Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft
File:                     YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft (raw, json)
Hash identifier:          rVa4tz/MkXBRAZxI6AeMFV/0aEbuCQ92d4TMeKfusSI=
Subject key identifier:   8E:E6:A8:DB:33:59:98:71:0B:E4:77:98:CB:E6:84:7F:C8:28:43:B8
Authority key identifier: 63:31:94:86:73:02:ED:97:07:7F:C1:3F:2B:AD:8F:C1:C2:3C:DD:8E
Certificate issuer:       /CN=633194867302ed97077fc13f2bad8fc1c23cdd8e
Certificate serial:       01A12CC5B78B318AFCE7319D0277BE8D3CCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzGUhnMC7ZcHf8E_K62PwcI83Y4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft
Manifest number:          0115
Signing time:             Sun 11 Oct 2026 21:01:57 +0000
Manifest this update:     Sun 11 Oct 2026 21:01:57 +0000
Manifest next update:     Mon 12 Oct 2026 21:01:57 +0000
Files and hashes:         1: HuwT9iGWIgJRyUCZSSk1R7OqZEs.roa (hash: gHtemcwtFR9eD7jL8T2vPWRH/SZxxrNlKmGIkUXMU7A=)
                          2: YzGUhnMC7ZcHf8E_K62PwcI83Y4.crl (hash: 32pXXk8+8WHzRyDte/BiRX4nwN+np2iMD/aQotbGYds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YzGUhnMC7ZcHf8E_K62PwcI83Y4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 21:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2c:c5:b7:8b:31:8a:fc:e7:31:9d:02:77:be:8d:3c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633194867302ed97077fc13f2bad8fc1c23cdd8e
        Validity
            Not Before: Oct 11 21:01:57 2026 GMT
            Not After : Oct 12 21:01:57 2026 GMT
        Subject: CN=8ee6a8db335998710be47798cbe6847fc82843b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:ba:dc:b0:1b:6d:23:77:c6:67:12:b5:bb:
                    78:e5:40:b3:ab:2b:c2:db:5c:0e:88:ac:e8:cc:35:
                    9d:b6:f3:8c:29:98:2d:a2:47:32:2d:d9:04:a2:91:
                    40:02:9f:69:4d:94:f5:af:c8:af:82:44:bc:dd:7f:
                    53:ab:9f:94:23:7b:d0:58:7c:f7:a3:fd:81:f7:18:
                    4f:df:17:07:f6:fe:8c:42:b1:e5:4e:0e:8c:93:37:
                    68:5f:0c:74:dd:87:53:a0:56:c6:e5:00:72:09:2a:
                    cf:81:ac:87:80:cc:db:34:d2:c5:a1:38:d1:ed:65:
                    07:a7:d6:33:8f:8d:6b:48:30:8f:94:34:50:18:4f:
                    b1:b9:a1:49:fc:54:40:21:e2:de:45:65:00:5a:aa:
                    3e:d1:d3:46:18:f4:90:de:d3:df:4b:c3:36:9f:e6:
                    c8:7c:62:e2:d0:88:9a:a0:2d:1a:e5:2c:37:1f:df:
                    c3:3d:d3:d4:dd:20:81:69:06:73:d8:20:a7:ae:cc:
                    a0:4b:d2:13:5a:b8:a3:fd:ff:e8:d5:03:75:ea:da:
                    2f:1c:a8:43:dd:b1:04:b9:62:39:82:08:60:15:30:
                    5b:f6:aa:10:ec:9c:42:62:22:db:4e:54:b8:9f:c2:
                    7f:2e:8e:9b:df:02:07:9e:06:7c:32:1d:9e:b9:92:
                    21:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E6:A8:DB:33:59:98:71:0B:E4:77:98:CB:E6:84:7F:C8:28:43:B8
