Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
File:                     79pPUsK3lM5LX38h4ySxubEGXRw.mft (raw, json)
Hash identifier:          rbwuwLD0Y3m2HpmkdFI/NaIEGltX6dBXy3PV4+dBNgk=
Subject key identifier:   49:3F:15:7D:10:D8:05:4D:B7:3C:27:35:EB:EB:C8:15:33:FB:BD:C1
Authority key identifier: EF:DA:4F:52:C2:B7:94:CE:4B:5F:7F:21:E3:24:B1:B9:B1:06:5D:1C
Certificate issuer:       /CN=efda4f52c2b794ce4b5f7f21e324b1b9b1065d1c
Certificate serial:       01A0FA582E2D670F18893FED5D9CAAC1E3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
Manifest number:          0299
Signing time:             Fri 02 Oct 2026 02:01:17 +0000
Manifest this update:     Fri 02 Oct 2026 02:01:17 +0000
Manifest next update:     Sat 03 Oct 2026 02:01:17 +0000
Files and hashes:         1: 79pPUsK3lM5LX38h4ySxubEGXRw.crl (hash: xNkMtiyht/fcpiBI+m+dJS7tG29B8T+zIKYg7pSFACg=)
                          2: swO-HTW4j5qDDjQOOjuNXgqW8xU.roa (hash: XU3HpZ66wu/qbtiav87O6TEaXO9w/HkLcs/bSmMTwpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fa:58:2e:2d:67:0f:18:89:3f:ed:5d:9c:aa:c1:e3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efda4f52c2b794ce4b5f7f21e324b1b9b1065d1c
        Validity
            Not Before: Oct  2 02:01:17 2026 GMT
            Not After : Oct  3 02:01:17 2026 GMT
        Subject: CN=493f157d10d8054db73c2735ebebc81533fbbdc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4b:72:b8:d8:d1:42:d6:2b:c6:18:80:69:f9:
                    35:84:99:f6:7c:63:92:9b:32:ff:30:57:1e:17:a7:
                    cb:5c:91:24:f1:41:dd:b6:b8:b5:5d:d9:fb:0b:e2:
                    23:2e:79:58:46:89:3c:ca:ee:1f:ae:da:81:9e:6f:
                    3d:99:15:e2:64:eb:49:fc:0f:e8:f5:98:4c:05:7b:
                    a9:3a:fa:1e:fc:32:6a:8c:97:61:52:07:25:6b:a4:
                    30:45:2a:f8:3d:21:8c:08:62:2f:a6:13:e4:ed:b5:
                    cc:5a:91:9c:0c:e3:ad:a5:57:79:44:3c:53:c8:6b:
                    1c:f9:30:57:d2:eb:39:5c:29:eb:9b:7a:65:19:b3:
                    93:a8:d9:ee:d0:0b:5c:0d:9b:69:fa:62:ff:f2:b4:
                    c5:2c:32:5d:ff:38:c8:2d:76:96:e2:37:dc:5e:94:
                    68:75:e4:6e:2d:d2:09:18:67:e7:44:5c:47:c8:23:
                    4f:91:e3:46:bc:4c:60:78:15:7d:e5:03:e6:85:6e:
                    09:30:c0:4f:2c:4b:28:93:d0:11:dd:90:2a:d9:22:
                    3b:6d:46:d0:b8:21:61:08:77:50:b5:37:a3:a0:2b:
                    41:a8:15:52:02:f8:aa:c0:74:48:1c:44:7f:12:91:
                    7e:ce:16:18:7b:c7:86:ff:bd:13:91:9d:71:35:82:
                    9f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3F:15:7D:10:D8:05:4D:B7:3C:27:35:EB:EB:C8:15:33:FB:BD:C1
            X509v3 Authority Key Identifier:
                keyid:EF:DA:4F:52:C2:B7:94:CE:4B:5F:7F:21:E3:24:B1:B9:B1:06:5D:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:65:73:a1:80:ec:e6:d2:f3:33:15:96:54:7f:c7:20:0c:6e:
         ea:d5:12:2e:b0:b4:f2:27:92:46:a5:a3:ee:5b:26:0c:95:b2:
         e5:ad:1f:bb:1a:1e:a5:39:3e:7f:d0:22:44:bd:ff:d0:35:43:
         a8:0d:d0:dd:bb:30:e6:38:38:38:f2:6e:88:c1:c0:56:cf:0e:
         c9:1e:2d:64:1e:23:a0:88:2d:d6:df:66:72:30:83:73:9a:fb:
         ac:3d:e6:08:1a:5e:99:16:6d:38:02:e1:a8:83:89:3e:f4:62:
         78:e5:e8:d0:43:8c:d7:6d:03:73:91:2d:e6:88:56:ab:08:4b:
         f1:8d:c6:ae:f0:1e:ce:c7:af:3f:d3:7e:75:e7:ef:cb:51:b9:
         b2:7f:c1:96:1e:2a:9f:97:53:02:3a:0b:e5:58:50:8b:53:06:
         c4:70:ac:9f:ee:4c:6f:82:69:2e:87:4d:d1:e0:c7:e5:3e:8f:
         70:23:56:2d:fa:66:c4:18:eb:82:bb:7c:90:aa:11:7a:d1:0d:
         d8:e8:6c:02:ce:54:34:3f:13:16:e2:08:e4:0d:f0:30:af:c6:
         49:14:fa:92:0a:a5:cc:26:7c:ca:d2:93:13:5f:3e:a5:72:e2:
         e7:42:42:25:8c:4e:cc:78:5e:16:a8:c9:82:c3:3d:79:91:3e:
         ec:4b:ec:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD6WC4tZw8YiT/tXZyqwePWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZGE0ZjUyYzJiNzk0Y2U0YjVmN2YyMWUzMjRiMWI5YjEw
NjVkMWMwHhcNMjYxMDAyMDIwMTE3WhcNMjYxMDAzMDIwMTE3WjAzMTEwLwYDVQQD
Eyg0OTNmMTU3ZDEwZDgwNTRkYjczYzI3MzVlYmViYzgxNTMzZmJiZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEtyuNjRQtYrxhiAafk1hJn2fGOS
mzL/MFceF6fLXJEk8UHdtri1Xdn7C+IjLnlYRok8yu4frtqBnm89mRXiZOtJ/A/o
9ZhMBXupOvoe/DJqjJdhUgcla6QwRSr4PSGMCGIvphPk7bXMWpGcDOOtpVd5RDxT
yGsc+TBX0us5XCnrm3plGbOTqNnu0AtcDZtp+mL/8rTFLDJd/zjILXaW4jfcXpRo
deRuLdIJGGfnRFxHyCNPkeNGvExgeBV95QPmhW4JMMBPLEsok9AR3ZAq2SI7bUbQ
uCFhCHdQtTejoCtBqBVSAviqwHRIHER/EpF+zhYYe8eG/70TkZ1xNYKfSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEk/FX0Q2AVNtzwnNevryBUz+73BMB8GA1UdIwQY
MBaAFO/aT1LCt5TOS19/IeMksbmxBl0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzlwUFVzSzNsTTVMWDM4aDR5U3h1YkVHWFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83NjQxYjgtNzhlYS00ZTE1LWIxOTkt
Nzk4ZjU0ZjMyODA4LzEvNzlwUFVzSzNsTTVMWDM4aDR5U3h1YkVHWFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83NjQxYjgtNzhlYS00ZTE1LWIxOTktNzk4ZjU0ZjMyODA4
LzEvNzlwUFVzSzNsTTVMWDM4aDR5U3h1YkVHWFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmVzoYDs
5tLzMxWWVH/HIAxu6tUSLrC08ieSRqWj7lsmDJWy5a0fuxoepTk+f9AiRL3/0DVD
qA3Q3bsw5jg4OPJuiMHAVs8OyR4tZB4joIgt1t9mcjCDc5r7rD3mCBpemRZtOALh
qIOJPvRieOXo0EOM120Dc5Et5ohWqwhL8Y3GrvAezsevP9N+defvy1G5sn/Blh4q
n5dTAjoL5VhQi1MGxHCsn+5Mb4JpLodN0eDH5T6PcCNWLfpmxBjrgrt8kKoRetEN
2OhsAs5UND8TFuII5A3wMK/GSRT6kgqlzCZ8ytKTE18+pXLi50JCJYxOzHheFqjJ
gsM9eZE+7EvsVw==
-----END CERTIFICATE-----
Generated at Fri Oct 2 06:11:56 2026 by rpki-client