Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
File:                     uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft (raw, json)
Hash identifier:          Z5VS7pJVXHxtVhD2jGbe4gfA3GNhFdtwmjffDwz+9jk=
Subject key identifier:   12:F9:A9:15:BC:6A:DA:9C:A7:85:6D:72:95:A4:39:45:02:07:50:14
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Certificate issuer:       /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial:       01A16DC8A0F322B4A778B9A2F9CF20B4CCAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
Manifest number:          1ABE
Signing time:             Sat 24 Oct 2026 12:00:27 +0000
Manifest this update:     Sat 24 Oct 2026 12:00:27 +0000
Manifest next update:     Sun 25 Oct 2026 12:00:27 +0000
Files and hashes:         1: AXJwwgLV20qOfdiRkcLp7cuyLa8.roa (hash: TJd1vyVMSaddwqO1mLObhJwRHoC09A1cxMdzGIXMVxA=)
                          2: JVhM3Ybetfs8u4lZCxCSpx8pJdU.roa (hash: qDG/lBnPGvBdowawU0zXsB0DnTTCTXSKOxuDVEvE+Lw=)
                          3: JciEJIGTlcBIQFyaMf4k2cUulG0.roa (hash: PsuB426mDHmj/nCSN0DLQAoyVz9KEoXVW/4qNh6n7rE=)
                          4: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl (hash: uveDVVMlwG433//Wj7gLnsHqzRoxva1JqSrO7z3HIyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6d:c8:a0:f3:22:b4:a7:78:b9:a2:f9:cf:20:b4:cc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
        Validity
            Not Before: Oct 24 12:00:27 2026 GMT
            Not After : Oct 25 12:00:27 2026 GMT
        Subject: CN=12f9a915bc6ada9ca7856d7295a4394502075014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:e1:6d:81:02:4b:02:59:8a:39:7e:30:72:
                    81:1b:82:a9:2c:42:fb:5c:de:d0:14:95:e4:8c:27:
                    33:87:f4:d2:bc:e9:59:75:f7:9e:63:3f:29:cb:74:
                    ff:f3:15:db:bb:01:dc:8a:3f:ed:68:b4:b9:cc:f3:
                    ce:7c:68:8f:2d:49:54:db:35:83:c6:ce:97:1f:c3:
                    e6:8f:83:16:55:4a:00:f5:d6:4b:db:06:bd:7c:3b:
                    22:8e:06:34:c5:6c:ab:cc:b9:6d:be:37:c3:4d:1f:
                    b3:59:fb:21:85:e2:45:0f:26:57:60:43:8f:a1:f6:
                    c1:2e:07:70:69:88:b6:5c:a0:e4:ba:1a:c6:df:57:
                    60:82:4e:f7:59:81:e1:2f:69:7e:87:2d:de:46:5a:
                    35:8e:a1:71:4a:5f:59:81:7b:11:e4:f5:65:fd:7a:
                    98:50:96:38:b7:37:9f:20:d0:be:1d:ac:e0:10:cf:
                    01:b2:39:0a:04:95:6f:58:8f:c7:37:b7:f9:23:18:
                    42:be:13:70:89:40:3e:c3:43:17:50:e4:68:01:2c:
                    46:30:f6:7c:7a:d1:e5:92:8d:7c:0f:5d:00:c7:c7:
                    08:f4:a3:90:53:ad:8a:e8:6b:47:fa:02:96:c3:04:
                    b8:c7:44:11:3e:1a:e1:76:92:d6:eb:65:5f:42:87:
                    ee:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F9:A9:15:BC:6A:DA:9C:A7:85:6D:72:95:A4:39:45:02:07:50:14
            X509v3 Authority Key Identifier:
                keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ce:0c:04:4a:a8:bf:e8:35:5d:79:94:a4:82:f7:5f:55:e4:
         e6:bc:ce:22:23:f2:02:e8:b3:f2:04:4a:21:c1:c6:15:bb:e9:
         b0:96:c4:47:50:63:f2:49:cd:d1:c6:1a:51:d6:21:48:b7:a5:
         08:ad:60:06:6b:7c:b3:cc:9c:d4:cb:af:6e:0a:de:7e:ae:06:
         87:43:d5:42:19:8b:15:e1:3e:86:fa:2a:7d:92:1e:6e:5b:7b:
         2b:7f:82:e4:d1:1f:00:bb:44:26:f5:e7:c6:42:48:4e:43:2f:
         61:a1:6c:06:cc:a7:b2:b5:8e:eb:0e:1f:14:0f:62:c8:b8:60:
         9a:35:d7:d9:8d:4c:1a:fe:e6:2a:ab:63:e7:63:60:72:26:31:
         80:b3:39:b4:98:95:50:63:0d:7d:06:fe:33:4d:68:bb:ec:9e:
         b5:db:a8:4d:75:67:1e:c7:30:6a:71:e7:e5:c0:cd:ca:c4:d6:
         20:f4:89:4f:ae:a5:18:3f:be:a5:1a:12:10:bf:9e:99:4d:54:
         cb:5c:b6:a8:e0:c5:8a:ee:60:a8:83:c0:79:99:c7:94:9b:ce:
         29:a5:80:28:a1:ef:db:ab:3f:e0:5a:35:8d:4c:aa:43:de:32:
         bf:51:c8:67:09:62:f5:f0:b1:55:cc:75:0a:41:00:6c:91:89:
         9c:e3:33:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFtyKDzIrSneLmi+c8gtMyrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZTBmNzk4NDFjMDIxMGQ5NWI0ZWY1NmZmNjg0NDFjMmFh
OWZjMGYwHhcNMjYxMDI0MTIwMDI3WhcNMjYxMDI1MTIwMDI3WjAzMTEwLwYDVQQD
EygxMmY5YTkxNWJjNmFkYTljYTc4NTZkNzI5NWE0Mzk0NTAyMDc1MDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9/hbYECSwJZijl+MHKBG4KpLEL7
XN7QFJXkjCczh/TSvOlZdfeeYz8py3T/8xXbuwHcij/taLS5zPPOfGiPLUlU2zWD
xs6XH8Pmj4MWVUoA9dZL2wa9fDsijgY0xWyrzLltvjfDTR+zWfshheJFDyZXYEOP
ofbBLgdwaYi2XKDkuhrG31dggk73WYHhL2l+hy3eRlo1jqFxSl9ZgXsR5PVl/XqY
UJY4tzefINC+HazgEM8BsjkKBJVvWI/HN7f5IxhCvhNwiUA+w0MXUORoASxGMPZ8
etHlko18D10Ax8cI9KOQU62K6GtH+gKWwwS4x0QRPhrhdpLW62VfQofuAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBL5qRW8atqcp4VtcpWkOUUCB1AUMB8GA1UdIwQY
MBaAFLjg95hBwCENlbTvVv9oRBwqqfwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2Mt
NmVhM2NiZmQzYTg0LzEvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2MtNmVhM2NiZmQzYTg0
LzEvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoM4MBEqo
v+g1XXmUpIL3X1Xk5rzOIiPyAuiz8gRKIcHGFbvpsJbER1Bj8knN0cYaUdYhSLel
CK1gBmt8s8yc1Muvbgrefq4Gh0PVQhmLFeE+hvoqfZIeblt7K3+C5NEfALtEJvXn
xkJITkMvYaFsBsynsrWO6w4fFA9iyLhgmjXX2Y1MGv7mKqtj52NgciYxgLM5tJiV
UGMNfQb+M01ou+yetduoTXVnHscwanHn5cDNysTWIPSJT66lGD++pRoSEL+emU1U
y1y2qODFiu5gqIPAeZnHlJvOKaWAKKHv26s/4Fo1jUyqQ94yv1HIZwli9fCxVcx1
CkEAbJGJnOMz2w==
-----END CERTIFICATE-----
Generated at Sat Oct 24 18:46:56 2026 by rpki-client