            X509v3 Authority Key Identifier:
                keyid:63:31:94:86:73:02:ED:97:07:7F:C1:3F:2B:AD:8F:C1:C2:3C:DD:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzGUhnMC7ZcHf8E_K62PwcI83Y4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ac:5f:c0:c1:0b:9c:06:c4:5d:bb:cf:ae:84:67:ed:c8:89:
         51:ad:8b:74:27:13:ab:23:1f:05:88:25:c2:6c:98:4a:62:38:
         b3:f7:d9:9e:47:96:49:8f:56:04:2b:4d:95:b7:57:d1:58:69:
         46:66:b1:76:70:db:8c:d7:76:f9:1c:b6:1c:3f:1e:25:89:08:
         f8:1c:d1:1f:43:44:ac:54:14:c8:a1:25:07:ec:43:96:f8:98:
         b2:44:36:4b:74:c7:b6:3a:57:5e:1e:4f:83:cc:71:81:a2:6a:
         fa:7e:09:63:06:47:08:79:25:a2:e0:00:6d:e0:16:35:67:69:
         a7:b4:a2:cd:df:9f:ec:7e:45:9a:9b:c4:ef:5e:64:54:75:ce:
         b5:f2:d2:ee:56:bb:66:d8:5b:52:ab:fd:b5:99:4b:22:50:b6:
         d4:a0:0c:12:e9:f9:d2:50:6d:2f:83:1f:11:d4:f5:fb:85:66:
         88:9c:b2:29:d7:84:39:24:48:63:0d:58:73:68:f3:8e:47:6a:
         c8:7c:77:72:36:25:35:9c:6b:06:24:14:76:8d:ae:f1:a9:ac:
         51:30:5f:34:48:13:e6:cc:89:13:64:33:49:61:98:30:7e:f1:
         ba:2a:8e:81:5d:0b:2e:67:06:2e:77:eb:54:e9:b7:03:36:f1:
         8f:90:be:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEsxbeLMYr85zGdAne+jTzKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzE5NDg2NzMwMmVkOTcwNzdmYzEzZjJiYWQ4ZmMxYzIz
Y2RkOGUwHhcNMjYxMDExMjEwMTU3WhcNMjYxMDEyMjEwMTU3WjAzMTEwLwYDVQQD
Eyg4ZWU2YThkYjMzNTk5ODcxMGJlNDc3OThjYmU2ODQ3ZmM4Mjg0M2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaK63LAbbSN3xmcStbt45UCzqyvC
21wOiKzozDWdtvOMKZgtokcyLdkEopFAAp9pTZT1r8ivgkS83X9Tq5+UI3vQWHz3
o/2B9xhP3xcH9v6MQrHlTg6MkzdoXwx03YdToFbG5QByCSrPgayHgMzbNNLFoTjR
7WUHp9Yzj41rSDCPlDRQGE+xuaFJ/FRAIeLeRWUAWqo+0dNGGPSQ3tPfS8M2n+bI
fGLi0IiaoC0a5Sw3H9/DPdPU3SCBaQZz2CCnrsygS9ITWrij/f/o1QN16tovHKhD
3bEEuWI5gghgFTBb9qoQ7JxCYiLbTlS4n8J/Lo6b3wIHngZ8Mh2euZIhpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7mqNszWZhxC+R3mMvmhH/IKEO4MB8GA1UdIwQY
MBaAFGMxlIZzAu2XB3/BPyutj8HCPN2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXpHVWhuTUM3WmNIZjhFX0s2MlB3Y0k4M1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMt
NGViZWVjN2U4Mjc1LzEvWXpHVWhuTUM3WmNIZjhFX0s2MlB3Y0k4M1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi84OGEzODMtMDMwYy00NTQ1LTllOWMtNGViZWVjN2U4Mjc1
LzEvWXpHVWhuTUM3WmNIZjhFX0s2MlB3Y0k4M1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKxfwMEL
nAbEXbvProRn7ciJUa2LdCcTqyMfBYglwmyYSmI4s/fZnkeWSY9WBCtNlbdX0Vhp
RmaxdnDbjNd2+Ry2HD8eJYkI+BzRH0NErFQUyKElB+xDlviYskQ2S3THtjpXXh5P
g8xxgaJq+n4JYwZHCHklouAAbeAWNWdpp7Sizd+f7H5FmpvE715kVHXOtfLS7la7
ZthbUqv9tZlLIlC21KAMEun50lBtL4MfEdT1+4VmiJyyKdeEOSRIYw1Yc2jzjkdq
yHx3cjYlNZxrBiQUdo2u8amsUTBfNEgT5syJE2QzSWGYMH7xuiqOgV0LLmcGLnfr
VOm3Azbxj5C+hg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 04:24:39 2026 by rpki-client