Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
File:                     7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json)
Hash identifier:          79GB3opmZ+oTHZNAjJfNJ0mb38+LvfP/Y/CeyDOVYsc=
Subject key identifier:   D3:6D:26:25:26:48:6E:8C:49:56:36:61:2E:3D:AC:66:A1:7B:9C:80
Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
Certificate issuer:       /CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Certificate serial:       01A1DFF164299C29FC452656232B58FF7561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
Manifest number:          1AFA
Signing time:             Sun 15 Nov 2026 16:01:41 +0000
Manifest this update:     Sun 15 Nov 2026 16:01:41 +0000
Manifest next update:     Mon 16 Nov 2026 16:01:41 +0000
Files and hashes:         1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: W7SqwheoReWVBoBki+F2oFRkLt6eodfX57JE9/blVRA=)
                          2: pIgvzLjixs4_sf2VopagAU-SJ2k.roa (hash: 8W+ULMj0Umqs1HGvdH4mGs4tGpsjhjBCqHgwP2+9Xgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:f1:64:29:9c:29:fc:45:26:56:23:2b:58:ff:75:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197
        Validity
            Not Before: Nov 15 16:01:41 2026 GMT
            Not After : Nov 16 16:01:41 2026 GMT
        Subject: CN=d36d262526486e8c495636612e3dac66a17b9c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:21:c6:10:f0:d2:ad:a9:75:82:0b:84:04:
                    9f:53:c9:99:ca:2d:82:58:5e:7f:1f:19:36:e4:10:
                    0c:59:7e:2d:34:f7:ba:8c:33:97:5c:f1:1e:cd:56:
                    c9:85:33:81:f8:d2:ae:05:6f:6d:cd:fd:94:ec:c1:
                    09:4b:18:1a:55:00:06:cf:a3:25:3d:5b:48:c4:5c:
                    97:c8:1c:7e:d2:ab:34:35:0b:24:e1:5f:a4:5d:f0:
                    71:2b:90:86:1a:6c:c3:3e:6e:a7:c2:c3:2d:dc:58:
                    08:25:2a:d2:47:b9:57:04:52:94:3a:9f:c9:f2:32:
                    e5:74:10:90:56:7c:a0:97:8b:2d:e3:71:0a:7e:f0:
                    58:e9:e0:6a:46:a6:86:f6:25:15:d5:e5:cb:06:e4:
                    59:18:ae:1c:f2:cc:bb:9e:57:60:94:03:c2:4c:d1:
                    37:dd:dc:27:1b:90:35:db:d9:05:b5:82:31:4f:17:
                    89:7f:e4:b9:48:43:bb:92:63:44:14:5f:67:99:f7:
                    a2:be:d7:36:2f:3c:14:f8:cf:1d:a7:ad:e0:3c:97:
                    f2:a4:f9:5e:08:fc:9e:1a:43:f2:97:f3:3d:0a:8b:
                    ff:50:be:55:ec:53:4a:ec:40:87:ed:b4:07:6e:54:
                    e9:cf:74:a1:34:2b:f3:82:b3:54:94:15:1b:b0:47:
                    17:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6D:26:25:26:48:6E:8C:49:56:36:61:2E:3D:AC:66:A1:7B:9C:80
            X509v3 Authority Key Identifier:
                keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:43:a1:d5:2a:17:96:ad:32:83:66:bd:ae:32:98:30:e1:0a:
         e6:28:b8:2c:ab:26:33:76:c6:ed:ae:ac:f8:ae:d0:ef:aa:ea:
         7a:c4:72:bd:76:d1:5b:20:71:59:89:e7:43:3c:c4:c8:70:2b:
         3e:b8:f8:4f:ca:c5:e3:ab:8c:29:89:6e:2d:4e:41:40:db:b5:
         45:95:f9:0b:fb:49:cd:8e:7f:1a:54:8a:45:5d:98:7f:06:03:
         5c:d3:72:c9:da:ef:15:32:fe:c0:f8:73:78:f9:bc:91:d4:e8:
         ef:8e:7b:f7:96:5b:67:6c:f7:d1:bc:cb:58:ad:a8:11:b9:96:
         6b:1f:23:11:59:69:29:b0:79:cb:98:5d:04:92:31:e0:07:f3:
         61:98:6b:9b:87:8e:1e:78:ea:35:18:4f:e1:7e:31:55:93:24:
         3a:44:95:ba:6a:a2:18:1b:ae:dd:42:9e:f2:6d:f3:42:4e:ab:
         bf:84:38:74:82:81:f4:40:0c:2a:8d:44:1d:88:62:ab:a5:2f:
         2c:46:94:57:58:ea:c4:61:42:8a:57:16:48:7f:c9:5c:b9:88:
         d0:00:a8:05:bc:ec:c2:25:e0:38:12:cb:b7:84:a5:b9:f7:ba:
         1e:66:c8:81:54:ad:fc:4d:d6:f6:a0:b8:44:d3:f1:2f:07:8d:
         56:49:e6:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHf8WQpnCn8RSZWIytY/3VhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODNiYzQ1OGEzNjk2ZDY1MmZiZWY4NjNlNWVlNDBmMDA5
NmYxOTcwHhcNMjYxMTE1MTYwMTQxWhcNMjYxMTE2MTYwMTQxWjAzMTEwLwYDVQQD
EyhkMzZkMjYyNTI2NDg2ZThjNDk1NjM2NjEyZTNkYWM2NmExN2I5YzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKwhxhDw0q2pdYILhASfU8mZyi2C
WF5/Hxk25BAMWX4tNPe6jDOXXPEezVbJhTOB+NKuBW9tzf2U7MEJSxgaVQAGz6Ml
PVtIxFyXyBx+0qs0NQsk4V+kXfBxK5CGGmzDPm6nwsMt3FgIJSrSR7lXBFKUOp/J
8jLldBCQVnygl4st43EKfvBY6eBqRqaG9iUV1eXLBuRZGK4c8sy7nldglAPCTNE3
3dwnG5A129kFtYIxTxeJf+S5SEO7kmNEFF9nmfeivtc2LzwU+M8dp63gPJfypPle
CPyeGkPyl/M9Cov/UL5V7FNK7ECH7bQHblTpz3ShNCvzgrNUlBUbsEcX3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNtJiUmSG6MSVY2YS49rGahe5yAMB8GA1UdIwQY
MBaAFO6DvEWKNpbWUvvvhj5e5A8AlvGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYt
N2MyODFkMDdlMTU1LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYtN2MyODFkMDdlMTU1
LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEOh1SoX
lq0yg2a9rjKYMOEK5ii4LKsmM3bG7a6s+K7Q76rqesRyvXbRWyBxWYnnQzzEyHAr
Prj4T8rF46uMKYluLU5BQNu1RZX5C/tJzY5/GlSKRV2YfwYDXNNyydrvFTL+wPhz
ePm8kdTo745795ZbZ2z30bzLWK2oEbmWax8jEVlpKbB5y5hdBJIx4AfzYZhrm4eO
HnjqNRhP4X4xVZMkOkSVumqiGBuu3UKe8m3zQk6rv4Q4dIKB9EAMKo1EHYhiq6Uv
LEaUV1jqxGFCilcWSH/JXLmI0ACoBbzswiXgOBLLt4Slufe6HmbIgVSt/E3W9qC4
RNPxLweNVknm9g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:07:06 2026 by rpki-client