Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
File:                     oeX8Y1oad1V0t3muqczWUkzE0Pk.mft (raw, json)
Hash identifier:          F2rx5dGqHbIW1nBcKaWin9lvU9TpmCZveGtnTE/m/94=
Subject key identifier:   C6:63:83:B2:D9:A1:56:43:1A:DF:91:82:2B:55:1E:C6:70:C8:50:56
Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9
Certificate issuer:       /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
Certificate serial:       01A18788A4EA1B32DECAEC010193652A1E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
Manifest number:          0447
Signing time:             Thu 29 Oct 2026 12:00:41 +0000
Manifest this update:     Thu 29 Oct 2026 12:00:41 +0000
Manifest next update:     Fri 30 Oct 2026 12:00:41 +0000
Files and hashes:         1: h0OnQS_LDhHmHtdq9MOUPdDXqMY.roa (hash: fvbR4O3MuxsJi7oWYqjm2ohLFx0/5Mha06ohU0AwT/A=)
                          2: hM3q0tm1hGdyTy4Pq63zsy3D7-Q.roa (hash: LpyLjFrIDk+LFAUQPWPNyV38HQSScxJQeF0sXMSFCqU=)
                          3: oeX8Y1oad1V0t3muqczWUkzE0Pk.crl (hash: Tm2yA2p5FUOQO+6VmjztfE/4mXeHR5y/qck1QzKTDkk=)
                          4: zY55egblxOayG_XFLEDuLnn2KzY.roa (hash: 3VtoSxzQ+1ALd4QWfODnz+BMqwgszTlt4xRR53OtSeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:88:a4:ea:1b:32:de:ca:ec:01:01:93:65:2a:1e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
        Validity
            Not Before: Oct 29 12:00:41 2026 GMT
            Not After : Oct 30 12:00:41 2026 GMT
        Subject: CN=c66383b2d9a156431adf91822b551ec670c85056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:ad:e2:61:21:e7:63:73:cd:d9:e0:05:bb:
                    1f:fb:54:b3:c3:a5:37:b9:0c:2a:d6:53:58:21:65:
                    0d:ba:2a:b7:c0:86:aa:5c:db:21:7e:f5:2e:fc:23:
                    40:ae:d2:49:c8:a1:4c:94:f5:35:64:a5:eb:b3:62:
                    bc:a1:c0:b3:0f:14:c2:3a:14:9c:f7:49:05:cc:1b:
                    3a:89:7a:3f:95:ec:60:f7:98:b3:d3:82:5c:90:24:
                    fc:f9:99:09:0c:4c:f1:fe:cb:ea:3f:91:f5:cc:90:
                    0c:80:f0:ff:8c:d1:16:9f:e0:c1:df:0d:ec:8b:1a:
                    82:9b:95:3f:c5:d5:20:26:04:b1:88:26:52:26:5f:
                    db:35:cd:82:76:3b:f9:db:4a:cc:27:ee:e8:bb:17:
                    df:a9:08:07:7e:57:69:db:1a:96:42:1d:28:97:35:
                    36:a6:3f:0e:8e:57:a2:03:a6:d1:e8:b4:12:dd:1c:
                    2b:33:04:af:8d:10:84:8d:8b:f4:dc:10:c1:66:53:
                    a3:a7:b2:13:48:b9:4c:af:ca:61:a2:a1:aa:c7:51:
                    6e:5d:4b:2b:58:f4:5a:44:73:7d:15:63:24:5a:a9:
                    10:a3:61:63:06:c4:7b:3b:d9:ed:ba:4f:df:9c:46:
                    db:c6:ba:94:92:35:3e:5f:e3:1d:a0:70:a4:c8:d2:
                    19:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:63:83:B2:D9:A1:56:43:1A:DF:91:82:2B:55:1E:C6:70:C8:50:56
            X509v3 Authority Key Identifier:
                keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b6:a2:7b:fa:85:b5:d8:e3:8e:6b:77:ea:0d:d0:8f:2d:07:
         2b:5f:df:fb:69:62:ea:c5:75:39:fa:5d:93:b6:0b:3d:78:64:
         d4:3f:16:d8:6a:3e:3c:1f:7c:d0:fa:98:19:dc:2e:e2:37:3d:
         50:7e:e0:58:ef:67:f0:4d:dc:6e:62:05:fd:7d:d8:d5:fd:b4:
         18:c2:3f:71:af:d5:ed:1e:11:74:98:e7:2d:f0:2d:b1:b2:3a:
         e9:04:4f:6f:b1:f4:cb:7d:fd:c9:1b:01:cd:86:4a:81:d3:6a:
         12:57:47:89:17:06:cf:ad:f6:9b:06:a8:91:11:62:c7:53:e2:
         22:3b:8b:8c:df:ae:88:eb:8a:e6:44:1a:0b:36:f5:ce:7e:7b:
         c8:7d:96:79:11:19:e7:a5:92:f0:df:b8:8d:ce:46:97:f5:e3:
         76:1b:30:29:1c:17:ce:7f:26:72:25:2a:c5:9c:b9:6f:47:4c:
         a9:81:ca:75:dc:88:35:d6:a9:56:2d:9f:ce:3a:ae:fa:eb:a0:
         06:9d:b4:b0:e5:4b:aa:72:f9:fa:4b:15:9a:aa:3c:9c:bb:4a:
         97:ad:34:bf:fb:58:64:5c:0c:4d:a5:77:71:d2:f1:b0:f5:1d:
         67:28:1d:55:3b:3a:44:2c:69:87:e9:c6:ca:96:d9:df:a3:af:
         14:20:87:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGHiKTqGzLeyuwBAZNlKh6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZTVmYzYzNWExYTc3NTU3NGI3NzlhZWE5Y2NkNjUyNGNj
NGQwZjkwHhcNMjYxMDI5MTIwMDQxWhcNMjYxMDMwMTIwMDQxWjAzMTEwLwYDVQQD
EyhjNjYzODNiMmQ5YTE1NjQzMWFkZjkxODIyYjU1MWVjNjcwYzg1MDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweCt4mEh52NzzdngBbsf+1Szw6U3
uQwq1lNYIWUNuiq3wIaqXNshfvUu/CNArtJJyKFMlPU1ZKXrs2K8ocCzDxTCOhSc
90kFzBs6iXo/lexg95iz04JckCT8+ZkJDEzx/svqP5H1zJAMgPD/jNEWn+DB3w3s
ixqCm5U/xdUgJgSxiCZSJl/bNc2Cdjv520rMJ+7ouxffqQgHfldp2xqWQh0olzU2
pj8OjleiA6bR6LQS3RwrMwSvjRCEjYv03BDBZlOjp7ITSLlMr8phoqGqx1FuXUsr
WPRaRHN9FWMkWqkQo2FjBsR7O9ntuk/fnEbbxrqUkjU+X+MdoHCkyNIZzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZjg7LZoVZDGt+RgitVHsZwyFBWMB8GA1UdIwQY
MBaAFKHl/GNaGndVdLd5rqnM1lJMxND5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgt
N2VlMGU2MGJiMDUzLzEvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgtN2VlMGU2MGJiMDUz
LzEvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLaie/qF
tdjjjmt36g3Qjy0HK1/f+2li6sV1Ofpdk7YLPXhk1D8W2Go+PB980PqYGdwu4jc9
UH7gWO9n8E3cbmIF/X3Y1f20GMI/ca/V7R4RdJjnLfAtsbI66QRPb7H0y339yRsB
zYZKgdNqEldHiRcGz632mwaokRFix1PiIjuLjN+uiOuK5kQaCzb1zn57yH2WeREZ
56WS8N+4jc5Gl/XjdhswKRwXzn8mciUqxZy5b0dMqYHKddyINdapVi2fzjqu+uug
Bp20sOVLqnL5+ksVmqo8nLtKl600v/tYZFwMTaV3cdLxsPUdZygdVTs6RCxph+nG
ypbZ36OvFCCHRg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 15:22:40 2026 by rpki-client