Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/EN7CcWGYuj6-ozLYWfSaU76lDfU.mft
File:                     EN7CcWGYuj6-ozLYWfSaU76lDfU.mft (raw, json)
Hash identifier:          bkOnLpdMi1Pl/ba/Jq2v/18/4w7IVza5Ycu0IkJwsH0=
Subject key identifier:   71:08:42:60:75:B0:E7:7D:F7:80:7C:1E:24:8B:08:A9:46:BE:0C:BB
Authority key identifier: 10:DE:C2:71:61:98:BA:3E:BE:A3:32:D8:59:F4:9A:53:BE:A5:0D:F5
Certificate issuer:       /CN=10dec2716198ba3ebea332d859f49a53bea50df5
Certificate serial:       01A1250BC1ADA4DDCF595B95A6E942C11D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EN7CcWGYuj6-ozLYWfSaU76lDfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/EN7CcWGYuj6-ozLYWfSaU76lDfU.mft
Manifest number:          0111
Signing time:             Sat 10 Oct 2026 09:01:29 +0000
Manifest this update:     Sat 10 Oct 2026 09:01:29 +0000
Manifest next update:     Sun 11 Oct 2026 09:01:29 +0000
Files and hashes:         1: 9PkOo2TNgEs6RrJqygS1OIvZsbo.roa (hash: ybHDxR2XWOSAXhyh+5lF8BHc4WWKg+0pLGrT3ZFgjpM=)
                          2: EN7CcWGYuj6-ozLYWfSaU76lDfU.crl (hash: +efPfAJ3bPrGCKYhjBl4zCOS5U0Hqbrt8qwjc4mYjRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/EN7CcWGYuj6-ozLYWfSaU76lDfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/EN7CcWGYuj6-ozLYWfSaU76lDfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EN7CcWGYuj6-ozLYWfSaU76lDfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 09:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:0b:c1:ad:a4:dd:cf:59:5b:95:a6:e9:42:c1:1d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10dec2716198ba3ebea332d859f49a53bea50df5
        Validity
            Not Before: Oct 10 09:01:29 2026 GMT
            Not After : Oct 11 09:01:29 2026 GMT
        Subject: CN=7108426075b0e77df7807c1e248b08a946be0cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:9f:e0:4a:a7:75:df:60:b9:d2:39:1b:22:
                    84:87:8c:b6:7d:fd:7b:36:8e:14:67:a8:84:9d:03:
                    01:43:46:07:fd:b7:23:f9:4d:59:90:9f:a7:c0:b9:
                    33:42:df:8a:ab:ef:6d:f5:3d:3b:81:42:90:41:1b:
                    ac:db:47:3c:1d:c9:6f:fc:4e:37:97:9a:fe:b5:8d:
                    dc:26:e2:5f:f6:27:a6:06:b0:85:ca:ed:19:23:b0:
                    e9:0e:66:ff:a3:c4:e7:b9:97:e2:eb:7a:22:af:5a:
                    c6:6c:e7:c4:5f:f3:37:3a:7a:c5:3f:24:8a:78:4e:
                    fd:ff:31:28:15:c1:f1:95:38:4c:53:12:0c:3c:f2:
                    09:c9:49:fe:fa:56:7c:37:44:d9:9a:51:b0:3f:1e:
                    b7:f0:27:18:6d:fc:58:78:41:ac:00:27:2d:a9:35:
                    a1:49:07:26:17:54:9c:b5:8b:1a:1c:7e:ce:8a:29:
                    04:fa:50:66:66:88:f5:00:2f:18:6d:a4:ed:79:99:
                    a6:5a:7f:fb:9e:6c:0f:15:0d:9e:ed:8d:cc:a3:6c:
                    b7:81:82:ca:b7:11:3b:c0:65:66:f8:01:a6:cd:2c:
                    ab:19:70:9c:2a:c9:cc:0f:60:53:5f:d2:e8:b7:7f:
                    33:4a:83:c0:f7:dd:40:3e:f8:cd:10:5f:af:11:7c:
                    0a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:08:42:60:75:B0:E7:7D:F7:80:7C:1E:24:8B:08:A9:46:BE:0C:BB
