Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
File:                     01auYl2VBt9KPld7JKhvzjxzqPg.mft (raw, json)
Hash identifier:          XfPCSaZKW1YDZL94/K/PIMIxJgME0qn4+Zn3M5UXLUU=
Subject key identifier:   BB:14:EE:DC:83:9E:A0:16:A2:47:0C:2E:1F:76:71:B9:8B:C4:CC:6B
Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
Certificate issuer:       /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Certificate serial:       01A13D80E1DECD983160BDD69B0E78BD31FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
Manifest number:          1AA5
Signing time:             Thu 15 Oct 2026 03:00:18 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:18 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:18 +0000
Files and hashes:         1: 01auYl2VBt9KPld7JKhvzjxzqPg.crl (hash: HLKR/nYtsy3Utfz2el3M4HQotAIUZXDE1/5PUyY6Wmw=)
                          2: 2pxyRznKvAboLyDSRY5V9DkFgro.roa (hash: WoYHz9zhv/T6GpS58bm/XhcMRq+CFzhIAVEesETjxDA=)
                          3: N5lhzOLzb9DWld9ai9yjW2kVDLc.roa (hash: otz3WZRX38iiM+hhQYkSTpyseb/af+HU5vUy0a+fTYk=)
                          4: TDVVAVJu7KfAhiGr1m5Du1HlA18.roa (hash: li+URB3yo8nZmvZyiiGhy9aGaIwk3rYi2nbOJFauLR0=)
                          5: uUk1h5SII_Safw_pSYFNTK7-iXA.roa (hash: VTAbHmUg7zNhrsk+AD118pUR1Ps6/DM4GFSl39OP9BI=)
                          6: y61TMPU9uTpw-fP74jB87JnJlns.roa (hash: xoRuWFnPF806vhscGwTKOQWiYGep0k98Sfbqbw83bcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:80:e1:de:cd:98:31:60:bd:d6:9b:0e:78:bd:31:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
        Validity
            Not Before: Oct 15 03:00:18 2026 GMT
            Not After : Oct 16 03:00:18 2026 GMT
        Subject: CN=bb14eedc839ea016a2470c2e1f7671b98bc4cc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:02:1a:18:4a:20:bc:60:bf:39:94:e9:fb:03:
                    c4:c1:37:ff:92:64:91:ad:c1:7f:b3:e7:32:bf:e2:
                    a6:e7:d0:7f:89:ce:6e:83:22:64:c8:6e:db:8f:74:
                    84:42:48:46:42:2a:e7:ac:b8:14:97:41:c5:63:6d:
                    e9:cc:03:bd:89:52:48:54:65:10:2c:42:14:d7:3f:
                    84:4f:1b:67:d4:d3:66:34:b1:98:43:53:32:1f:b0:
                    9b:e1:b1:59:e9:db:70:20:6d:2d:56:14:11:21:37:
                    ae:8d:4b:27:e0:c1:c8:88:b3:5d:a4:55:65:36:b0:
                    97:03:fc:62:c8:82:94:84:48:bc:a7:d2:22:a0:3c:
                    a8:2d:81:6f:c4:f9:c1:fd:ed:e8:2d:d0:15:97:d5:
                    34:5b:aa:e3:44:eb:f7:a0:90:e2:21:54:aa:67:14:
                    45:97:c3:ea:03:e3:be:76:b2:81:dc:94:b0:b6:6c:
                    bd:62:00:21:85:31:db:da:b8:5e:e2:bc:d7:25:47:
                    e5:8d:65:1a:77:91:67:13:8e:b6:fe:5d:0f:9b:d2:
                    86:1d:c6:81:70:ad:7c:d0:ae:be:cf:57:9e:2e:38:
                    07:04:fe:86:51:79:12:89:f0:55:d8:0f:0f:b8:11:
                    1e:43:d8:09:6b:43:6c:af:4d:34:00:e0:f9:e7:f1:
                    a0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:14:EE:DC:83:9E:A0:16:A2:47:0C:2E:1F:76:71:B9:8B:C4:CC:6B
            X509v3 Authority Key Identifier:
                keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5c:52:38:88:71:dc:ed:7c:3e:5d:9b:73:fd:7c:e8:1f:1a:
         29:ab:22:6a:ca:12:79:62:37:57:1c:9f:b4:8a:10:c6:ed:73:
         58:fe:5f:ef:bd:fa:9a:6b:7d:46:71:10:54:5a:e1:18:be:a8:
         f5:c3:69:08:9f:a8:7d:aa:f3:8b:69:07:aa:03:74:5d:bc:4c:
         a6:02:95:1f:ea:bb:80:05:77:e9:fc:b4:a1:4b:0f:43:cc:71:
         d1:d2:63:00:03:43:a0:80:f0:ed:70:56:7f:93:02:6f:e6:e7:
         f5:29:a6:59:6f:1a:ed:ee:54:ce:ca:6a:e1:03:a2:df:d7:63:
         46:08:79:9b:e8:8f:5f:3d:a3:a2:3c:6f:8f:a1:a9:4c:75:f7:
         a0:37:b5:a5:02:b8:f3:64:aa:3d:54:3f:04:61:b5:3b:65:63:
         31:bf:ba:cd:bc:c4:04:1a:29:31:81:e0:2e:e1:bd:db:f5:fc:
         f8:29:5c:48:63:92:3f:40:d0:8a:3a:47:3f:24:5f:62:16:7f:
         ad:a4:f3:3c:2b:06:df:e0:0b:1a:9e:d7:7a:42:a7:9b:69:e1:
         ec:68:b7:ec:65:9a:45:8f:d9:d9:9c:d2:51:e2:4c:d9:fd:a3:
         47:e2:93:3c:6e:f7:1a:72:88:64:ee:e9:d1:a8:eb:76:1e:43:
         48:45:fa:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9gOHezZgxYL3Wmw54vTH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTZhZTYyNWQ5NTA2ZGY0YTNlNTc3YjI0YTg2ZmNlM2M3
M2E4ZjgwHhcNMjYxMDE1MDMwMDE4WhcNMjYxMDE2MDMwMDE4WjAzMTEwLwYDVQQD
EyhiYjE0ZWVkYzgzOWVhMDE2YTI0NzBjMmUxZjc2NzFiOThiYzRjYzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAIaGEogvGC/OZTp+wPEwTf/kmSR
rcF/s+cyv+Km59B/ic5ugyJkyG7bj3SEQkhGQirnrLgUl0HFY23pzAO9iVJIVGUQ
LEIU1z+ETxtn1NNmNLGYQ1MyH7Cb4bFZ6dtwIG0tVhQRITeujUsn4MHIiLNdpFVl
NrCXA/xiyIKUhEi8p9IioDyoLYFvxPnB/e3oLdAVl9U0W6rjROv3oJDiIVSqZxRF
l8PqA+O+drKB3JSwtmy9YgAhhTHb2rhe4rzXJUfljWUad5FnE462/l0Pm9KGHcaB
cK180K6+z1eeLjgHBP6GUXkSifBV2A8PuBEeQ9gJa0Nsr000AOD55/Gg/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsU7tyDnqAWokcMLh92cbmLxMxrMB8GA1UdIwQY
MBaAFNNWrmJdlQbfSj5XeySob848c6j4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYt
MmVhODdlNmVhMmEwLzEvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYtMmVhODdlNmVhMmEw
LzEvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFxSOIhx
3O18Pl2bc/186B8aKasiasoSeWI3VxyftIoQxu1zWP5f7736mmt9RnEQVFrhGL6o
9cNpCJ+ofarzi2kHqgN0XbxMpgKVH+q7gAV36fy0oUsPQ8xx0dJjAANDoIDw7XBW
f5MCb+bn9SmmWW8a7e5Uzspq4QOi39djRgh5m+iPXz2jojxvj6GpTHX3oDe1pQK4
82SqPVQ/BGG1O2VjMb+6zbzEBBopMYHgLuG92/X8+ClcSGOSP0DQijpHPyRfYhZ/
raTzPCsG3+ALGp7XekKnm2nh7Gi37GWaRY/Z2ZzSUeJM2f2jR+KTPG73GnKIZO7p
0ajrdh5DSEX6nA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:14:16 2026 by rpki-client