Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File:                     Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier:          F7gzr8br6WEoClO8BsUS0DP+F3IszzEWBm9Lh8y5cj8=
Subject key identifier:   71:3B:8B:7C:A3:DD:20:F3:36:30:1F:D6:6B:5E:DF:75:12:86:CB:DA
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer:       /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial:       01A14C4FEC64503498C195EC296CE72ADC79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number:          09B4
Signing time:             Sun 18 Oct 2026 00:01:08 +0000
Manifest this update:     Sun 18 Oct 2026 00:01:08 +0000
Manifest next update:     Mon 19 Oct 2026 00:01:08 +0000
Files and hashes:         1: NA0zlZdT69EMNDUxOd3YryjIMKw.roa (hash: qH/UmIxK17bFbxqTtc1QwvlKjc61IIZjj3fPAL9RV0k=)
                          2: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: wE00oBOUSZwrtFDsm5ov3guGdGuEctuz5xZWskypqc0=)
                          3: Q_KudnNplnM7xTKeRceGVD0U8DU.roa (hash: HUQPObGQz5J+hBdukTqmwA22jSbr23qzB77Wm8N/Y5Y=)
                          4: XfYuhkKGxuWqYVZsxvacmZ8NHqI.roa (hash: UsJsqIbh52Sv6gjqXGmIkydItbrzNspMFi73hbQ2V0A=)
                          5: f8fB2-Qf4SVzzOW_JDZYcxjYmyY.roa (hash: eO+EEySjW//KqJ+fRXV+nxHW9pPSdPHmoE13mfUn/o4=)
                          6: mWJHoK6-a-RbSMXctOjcxEY0z2E.roa (hash: ngT421oZcibNfWWS77w2Is9S0y6uxm3ZtEGPEYicE6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4c:4f:ec:64:50:34:98:c1:95:ec:29:6c:e7:2a:dc:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
        Validity
            Not Before: Oct 18 00:01:08 2026 GMT
            Not After : Oct 19 00:01:08 2026 GMT
        Subject: CN=713b8b7ca3dd20f336301fd66b5edf751286cbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:33:72:72:4d:de:76:a2:f3:f8:ba:d1:63:
                    63:13:6e:6e:17:6c:12:39:ba:3e:39:0f:ec:b3:10:
                    7a:59:d1:22:23:4b:6f:f4:60:fe:8d:c4:10:be:f7:
                    1c:9c:73:7f:c4:dc:e7:67:4b:4b:cb:db:a3:61:13:
                    77:5b:db:0c:86:0b:71:16:d8:8e:8a:3e:76:1d:a2:
                    98:33:b9:79:97:1c:5c:b0:2b:fd:27:1a:90:74:7f:
                    49:c0:f5:83:b4:0d:37:42:c6:fa:5a:7b:18:26:02:
                    bd:f6:ff:3f:22:a8:83:7d:f8:36:65:c5:cf:95:bd:
                    cc:09:ab:90:32:dc:3b:a2:5b:cb:8c:4e:aa:9a:e7:
                    d1:1e:0d:16:f3:76:3f:7a:0c:b5:33:04:67:95:a1:
                    d7:0f:05:cb:7a:02:18:70:1b:3d:06:60:df:da:03:
                    0c:85:3e:52:65:df:95:83:c0:68:ae:9c:b1:b9:c6:
                    9a:5d:eb:66:8c:9f:63:ef:eb:90:6a:14:9e:dc:99:
                    a2:a7:43:a7:55:1e:16:b4:2a:1e:89:4e:e6:a0:a5:
                    3f:66:ae:6e:b8:79:29:87:f9:cd:c3:62:0d:ca:03:
                    5f:e8:a4:b8:a1:d0:83:d2:62:f2:29:9c:ba:6e:21:
                    98:8f:7e:06:2f:96:dd:11:f6:4a:83:1f:23:0a:94:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3B:8B:7C:A3:DD:20:F3:36:30:1F:D6:6B:5E:DF:75:12:86:CB:DA
            X509v3 Authority Key Identifier:
                keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b2:e3:19:87:cc:89:3f:e1:71:e2:10:2d:34:71:da:b9:e9:
         bd:6c:77:fe:9a:e1:57:d1:97:5b:7b:a6:b9:92:ae:d1:64:96:
         df:da:27:44:11:d6:f1:ee:05:72:5b:c6:c9:d8:2a:c7:49:83:
         9c:30:fa:26:a4:9b:80:c5:83:86:3e:04:d5:e3:8a:e2:ea:8f:
         6f:a0:c5:6b:9a:0d:9b:18:53:bc:40:5e:dd:d4:46:59:ec:90:
         b9:2a:22:dc:01:5b:1c:ac:94:da:00:13:89:d3:d2:20:2b:e7:
         e8:ad:1c:da:00:83:74:4f:d2:e7:b9:5e:23:27:15:72:6a:56:
         89:38:63:ad:87:26:70:f0:ff:61:55:bd:27:76:0a:95:5f:80:
         23:5d:00:42:60:20:b9:b4:32:ba:b1:da:1f:a5:f6:44:99:75:
         48:49:f8:ee:fa:b3:36:96:f7:c0:6f:a7:e7:de:43:5e:f4:d2:
         dc:0a:fd:68:3c:8c:4d:20:98:32:d1:22:43:1e:fa:6b:bc:3e:
         2e:01:28:f9:d7:88:02:5c:d1:3e:3a:a8:b5:97:8c:12:4a:94:
         b3:c4:ee:bc:99:6c:be:70:20:14:b5:85:a9:ef:2b:da:6a:31:
         0f:1f:1f:46:7b:6b:4d:11:5f:52:d3:ee:49:e0:03:ee:03:51:
         e3:f7:92:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFMT+xkUDSYwZXsKWznKtx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZWY3OWM1MWUzZmEwODQzMzIwNjRhYTBiODM2MDhkNmU0
MWMxMmIwHhcNMjYxMDE4MDAwMTA4WhcNMjYxMDE5MDAwMTA4WjAzMTEwLwYDVQQD
Eyg3MTNiOGI3Y2EzZGQyMGYzMzYzMDFmZDY2YjVlZGY3NTEyODZjYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdczcnJN3nai8/i60WNjE25uF2wS
Obo+OQ/ssxB6WdEiI0tv9GD+jcQQvvccnHN/xNznZ0tLy9ujYRN3W9sMhgtxFtiO
ij52HaKYM7l5lxxcsCv9JxqQdH9JwPWDtA03Qsb6WnsYJgK99v8/IqiDffg2ZcXP
lb3MCauQMtw7olvLjE6qmufRHg0W83Y/egy1MwRnlaHXDwXLegIYcBs9BmDf2gMM
hT5SZd+Vg8BorpyxucaaXetmjJ9j7+uQahSe3Jmip0OnVR4WtCoeiU7moKU/Zq5u
uHkph/nNw2INygNf6KS4odCD0mLyKZy6biGYj34GL5bdEfZKgx8jCpSF0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHE7i3yj3SDzNjAf1mte33UShsvaMB8GA1UdIwQY
MBaAFDXvecUeP6CEMyBkqguDYI1uQcErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAt
ZTNkOTUzMWRmZDJiLzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kM2YwZjMtZGRlZC00MmRjLTgyZTAtZTNkOTUzMWRmZDJi
LzEvTmU5NXhSNF9vSVF6SUdTcUM0TmdqVzVCd1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLLjGYfM
iT/hceIQLTRx2rnpvWx3/prhV9GXW3umuZKu0WSW39onRBHW8e4FclvGydgqx0mD
nDD6JqSbgMWDhj4E1eOK4uqPb6DFa5oNmxhTvEBe3dRGWeyQuSoi3AFbHKyU2gAT
idPSICvn6K0c2gCDdE/S57leIycVcmpWiThjrYcmcPD/YVW9J3YKlV+AI10AQmAg
ubQyurHaH6X2RJl1SEn47vqzNpb3wG+n595DXvTS3Ar9aDyMTSCYMtEiQx76a7w+
LgEo+deIAlzRPjqotZeMEkqUs8TuvJlsvnAgFLWFqe8r2moxDx8fRntrTRFfUtPu
SeAD7gNR4/eSPQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 03:29:11 2026 by rpki-client