Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/ba2444-e090-42b0-abdc-f77e31086017/1/7jG4Pm0913f5Y5tsJyhlS1elssI.mft
File:                     7jG4Pm0913f5Y5tsJyhlS1elssI.mft (raw, json)
Hash identifier:          9UdM0+dg5lGcu8XStvAUWQ7hgy+vknaArtxztGa8vjE=
Subject key identifier:   0C:49:EB:48:97:88:D6:98:E8:92:E9:E3:57:DF:36:25:84:8F:CC:28
Authority key identifier: EE:31:B8:3E:6D:3D:D7:77:F9:63:9B:6C:27:28:65:4B:57:A5:B2:C2
Certificate issuer:       /CN=ee31b83e6d3dd777f9639b6c2728654b57a5b2c2
Certificate serial:       01A11ABE1804445DB20862CF6F97F665E530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jG4Pm0913f5Y5tsJyhlS1elssI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/ba2444-e090-42b0-abdc-f77e31086017/1/7jG4Pm0913f5Y5tsJyhlS1elssI.mft
Manifest number:          B1
Signing time:             Thu 08 Oct 2026 09:00:27 +0000
Manifest this update:     Thu 08 Oct 2026 09:00:27 +0000
Manifest next update:     Fri 09 Oct 2026 09:00:27 +0000
Files and hashes:         1: 7jG4Pm0913f5Y5tsJyhlS1elssI.crl (hash: JN+wAdWDAF8iUJvphYw4nsv6LhM4dBWM3DwBSbKnT34=)
                          2: xoNWql4HohJkuw-WyU4P7canzu0.asa (hash: wpqUkNrRvNQcEvfvj79UN91Hgn0YvBvpGb93trQ3Or4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/ba2444-e090-42b0-abdc-f77e31086017/1/7jG4Pm0913f5Y5tsJyhlS1elssI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/ba2444-e090-42b0-abdc-f77e31086017/1/7jG4Pm0913f5Y5tsJyhlS1elssI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jG4Pm0913f5Y5tsJyhlS1elssI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:be:18:04:44:5d:b2:08:62:cf:6f:97:f6:65:e5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31b83e6d3dd777f9639b6c2728654b57a5b2c2
        Validity
            Not Before: Oct  8 09:00:27 2026 GMT
            Not After : Oct  9 09:00:27 2026 GMT
        Subject: CN=0c49eb489788d698e892e9e357df3625848fcc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:dc:0f:66:32:3f:26:ea:ec:c6:56:36:76:
                    66:4f:61:a8:0c:1f:48:cd:90:6a:93:01:39:0a:87:
                    7f:13:66:64:1b:a0:24:40:48:1c:ab:a6:15:2c:03:
                    c2:52:d7:18:3d:39:83:43:54:a5:45:46:a6:f0:f4:
                    65:60:f5:dd:1a:5a:54:6c:15:39:fc:03:cf:ed:c8:
                    3f:a1:98:c9:7c:91:d6:dc:7a:b2:6a:1a:fe:ba:bd:
                    f7:84:0b:87:ad:61:f7:68:09:a1:97:31:15:62:85:
                    3d:06:12:79:a8:7a:3d:1c:d2:25:8e:d5:fb:db:67:
                    a5:20:f6:10:ce:12:e4:63:98:7f:ca:94:1d:c6:91:
                    07:3f:15:d5:bf:28:10:0e:85:96:bf:94:09:bf:f5:
                    b2:b4:ff:2f:c9:07:76:ae:a1:27:bd:31:d5:4e:00:
                    88:27:7c:36:44:6e:fd:3e:28:3f:d2:e7:a2:65:1d:
                    3f:ed:bc:61:4c:52:57:19:81:7c:36:e2:7a:2a:70:
                    9d:7f:b2:94:f7:89:40:7a:5a:61:96:36:0b:20:2d:
                    90:11:c5:1c:b7:7c:ca:6b:e6:81:ff:e4:8c:23:16:
                    34:07:2e:35:9a:f7:94:6e:59:1a:a6:eb:2f:d4:9e:
                    2f:61:77:93:2c:0a:af:20:bd:92:cd:cd:ea:db:cd:
                    b7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:49:EB:48:97:88:D6:98:E8:92:E9:E3:57:DF:36:25:84:8F:CC:28
