Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
File:                     7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft (raw, json)
Hash identifier:          CE5nuKb4hjRFRsQsfHyma8cK/6YU4/oq22iZMRhBP+o=
Subject key identifier:   66:DC:60:A1:A2:0B:C6:7D:41:FB:6A:83:0C:AE:AB:D7:37:2D:35:FF
Authority key identifier: EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69
Certificate issuer:       /CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
Certificate serial:       01A0C8587622D4C7DB501D12532210AEF36C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
Manifest number:          E1
Signing time:             Tue 22 Sep 2026 09:00:35 +0000
Manifest this update:     Tue 22 Sep 2026 09:00:35 +0000
Manifest next update:     Wed 23 Sep 2026 09:00:35 +0000
Files and hashes:         1: 7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl (hash: 6qAJyeUNPLSnwlXOzLxe6zbfuPpjlXcJC4ut1rCtQws=)
                          2: HCihUF_5hDpIqXqYUJrzBJumeUI.roa (hash: f9CXT6KQWpEiwwhV9yK1XmVpJI+yxpUMYfkH0B1xxTc=)
                          3: K5IqS4P79U0rKvWInjWR5wEFe2Q.roa (hash: 9q13mYvOIEN+e4PDt27Up4NO4FxU8lAzXOS+dNjdg84=)
                          4: d7Aas885l3KjzbxzDRzrGQP7qlo.roa (hash: 49B2bk75lbQU3fm+06dc2qLUyXkN1RUhU0NMkmUUNbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 09:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:76:22:d4:c7:db:50:1d:12:53:22:10:ae:f3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
        Validity
            Not Before: Sep 22 09:00:35 2026 GMT
            Not After : Sep 23 09:00:35 2026 GMT
        Subject: CN=66dc60a1a20bc67d41fb6a830caeabd7372d35ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:12:90:de:da:bf:bd:6d:1b:94:20:61:f5:
                    73:47:cf:30:88:b2:8a:6e:2b:48:9e:17:83:dc:5a:
                    4c:1c:91:49:db:a0:c1:63:51:d3:04:fa:fa:24:59:
                    21:08:1d:d6:76:f0:e5:f3:3b:31:09:b8:95:ac:a0:
                    9c:80:90:65:64:da:b4:ea:30:cb:16:d6:d2:34:db:
                    1c:31:f6:05:f1:7a:57:b2:89:c5:e8:23:97:d4:2c:
                    eb:32:3f:5d:7b:56:72:30:3a:43:3a:ae:00:84:29:
                    e1:e2:fc:7f:9d:67:0e:80:01:34:cc:38:95:f6:f2:
                    ea:44:58:d2:d4:30:34:60:c1:3f:0f:34:4f:05:e6:
                    03:7c:60:e3:69:9c:0c:b2:94:85:55:ed:3d:25:77:
                    2b:03:44:0d:77:fe:00:9c:e5:90:a2:05:58:92:83:
                    a4:1e:25:31:1b:9b:d9:60:a8:54:43:57:da:a5:cf:
                    d6:93:77:9c:34:31:ad:db:e1:d0:20:77:3d:f7:fe:
                    fc:38:9a:ac:a8:9f:4f:3f:06:19:a3:7a:da:8e:0a:
                    1e:ba:a3:b0:76:13:88:3a:3f:d2:fa:92:6f:30:83:
                    12:9e:91:4b:37:b6:84:4a:e5:64:aa:54:d1:2e:a4:
                    c2:46:7c:2a:34:e1:cf:5d:66:fb:f6:90:79:63:aa:
                    aa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DC:60:A1:A2:0B:C6:7D:41:FB:6A:83:0C:AE:AB:D7:37:2D:35:FF
            X509v3 Authority Key Identifier:
                keyid:EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:80:05:ca:ee:c4:15:f6:05:83:cb:54:f5:82:e2:25:78:fe:
         a4:ea:e6:89:68:8a:b9:cc:49:e5:76:14:25:f7:7a:fd:03:65:
         ea:9a:5b:d0:ea:ff:94:7c:83:96:ed:02:1a:45:cd:77:2c:75:
         a3:df:eb:ef:53:e6:80:74:a4:fe:b8:bd:f7:9d:18:75:97:c1:
         d8:5f:3d:fc:34:c4:34:ea:4e:32:84:06:25:e0:69:6a:b1:e3:
         90:d1:58:05:78:b7:77:da:4e:05:95:74:5b:0e:46:a2:b8:a2:
         ea:77:31:a5:b6:ec:5d:e0:12:95:ba:fe:c9:32:7b:63:04:86:
         d0:a3:15:38:a2:82:e0:6b:14:b3:59:22:bc:d8:2a:7f:ad:18:
         c7:58:ac:c7:f0:47:8f:27:9e:6b:e6:85:9b:08:68:20:7e:4c:
         65:a7:29:48:b2:e3:70:36:62:e4:6c:7b:20:40:e4:37:d8:ec:
         c2:29:90:bc:e9:82:98:85:0c:30:4c:49:1e:16:2e:8e:a3:cb:
         8b:21:ac:f9:be:4a:8f:0e:a8:6c:9c:06:06:50:59:c9:39:7b:
         35:32:7c:63:85:2d:d6:ae:3b:c0:17:f0:bd:5c:ac:ac:33:af:
         6e:4a:ad:8f:1e:e7:f2:a4:2c:c5:8a:8c:e1:e8:3b:de:fd:c7:
         6b:db:51:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWHYi1MfbUB0SUyIQrvNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTQ5ZGQ5NjE5ZGJjZmUwZTdjNDk3ZDY3OWM4YTBlOTli
NDVhNjkwHhcNMjYwOTIyMDkwMDM1WhcNMjYwOTIzMDkwMDM1WjAzMTEwLwYDVQQD
Eyg2NmRjNjBhMWEyMGJjNjdkNDFmYjZhODMwY2FlYWJkNzM3MmQzNWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEESkN7av71tG5QgYfVzR88wiLKK
bitInheD3FpMHJFJ26DBY1HTBPr6JFkhCB3WdvDl8zsxCbiVrKCcgJBlZNq06jDL
FtbSNNscMfYF8XpXsonF6COX1CzrMj9de1ZyMDpDOq4AhCnh4vx/nWcOgAE0zDiV
9vLqRFjS1DA0YME/DzRPBeYDfGDjaZwMspSFVe09JXcrA0QNd/4AnOWQogVYkoOk
HiUxG5vZYKhUQ1fapc/Wk3ecNDGt2+HQIHc99/78OJqsqJ9PPwYZo3rajgoeuqOw
dhOIOj/S+pJvMIMSnpFLN7aESuVkqlTRLqTCRnwqNOHPXWb79pB5Y6qqZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbcYKGiC8Z9Qftqgwyuq9c3LTX/MB8GA1UdIwQY
MBaAFO7kndlhnbz+DnxJfWecig6ZtFppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VTZDJXR2R2UDRPZkVsOVo1eUtEcG0wV21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NzA5NmYtYmI4OS00MTFlLTkwZTAt
MzBjN2YzOWQ4ZTFjLzEvN3VTZDJXR2R2UDRPZkVsOVo1eUtEcG0wV21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC83NzA5NmYtYmI4OS00MTFlLTkwZTAtMzBjN2YzOWQ4ZTFj
LzEvN3VTZDJXR2R2UDRPZkVsOVo1eUtEcG0wV21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoAFyu7E
FfYFg8tU9YLiJXj+pOrmiWiKucxJ5XYUJfd6/QNl6ppb0Or/lHyDlu0CGkXNdyx1
o9/r71PmgHSk/ri9950YdZfB2F89/DTENOpOMoQGJeBparHjkNFYBXi3d9pOBZV0
Ww5Gorii6ncxpbbsXeASlbr+yTJ7YwSG0KMVOKKC4GsUs1kivNgqf60Yx1isx/BH
jyeea+aFmwhoIH5MZacpSLLjcDZi5Gx7IEDkN9jswimQvOmCmIUMMExJHhYujqPL
iyGs+b5Kjw6obJwGBlBZyTl7NTJ8Y4Ut1q47wBfwvVysrDOvbkqtjx7n8qQsxYqM
4eg73v3Ha9tRMg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:08:46 2026 by rpki-client