Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
File:                     x_BLeLLu35mO3VzB6IZxyNEPGGU.mft (raw, json)
Hash identifier:          3lQLhVgaknlKpe2p2aH7zYshcAsPIDo5QGl5u0E5wSQ=
Subject key identifier:   7D:B0:D2:93:5C:47:05:B3:FE:D9:D6:90:7D:63:AE:B6:93:42:03:E9
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Certificate issuer:       /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial:       01A12FFC9917222C8001553C3EED8EF22DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
Manifest number:          1341
Signing time:             Mon 12 Oct 2026 12:00:45 +0000
Manifest this update:     Mon 12 Oct 2026 12:00:45 +0000
Manifest next update:     Tue 13 Oct 2026 12:00:45 +0000
Files and hashes:         1: 1-OkOJRfBqhNom3BlAfd09-IWYvs.roa (hash: +50nGq+XhMdi1qov7zanpW/t72gfVecF0VpQ18FCxto=)
                          2: 4aTdnMvwkXYYXRC9S9zvA5Dw37g.roa (hash: SEYp8sXbx8nEwzT8fcz5Zk1bfemCvFczAQXPzq4M4CM=)
                          3: Qt6UBSy6AyGq63QOVL4RXffcTic.roa (hash: DrxVhbMxa0VyjrLuDeUMjs53zIXiEcOYuKYWoHkcfHw=)
                          4: ap-XVBzw4zZPatC0RYn5qlV_mrQ.roa (hash: +C964lY3jvSC9YXuZCdEHQIGMY6YBYM0/bQTHHxKS1E=)
                          5: x_BLeLLu35mO3VzB6IZxyNEPGGU.crl (hash: LH7pezm8bKUKdFDVWLI2HGS0/AsZoh23B7DW2O5oXts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2f:fc:99:17:22:2c:80:01:55:3c:3e:ed:8e:f2:2d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
        Validity
            Not Before: Oct 12 12:00:45 2026 GMT
            Not After : Oct 13 12:00:45 2026 GMT
        Subject: CN=7db0d2935c4705b3fed9d6907d63aeb6934203e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:3a:91:49:e4:db:d8:6c:b3:63:c8:11:92:
                    27:6a:8c:8e:5e:2f:ae:3c:c3:21:4b:f4:45:4f:f7:
                    ef:e1:ce:d9:b7:63:4a:e3:e5:97:fe:c3:a8:83:ee:
                    ab:0b:c4:ba:32:7e:41:14:af:28:89:9c:76:c8:52:
                    83:7a:67:b6:b9:26:cc:58:d5:7f:3d:56:c4:15:c7:
                    c6:17:ca:ef:07:b1:94:cd:0d:6c:33:00:9d:5e:c9:
                    ca:cb:df:e9:dd:a6:db:ab:18:5e:e0:47:eb:97:56:
                    ed:74:64:ae:37:32:bc:65:80:6d:8b:03:78:80:37:
                    c1:62:e6:6e:24:ba:1c:20:5f:1a:a2:5e:35:0a:ea:
                    12:c8:f3:4f:81:fb:95:bd:7b:24:c2:8e:19:4f:92:
                    3f:6f:0c:c6:8b:17:c0:5e:63:1c:03:4b:6e:32:d1:
                    5e:22:c9:a8:b6:45:ed:47:09:0d:b0:a5:1c:29:3e:
                    7c:0e:66:7b:64:9b:f8:34:d7:83:51:4d:6c:28:58:
                    02:3f:30:1a:51:39:9e:72:3b:82:e1:52:ad:5e:b7:
                    6f:29:a0:30:af:26:76:af:dd:a2:ca:b1:cb:3a:2f:
                    10:81:5d:56:72:63:99:dd:5d:a7:cd:51:f7:1e:5c:
