Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
File:                     ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json)
Hash identifier:          AmRcSKrt5qoLMf1O7IIVWIo+q8MI0QUZaJTaSh5m/v0=
Subject key identifier:   F0:D5:1A:B8:AD:DE:D4:5A:CC:BF:25:EA:F7:A8:9A:FC:B1:73:FC:C4
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Certificate issuer:       /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial:       01A16C7F0C679A321EAAB0FDE70FAE27D448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
Manifest number:          1AC3
Signing time:             Sat 24 Oct 2026 06:00:27 +0000
Manifest this update:     Sat 24 Oct 2026 06:00:27 +0000
Manifest next update:     Sun 25 Oct 2026 06:00:27 +0000
Files and hashes:         1: JF5HZsn7h3hTXeSm3T5gZ-J45no.roa (hash: nH/dD1vhkAFkX+8w5fK7+63eCRhFsEpgDdLpvN3kRkk=)
                          2: XGanTFBQAZ33sQ9Am0M5XIEmOKo.roa (hash: tk+B6re3rpRoBjg7UDNsVYSuSSnejyoxsoqWHW24Ts4=)
                          3: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: 2UI7cXCSXZ4vCtazCocwGG/79OqkhNlmMnAbmzEIqcY=)
                          4: jUxm_qgfh3IYfHDY4BsRtkkVL0w.roa (hash: JmlPibEqMfscplOPIOSacxthvDnFR9Ge2IhPMvlaWZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:7f:0c:67:9a:32:1e:aa:b0:fd:e7:0f:ae:27:d4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
        Validity
            Not Before: Oct 24 06:00:27 2026 GMT
            Not After : Oct 25 06:00:27 2026 GMT
        Subject: CN=f0d51ab8added45accbf25eaf7a89afcb173fcc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c4:4d:82:20:93:67:51:81:a4:bc:14:ee:ed:
                    47:a5:27:60:3d:46:6d:63:d0:71:bb:86:c3:0e:0e:
                    ec:08:5d:3b:32:48:cf:ba:db:1c:24:74:f4:f7:6a:
                    5f:5c:ce:4e:fa:4c:34:bf:43:b5:8b:35:f9:27:da:
                    48:de:d1:da:93:38:fa:a6:3c:c1:cb:38:be:65:96:
                    ad:44:13:be:85:47:aa:6f:35:03:33:c3:77:1e:ab:
                    d7:ea:00:da:7a:dd:79:bb:69:f8:cf:b1:b1:a5:d5:
                    13:37:ed:e3:e2:e1:53:2f:f2:d6:c6:12:af:dd:df:
                    08:ee:ec:1a:3b:52:31:22:72:7f:66:ca:05:40:e0:
                    b4:40:6f:5e:28:c5:91:3d:00:40:03:65:97:d0:ee:
                    20:57:6e:39:3f:8e:19:77:ef:02:0a:5a:e4:2c:2e:
                    1c:a0:e9:d7:64:9e:79:be:14:7e:a0:00:22:c7:04:
                    83:56:00:bf:9c:c6:97:67:3d:da:fe:b1:4e:6b:fa:
                    be:84:9d:e0:78:23:9f:7e:54:ba:2e:34:80:0d:b5:
                    98:0e:72:57:39:8a:b8:1e:4a:93:e2:69:9e:d1:df:
                    25:ee:29:92:6e:f2:1c:23:b8:f9:97:45:ed:68:94:
                    e6:45:d1:49:59:f7:09:72:5a:ae:2a:2a:1a:b5:9e:
                    fc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D5:1A:B8:AD:DE:D4:5A:CC:BF:25:EA:F7:A8:9A:FC:B1:73:FC:C4
            X509v3 Authority Key Identifier:
                keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:1b:c2:31:78:c7:f1:ff:ec:71:8d:cb:c3:6d:0b:b5:de:99:
         1c:58:95:95:f1:75:c5:ca:53:ab:1f:36:90:27:c3:21:af:e6:
         f0:b9:c7:a9:be:0a:25:1a:1c:7b:fc:53:49:64:bb:6c:c6:ef:
         8a:ad:4a:88:11:52:f3:b7:ac:03:6e:8c:42:11:14:a5:01:cc:
         f3:3c:e9:9f:08:4e:59:3b:bf:87:9e:82:aa:03:b2:ba:5e:eb:
         da:a0:37:39:7f:8c:f1:59:1a:1b:04:26:cd:86:70:a2:8f:b4:
         7c:00:23:0e:1a:50:a0:28:fc:59:d1:18:87:dc:2c:99:57:9f:
         9e:df:ad:27:8c:84:61:1e:98:8e:4a:05:f4:7c:f5:19:ea:26:
         ef:de:dd:e6:86:09:c6:1c:c6:ab:cd:d7:f4:1f:bf:7c:2d:95:
         9d:46:1f:b0:be:d7:2e:1d:e2:43:06:25:25:5d:49:3f:7a:df:
         10:6a:13:8c:fe:12:a8:ef:96:3f:4b:e0:c8:af:7a:f4:49:24:
         0d:04:5c:71:6e:48:a1:de:a7:54:ac:63:d2:9d:2d:2b:2b:34:
         14:99:c8:44:28:d5:5c:b7:e1:ef:78:2d:b3:08:d9:12:af:95:
         30:e2:cc:19:b8:82:39:30:0a:ae:1c:89:c9:5a:8e:01:94:4b:
         bb:3e:ef:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFsfwxnmjIeqrD95w+uJ9RIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMWY1NTdlZTI2M2NiMzU5YTE5ZWEyY2Q3ZmEwZThjOTEz
OWViNzYwHhcNMjYxMDI0MDYwMDI3WhcNMjYxMDI1MDYwMDI3WjAzMTEwLwYDVQQD
EyhmMGQ1MWFiOGFkZGVkNDVhY2NiZjI1ZWFmN2E4OWFmY2IxNzNmY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8RNgiCTZ1GBpLwU7u1HpSdgPUZt
Y9Bxu4bDDg7sCF07MkjPutscJHT092pfXM5O+kw0v0O1izX5J9pI3tHakzj6pjzB
yzi+ZZatRBO+hUeqbzUDM8N3HqvX6gDaet15u2n4z7GxpdUTN+3j4uFTL/LWxhKv
3d8I7uwaO1IxInJ/ZsoFQOC0QG9eKMWRPQBAA2WX0O4gV245P44Zd+8CClrkLC4c
oOnXZJ55vhR+oAAixwSDVgC/nMaXZz3a/rFOa/q+hJ3geCOfflS6LjSADbWYDnJX
OYq4HkqT4mme0d8l7imSbvIcI7j5l0XtaJTmRdFJWfcJclquKioatZ78BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDVGrit3tRazL8l6veomvyxc/zEMB8GA1UdIwQY
MBaAFHsfVX7iY8s1mhnqLNf6DoyROet2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEt
M2UzNjYwZGExM2E0LzEvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85MzZkOTgtNzAxOS00MDFmLTllMmEtM2UzNjYwZGExM2E0
LzEvZXg5VmZ1Smp5eldhR2VvczFfb09qSkU1NjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxvCMXjH
8f/scY3Lw20Ltd6ZHFiVlfF1xcpTqx82kCfDIa/m8LnHqb4KJRoce/xTSWS7bMbv
iq1KiBFS87esA26MQhEUpQHM8zzpnwhOWTu/h56CqgOyul7r2qA3OX+M8VkaGwQm
zYZwoo+0fAAjDhpQoCj8WdEYh9wsmVefnt+tJ4yEYR6YjkoF9Hz1Geom797d5oYJ
xhzGq83X9B+/fC2VnUYfsL7XLh3iQwYlJV1JP3rfEGoTjP4SqO+WP0vgyK969Ekk
DQRccW5Iod6nVKxj0p0tKys0FJnIRCjVXLfh73gtswjZEq+VMOLMGbiCOTAKrhyJ
yVqOAZRLuz7vdA==
-----END CERTIFICATE-----
Generated at Sat Oct 24 12:17:54 2026 by rpki-client