Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File:                     ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier:          4XchmPpH4gGIEbVnXri+0FVR7npB1KEgtL7S800ptnc=
Subject key identifier:   79:5D:77:7E:60:A5:2D:2E:72:DA:04:91:30:66:38:8E:9A:73:11:A0
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer:       /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial:       01A15F9F39798382C1FA960909720B963054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number:          126F
Signing time:             Wed 21 Oct 2026 18:00:32 +0000
Manifest this update:     Wed 21 Oct 2026 18:00:32 +0000
Manifest next update:     Thu 22 Oct 2026 18:00:32 +0000
Files and hashes:         1: C-iIHFCFPPAyH44XN2FUfWFmMuQ.roa (hash: 4EBK9TE3DKNE91PsZ8jPUioXBBKUno4c9ILnL/KNCRs=)
                          2: m0XHnqLimHCaVdrwyhH4qvYB5k4.roa (hash: AyXTFUEVIX6Aa2cN5D+zF56YX+NxzZvMWIw5F0uYaGI=)
                          3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: +QRUa8+D0e2sTzfucDxjrc9iA2XrQswL8bT+S7Yxdck=)
                          4: uFaZ7j6WOK_rFoGA3dV4DOr3Azw.roa (hash: 7Q1qXKsYai/yvbGaDBAb/Nup5NNAKS6f69A2HPPsnRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 18:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5f:9f:39:79:83:82:c1:fa:96:09:09:72:0b:96:30:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
        Validity
            Not Before: Oct 21 18:00:32 2026 GMT
            Not After : Oct 22 18:00:32 2026 GMT
        Subject: CN=795d777e60a52d2e72da04913066388e9a7311a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:4e:a1:87:ec:58:4f:cd:1f:d4:28:52:88:
                    63:b1:42:26:fb:b5:8f:00:64:50:86:07:eb:f8:d7:
                    4a:97:80:fb:5c:e5:3a:9e:25:02:14:5a:65:54:5f:
                    7c:45:17:e7:bf:9f:1a:88:83:ba:74:41:c6:26:03:
                    0d:49:9b:d8:df:38:e1:81:e0:ca:d3:0f:d4:8d:66:
                    cb:58:9a:22:a6:20:6b:76:c4:93:b8:8d:22:75:8b:
                    54:66:8d:c2:43:7b:94:be:a5:09:59:06:19:61:a6:
                    49:48:21:8d:2a:f4:0e:ec:5b:2a:a7:49:f5:29:9d:
                    40:cc:90:1b:5c:c5:71:90:30:b4:8e:27:eb:32:78:
                    f8:b4:56:aa:ce:b8:8a:24:2c:d3:c9:2b:0a:a0:8e:
                    f6:e5:d5:10:c8:98:6a:3c:7d:5d:2a:2f:37:13:2d:
                    17:e1:f2:13:9a:99:51:19:85:40:34:15:2b:ec:e3:
                    5e:83:2c:10:bf:64:ea:82:e8:5d:be:cc:d5:fa:a1:
                    37:40:ba:37:d5:c2:8c:1f:c2:72:b1:22:bd:2a:4d:
                    d4:7c:a5:a0:c0:a3:05:96:65:d1:c6:d5:04:d3:95:
                    d8:c2:2e:ab:b7:75:5a:34:f9:76:f3:3a:c8:a1:c4:
                    9a:ab:b9:5f:12:39:a4:8d:73:4f:26:f6:b5:70:47:
