Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File:                     7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier:          58m2L6j+qzN/tXvSYMonpRlXEM3Hzu3ymUMW7OJaQJE=
Subject key identifier:   02:B1:24:FC:B7:33:76:C5:F1:EF:73:87:79:66:6A:7A:51:95:33:19
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer:       /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial:       01A0E218F385E388F309FA2C850F4C1A43D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number:          06BE
Signing time:             Sun 27 Sep 2026 09:01:20 +0000
Manifest this update:     Sun 27 Sep 2026 09:01:20 +0000
Manifest next update:     Mon 28 Sep 2026 09:01:20 +0000
Files and hashes:         1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: IZIDHsGlOc0kZgAAmYSqJNKZWekx2GEwowM8LA5DK3A=)
                          2: QsP30C5AyyrplhJOQtwBFKHc2pI.roa (hash: 1rl1zPT5VgUb8N7x1I4JvxDOw2OsxnlXtnTYVUm9hGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 09:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:18:f3:85:e3:88:f3:09:fa:2c:85:0f:4c:1a:43:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
        Validity
            Not Before: Sep 27 09:01:20 2026 GMT
            Not After : Sep 28 09:01:20 2026 GMT
        Subject: CN=02b124fcb73376c5f1ef738779666a7a51953319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:b9:bd:12:2f:bd:46:01:1d:98:45:ce:f7:
                    65:40:b4:86:73:19:ac:80:e5:cc:34:dc:8b:e0:c9:
                    66:55:26:2a:11:40:d4:5d:f2:6a:0e:ef:de:81:14:
                    b5:92:2a:45:08:73:51:e6:2f:26:7d:1e:73:dd:59:
                    89:bd:0b:63:09:62:7a:fe:7d:56:16:5d:74:25:78:
                    90:21:93:49:22:8f:25:ce:8d:fa:c4:b3:fd:dc:9d:
                    a5:eb:fe:ff:40:c6:57:cf:91:c8:3a:c9:cd:52:c8:
                    ca:63:7b:7b:3c:e4:59:6d:23:91:7e:df:dc:35:e5:
                    28:af:a4:db:ad:c5:d4:37:06:ee:2b:60:f5:fe:41:
                    2f:27:da:58:c6:56:6a:ba:de:74:6e:f8:25:3a:9e:
                    f8:63:df:4b:50:28:c7:b7:f9:e3:1f:b7:bf:55:fa:
                    b2:d6:9d:ff:73:29:44:8d:cc:b4:ae:60:49:19:53:
                    03:ab:1b:34:81:a3:fe:9b:41:78:b1:5f:44:2e:bb:
                    22:8c:c9:31:2f:b3:97:e9:2e:95:0f:58:8b:11:d2:
                    ab:f2:cf:a1:59:1e:94:25:70:4d:8f:34:da:2c:c5:
                    cb:ca:dd:12:fd:d8:7f:f0:61:20:c8:d1:b1:c6:16:
                    58:81:e1:6d:c2:59:b6:5f:fd:15:4f:4b:f8:94:df:
                    82:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B1:24:FC:B7:33:76:C5:F1:EF:73:87:79:66:6A:7A:51:95:33:19
            X509v3 Authority Key Identifier:
                keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ff:19:6d:46:8c:30:92:2a:d7:b1:f5:db:dc:f9:79:d5:d6:
         83:d5:fa:85:9d:fa:e0:08:7f:d4:96:f5:12:fd:f6:b7:18:50:
         23:f3:0a:eb:20:ea:7e:f9:1d:aa:d4:cf:14:bd:c6:34:a4:e6:
         2b:44:96:ba:ea:47:31:35:14:79:a5:e4:49:ae:de:e3:a0:7a:
         7e:ac:3d:ab:cd:1a:a8:63:2f:e6:7b:30:7c:d0:1f:5f:d9:f6:
         35:ed:cf:47:50:f7:a7:c1:da:f0:3e:ab:19:22:e9:b9:9e:93:
         3f:9a:34:2d:1f:74:65:b9:63:be:7e:28:f6:c7:be:a2:2a:be:
         a3:cf:c6:53:97:5d:43:4b:1f:40:6a:e6:07:4e:2e:61:fc:40:
         08:6e:0f:12:f4:a3:5f:72:09:82:ab:6e:0d:20:08:fd:e2:31:
         31:90:54:c3:97:f8:06:dc:18:13:5c:67:af:43:c9:ce:4b:68:
         2a:a6:0e:c9:80:b9:bd:4b:62:b2:42:4b:3c:30:0c:24:4e:17:
         31:5a:f9:50:bf:14:ac:f9:8f:9e:1d:e8:19:d5:2a:b2:f6:aa:
         ac:d8:3e:d9:b6:b8:29:75:68:dd:ff:af:4b:ca:83:00:73:ee:
         06:e3:96:82:b7:e8:16:db:5a:11:a3:e9:88:ea:ac:98:64:f8:
         f8:98:bc:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDiGPOF44jzCfoshQ9MGkPTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYWFiY2ExMTZiNGU3M2E5OTQ0YWI5NzAyY2Y5ODY2NTc4
MDM1ODAwHhcNMjYwOTI3MDkwMTIwWhcNMjYwOTI4MDkwMTIwWjAzMTEwLwYDVQQD
EygwMmIxMjRmY2I3MzM3NmM1ZjFlZjczODc3OTY2NmE3YTUxOTUzMzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMG5vRIvvUYBHZhFzvdlQLSGcxms
gOXMNNyL4MlmVSYqEUDUXfJqDu/egRS1kipFCHNR5i8mfR5z3VmJvQtjCWJ6/n1W
Fl10JXiQIZNJIo8lzo36xLP93J2l6/7/QMZXz5HIOsnNUsjKY3t7PORZbSORft/c
NeUor6TbrcXUNwbuK2D1/kEvJ9pYxlZqut50bvglOp74Y99LUCjHt/njH7e/Vfqy
1p3/cylEjcy0rmBJGVMDqxs0gaP+m0F4sV9ELrsijMkxL7OX6S6VD1iLEdKr8s+h
WR6UJXBNjzTaLMXLyt0S/dh/8GEgyNGxxhZYgeFtwlm2X/0VT0v4lN+CDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKxJPy3M3bF8e9zh3lmanpRlTMZMB8GA1UdIwQY
MBaAFO6qvKEWtOc6mUSrlwLPmGZXgDWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3FxOG9SYTA1enFaUkt1WEFzLVlabGVBTllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hZWJkNDgtYTAwMi00NWY1LWIzMDct
ZGI0MTVhOWJlYmY1LzEvN3FxOG9SYTA1enFaUkt1WEFzLVlabGVBTllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9hZWJkNDgtYTAwMi00NWY1LWIzMDctZGI0MTVhOWJlYmY1
LzEvN3FxOG9SYTA1enFaUkt1WEFzLVlabGVBTllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/8ZbUaM
MJIq17H129z5edXWg9X6hZ364Ah/1Jb1Ev32txhQI/MK6yDqfvkdqtTPFL3GNKTm
K0SWuupHMTUUeaXkSa7e46B6fqw9q80aqGMv5nswfNAfX9n2Ne3PR1D3p8Ha8D6r
GSLpuZ6TP5o0LR90Zbljvn4o9se+oiq+o8/GU5ddQ0sfQGrmB04uYfxACG4PEvSj
X3IJgqtuDSAI/eIxMZBUw5f4BtwYE1xnr0PJzktoKqYOyYC5vUtiskJLPDAMJE4X
MVr5UL8UrPmPnh3oGdUqsvaqrNg+2ba4KXVo3f+vS8qDAHPuBuOWgrfoFttaEaPp
iOqsmGT4+Ji8Ew==
-----END CERTIFICATE-----
Generated at Sun Sep 27 16:18:43 2026 by rpki-client