Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.mft
File:                     DUsPh3MKVQRPiCdr6wZOPHut0cQ.mft (raw, json)
Hash identifier:          jJhZixdbG0su5AOmp6PyDLKLnaBs7LmF+aKoku2YKvE=
Subject key identifier:   BF:EB:E4:6C:47:A6:29:F1:82:B9:9F:B8:F4:05:A0:B9:81:6D:3B:93
Authority key identifier: 0D:4B:0F:87:73:0A:55:04:4F:88:27:6B:EB:06:4E:3C:7B:AD:D1:C4
Certificate issuer:       /CN=0d4b0f87730a55044f88276beb064e3c7badd1c4
Certificate serial:       01A177030FC5869433DB164B134A7C65023B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.mft
Manifest number:          013C
Signing time:             Mon 26 Oct 2026 07:00:51 +0000
Manifest this update:     Mon 26 Oct 2026 07:00:51 +0000
Manifest next update:     Tue 27 Oct 2026 07:00:51 +0000
Files and hashes:         1: 55HojjA4cA9RJElZ6W9f-13mHIU.roa (hash: Ve9IaScD4LXmFuYglmtq9rNAM9SN5CWCeWWr1JvG1uc=)
                          2: DUsPh3MKVQRPiCdr6wZOPHut0cQ.crl (hash: l5IJI6BXJqTDyktCiqVYYDfZy25GB+Dk9MyJf1fIyvU=)
                          3: GUrIimYEyF55L9rNINzXrQhO8Lk.roa (hash: T1/816rQiRZXhuHMHpc5Ba7Qjhjq8yUz/zmVALJcTn8=)
                          4: Jt0MNsBVNK7vPF7GTa0AIeGjAug.roa (hash: U7gylmIoiIo89wnevmrE4nFr88BG/6hmhAyFYsaOeyE=)
                          5: Slsd4AowAV2szlKSLBnWjDdPuuI.roa (hash: 5qbYJlGG3sgDCyQYDGg/J9akEntIBByYkC7q0B6z4jU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:77:03:0f:c5:86:94:33:db:16:4b:13:4a:7c:65:02:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4b0f87730a55044f88276beb064e3c7badd1c4
        Validity
            Not Before: Oct 26 07:00:51 2026 GMT
            Not After : Oct 27 07:00:51 2026 GMT
        Subject: CN=bfebe46c47a629f182b99fb8f405a0b9816d3b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:e0:7f:72:bb:5a:69:b8:98:e5:cd:d2:32:
                    f2:20:7c:cd:0a:60:b7:ca:35:49:43:c3:65:4f:18:
                    89:bf:95:16:27:ad:cd:f9:ec:1e:40:ae:f8:4b:f0:
                    32:4e:71:8c:dd:d6:af:e2:60:83:73:d1:db:ee:c5:
                    b0:80:d2:e8:d5:d7:9d:a0:ad:0f:7f:a7:f8:7e:91:
                    09:02:f6:eb:80:b4:7c:d4:4e:25:0a:fa:00:ec:1a:
                    d1:43:3f:b3:dc:57:aa:bd:eb:f4:a4:6b:9a:66:28:
                    70:a7:72:69:15:7c:0d:75:73:b3:e1:69:b3:08:01:
                    e7:0c:f6:75:48:9c:6e:89:07:ff:70:e8:8a:83:88:
                    ce:12:85:c8:73:49:97:76:90:c0:12:e6:9b:bb:09:
                    72:e0:cf:8d:4d:5f:fa:26:b8:09:c1:63:43:6a:38:
                    11:8d:86:b6:f7:02:ca:35:87:7b:b9:39:7c:80:c2:
                    7b:e5:1d:3f:35:b3:ac:2c:35:f0:55:da:cf:ee:c9:
                    0a:7c:7e:5e:53:cf:d2:5a:87:5f:79:8e:12:b9:26:
                    2a:f4:9d:51:8f:f2:41:fb:86:10:e0:b9:44:b9:bc:
                    34:e8:05:c4:1e:84:64:dc:48:42:7b:45:bf:98:6f:
                    fb:a0:ac:c6:01:5c:0d:93:42:eb:31:13:a8:91:6b:
                    39:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EB:E4:6C:47:A6:29:F1:82:B9:9F:B8:F4:05:A0:B9:81:6D:3B:93
