Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
File:                     C27I7Y_JP3IzT3qXSka8J9EQKSM.mft (raw, json)
Hash identifier:          3nFJx17bJkqbat2VGj7ptlXjnKgl1219jOpQs88pLEM=
Subject key identifier:   7D:FF:8E:60:DF:61:86:92:32:97:59:5D:40:55:3E:55:27:9C:D5:02
Authority key identifier: 0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23
Certificate issuer:       /CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
Certificate serial:       01A1A970C671C626764319C0221890E54EDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
Manifest number:          037A
Signing time:             Thu 05 Nov 2026 02:01:42 +0000
Manifest this update:     Thu 05 Nov 2026 02:01:42 +0000
Manifest next update:     Fri 06 Nov 2026 02:01:42 +0000
Files and hashes:         1: C27I7Y_JP3IzT3qXSka8J9EQKSM.crl (hash: 4/wHwaOgJXSwCLcbrFC6C5xCptUH9KUUAqC+hZRIp3Q=)
                          2: TA3RHAyRhbZeooIsQWMB-18Medo.roa (hash: hbd2prwUOdAITht5l5Qygma9hqYfUIqWnfb9zdLXopA=)
                          3: a4w1OCrmTjTq1xXgFMF7hIHPfxw.asa (hash: D+pL1VBjgTGvw1aRBbIgd1AS87Lk8R9yQobPy565ppg=)
                          4: b84BPERKuOU7XfEOPsJAZAHPSDU.roa (hash: O1yboufDOcbfnri6uWC9z7NwLPBbQ/YoUC4nJjBq2XA=)
                          5: lXV32X79w4UTFHhLN_yUCd-Dpt8.asa (hash: ePLhNqdI3ZuZTZSWnit7eTonIRBYqpL6u07KsloVVUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 02:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a9:70:c6:71:c6:26:76:43:19:c0:22:18:90:e5:4e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
        Validity
            Not Before: Nov  5 02:01:42 2026 GMT
            Not After : Nov  6 02:01:42 2026 GMT
        Subject: CN=7dff8e60df6186923297595d40553e55279cd502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:c2:32:10:23:b7:db:35:a3:cd:21:8a:59:
                    9c:7c:62:a7:2c:2c:aa:14:d0:bf:4e:a7:b6:b5:99:
                    4e:af:55:1b:05:c9:99:1d:44:37:b1:f1:2e:ea:14:
                    e7:bd:cc:5d:50:9c:d5:86:37:34:db:79:d0:12:e7:
                    3f:81:8c:2c:55:8e:9d:b2:b5:89:ab:fb:0e:97:fc:
                    28:6c:d5:d8:80:90:41:ce:c9:df:a5:4a:2b:e1:9f:
                    16:7c:61:f3:5e:b0:6e:a1:f5:c1:c1:f1:ee:6f:1e:
                    dc:37:27:e3:cb:5d:07:7a:32:6c:25:dd:59:fa:66:
                    89:1a:c5:54:00:a5:0b:b5:f3:8f:60:4f:a8:67:9f:
                    5a:0c:1b:d7:93:c1:56:b5:2f:95:d5:a7:7e:0a:c5:
                    95:2a:90:1a:ea:b3:fa:af:6a:ee:d3:6a:d3:b3:ad:
                    d3:29:25:1d:b0:d9:5e:d7:6d:26:3b:e7:02:50:1b:
                    ef:91:a0:a4:0f:64:12:ad:cb:74:9c:92:76:ed:70:
                    e0:79:66:9a:5d:0a:26:dd:74:99:ca:6e:2f:0e:11:
                    4d:a3:31:6f:ac:92:f8:e4:b6:39:ff:4d:c9:3e:69:
                    c1:ce:64:30:25:12:12:a9:34:38:9b:4d:22:3c:f7:
                    f1:58:83:b5:6b:86:dc:df:84:3d:d6:bb:59:c2:0b:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FF:8E:60:DF:61:86:92:32:97:59:5D:40:55:3E:55:27:9C:D5:02
            X509v3 Authority Key Identifier:
                keyid:0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:95:7e:ff:a6:51:82:36:62:99:0a:26:96:74:da:ba:fe:87:
         39:55:50:c9:18:03:05:fa:e9:f5:d4:35:4f:bd:7b:93:7e:26:
         a9:92:c2:5d:38:bf:b3:52:b0:f8:b6:f5:44:7b:9a:cc:01:89:
         04:0c:34:dd:80:ab:d8:3d:79:31:bf:8b:89:f9:87:60:dc:b6:
         71:0e:1c:c2:9e:b8:c9:e2:a4:fb:62:ea:69:57:f3:64:91:9b:
         63:3a:68:3c:5c:b6:fa:e4:9a:e3:19:af:46:6d:d4:13:db:32:
         fa:1c:b9:58:bb:55:d3:d4:98:40:fe:93:66:49:9d:a2:63:cf:
         24:53:ab:e1:62:5d:72:aa:67:78:4b:d2:63:7e:fa:3c:c7:9f:
         ff:41:b2:5f:73:e7:0b:e1:6f:b8:88:57:d4:14:51:b3:94:94:
         cc:79:82:69:6d:00:06:47:8e:a5:81:65:de:68:71:c1:f7:bf:
         5f:c2:88:b5:c1:a1:24:da:be:33:63:f5:35:b1:67:4a:14:64:
         25:86:f8:cc:42:69:ef:9d:ed:6e:5f:8e:32:ec:1f:25:82:47:
         65:e0:fc:b1:70:d4:ae:ad:cd:de:3f:e4:61:7b:37:33:f2:23:
         99:de:5a:37:9c:22:b4:30:34:54:65:dc:6a:29:2d:00:f9:60:
         af:1a:c6:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGpcMZxxiZ2QxnAIhiQ5U7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNmVjOGVkOGZjOTNmNzIzMzRmN2E5NzRhNDZiYzI3ZDEx
MDI5MjMwHhcNMjYxMTA1MDIwMTQyWhcNMjYxMTA2MDIwMTQyWjAzMTEwLwYDVQQD
Eyg3ZGZmOGU2MGRmNjE4NjkyMzI5NzU5NWQ0MDU1M2U1NTI3OWNkNTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulTCMhAjt9s1o80hilmcfGKnLCyq
FNC/Tqe2tZlOr1UbBcmZHUQ3sfEu6hTnvcxdUJzVhjc023nQEuc/gYwsVY6dsrWJ
q/sOl/wobNXYgJBBzsnfpUor4Z8WfGHzXrBuofXBwfHubx7cNyfjy10HejJsJd1Z
+maJGsVUAKULtfOPYE+oZ59aDBvXk8FWtS+V1ad+CsWVKpAa6rP6r2ru02rTs63T
KSUdsNle120mO+cCUBvvkaCkD2QSrct0nJJ27XDgeWaaXQom3XSZym4vDhFNozFv
rJL45LY5/03JPmnBzmQwJRISqTQ4m00iPPfxWIO1a4bc34Q91rtZwgszRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3/jmDfYYaSMpdZXUBVPlUnnNUCMB8GA1UdIwQY
MBaAFAtuyO2PyT9yM096l0pGvCfRECkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzI3STdZX0pQM0l6VDNxWFNrYThKOUVRS1NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zMDQ3NjItNjczMy00YzczLTg1MjMt
MDQ3Nzc1MTI5MTQ4LzEvQzI3STdZX0pQM0l6VDNxWFNrYThKOUVRS1NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zMDQ3NjItNjczMy00YzczLTg1MjMtMDQ3Nzc1MTI5MTQ4
LzEvQzI3STdZX0pQM0l6VDNxWFNrYThKOUVRS1NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJV+/6ZR
gjZimQomlnTauv6HOVVQyRgDBfrp9dQ1T717k34mqZLCXTi/s1Kw+Lb1RHuazAGJ
BAw03YCr2D15Mb+LifmHYNy2cQ4cwp64yeKk+2LqaVfzZJGbYzpoPFy2+uSa4xmv
Rm3UE9sy+hy5WLtV09SYQP6TZkmdomPPJFOr4WJdcqpneEvSY376PMef/0GyX3Pn
C+FvuIhX1BRRs5SUzHmCaW0ABkeOpYFl3mhxwfe/X8KItcGhJNq+M2P1NbFnShRk
JYb4zEJp753tbl+OMuwfJYJHZeD8sXDUrq3N3j/kYXs3M/Ijmd5aN5witDA0VGXc
aiktAPlgrxrGJg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:42:28 2026 by rpki-client