            X509v3 Authority Key Identifier:
                keyid:10:DE:C2:71:61:98:BA:3E:BE:A3:32:D8:59:F4:9A:53:BE:A5:0D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EN7CcWGYuj6-ozLYWfSaU76lDfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/EN7CcWGYuj6-ozLYWfSaU76lDfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/EN7CcWGYuj6-ozLYWfSaU76lDfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:90:fd:ab:f4:84:53:6b:e5:a3:d4:c9:90:50:f4:94:b1:55:
         59:c3:45:46:61:05:54:ba:66:96:75:d8:fd:84:b8:ac:50:4b:
         56:ba:04:49:12:e5:45:e9:99:4a:fb:c6:e3:24:85:5f:fd:f5:
         7a:2c:b2:c1:ce:f7:83:59:2c:1b:8a:ec:a2:12:20:40:11:19:
         07:53:e7:cd:e6:f6:b5:4a:14:b3:7d:64:e7:7e:b1:22:b3:17:
         cd:45:66:f6:fc:07:f0:f6:e2:f6:bf:c5:e0:6a:09:f2:57:ec:
         bc:f7:b6:57:b2:5b:90:00:7b:bc:08:88:9e:f4:7c:19:bf:e4:
         fd:df:ca:b1:34:c0:5b:52:97:5f:27:f8:24:5d:4c:cd:bc:c9:
         f4:83:ab:5e:2e:6b:bb:21:f6:6e:c7:17:7d:e7:27:84:fd:26:
         0c:99:62:9a:8b:81:ab:66:8d:0d:a9:3f:c3:85:3a:2d:6e:e0:
         1a:24:7f:51:8a:3a:33:1f:74:15:b3:2c:88:a6:46:da:3a:02:
         31:ba:1e:40:b9:da:96:fd:27:d2:cf:65:ab:15:a7:7d:28:5c:
         bc:c1:f4:1d:01:25:48:56:b2:aa:19:03:ce:65:3b:ce:3a:66:
         c9:10:e8:27:19:e9:ed:45:28:98:4d:3a:42:af:2e:ab:a9:8c:
         1b:74:8e:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElC8GtpN3PWVuVpulCwR1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZGVjMjcxNjE5OGJhM2ViZWEzMzJkODU5ZjQ5YTUzYmVh
NTBkZjUwHhcNMjYxMDEwMDkwMTI5WhcNMjYxMDExMDkwMTI5WjAzMTEwLwYDVQQD
Eyg3MTA4NDI2MDc1YjBlNzdkZjc4MDdjMWUyNDhiMDhhOTQ2YmUwY2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEKf4Eqndd9gudI5GyKEh4y2ff17
No4UZ6iEnQMBQ0YH/bcj+U1ZkJ+nwLkzQt+Kq+9t9T07gUKQQRus20c8Hclv/E43
l5r+tY3cJuJf9iemBrCFyu0ZI7DpDmb/o8TnuZfi63oir1rGbOfEX/M3OnrFPySK
eE79/zEoFcHxlThMUxIMPPIJyUn++lZ8N0TZmlGwPx638CcYbfxYeEGsACctqTWh
SQcmF1SctYsaHH7OiikE+lBmZoj1AC8YbaTteZmmWn/7nmwPFQ2e7Y3Mo2y3gYLK
txE7wGVm+AGmzSyrGXCcKsnMD2BTX9Lot38zSoPA991APvjNEF+vEXwKrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEIQmB1sOd994B8HiSLCKlGvgy7MB8GA1UdIwQY
MBaAFBDewnFhmLo+vqMy2Fn0mlO+pQ31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU43Q2NXR1l1ajYtb3pMWVdmU2FVNzZsRGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9hYWNkY2MtYWExNy00MmY4LTlhZGUt
N2MzNzlhNTUxYzEyLzEvRU43Q2NXR1l1ajYtb3pMWVdmU2FVNzZsRGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9hYWNkY2MtYWExNy00MmY4LTlhZGUtN2MzNzlhNTUxYzEy
LzEvRU43Q2NXR1l1ajYtb3pMWVdmU2FVNzZsRGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpD9q/SE
U2vlo9TJkFD0lLFVWcNFRmEFVLpmlnXY/YS4rFBLVroESRLlRemZSvvG4ySFX/31
eiyywc73g1ksG4rsohIgQBEZB1Pnzeb2tUoUs31k536xIrMXzUVm9vwH8Pbi9r/F
4GoJ8lfsvPe2V7JbkAB7vAiInvR8Gb/k/d/KsTTAW1KXXyf4JF1MzbzJ9IOrXi5r
uyH2bscXfecnhP0mDJlimouBq2aNDak/w4U6LW7gGiR/UYo6Mx90FbMsiKZG2joC
MboeQLnalv0n0s9lqxWnfShcvMH0HQElSFayqhkDzmU7zjpmyRDoJxnp7UUomE06
Qq8uq6mMG3SO9w==
-----END CERTIFICATE-----
Generated at Sat Oct 10 18:15:30 2026 by rpki-client