Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
File:                     7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft (raw, json)
Hash identifier:          pjgAsUcEjHmxlTHGGALSHNwKm350ABY6BdD5XMlCP/w=
Subject key identifier:   E1:DF:A3:5B:3A:11:EF:42:D5:86:32:CA:2E:BC:7D:DA:8C:0C:16:B0
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Certificate issuer:       /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial:       01A1C2F873F62EFF5268BECFB6FFAF8B096D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
Manifest number:          1AE8
Signing time:             Tue 10 Nov 2026 01:00:24 +0000
Manifest this update:     Tue 10 Nov 2026 01:00:24 +0000
Manifest next update:     Wed 11 Nov 2026 01:00:24 +0000
Files and hashes:         1: 7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl (hash: oLX8pzpP5Al0m3Psc8ku0ANmwyCc50xruUQ+fCe72FA=)
                          2: oqgwVvgO4WobvG_o2YvqXL-ZxrA.roa (hash: qgN0ZwFa85gMlSMo8H+ZBEVFv906WUNJ1MUKTtcyf+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 22:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c2:f8:73:f6:2e:ff:52:68:be:cf:b6:ff:af:8b:09:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
        Validity
            Not Before: Nov 10 01:00:24 2026 GMT
            Not After : Nov 11 01:00:24 2026 GMT
        Subject: CN=e1dfa35b3a11ef42d58632ca2ebc7dda8c0c16b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1d:55:31:87:af:da:6f:b3:60:bb:56:39:18:
                    ad:36:70:0f:6c:96:6a:4d:5a:15:79:f8:23:c6:65:
                    5e:c1:fa:52:63:96:be:88:a7:db:bd:7b:11:1d:51:
                    b3:7f:37:e5:40:87:28:19:23:92:05:60:84:e0:a9:
                    7b:22:17:94:d1:7b:9f:2e:31:b3:59:d5:da:58:2f:
                    96:f8:d0:22:03:04:8d:e9:51:aa:79:1b:07:d1:a8:
                    34:6c:e1:73:2d:56:e0:0c:c4:ea:d6:92:1f:eb:1c:
                    57:f4:31:0f:6b:96:5e:e4:2d:38:e7:a1:25:07:68:
                    05:ff:81:2e:9c:28:4f:bd:a3:40:a3:b0:dd:8c:6b:
                    e3:71:66:11:19:d3:59:27:4a:01:27:bb:7c:55:ae:
                    89:7c:2d:99:98:a0:be:75:06:a3:d5:ae:ac:f3:2d:
                    9f:06:92:f7:21:e5:41:9b:9e:7d:1a:38:4f:37:9a:
                    c0:52:34:8e:3c:71:d8:ff:50:77:75:0b:0d:e0:39:
                    7c:b8:de:44:ba:2b:99:a1:df:4b:c7:b0:b9:c6:dc:
                    cd:e0:34:d3:e3:54:39:4d:5b:8d:9d:4d:56:4b:80:
                    99:e9:85:7f:65:dd:13:95:55:3c:c9:01:c4:2b:38:
                    50:a2:d9:87:a7:29:f1:2c:4d:f3:db:7d:2d:f7:4e:
                    05:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DF:A3:5B:3A:11:EF:42:D5:86:32:CA:2E:BC:7D:DA:8C:0C:16:B0
