Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
File:                     7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json)
Hash identifier:          iLsQvmyr2ULKfR+jyL/JCJFznj3UvZkuePGjgGNxa6E=
Subject key identifier:   54:A2:B3:B0:AC:5D:28:F2:2B:CD:9D:87:27:E2:1A:1A:C0:93:98:20
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Certificate issuer:       /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial:       01A135C7AFC3B9EF40B91780B671C59AC897
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
Manifest number:          190A
Signing time:             Tue 13 Oct 2026 15:00:41 +0000
Manifest this update:     Tue 13 Oct 2026 15:00:41 +0000
Manifest next update:     Wed 14 Oct 2026 15:00:41 +0000
Files and hashes:         1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: 4M4UwE2gZoyM14YKQDEDhLriK/QLin2SX9ssdaAJcm8=)
                          2: JKtuYAZj6V_iBv09WZvX1K5boYU.roa (hash: cKfPg8sNS79bgJa5PrvUDPTVTEFYtl+oJ3wNQ/Dq8wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:c7:af:c3:b9:ef:40:b9:17:80:b6:71:c5:9a:c8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
        Validity
            Not Before: Oct 13 15:00:41 2026 GMT
            Not After : Oct 14 15:00:41 2026 GMT
        Subject: CN=54a2b3b0ac5d28f22bcd9d8727e21a1ac0939820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:66:20:a2:ef:d4:89:73:1e:97:42:2f:62:7c:
                    4b:1d:13:ef:75:3a:95:86:99:bf:32:3b:61:0b:99:
                    89:87:f8:cf:25:ec:ce:3c:ba:24:ea:8c:10:0e:7d:
                    ab:13:2f:7f:84:90:e5:b7:b5:e7:40:a0:32:1b:38:
                    00:f7:63:ac:2b:ad:1f:c4:5e:08:8d:bf:a5:81:86:
                    94:04:39:bd:04:f0:79:a4:1f:c7:1b:94:7b:3c:66:
                    c7:e5:39:58:81:ab:e1:fa:4a:ff:cd:ec:31:e4:68:
                    5e:02:54:fc:99:34:03:f4:46:3c:a7:75:42:e6:5e:
                    bd:19:8a:b7:11:41:b7:82:45:2f:2f:2c:a2:00:5e:
                    83:2d:50:c5:b5:63:0a:0e:75:d2:41:e5:b1:72:1e:
                    c6:54:b0:23:81:93:09:73:ec:00:72:40:df:bd:8e:
                    eb:6e:11:95:1e:25:8d:33:98:9b:dc:ad:f8:14:79:
                    5c:83:39:1b:bc:97:36:7b:38:97:3a:78:45:dc:e9:
                    f7:99:60:50:9b:97:51:46:eb:4a:91:d4:ff:e0:11:
                    e1:cd:c5:61:41:34:3a:36:df:f4:9a:15:fa:7d:e4:
                    e6:e0:bb:49:b4:c3:b1:12:58:b8:e4:4f:17:17:30:
                    98:b6:fa:c0:cc:3c:81:d8:46:11:03:ba:44:2c:34:
                    ee:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A2:B3:B0:AC:5D:28:F2:2B:CD:9D:87:27:E2:1A:1A:C0:93:98:20
            X509v3 Authority Key Identifier:
                keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:95:fb:81:ce:ea:e6:00:b7:04:21:4a:3a:f9:ce:3a:7d:5d:
         d1:c1:75:7c:59:a0:4b:66:0a:24:3c:04:bc:d1:67:b4:e6:01:
         b2:ad:37:c6:7f:a9:ce:b7:7c:8e:7f:66:42:af:de:40:68:7c:
         b9:80:18:b5:73:d3:1b:e6:66:f6:e3:2e:93:63:57:a3:da:c1:
         63:b5:15:46:51:a9:ee:1e:7d:a7:ed:06:44:f0:bb:6f:0e:31:
         ac:a6:f4:db:13:aa:84:5b:19:68:e8:d4:32:e3:1d:a8:4f:b8:
         f4:a0:36:c3:6c:f5:85:d0:41:3e:b5:27:46:1f:67:b0:7b:4a:
         a3:fa:7a:3b:ac:2b:f9:d9:cd:18:f5:40:3a:b8:04:1b:0c:6b:
         0a:79:09:93:d9:b1:d7:8d:61:15:47:76:11:bd:92:4a:cf:92:
         e0:7b:76:93:00:8c:49:ad:bb:9f:3b:fc:4a:3f:97:4c:2f:a0:
         26:e6:1d:76:aa:0d:a2:d7:24:0e:61:97:79:33:14:31:91:45:
         bc:0d:20:07:ed:ac:e9:5d:fc:51:8d:44:ad:24:1e:55:92:9c:
         37:45:96:f5:75:23:12:24:48:15:89:9d:9c:36:d7:6b:c3:71:
         85:7d:f4:95:e2:e9:9d:9b:d0:8f:b7:be:5a:3e:d1:a4:f0:d9:
         d1:53:95:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:44:38 2026 by rpki-client