            X509v3 Authority Key Identifier:
                keyid:0D:4B:0F:87:73:0A:55:04:4F:88:27:6B:EB:06:4E:3C:7B:AD:D1:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUsPh3MKVQRPiCdr6wZOPHut0cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/DUsPh3MKVQRPiCdr6wZOPHut0cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1e:65:6d:38:36:cf:9d:19:48:6b:6c:0d:fa:2d:4b:06:dc:
         3f:52:c4:aa:a2:94:7c:76:09:5e:23:c1:a9:6e:8f:c7:9d:5e:
         38:3d:55:44:18:39:e1:6b:cb:c9:8e:c3:d2:14:58:34:17:80:
         49:e1:81:10:42:40:13:37:73:b0:06:fb:d2:bf:f6:59:ea:c2:
         10:1f:3b:7a:59:19:72:53:85:bc:bf:57:c1:b7:22:a5:0b:d7:
         8a:b4:ab:28:d5:ea:a6:7d:7b:e4:36:77:c1:11:ee:e0:0c:2c:
         77:c6:a8:07:76:ed:67:04:3d:cf:d0:6d:94:2e:04:c4:09:80:
         dc:a8:7b:25:46:81:de:e9:58:17:00:c4:18:89:d4:2b:de:c8:
         83:75:77:3c:c9:70:d3:d0:ae:5a:27:f1:7f:79:81:30:84:35:
         f9:7a:11:aa:3d:94:06:15:1c:07:f3:ba:bc:af:e8:cb:14:c8:
         d1:78:a3:f1:e4:78:42:38:6f:92:28:a7:26:bd:fb:2f:5e:67:
         6a:e0:b0:fe:15:c4:0c:99:55:09:8e:d8:7b:d6:9c:9c:1c:e6:
         73:58:2f:30:fb:db:ec:3f:c9:3a:ba:fc:7f:48:3d:6c:7b:ee:
         27:9e:a3:2e:ae:8a:ff:7e:8d:9d:eb:71:e8:9e:10:43:f5:7b:
         4a:ce:b7:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3Aw/FhpQz2xZLE0p8ZQI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNGIwZjg3NzMwYTU1MDQ0Zjg4Mjc2YmViMDY0ZTNjN2Jh
ZGQxYzQwHhcNMjYxMDI2MDcwMDUxWhcNMjYxMDI3MDcwMDUxWjAzMTEwLwYDVQQD
EyhiZmViZTQ2YzQ3YTYyOWYxODJiOTlmYjhmNDA1YTBiOTgxNmQzYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHrgf3K7Wmm4mOXN0jLyIHzNCmC3
yjVJQ8NlTxiJv5UWJ63N+eweQK74S/AyTnGM3dav4mCDc9Hb7sWwgNLo1dedoK0P
f6f4fpEJAvbrgLR81E4lCvoA7BrRQz+z3Feqvev0pGuaZihwp3JpFXwNdXOz4Wmz
CAHnDPZ1SJxuiQf/cOiKg4jOEoXIc0mXdpDAEuabuwly4M+NTV/6JrgJwWNDajgR
jYa29wLKNYd7uTl8gMJ75R0/NbOsLDXwVdrP7skKfH5eU8/SWodfeY4SuSYq9J1R
j/JB+4YQ4LlEubw06AXEHoRk3EhCe0W/mG/7oKzGAVwNk0LrMROokWs5MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/r5GxHpinxgrmfuPQFoLmBbTuTMB8GA1UdIwQY
MBaAFA1LD4dzClUET4gna+sGTjx7rdHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFVzUGgzTUtWUVJQaUNkcjZ3Wk9QSHV0MGNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEt
ZGU2NDBkMDEyMDY1LzEvRFVzUGgzTUtWUVJQaUNkcjZ3Wk9QSHV0MGNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81ZjVhNjAtOTAyNi00YjY2LWJhYWEtZGU2NDBkMDEyMDY1
LzEvRFVzUGgzTUtWUVJQaUNkcjZ3Wk9QSHV0MGNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHB5lbTg2
z50ZSGtsDfotSwbcP1LEqqKUfHYJXiPBqW6Px51eOD1VRBg54WvLyY7D0hRYNBeA
SeGBEEJAEzdzsAb70r/2WerCEB87elkZclOFvL9XwbcipQvXirSrKNXqpn175DZ3
wRHu4Awsd8aoB3btZwQ9z9BtlC4ExAmA3Kh7JUaB3ulYFwDEGInUK97Ig3V3PMlw
09CuWifxf3mBMIQ1+XoRqj2UBhUcB/O6vK/oyxTI0Xij8eR4QjhvkiinJr37L15n
auCw/hXEDJlVCY7Ye9acnBzmc1gvMPvb7D/JOrr8f0g9bHvuJ56jLq6K/36Nnetx
6J4QQ/V7Ss633A==
-----END CERTIFICATE-----
Generated at Mon Oct 26 13:22:52 2026 by rpki-client