            X509v3 Authority Key Identifier:
                keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:be:c7:16:7d:bc:d8:a5:4d:15:7b:6d:60:19:f0:73:3c:6d:
         89:1f:d5:bb:ba:e5:7a:15:19:a5:aa:e5:36:31:91:0d:02:ac:
         22:2c:f1:f1:a0:b1:92:1d:3c:e6:d0:77:1d:47:94:a6:2d:f7:
         7b:78:43:c3:3c:8c:fd:8e:7f:28:3d:68:cc:03:31:0d:10:bf:
         68:bd:2d:9a:8e:06:5a:e6:bf:6a:b9:39:08:59:20:ae:4f:a6:
         06:8b:fe:cc:4e:b7:ae:f8:21:d7:04:04:44:3c:ad:1c:28:54:
         1e:d2:54:6d:36:d4:56:fe:3c:69:01:1c:ba:d6:86:c7:43:cb:
         ba:f9:2c:81:39:47:cd:bf:5d:fb:05:7e:75:b6:4b:53:16:f9:
         9b:9b:64:1b:31:75:00:7b:63:13:c7:df:d5:f2:bc:c8:43:a2:
         9d:30:4f:b1:f0:97:af:e0:0e:9b:b0:27:92:9b:e1:71:75:35:
         ac:b1:10:13:e7:9c:be:62:5c:db:fe:b5:ab:4d:2b:5a:6d:b3:
         96:69:35:84:13:ae:95:c2:a1:11:94:d0:cc:c2:46:2d:7e:05:
         34:ad:ee:11:3c:98:19:08:cb:84:fc:ca:24:b0:5b:69:8f:bb:
         bf:fd:5d:fe:1b:f2:23:7c:c8:14:35:fe:5c:0d:ce:99:0c:c9:
         8b:7a:9b:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHC+HP2Lv9SaL7Ptv+viwltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlN2EyNjRkYmNjZDc1YWE4NmNkMzYxYzZkMzY2YmQ4OGM5
MGRhMjMwHhcNMjYxMTEwMDEwMDI0WhcNMjYxMTExMDEwMDI0WjAzMTEwLwYDVQQD
EyhlMWRmYTM1YjNhMTFlZjQyZDU4NjMyY2EyZWJjN2RkYThjMGMxNmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR1VMYev2m+zYLtWORitNnAPbJZq
TVoVefgjxmVewfpSY5a+iKfbvXsRHVGzfzflQIcoGSOSBWCE4Kl7IheU0XufLjGz
WdXaWC+W+NAiAwSN6VGqeRsH0ag0bOFzLVbgDMTq1pIf6xxX9DEPa5Ze5C0456El
B2gF/4EunChPvaNAo7DdjGvjcWYRGdNZJ0oBJ7t8Va6JfC2ZmKC+dQaj1a6s8y2f
BpL3IeVBm559GjhPN5rAUjSOPHHY/1B3dQsN4Dl8uN5EuiuZod9Lx7C5xtzN4DTT
41Q5TVuNnU1WS4CZ6YV/Zd0TlVU8yQHEKzhQotmHpynxLE3z230t904FfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHfo1s6Ee9C1YYyyi68fdqMDBawMB8GA1UdIwQY
MBaAFO56Jk28zXWqhs02HG02a9iMkNojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83ZjRiNWEtODJlNy00ZmNlLWI2ZmMt
MzE3ZTgyMGRmY2RiLzEvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83ZjRiNWEtODJlNy00ZmNlLWI2ZmMtMzE3ZTgyMGRmY2Ri
LzEvN25vbVRiek5kYXFHelRZY2JUWnIySXlRMmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnL7HFn28
2KVNFXttYBnwczxtiR/Vu7rlehUZparlNjGRDQKsIizx8aCxkh085tB3HUeUpi33
e3hDwzyM/Y5/KD1ozAMxDRC/aL0tmo4GWua/ark5CFkgrk+mBov+zE63rvgh1wQE
RDytHChUHtJUbTbUVv48aQEcutaGx0PLuvksgTlHzb9d+wV+dbZLUxb5m5tkGzF1
AHtjE8ff1fK8yEOinTBPsfCXr+AOm7AnkpvhcXU1rLEQE+ecvmJc2/61q00rWm2z
lmk1hBOulcKhEZTQzMJGLX4FNK3uETyYGQjLhPzKJLBbaY+7v/1d/hvyI3zIFDX+
XA3OmQzJi3qbCA==
-----END CERTIFICATE-----
Generated at Tue Nov 10 06:57:22 2026 by rpki-client