                    41:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5D:77:7E:60:A5:2D:2E:72:DA:04:91:30:66:38:8E:9A:73:11:A0
            X509v3 Authority Key Identifier:
                keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:91:4b:85:c0:85:5b:72:06:8e:4b:1b:43:d6:47:e1:74:a1:
         61:9e:93:8f:3a:1e:87:29:66:17:20:7d:eb:5d:9b:30:ed:3b:
         92:7f:9a:7b:2b:d5:15:f1:38:54:91:fa:7f:c9:2e:45:26:1a:
         72:6a:23:ee:80:72:72:9e:ce:b4:58:d8:ff:89:4a:83:4c:b0:
         05:1c:b8:d6:5e:ad:d3:3b:13:11:09:40:27:3f:a4:5b:41:78:
         4e:7c:a9:dc:1c:90:3d:6c:c2:ba:8a:de:20:6c:2f:c1:13:5c:
         d0:65:b5:71:84:35:c6:11:44:0a:4a:d9:c0:20:b0:10:65:4f:
         c2:2b:00:98:16:40:6d:1c:76:30:b7:24:99:c4:b4:7d:1d:6f:
         79:d9:46:0e:57:fd:2f:f1:2b:b8:f8:2e:60:bc:09:c2:c2:7b:
         93:5b:70:81:be:05:d9:5d:e0:35:ab:2c:21:9d:6c:3d:b3:fb:
         2d:f2:da:df:28:2d:9f:6b:fb:c5:b1:f2:ca:ba:e9:f2:32:d8:
         a1:45:b8:55:d3:6f:1e:3b:55:22:5b:9b:7f:61:77:29:0d:3c:
         8c:8d:5a:95:57:03:54:fd:53:39:04:96:27:64:d1:c2:ef:84:
         50:b3:c8:d1:1f:23:d4:4f:03:cf:55:8d:f9:98:33:1e:2f:88:
         a7:b5:05:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFfnzl5g4LB+pYJCXILljBUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2Y2Y0ZTU3Y2JjMTVjZTRlY2VmNDRmNTBlNWI4NTkyZmJl
ZWVlYTAwHhcNMjYxMDIxMTgwMDMyWhcNMjYxMDIyMTgwMDMyWjAzMTEwLwYDVQQD
Eyg3OTVkNzc3ZTYwYTUyZDJlNzJkYTA0OTEzMDY2Mzg4ZTlhNzMxMWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTxOoYfsWE/NH9QoUohjsUIm+7WP
AGRQhgfr+NdKl4D7XOU6niUCFFplVF98RRfnv58aiIO6dEHGJgMNSZvY3zjhgeDK
0w/UjWbLWJoipiBrdsSTuI0idYtUZo3CQ3uUvqUJWQYZYaZJSCGNKvQO7Fsqp0n1
KZ1AzJAbXMVxkDC0jifrMnj4tFaqzriKJCzTySsKoI725dUQyJhqPH1dKi83Ey0X
4fITmplRGYVANBUr7ONegywQv2TqguhdvszV+qE3QLo31cKMH8JysSK9Kk3UfKWg
wKMFlmXRxtUE05XYwi6rt3VaNPl28zrIocSaq7lfEjmkjXNPJva1cEdBXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHldd35gpS0uctoEkTBmOI6acxGgMB8GA1UdIwQY
MBaAFLbPTlfLwVzk7O9E9Q5bhZL77u6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUt
ODViZTQyNWQzMTk5LzEvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80ZTg5N2YtZTQzNS00NzE1LWEzYzUtODViZTQyNWQzMTk5
LzEvdHM5T1Y4dkJYT1RzNzBUMURsdUZrdnZ1N3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZFLhcCF
W3IGjksbQ9ZH4XShYZ6TjzoehylmFyB9612bMO07kn+aeyvVFfE4VJH6f8kuRSYa
cmoj7oBycp7OtFjY/4lKg0ywBRy41l6t0zsTEQlAJz+kW0F4Tnyp3ByQPWzCuore
IGwvwRNc0GW1cYQ1xhFECkrZwCCwEGVPwisAmBZAbRx2MLckmcS0fR1vedlGDlf9
L/EruPguYLwJwsJ7k1twgb4F2V3gNassIZ1sPbP7LfLa3ygtn2v7xbHyyrrp8jLY
oUW4VdNvHjtVIlubf2F3KQ08jI1alVcDVP1TOQSWJ2TRwu+EULPI0R8j1E8Dz1WN
+ZgzHi+Ip7UFyA==
-----END CERTIFICATE-----
Generated at Thu Oct 22 03:14:10 2026 by rpki-client