Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
File:                     mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft (raw, json)
Hash identifier:          MDJov4YsTdqsTlKbNU+bMji9d6LmZ/UiHHATLqija6Y=
Subject key identifier:   62:8E:E9:44:61:E4:64:D1:70:9E:55:7F:85:F9:AD:07:39:03:F9:A8
Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
Certificate issuer:       /CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Certificate serial:       01A1856354C30766D052F860292E15FC8A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
Manifest number:          1AC9
Signing time:             Thu 29 Oct 2026 02:00:41 +0000
Manifest this update:     Thu 29 Oct 2026 02:00:41 +0000
Manifest next update:     Fri 30 Oct 2026 02:00:41 +0000
Files and hashes:         1: celudLIkwqQs5BVcabVek4AUA_8.roa (hash: Z6ja4JJYaOm0UOAS7DT4QbK0buCK6md62bjvBxBcr0o=)
                          2: mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl (hash: y1as2kChYeC+YNE9oTqPZDpzvgp4fxHr9KH91GVMXF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:85:63:54:c3:07:66:d0:52:f8:60:29:2e:15:fc:8a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b
        Validity
            Not Before: Oct 29 02:00:41 2026 GMT
            Not After : Oct 30 02:00:41 2026 GMT
        Subject: CN=628ee94461e464d1709e557f85f9ad073903f9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4f:66:8a:f9:01:8c:8d:3c:f8:12:c1:b2:08:
                    ea:19:be:70:14:7d:f1:51:f6:4a:fe:61:25:19:03:
                    df:32:c0:e1:60:0a:81:5a:69:89:84:5e:e5:88:18:
                    81:e6:01:87:d7:cb:d0:83:58:ac:69:0f:91:f3:a8:
                    15:bf:6f:62:50:95:a5:17:f1:b4:ea:6b:7a:73:24:
                    04:0a:b3:7b:4a:a3:86:75:9f:80:72:ec:ae:f0:96:
                    c0:8f:c1:2b:87:3f:07:86:24:25:a3:66:17:a7:09:
                    bf:71:0a:aa:c9:e9:07:33:ac:9d:18:5b:24:f2:90:
                    6e:e2:81:7f:e7:ed:e0:61:4d:af:20:6b:31:b6:b0:
                    2c:ab:a1:54:15:f8:6f:8c:61:e3:8f:ab:a9:f9:35:
                    a8:d5:34:40:d5:63:7f:fc:39:bd:bb:49:04:16:0f:
                    d7:5f:42:83:01:15:c7:0f:77:51:58:bf:ef:07:7d:
                    9f:af:60:64:e2:d8:61:91:03:90:ce:36:2d:ae:c8:
                    ec:97:32:b6:dc:8e:ca:53:ab:42:74:46:0d:dd:c1:
                    8c:29:69:1d:62:55:08:e9:61:61:49:e2:52:3b:1d:
                    0b:3d:53:8b:3e:64:95:d7:a5:57:57:b3:5e:ee:68:
                    55:24:b3:ab:10:68:8b:94:9f:b8:70:af:70:40:78:
                    76:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8E:E9:44:61:E4:64:D1:70:9E:55:7F:85:F9:AD:07:39:03:F9:A8
            X509v3 Authority Key Identifier:
                keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1f:66:e3:43:2d:73:f3:93:d9:9f:43:ff:48:4f:29:ff:5d:
         4e:94:51:c5:5d:8b:fb:58:79:11:03:9b:6c:48:d1:d0:a2:b2:
         1d:a7:97:e6:f5:f5:cf:1f:b0:d2:1f:37:70:b9:66:a3:1f:58:
         f5:34:22:fd:1b:fa:d9:6a:be:30:5d:b0:65:4a:ea:34:a3:9e:
         1b:c9:ff:28:3a:d3:59:00:dd:29:33:ca:f0:9e:68:4b:fc:e9:
         31:0a:b2:0e:60:36:4a:f5:4d:a0:dc:e8:d2:43:d8:47:9e:c7:
         ce:90:af:3e:f6:55:d0:cb:f8:b2:73:52:2d:35:1a:dc:3c:60:
         d0:fe:f9:08:93:d0:02:9f:01:25:a4:7d:70:6e:7c:98:ba:c9:
         c1:71:bc:5c:ce:aa:58:db:5c:6f:d2:ee:e3:24:f8:44:97:17:
         a1:75:a3:cc:fa:a6:ec:f4:ef:c4:68:3c:7d:f8:03:1c:35:11:
         8a:57:53:a6:d1:82:a5:6e:db:26:13:d0:09:49:4f:19:aa:be:
         7c:0e:d8:b9:aa:e4:db:10:99:9a:cf:a5:2c:f8:16:59:3e:76:
         ad:b9:f5:b0:3d:08:80:1b:10:7c:8f:53:ba:a7:9f:dd:57:32:
         d5:bd:39:3d:3a:63:47:7f:33:42:c7:91:70:86:6e:3f:0b:bb:
         0e:77:b5:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGFY1TDB2bQUvhgKS4V/IqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ODQ1NTg0YWM4MDk0YzE4MDZiNzNhNmY1M2U0NmI5YTI4
ZTgxMmIwHhcNMjYxMDI5MDIwMDQxWhcNMjYxMDMwMDIwMDQxWjAzMTEwLwYDVQQD
Eyg2MjhlZTk0NDYxZTQ2NGQxNzA5ZTU1N2Y4NWY5YWQwNzM5MDNmOWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk9mivkBjI08+BLBsgjqGb5wFH3x
UfZK/mElGQPfMsDhYAqBWmmJhF7liBiB5gGH18vQg1isaQ+R86gVv29iUJWlF/G0
6mt6cyQECrN7SqOGdZ+Acuyu8JbAj8Erhz8HhiQlo2YXpwm/cQqqyekHM6ydGFsk
8pBu4oF/5+3gYU2vIGsxtrAsq6FUFfhvjGHjj6up+TWo1TRA1WN//Dm9u0kEFg/X
X0KDARXHD3dRWL/vB32fr2Bk4thhkQOQzjYtrsjslzK23I7KU6tCdEYN3cGMKWkd
YlUI6WFhSeJSOx0LPVOLPmSV16VXV7Ne7mhVJLOrEGiLlJ+4cK9wQHh2hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKO6URh5GTRcJ5Vf4X5rQc5A/moMB8GA1UdIwQY
MBaAFJiEVYSsgJTBgGtzpvU+RrmijoErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUlSVmhLeUFsTUdBYTNPbTlUNUd1YUtPZ1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84MTMwMTAtYTk2Zi00NTEwLTlkYmMt
MjFmNzc1MWNhNzZjLzEvbUlSVmhLeUFsTUdBYTNPbTlUNUd1YUtPZ1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84MTMwMTAtYTk2Zi00NTEwLTlkYmMtMjFmNzc1MWNhNzZj
LzEvbUlSVmhLeUFsTUdBYTNPbTlUNUd1YUtPZ1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdh9m40Mt
c/OT2Z9D/0hPKf9dTpRRxV2L+1h5EQObbEjR0KKyHaeX5vX1zx+w0h83cLlmox9Y
9TQi/Rv62Wq+MF2wZUrqNKOeG8n/KDrTWQDdKTPK8J5oS/zpMQqyDmA2SvVNoNzo
0kPYR57HzpCvPvZV0Mv4snNSLTUa3Dxg0P75CJPQAp8BJaR9cG58mLrJwXG8XM6q
WNtcb9Lu4yT4RJcXoXWjzPqm7PTvxGg8ffgDHDURildTptGCpW7bJhPQCUlPGaq+
fA7Yuark2xCZms+lLPgWWT52rbn1sD0IgBsQfI9Tuqef3Vcy1b05PTpjR38zQseR
cIZuPwu7Dne1bg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:49:00 2026 by rpki-client