Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File:                     RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier:          vwalsNwzW0NU/4J/f5L4jyaU7ME/wcErTao8pfdFAUQ=
Subject key identifier:   4F:DB:40:92:0B:F8:CC:B7:BF:8E:13:D9:3E:D7:8E:FC:C7:07:EE:4C
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer:       /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial:       01A11D87E0F2F60F7C471378931A2D7436BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number:          1A94
Signing time:             Thu 08 Oct 2026 22:00:06 +0000
Manifest this update:     Thu 08 Oct 2026 22:00:06 +0000
Manifest next update:     Fri 09 Oct 2026 22:00:06 +0000
Files and hashes:         1: Kj2nJpqI7GEu-K-TsbARVzYFqTM.roa (hash: l5siJkXM+WfWhL0L8OL/uvl+AJmTO8+Cpk3bOaW4F7E=)
                          2: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: 8nwxQNg5MdTkZkGN7MIMu0hjHjjQlRp+jIKQKGGiO9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:87:e0:f2:f6:0f:7c:47:13:78:93:1a:2d:74:36:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
        Validity
            Not Before: Oct  8 22:00:06 2026 GMT
            Not After : Oct  9 22:00:06 2026 GMT
        Subject: CN=4fdb40920bf8ccb7bf8e13d93ed78efcc707ee4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:14:08:1f:9d:14:a8:0f:b9:be:5f:e2:4f:
                    74:af:af:b9:29:3f:b7:c6:eb:9e:11:62:24:a2:a9:
                    36:b0:ea:af:ec:87:a4:0a:5a:bd:3f:a8:bc:78:40:
                    bc:13:1f:a1:33:98:17:14:ea:62:fe:fe:b1:ae:0d:
                    11:31:5e:9a:42:5e:f2:bc:95:ed:ff:d6:bd:22:37:
                    13:5e:4e:db:d0:1c:b1:53:3b:d5:34:a0:57:8d:71:
                    18:0a:fd:2c:b7:e9:31:11:f4:2b:5c:ad:eb:46:c0:
                    77:19:d7:36:31:55:97:7c:45:53:ed:e1:ca:db:aa:
                    65:52:2d:af:f1:ab:53:02:40:cc:59:74:a6:1b:78:
                    53:29:83:8a:6f:9e:d7:01:ac:14:ff:13:df:b7:31:
                    0f:0c:63:98:b6:cb:c3:7d:a5:ae:24:60:79:77:3c:
                    83:a8:8f:1d:7f:44:9b:6d:5c:f6:81:7b:13:ce:e5:
                    0b:79:ca:7a:3c:8f:76:85:d0:1d:88:58:eb:6e:55:
                    4f:6a:a9:83:cb:df:f9:a2:0e:7f:f5:de:6f:0c:ae:
                    87:9a:75:ee:f9:51:8e:40:8e:d5:fd:fc:7e:48:6c:
                    ad:6e:c7:0e:f3:eb:d2:ea:66:8a:8d:1c:38:15:37:
                    12:32:45:76:cc:7c:28:01:d4:6d:23:25:bd:0a:b4:
                    7d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DB:40:92:0B:F8:CC:B7:BF:8E:13:D9:3E:D7:8E:FC:C7:07:EE:4C
            X509v3 Authority Key Identifier:
                keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:db:72:6b:9e:c1:a3:dc:66:ab:27:e2:ba:1f:11:f1:3b:f7:
         62:74:d8:05:e3:b3:a9:1b:9c:79:3f:a5:e2:9a:42:90:04:2f:
         4c:f1:1a:3f:50:6c:65:d4:d5:84:ed:f8:df:25:43:5b:f7:0e:
         5b:6d:15:f2:63:30:1e:b5:b0:1e:b0:6f:38:56:8f:2d:1e:93:
         9d:69:26:69:f8:49:2e:97:4d:5d:4e:38:d2:43:af:de:1f:4b:
         e5:c1:44:f4:29:5c:a6:a5:99:33:64:de:da:0f:ac:49:1a:68:
         4f:e9:dd:83:1d:c8:9e:ae:6f:fe:23:8f:89:79:90:6f:80:e2:
         d4:98:7b:b2:26:d8:80:6f:29:91:12:13:01:9b:af:bf:78:05:
         f2:7a:b8:34:b4:87:11:76:5b:b8:f9:a5:cf:94:dd:ee:2c:ff:
         4c:b3:7f:73:7e:4f:5a:5d:c4:ea:b0:43:06:fa:c9:2a:9c:de:
         d0:6e:96:70:22:83:87:86:7a:6c:c0:df:89:2e:cf:50:dd:d6:
         76:23:a0:b2:ca:fc:b1:89:05:1a:b1:d1:a9:02:ab:a8:3c:b3:
         b9:76:59:aa:34:c5:7a:20:7f:14:2f:1a:2e:d7:a7:86:3b:6d:
         76:ec:a6:01:e6:f8:30:b6:12:2c:80:c9:39:65:bb:16:81:99:
         72:07:0f:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEdh+Dy9g98RxN4kxotdDa6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MjdmMjFkNDA2MjFlNTgxM2U0YTA2OTIxMTk0N2UyNGQw
MGU3OTcwHhcNMjYxMDA4MjIwMDA2WhcNMjYxMDA5MjIwMDA2WjAzMTEwLwYDVQQD
Eyg0ZmRiNDA5MjBiZjhjY2I3YmY4ZTEzZDkzZWQ3OGVmY2M3MDdlZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/cUCB+dFKgPub5f4k90r6+5KT+3
xuueEWIkoqk2sOqv7IekClq9P6i8eEC8Ex+hM5gXFOpi/v6xrg0RMV6aQl7yvJXt
/9a9IjcTXk7b0ByxUzvVNKBXjXEYCv0st+kxEfQrXK3rRsB3Gdc2MVWXfEVT7eHK
26plUi2v8atTAkDMWXSmG3hTKYOKb57XAawU/xPftzEPDGOYtsvDfaWuJGB5dzyD
qI8df0SbbVz2gXsTzuULecp6PI92hdAdiFjrblVPaqmDy9/5og5/9d5vDK6HmnXu
+VGOQI7V/fx+SGytbscO8+vS6maKjRw4FTcSMkV2zHwoAdRtIyW9CrR94QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/bQJIL+My3v44T2T7XjvzHB+5MMB8GA1UdIwQY
MBaAFEUn8h1AYh5YE+SgaSEZR+JNAOeXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYt
ZjA4NmU2Zjk2Y2JiLzEvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYtZjA4NmU2Zjk2Y2Ji
LzEvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVttya57B
o9xmqyfiuh8R8Tv3YnTYBeOzqRuceT+l4ppCkAQvTPEaP1BsZdTVhO343yVDW/cO
W20V8mMwHrWwHrBvOFaPLR6TnWkmafhJLpdNXU440kOv3h9L5cFE9ClcpqWZM2Te
2g+sSRpoT+ndgx3Inq5v/iOPiXmQb4Di1Jh7sibYgG8pkRITAZuvv3gF8nq4NLSH
EXZbuPmlz5Td7iz/TLN/c35PWl3E6rBDBvrJKpze0G6WcCKDh4Z6bMDfiS7PUN3W
diOgssr8sYkFGrHRqQKrqDyzuXZZqjTFeiB/FC8aLtenhjttduymAeb4MLYSLIDJ
OWW7FoGZcgcPbQ==
-----END CERTIFICATE-----
Generated at Fri Oct 9 03:54:54 2026 by rpki-client