGElwS1cZvu/24u
ic67eo7WCBtphNa92LqeVarWeemts8iuGGKQ78ctKYjkNqddCCqZApxek3ivPoIR
CPcwzn8FYyyVZziPpYB7vfu4J1nAZ+DGAdprKkdMK6U85Ul+L831Xtgu2O6ymgrI
n9qQ4EE15MCWDCuY6EeGgDFfj3xPMk0eJnFAmtpVP5Wk3AJMvDtEQ30bf1Qk0m8r
BawDnlEXAHiFbA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 06:55:09 2026 by rpki-client