            X509v3 Authority Key Identifier:
                keyid:EE:31:B8:3E:6D:3D:D7:77:F9:63:9B:6C:27:28:65:4B:57:A5:B2:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jG4Pm0913f5Y5tsJyhlS1elssI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/ba2444-e090-42b0-abdc-f77e31086017/1/7jG4Pm0913f5Y5tsJyhlS1elssI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/ba2444-e090-42b0-abdc-f77e31086017/1/7jG4Pm0913f5Y5tsJyhlS1elssI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:97:88:7e:31:00:02:ef:c2:50:cc:48:d8:b8:48:a4:b2:d7:
         f3:3b:92:ed:76:45:4f:67:37:95:35:7b:fe:6a:93:6f:5a:a6:
         64:7d:2d:98:15:d8:23:f7:c8:65:16:7c:a2:c8:ee:ec:2e:3b:
         79:c0:33:f7:76:ef:8d:a7:33:08:d0:cf:e3:af:13:5a:0d:f1:
         9d:e6:15:1c:ac:d0:c0:a8:15:c7:8b:50:d9:6c:4c:cf:8c:fc:
         bd:c7:df:5c:e2:be:47:85:bb:d1:ce:ad:a8:39:53:c5:8e:71:
         55:82:91:b1:d7:8f:80:1c:ca:32:1c:aa:2d:39:9b:06:6f:2d:
         4b:f5:7b:2d:de:f2:ea:f4:2e:08:ef:be:42:60:43:0a:da:4c:
         e3:4e:47:60:a0:a1:8c:6b:96:65:e4:65:2e:0c:7c:f2:17:e0:
         f5:9e:4b:d2:10:d7:91:ac:ba:c5:f8:6f:37:17:24:1b:60:af:
         3b:21:87:d3:57:33:39:71:05:b2:9a:51:56:99:80:d3:bf:6b:
         47:90:ec:d0:f4:25:ff:b2:b7:85:19:88:32:d0:b2:86:c2:39:
         a6:41:70:97:15:ae:9f:86:7a:18:47:9e:24:de:f0:b7:ca:80:
         5e:07:4c:48:16:6d:a9:d2:5a:a2:5a:9b:94:8b:73:81:6d:0b:
         f1:76:49:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEavhgERF2yCGLPb5f2ZeUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzFiODNlNmQzZGQ3NzdmOTYzOWI2YzI3Mjg2NTRiNTdh
NWIyYzIwHhcNMjYxMDA4MDkwMDI3WhcNMjYxMDA5MDkwMDI3WjAzMTEwLwYDVQQD
EygwYzQ5ZWI0ODk3ODhkNjk4ZTg5MmU5ZTM1N2RmMzYyNTg0OGZjYzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNrcD2YyPybq7MZWNnZmT2GoDB9I
zZBqkwE5Cod/E2ZkG6AkQEgcq6YVLAPCUtcYPTmDQ1SlRUam8PRlYPXdGlpUbBU5
/APP7cg/oZjJfJHW3Hqyahr+ur33hAuHrWH3aAmhlzEVYoU9BhJ5qHo9HNIljtX7
22elIPYQzhLkY5h/ypQdxpEHPxXVvygQDoWWv5QJv/WytP8vyQd2rqEnvTHVTgCI
J3w2RG79Pig/0ueiZR0/7bxhTFJXGYF8NuJ6KnCdf7KU94lAelphljYLIC2QEcUc
t3zKa+aB/+SMIxY0By41mveUblkapusv1J4vYXeTLAqvIL2Szc3q2823nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxJ60iXiNaY6JLp41ffNiWEj8woMB8GA1UdIwQY
MBaAFO4xuD5tPdd3+WObbCcoZUtXpbLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pHNFBtMDkxM2Y1WTV0c0p5aGxTMWVsc3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iYTI0NDQtZTA5MC00MmIwLWFiZGMt
Zjc3ZTMxMDg2MDE3LzEvN2pHNFBtMDkxM2Y1WTV0c0p5aGxTMWVsc3NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iYTI0NDQtZTA5MC00MmIwLWFiZGMtZjc3ZTMxMDg2MDE3
LzEvN2pHNFBtMDkxM2Y1WTV0c0p5aGxTMWVsc3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5eIfjEA
Au/CUMxI2LhIpLLX8zuS7XZFT2c3lTV7/mqTb1qmZH0tmBXYI/fIZRZ8osju7C47
ecAz93bvjaczCNDP468TWg3xneYVHKzQwKgVx4tQ2WxMz4z8vcffXOK+R4W70c6t
qDlTxY5xVYKRsdePgBzKMhyqLTmbBm8tS/V7Ld7y6vQuCO++QmBDCtpM405HYKCh
jGuWZeRlLgx88hfg9Z5L0hDXkay6xfhvNxckG2CvOyGH01czOXEFsppRVpmA079r
R5Ds0PQl/7K3hRmIMtCyhsI5pkFwlxWun4Z6GEeeJN7wt8qAXgdMSBZtqdJaolqb
lItzgW0L8XZJ9A==
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:01:54 2026 by rpki-client