Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File:                     yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier:          jG6MEnZ2ZyMheILwN91yOd1URgzGgdesU2P7bT4lX18=
Subject key identifier:   27:A7:BB:52:1D:E4:C0:DB:7A:67:7F:69:6F:47:93:75:19:36:6F:86
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer:       /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial:       01A17EBD46DB52CD85E88DDB3EF84A0E5D76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number:          11FB
Signing time:             Tue 27 Oct 2026 19:01:36 +0000
Manifest this update:     Tue 27 Oct 2026 19:01:36 +0000
Manifest next update:     Wed 28 Oct 2026 19:01:36 +0000
Files and hashes:         1: WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa (hash: F58q4gWz10PJi3pePWbZTjvTAbHmgaZfqkLlGVghmM0=)
                          2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: lKL0RTd7tTelwUus1Y0Uormkzkm21j5ZTAndrEaO67c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 19:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:bd:46:db:52:cd:85:e8:8d:db:3e:f8:4a:0e:5d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
        Validity
            Not Before: Oct 27 19:01:36 2026 GMT
            Not After : Oct 28 19:01:36 2026 GMT
        Subject: CN=27a7bb521de4c0db7a677f696f47937519366f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:13:66:48:12:2f:03:a1:76:e6:6b:1d:de:
                    5e:be:01:10:59:57:46:a7:d2:3e:bd:80:28:56:2f:
                    c2:f2:77:36:c4:c1:2e:f5:90:cc:ea:d7:d7:0f:12:
                    87:89:9f:a7:9d:da:c2:8d:87:6b:09:9a:11:df:cf:
                    78:56:30:bb:b6:6a:07:8c:fa:68:39:f9:1e:04:82:
                    df:d5:d9:59:7b:c5:cf:8e:db:7b:3b:a8:b5:90:3d:
                    4b:86:10:22:e7:74:7e:8c:69:0a:f8:53:62:ed:c2:
                    92:bc:fe:32:36:b9:2a:d2:f3:33:27:24:e7:89:df:
                    cb:2b:77:ef:34:8c:16:25:d7:d0:2f:e2:9d:ec:5e:
                    00:9c:66:4a:4d:dc:6f:de:09:f7:03:3b:e6:20:2c:
                    cf:d5:10:2d:b0:03:3e:83:a7:bb:bf:65:27:16:6c:
                    79:f9:3c:b4:38:63:bd:0f:fa:c6:35:c2:5a:98:5a:
                    aa:b0:54:3f:63:52:f3:70:45:0f:33:52:e0:bc:12:
                    c0:a3:88:be:1b:ac:0d:d1:34:71:bc:3c:47:28:10:
                    5a:2a:a4:f6:85:d2:bf:d5:33:a3:b6:5e:a2:36:d6:
                    62:84:78:13:43:b1:44:26:52:4a:a4:2e:66:53:27:
                    ae:e8:0b:5c:5f:7e:5e:f7:32:98:43:c8:e8:81:6c:
                    ee:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A7:BB:52:1D:E4:C0:DB:7A:67:7F:69:6F:47:93:75:19:36:6F:86
            X509v3 Authority Key Identifier:
                keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ff:2d:7a:dc:a7:19:92:2d:65:86:70:3f:84:a6:96:a4:1c:
         91:d3:76:ca:d0:2c:0f:7e:49:b9:6f:60:fc:d8:b8:31:86:fc:
         80:78:f0:34:f9:f3:76:a2:4e:6d:29:db:85:79:0c:33:6a:6a:
         cf:7d:96:ee:8c:61:03:55:a4:f0:66:7f:fc:ab:c2:6c:82:a1:
         85:94:ea:6a:61:d1:07:4f:e1:bb:8d:0f:45:65:75:cd:04:41:
         a4:a0:8a:47:6f:d9:e4:d4:74:39:e0:9a:47:bc:b0:72:73:b7:
         12:ef:81:e3:66:f0:3c:14:93:b4:db:1f:f3:81:7c:a4:90:65:
         f0:92:c9:27:67:ce:1b:b4:f0:b3:22:d1:c3:ad:56:b7:c2:41:
         e7:df:44:0d:7a:09:4b:4c:6d:ee:40:d8:99:c0:28:f8:4b:ae:
         58:62:dc:8a:d4:93:c3:b3:40:f3:44:03:b4:82:ea:d3:fe:8e:
         4c:2f:77:75:ae:02:89:72:3a:af:90:f2:87:d1:7c:93:be:1c:
         4a:a4:e1:6c:27:ee:5c:43:dc:44:36:49:0c:18:b0:52:bb:4f:
         78:dc:02:08:59:30:ff:ed:8a:e0:55:4c:aa:71:aa:b0:1c:72:
         9b:91:e4:8a:71:24:f0:ab:59:60:01:e1:5a:55:b1:b1:80:1d:
         a1:21:53:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+vUbbUs2F6I3bPvhKDl12MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MTg0YTQ1MDViMDU3NjA1OGZkMzMzMDU5YmZmMTUzYWU2
ZWFkNWIwHhcNMjYxMDI3MTkwMTM2WhcNMjYxMDI4MTkwMTM2WjAzMTEwLwYDVQQD
EygyN2E3YmI1MjFkZTRjMGRiN2E2NzdmNjk2ZjQ3OTM3NTE5MzY2Zjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLcTZkgSLwOhduZrHd5evgEQWVdG
p9I+vYAoVi/C8nc2xMEu9ZDM6tfXDxKHiZ+nndrCjYdrCZoR3894VjC7tmoHjPpo
OfkeBILf1dlZe8XPjtt7O6i1kD1LhhAi53R+jGkK+FNi7cKSvP4yNrkq0vMzJyTn
id/LK3fvNIwWJdfQL+Kd7F4AnGZKTdxv3gn3AzvmICzP1RAtsAM+g6e7v2UnFmx5
+Ty0OGO9D/rGNcJamFqqsFQ/Y1LzcEUPM1LgvBLAo4i+G6wN0TRxvDxHKBBaKqT2
hdK/1TOjtl6iNtZihHgTQ7FEJlJKpC5mUyeu6AtcX35e9zKYQ8jogWzupwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCenu1Id5MDbemd/aW9Hk3UZNm+GMB8GA1UdIwQY
MBaAFMgYSkUFsFdgWP0zMFm/8VOubq1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYt
NWZiZjMzYWNkODNlLzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lYWRhZDMtY2VkOS00MWZhLThlNWYtNWZiZjMzYWNkODNl
LzEveUJoS1JRV3dWMkJZX1RNd1diX3hVNjV1clZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATv8tetyn
GZItZYZwP4SmlqQckdN2ytAsD35JuW9g/Ni4MYb8gHjwNPnzdqJObSnbhXkMM2pq
z32W7oxhA1Wk8GZ//KvCbIKhhZTqamHRB0/hu40PRWV1zQRBpKCKR2/Z5NR0OeCa
R7ywcnO3Eu+B42bwPBSTtNsf84F8pJBl8JLJJ2fOG7TwsyLRw61Wt8JB599EDXoJ
S0xt7kDYmcAo+EuuWGLcitSTw7NA80QDtILq0/6OTC93da4CiXI6r5Dyh9F8k74c
SqThbCfuXEPcRDZJDBiwUrtPeNwCCFkw/+2K4FVMqnGqsBxym5HkinEk8KtZYAHh
WlWxsYAdoSFTDw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:39:14 2026 by rpki-client