Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File:                     PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier:          65Ide2+jV5nVm+4KZ/QTZ5ytE3ocylEjSDBg8jp+zk0=
Subject key identifier:   F7:C8:9C:9C:E1:4D:52:37:AC:F3:79:1B:B6:88:E2:88:4F:6A:99:0B
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer:       /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial:       01A18BD2D909FE04610671E458673A0DC58A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number:          189E
Signing time:             Fri 30 Oct 2026 08:00:13 +0000
Manifest this update:     Fri 30 Oct 2026 08:00:13 +0000
Manifest next update:     Sat 31 Oct 2026 08:00:13 +0000
Files and hashes:         1: 9JqUzmhn979MzWUxIBT2RPIOS8A.roa (hash: rkzdzZw7cy8e5NHHoY93mCGwkkZGsYaobB+ZGaI78YQ=)
                          2: K0vidJ7tM2mKOKZRaF9LzxYTcOY.roa (hash: j1Pyv97hL7TS1MOu3SXdm7zFyMsZ0tV3SkgI1mKBoHI=)
                          3: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: kJwOhmyDX5XIE2zsOttmvpnof9jJ9fS/mXEghZsZXkw=)
                          4: Vh01heQZwiiV-5U2YWUI9ETdNp0.roa (hash: NerAxUNFCszCX2X5F5Gpmh7sivfYufWqTOLrM/cv+gM=)
                          5: tMuTjVPYB4qy8Lzty-HvMfNIyHg.roa (hash: 2UYLL/RMvv9f6KttdupVfDP+HWvUuHhv7cOVMA+gdLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8b:d2:d9:09:fe:04:61:06:71:e4:58:67:3a:0d:c5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
        Validity
            Not Before: Oct 30 08:00:13 2026 GMT
            Not After : Oct 31 08:00:13 2026 GMT
        Subject: CN=f7c89c9ce14d5237acf3791bb688e2884f6a990b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:49:6c:51:91:5e:87:8d:f4:06:0a:1e:92:7b:
                    7b:75:97:95:0b:b4:77:b9:6b:cf:08:db:bf:52:e6:
                    27:75:70:ab:e7:4f:fe:a0:2d:35:23:a6:16:dd:20:
                    cf:d7:4b:fe:69:d8:1e:58:25:26:04:c2:76:4d:99:
                    3d:45:68:1a:10:2e:cf:f2:03:ba:e5:00:18:1d:bd:
                    e5:8a:99:73:d2:1c:00:42:48:d0:47:16:be:c7:f2:
                    b5:3b:6c:2d:a7:65:68:fd:5d:b0:b2:55:78:1d:17:
                    ce:b5:fd:67:8e:5a:8e:0e:8c:ab:17:6f:36:6a:1c:
                    84:36:56:59:ec:f7:b6:91:d5:6e:5b:3a:c7:96:96:
                    01:63:5e:a0:45:f5:5a:6c:e0:e3:a2:9a:2b:c9:3d:
                    45:a8:2e:68:2c:93:69:a2:71:77:b2:38:cc:f3:55:
                    23:cb:da:12:d6:e0:d6:4f:ec:3d:41:e0:c9:37:9e:
                    21:fd:1b:88:d7:ac:14:b0:67:86:6a:c1:9f:e1:fc:
                    53:2d:0e:41:db:c6:e0:f5:11:95:49:2e:c3:89:9c:
                    a6:6b:80:58:6e:25:ea:6d:8c:cb:0b:ed:2e:0e:38:
                    3b:b0:72:d5:9e:d1:64:0b:6e:ef:3e:b9:cc:9f:41:
                    7e:f0:72:69:3c:0d:2b:cd:2f:56:06:f2:c9:ac:4a:
                    2a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C8:9C:9C:E1:4D:52:37:AC:F3:79:1B:B6:88:E2:88:4F:6A:99:0B
            X509v3 Authority Key Identifier:
                keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:13:a4:ce:51:63:b9:11:63:d7:4e:b7:92:fb:15:8e:67:99:
         d9:51:7a:84:05:23:22:38:29:1c:40:37:fe:50:c0:ea:c0:b5:
         e0:34:25:3a:02:ba:ea:29:ec:00:d4:9f:58:ae:09:09:cb:f1:
         ee:33:0a:08:a1:9a:9e:72:54:84:56:1e:5d:f0:04:5b:b0:4e:
         82:e4:30:02:ec:96:8d:99:72:c6:91:07:0e:40:90:08:a7:9a:
         13:40:94:9c:59:28:62:e8:bf:7f:cf:e4:1e:40:98:6d:63:4d:
         98:e1:42:a8:cd:e6:c4:a0:4c:28:76:08:d6:6e:3c:f4:01:f4:
         31:17:a6:22:db:45:db:8a:2a:75:f5:38:cb:69:20:7a:b5:61:
         ce:be:78:ec:7d:ae:b9:61:87:35:81:12:4b:87:13:b5:24:6b:
         33:bb:5a:cd:c5:e5:07:31:56:bb:df:1c:42:2f:67:e9:81:04:
         f7:4a:12:9a:cc:c7:79:e2:fc:7f:9f:dd:eb:cd:75:be:77:73:
         f4:45:be:63:a9:52:d3:5b:49:ef:5d:02:c0:5a:0d:d9:47:39:
         1b:17:88:e2:df:7a:41:00:3b:70:c1:c4:7e:58:eb:9d:e9:74:
         d5:96:f6:13:e7:5f:c4:00:e1:3c:a2:9e:31:89:9b:16:b4:f3:
         9e:c1:57:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGL0tkJ/gRhBnHkWGc6DcWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZWIxMDQ0NjNlOTIwYjQ1NTQyYjZhZjFhMjdkNTk1MGU4
NmU5YTAwHhcNMjYxMDMwMDgwMDEzWhcNMjYxMDMxMDgwMDEzWjAzMTEwLwYDVQQD
EyhmN2M4OWM5Y2UxNGQ1MjM3YWNmMzc5MWJiNjg4ZTI4ODRmNmE5OTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0lsUZFeh430Bgoeknt7dZeVC7R3
uWvPCNu/UuYndXCr50/+oC01I6YW3SDP10v+adgeWCUmBMJ2TZk9RWgaEC7P8gO6
5QAYHb3liplz0hwAQkjQRxa+x/K1O2wtp2Vo/V2wslV4HRfOtf1njlqODoyrF282
ahyENlZZ7Pe2kdVuWzrHlpYBY16gRfVabODjoporyT1FqC5oLJNponF3sjjM81Uj
y9oS1uDWT+w9QeDJN54h/RuI16wUsGeGasGf4fxTLQ5B28bg9RGVSS7DiZyma4BY
biXqbYzLC+0uDjg7sHLVntFkC27vPrnMn0F+8HJpPA0rzS9WBvLJrEoqXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfInJzhTVI3rPN5G7aI4ohPapkLMB8GA1UdIwQY
MBaAFD3rEERj6SC0VUK2rxon1ZUOhumgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMt
MTE5ZDhiZjcxN2JiLzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMtMTE5ZDhiZjcxN2Ji
LzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhOkzlFj
uRFj1063kvsVjmeZ2VF6hAUjIjgpHEA3/lDA6sC14DQlOgK66insANSfWK4JCcvx
7jMKCKGannJUhFYeXfAEW7BOguQwAuyWjZlyxpEHDkCQCKeaE0CUnFkoYui/f8/k
HkCYbWNNmOFCqM3mxKBMKHYI1m489AH0MRemIttF24oqdfU4y2kgerVhzr547H2u
uWGHNYESS4cTtSRrM7tazcXlBzFWu98cQi9n6YEE90oSmszHeeL8f5/d6811vndz
9EW+Y6lS01tJ710CwFoN2Uc5GxeI4t96QQA7cMHEfljrnel01Zb2E+dfxADhPKKe
MYmbFrTznsFXyg==
-----END CERTIFICATE-----
Generated at Fri Oct 30 14:23:16 2026 by rpki-client