                    79:0c:74:d6:7a:40:f5:56:ea:05:59:46:ce:7a:57:
                    ab:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B0:D2:93:5C:47:05:B3:FE:D9:D6:90:7D:63:AE:B6:93:42:03:E9
            X509v3 Authority Key Identifier:
                keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c5:c1:6f:a2:3c:ae:35:5b:26:1e:3b:6b:3a:af:06:5d:49:
         0f:b1:84:8f:e4:27:c2:b6:59:56:15:c3:52:46:be:95:18:96:
         2d:22:02:51:9d:19:c6:61:60:c9:88:54:7e:4c:5b:1a:fc:ea:
         a9:65:0b:0c:4e:4b:43:f4:b2:04:af:29:44:bd:92:5a:62:bb:
         48:50:d3:52:48:2e:01:2e:f3:7d:99:26:70:a3:52:7c:8b:d9:
         f6:3b:36:93:eb:1c:d0:d3:a1:04:95:2b:85:48:17:2f:81:a2:
         7b:33:34:ed:d0:ee:a8:2f:7f:6e:38:2e:26:f6:09:99:48:de:
         ed:aa:7a:aa:d4:fd:27:a9:ad:86:ef:81:24:cf:b1:86:9f:22:
         22:e9:36:24:2a:b0:9d:0f:bd:c5:cf:0f:c9:cc:3a:b6:48:78:
         58:8b:cf:4b:90:b0:38:35:9c:e8:5b:51:ab:ce:c6:f7:a0:c4:
         e5:4c:b3:ec:fc:32:4b:46:77:de:48:0c:f4:a5:0d:5d:84:b3:
         a2:99:0e:48:97:af:65:6c:64:fb:5e:1b:d6:74:93:ed:32:cd:
         0d:81:1f:a3:24:27:6b:d5:14:8b:21:04:61:4d:25:68:9f:01:
         01:9c:fd:4f:e9:44:d1:01:ab:45:65:14:3c:60:d2:12:b5:a1:
         a4:37:85:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEv/JkXIiyAAVU8Pu2O8i34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZjA0Yjc4YjJlZWRmOTk4ZWRkNWNjMWU4ODY3MWM4ZDEw
ZjE4NjUwHhcNMjYxMDEyMTIwMDQ1WhcNMjYxMDEzMTIwMDQ1WjAzMTEwLwYDVQQD
Eyg3ZGIwZDI5MzVjNDcwNWIzZmVkOWQ2OTA3ZDYzYWViNjkzNDIwM2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsos6kUnk29hss2PIEZInaoyOXi+u
PMMhS/RFT/fv4c7Zt2NK4+WX/sOog+6rC8S6Mn5BFK8oiZx2yFKDeme2uSbMWNV/
PVbEFcfGF8rvB7GUzQ1sMwCdXsnKy9/p3abbqxhe4Efrl1btdGSuNzK8ZYBtiwN4
gDfBYuZuJLocIF8aol41CuoSyPNPgfuVvXskwo4ZT5I/bwzGixfAXmMcA0tuMtFe
IsmotkXtRwkNsKUcKT58DmZ7ZJv4NNeDUU1sKFgCPzAaUTmecjuC4VKtXrdvKaAw
ryZ2r92iyrHLOi8QgV1WcmOZ3V2nzVH3Hlx5DHTWekD1VuoFWUbOelerdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2w0pNcRwWz/tnWkH1jrraTQgPpMB8GA1UdIwQY
MBaAFMfwS3iy7t+Zjt1cweiGccjRDxhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzct
ZjQzNzgzOTA5NWQxLzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzctZjQzNzgzOTA5NWQx
LzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMXBb6I8
rjVbJh47azqvBl1JD7GEj+QnwrZZVhXDUka+lRiWLSICUZ0ZxmFgyYhUfkxbGvzq
qWULDE5LQ/SyBK8pRL2SWmK7SFDTUkguAS7zfZkmcKNSfIvZ9js2k+sc0NOhBJUr
hUgXL4GiezM07dDuqC9/bjguJvYJmUje7ap6qtT9J6mthu+BJM+xhp8iIuk2JCqw
nQ+9xc8Pycw6tkh4WIvPS5CwODWc6FtRq87G96DE5Uyz7PwyS0Z33kgM9KUNXYSz
opkOSJevZWxk+14b1nST7TLNDYEfoyQna9UUiyEEYU0laJ8BAZz9T+lE0QGrRWUU
PGDSErWhpDeFuw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 19:57:59 2026 by rpki-client