Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft
File:                     7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft (raw, json)
Hash identifier:          9nejmwRZW3m7tSYi1eUW31HfUhkMF5aMcC1YnQJKG/g=
Subject key identifier:   C0:13:FB:AF:31:C7:8B:1A:C5:75:0C:07:AB:19:67:B3:4A:F1:65:D0
Authority key identifier: EF:EE:B5:0E:FE:D2:9C:17:17:10:85:40:0A:F0:7C:66:90:FA:39:6A
Certificate issuer:       /CN=efeeb50efed29c17171085400af07c6690fa396a
Certificate serial:       01A0BE7984C56BB071CDD7052C6DBC1CF486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-61Dv7SnBcXEIVACvB8ZpD6OWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft
Manifest number:          0162
Signing time:             Sun 20 Sep 2026 11:00:29 +0000
Manifest this update:     Sun 20 Sep 2026 11:00:29 +0000
Manifest next update:     Mon 21 Sep 2026 11:00:29 +0000
Files and hashes:         1: 7-61Dv7SnBcXEIVACvB8ZpD6OWo.crl (hash: o0jnwbIRHGzW7wajUzHj2lXxwtSeacfCeY2DmlYy/I8=)
                          2: JS4OZw-dfoAGScXsIL4kb3KCX_4.roa (hash: CsnYx8saM2GDN99ZZzqzztzcHAktERUojOcFYdBknRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-61Dv7SnBcXEIVACvB8ZpD6OWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:79:84:c5:6b:b0:71:cd:d7:05:2c:6d:bc:1c:f4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efeeb50efed29c17171085400af07c6690fa396a
        Validity
            Not Before: Sep 20 11:00:29 2026 GMT
            Not After : Sep 21 11:00:29 2026 GMT
        Subject: CN=c013fbaf31c78b1ac5750c07ab1967b34af165d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:9b:c8:52:82:a9:d3:55:6a:8c:4f:4f:24:
                    2a:9e:a0:76:3b:04:8c:45:f9:db:58:df:b5:42:3b:
                    a5:e2:b2:ee:dd:c8:c8:33:6a:51:8e:69:45:07:3f:
                    ee:55:b8:1b:09:7d:38:17:0f:8d:7c:41:1a:b0:88:
                    19:0d:f7:46:8a:7a:5d:a0:7d:3b:d9:da:cc:88:d7:
                    a2:ac:d8:12:27:13:5d:36:bd:15:b2:85:3d:69:b1:
                    a0:13:a7:43:6e:53:35:ec:70:bc:eb:97:8e:25:0b:
                    86:a7:4d:1a:e2:35:f4:67:15:9e:c2:e0:e7:a1:df:
                    72:88:db:16:79:c0:1c:17:d8:fc:f4:a7:66:e1:41:
                    d8:0f:0e:87:82:e8:d3:07:9c:0f:86:7e:1e:25:9f:
                    65:5b:80:66:09:13:b7:3b:f8:a3:98:a6:85:9a:dd:
                    41:8b:bb:16:b6:4e:37:ba:7a:77:a6:c0:ca:8e:ad:
                    56:5e:62:3b:d4:ad:2d:6a:e9:c6:9c:95:1b:e5:9e:
                    af:c9:b3:aa:8f:66:7d:9f:a4:41:26:b2:fe:3a:c1:
                    e1:81:41:b8:5e:62:03:3e:de:31:c9:c1:4e:f1:35:
                    8a:eb:78:e1:41:31:e2:1c:1e:3f:75:12:9c:74:8f:
                    48:0b:31:c1:77:69:ac:f5:4f:d2:30:58:85:0a:a5:
                    02:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:13:FB:AF:31:C7:8B:1A:C5:75:0C:07:AB:19:67:B3:4A:F1:65:D0
            X509v3 Authority Key Identifier:
                keyid:EF:EE:B5:0E:FE:D2:9C:17:17:10:85:40:0A:F0:7C:66:90:FA:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-61Dv7SnBcXEIVACvB8ZpD6OWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802442-db83-42f2-8bf5-75122892f2ad/1/7-61Dv7SnBcXEIVACvB8ZpD6OWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:67:e5:3e:b3:24:88:78:ed:64:cf:91:7d:e5:c3:48:c3:b1:
         51:ae:f6:2f:a2:80:c2:c8:87:ef:18:e9:99:1b:cb:95:fe:9c:
         fe:d4:79:61:a1:cf:aa:ce:bc:0a:da:75:7e:86:5e:b5:12:1a:
         1f:1a:ad:76:c5:5c:08:4b:bf:c6:de:3d:6f:ca:44:eb:6d:6d:
         90:05:2c:9c:69:ab:61:1f:74:35:2e:a0:cb:73:9f:53:6b:cb:
         5e:f7:a4:f3:e8:9a:ff:f5:06:4d:71:ee:f5:8f:35:0e:92:ef:
         0a:ba:a5:2e:52:73:9e:1c:05:25:f7:12:1e:4c:ce:80:47:ec:
         13:0c:d6:37:47:78:94:fb:e7:45:69:ef:00:99:04:d5:b6:e1:
         e1:b7:07:24:c1:1e:bc:ad:7a:99:d4:32:44:29:bd:c0:29:15:
         52:b4:c0:25:53:6e:24:f2:6d:4f:65:85:ee:a8:b6:09:e1:84:
         f3:0f:1b:83:59:eb:1d:fa:2e:9f:8a:b8:30:d0:0e:27:21:d1:
         69:e9:80:20:04:15:db:ee:2d:43:13:6f:93:d9:c1:46:83:7c:
         e7:ad:1f:e2:d9:cc:d7:54:51:8d:27:38:b4:6a:a0:76:5f:e0:
         53:0c:f8:d8:65:15:9f:4f:9b:f2:3e:73:c4:48:ca:6b:09:22:
         22:37:99:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+eYTFa7BxzdcFLG28HPSGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZWViNTBlZmVkMjljMTcxNzEwODU0MDBhZjA3YzY2OTBm
YTM5NmEwHhcNMjYwOTIwMTEwMDI5WhcNMjYwOTIxMTEwMDI5WjAzMTEwLwYDVQQD
EyhjMDEzZmJhZjMxYzc4YjFhYzU3NTBjMDdhYjE5NjdiMzRhZjE2NWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAGbyFKCqdNVaoxPTyQqnqB2OwSM
RfnbWN+1Qjul4rLu3cjIM2pRjmlFBz/uVbgbCX04Fw+NfEEasIgZDfdGinpdoH07
2drMiNeirNgSJxNdNr0VsoU9abGgE6dDblM17HC865eOJQuGp00a4jX0ZxWewuDn
od9yiNsWecAcF9j89Kdm4UHYDw6HgujTB5wPhn4eJZ9lW4BmCRO3O/ijmKaFmt1B
i7sWtk43unp3psDKjq1WXmI71K0taunGnJUb5Z6vybOqj2Z9n6RBJrL+OsHhgUG4
XmIDPt4xycFO8TWK63jhQTHiHB4/dRKcdI9ICzHBd2ms9U/SMFiFCqUClwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAT+68xx4saxXUMB6sZZ7NK8WXQMB8GA1UdIwQY
MBaAFO/utQ7+0pwXFxCFQArwfGaQ+jlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNy02MUR2N1NuQmNYRUlWQUN2QjhacEQ2T1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84MDI0NDItZGI4My00MmYyLThiZjUt
NzUxMjI4OTJmMmFkLzEvNy02MUR2N1NuQmNYRUlWQUN2QjhacEQ2T1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84MDI0NDItZGI4My00MmYyLThiZjUtNzUxMjI4OTJmMmFk
LzEvNy02MUR2N1NuQmNYRUlWQUN2QjhacEQ2T1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGflPrMk
iHjtZM+RfeXDSMOxUa72L6KAwsiH7xjpmRvLlf6c/tR5YaHPqs68Ctp1foZetRIa
HxqtdsVcCEu/xt49b8pE621tkAUsnGmrYR90NS6gy3OfU2vLXvek8+ia//UGTXHu
9Y81DpLvCrqlLlJznhwFJfcSHkzOgEfsEwzWN0d4lPvnRWnvAJkE1bbh4bcHJMEe
vK16mdQyRCm9wCkVUrTAJVNuJPJtT2WF7qi2CeGE8w8bg1nrHfoun4q4MNAOJyHR
aemAIAQV2+4tQxNvk9nBRoN8560f4tnM11RRjSc4tGqgdl/gUwz42GUVn0+b8j5z
xEjKawkiIjeZoA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:22:05 2026 by rpki-client