Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File:                     RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier:          20WqvK7qt9WJqa/DrL4jLGfMfAGWuK+RLqGOv3A5TIY=
Subject key identifier:   0A:A0:5E:8F:BA:FB:22:96:F0:5F:1D:F1:11:B6:4E:0D:C2:54:23:DB
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer:       /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial:       01A180E2A0059BA842F6371A90A700009341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number:          15CD
Signing time:             Wed 28 Oct 2026 05:01:38 +0000
Manifest this update:     Wed 28 Oct 2026 05:01:38 +0000
Manifest next update:     Thu 29 Oct 2026 05:01:38 +0000
Files and hashes:         1: 3xhOROtsWU6kcbRg-0eVsWv_Cf4.roa (hash: 5LTgCgWwER8eaf33nSzOpEaP32v0UF0hdAvBDa8TC70=)
                          2: KRctRzsS6WkYFQeNR_1yTG9YjP0.roa (hash: oB1FvlbACGWEHyhDswCez14XuSiwC0mCrxW2Q45DLmU=)
                          3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: EZbcOhZJRPAz270/WJzZ7/UiC0SeYXD/D9PnZNWpulI=)
                          4: nayB3_rE3RntOJEk4e7i16Y7R3M.roa (hash: YijDZOJxEI25MjJmJqVvk74PVNuOr37g49vUulKscOg=)
                          5: qT0dlLpzpHG-UMlryrlwiaMMxcY.roa (hash: 9waKgS4/9SGo8HvqSDRZz0wIFy4U+cc/1Ys4XOOzmjw=)
                          6: t2qdski-o4ELbbOme88xRyINKrI.roa (hash: zVNZjmDQfzSEx2PRCfDU7/QNuR+Qm5DX/p7qFVK/Mk0=)
                          7: w0kKHQgaiOLeV4y8tlRfdYd7b_A.roa (hash: G7PIYqwT/StJWFaPvFWwa/lGdH9BUaYIk1/Tzn1Lzg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 05:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:e2:a0:05:9b:a8:42:f6:37:1a:90:a7:00:00:93:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
        Validity
            Not Before: Oct 28 05:01:38 2026 GMT
            Not After : Oct 29 05:01:38 2026 GMT
        Subject: CN=0aa05e8fbafb2296f05f1df111b64e0dc25423db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:df:e2:bb:c1:00:3c:52:96:c2:36:a6:fa:
                    95:83:9f:4c:5c:40:1b:b1:5a:b9:4d:b6:6b:69:07:
                    2a:72:f1:9e:54:51:d1:18:7d:cb:73:9e:3c:be:c5:
                    34:7b:d2:5b:b2:39:e5:90:13:ab:6d:01:38:78:39:
                    06:56:8b:6d:80:18:82:d0:2c:3f:c4:96:98:99:c1:
                    21:96:37:06:75:2a:30:08:ab:14:b8:fc:61:01:83:
                    84:fd:4b:2d:ad:b6:26:67:a5:94:14:b0:cd:14:82:
                    5f:b3:05:d8:17:cb:31:89:44:2a:5f:4f:94:41:b2:
                    6b:7c:ad:4e:2d:62:5b:5a:05:09:5f:4a:f9:44:9b:
                    b7:39:04:c8:b9:f1:5f:8d:5a:14:7b:6d:19:42:9e:
                    61:a9:c2:dd:22:9d:25:b6:99:d3:68:21:99:70:5d:
                    24:6e:19:b1:8d:e8:4b:b2:f9:68:54:01:c3:09:65:
                    4f:e5:33:54:37:de:40:29:ea:14:67:1e:ff:1e:1f:
                    6d:e0:db:46:a1:90:62:e5:1a:dd:0d:ca:49:4d:09:
                    02:29:7f:ae:b7:21:d8:22:5b:ec:e0:30:3c:4d:4c:
                    a0:25:fd:95:87:a2:d2:50:52:0d:d7:0a:1d:1e:12:
                    fc:fe:d7:9c:b4:8a:fd:d7:de:7c:56:af:51:68:ef:
                    a2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A0:5E:8F:BA:FB:22:96:F0:5F:1D:F1:11:B6:4E:0D:C2:54:23:DB
            X509v3 Authority Key Identifier:
                keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:39:81:11:ed:52:e3:53:fd:5d:12:05:0c:f3:73:a4:91:5e:
         b9:a8:99:10:74:1c:a0:9a:2b:ce:ce:6e:c3:25:5b:da:7b:92:
         97:ea:f1:b7:92:ea:14:ad:55:a8:1c:78:56:09:0a:ac:78:ed:
         b0:db:a4:5b:b4:74:b6:ba:bc:ca:99:41:27:d6:69:03:80:96:
         75:ce:80:45:64:b6:1a:48:cf:50:db:b8:14:55:d4:d6:e2:dd:
         e5:e6:c4:67:48:99:d4:29:59:a7:06:ae:a7:d1:9b:23:d4:a7:
         01:2f:93:ef:ad:30:47:02:42:0a:4a:0a:45:07:8a:16:63:d9:
         bc:85:61:d4:fb:68:8c:dc:c4:32:21:69:fb:09:ef:6f:09:ca:
         48:8d:a6:85:e8:1a:61:a6:af:b7:4c:7b:7f:52:14:d2:b6:61:
         1e:1c:10:ee:ab:02:9e:0d:ed:d3:8f:e4:59:06:67:93:c8:d2:
         32:d9:bf:bf:f6:cb:fe:a7:b0:82:08:b5:e1:05:49:1c:8b:9d:
         64:9a:0f:bc:e0:6c:a4:54:6e:87:60:02:03:0d:17:f7:0d:72:
         b2:fc:b7:ba:a5:aa:02:24:d9:33:79:ce:cf:9e:a7:01:27:8b:
         fb:2f:41:18:13:28:63:02:2d:75:95:5d:da:a4:a4:16:2e:55:
         4f:75:41:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGA4qAFm6hC9jcakKcAAJNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl
ZTA4ZTAwHhcNMjYxMDI4MDUwMTM4WhcNMjYxMDI5MDUwMTM4WjAzMTEwLwYDVQQD
EygwYWEwNWU4ZmJhZmIyMjk2ZjA1ZjFkZjExMWI2NGUwZGMyNTQyM2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0zf4rvBADxSlsI2pvqVg59MXEAb
sVq5TbZraQcqcvGeVFHRGH3Lc548vsU0e9JbsjnlkBOrbQE4eDkGVottgBiC0Cw/
xJaYmcEhljcGdSowCKsUuPxhAYOE/UstrbYmZ6WUFLDNFIJfswXYF8sxiUQqX0+U
QbJrfK1OLWJbWgUJX0r5RJu3OQTIufFfjVoUe20ZQp5hqcLdIp0ltpnTaCGZcF0k
bhmxjehLsvloVAHDCWVP5TNUN95AKeoUZx7/Hh9t4NtGoZBi5RrdDcpJTQkCKX+u
tyHYIlvs4DA8TUygJf2Vh6LSUFIN1wodHhL8/tectIr91958Vq9RaO+iFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqgXo+6+yKW8F8d8RG2Tg3CVCPbMB8GA1UdIwQY
MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt
ODYzYzliM2QzMmIwLzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw
LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtDmBEe1S
41P9XRIFDPNzpJFeuaiZEHQcoJorzs5uwyVb2nuSl+rxt5LqFK1VqBx4VgkKrHjt
sNukW7R0trq8yplBJ9ZpA4CWdc6ARWS2GkjPUNu4FFXU1uLd5ebEZ0iZ1ClZpwau
p9GbI9SnAS+T760wRwJCCkoKRQeKFmPZvIVh1PtojNzEMiFp+wnvbwnKSI2mhega
Yaavt0x7f1IU0rZhHhwQ7qsCng3t04/kWQZnk8jSMtm/v/bL/qewggi14QVJHIud
ZJoPvOBspFRuh2ACAw0X9w1ysvy3uqWqAiTZM3nOz56nASeL+y9BGBMoYwItdZVd
2qSkFi5VT3VBPA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:10:21 2026 by rpki-client