Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File:                     sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier:          dFiwPZSfKVkR9dc1C3k4pJzFwCc4OLy4Dh7+CNyc6Bo=
Subject key identifier:   40:3C:B6:50:95:7C:90:54:9E:31:F3:1E:01:37:BA:B4:8B:10:2F:D8
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer:       /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial:       01A18AC0BEDA3B51F31E6832C79EAA4DA957
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number:          1ACF
Signing time:             Fri 30 Oct 2026 03:00:49 +0000
Manifest this update:     Fri 30 Oct 2026 03:00:49 +0000
Manifest next update:     Sat 31 Oct 2026 03:00:49 +0000
Files and hashes:         1: BQSGEx3nMb3rW3Le5hymWyu8-YU.roa (hash: S7mWCQBW//r+Jv4L1fzMRolM2RhYHtuAZtqku2trt+E=)
                          2: _JF8Eg2LajBMQ-wk536FOe9jq_A.roa (hash: n3KkRLrkwjt5uz08CMrAQjO1W+ar0ekBVWg2d9z/IMg=)
                          3: oX6Il5fRV1X5jAgqxERBXvUP_Tw.roa (hash: XUq2WuxGzyAj/pRWgnx4uOuNcbSM05FoBf026KrRFWM=)
                          4: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: mmYQyImB3hdj0WDfcDucciZCYw6wJ2W0Du9Xlg1r6pU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8a:c0:be:da:3b:51:f3:1e:68:32:c7:9e:aa:4d:a9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
        Validity
            Not Before: Oct 30 03:00:49 2026 GMT
            Not After : Oct 31 03:00:49 2026 GMT
        Subject: CN=403cb650957c90549e31f31e0137bab48b102fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:a7:31:74:ca:d5:28:16:fc:ec:cb:be:8e:
                    22:48:53:77:56:da:89:02:29:c5:fa:63:21:f7:8d:
                    f3:d2:41:ed:71:56:55:a7:98:d3:28:6a:11:fa:ca:
                    b4:c4:ee:d0:b3:c5:23:b4:c2:35:ef:78:05:2c:da:
                    de:ae:0d:cf:ee:8d:57:f2:09:94:de:41:bd:30:7c:
                    e9:46:0f:de:17:ef:54:9b:c5:31:78:8c:92:14:16:
                    84:08:d2:e4:60:cf:4d:bf:1f:db:f9:df:91:36:eb:
                    2e:4c:46:de:a2:de:9a:86:dd:a9:a9:bc:03:b7:2a:
                    a4:ac:ca:fb:6b:50:19:94:f7:9f:7c:aa:ca:ef:94:
                    13:ab:a3:7d:24:63:5d:c3:38:9d:ac:f9:f2:54:f9:
                    83:91:50:7e:c0:9c:a1:b8:27:ad:ba:26:9d:ad:f3:
                    b5:82:dd:77:24:76:ca:71:73:e3:6a:0e:c5:dd:65:
                    3a:fe:5f:40:29:d5:54:2c:55:2b:bc:62:fb:4f:95:
                    e0:79:64:d7:20:f0:99:7b:5a:88:0b:c5:7f:a4:1a:
                    50:b6:e6:ef:20:c9:13:66:43:35:9a:b0:50:41:3d:
                    52:92:b1:9c:ab:53:8f:ec:f9:a7:0a:c7:27:f8:00:
                    8b:68:76:59:1b:08:5a:c2:53:b1:ca:4c:db:94:61:
                    c8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3C:B6:50:95:7C:90:54:9E:31:F3:1E:01:37:BA:B4:8B:10:2F:D8
            X509v3 Authority Key Identifier:
                keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:97:db:68:ca:e0:38:b2:f9:e0:b4:ea:78:df:f0:cd:bc:22:
         b4:c9:ea:64:17:d7:35:89:d2:fb:85:37:48:59:c8:e8:2e:b5:
         9f:10:da:32:3d:df:af:9d:dc:8e:58:33:aa:76:91:83:60:89:
         7f:4a:15:dd:3a:84:1d:03:41:4d:67:e6:c7:7c:08:11:fc:f4:
         a0:35:d5:01:ad:de:77:6e:b0:91:de:b8:45:9b:26:a1:e1:41:
         40:e6:6f:b8:ad:f0:ff:4a:b1:f9:94:2a:d6:db:41:22:6c:c9:
         18:29:e5:a0:5a:f6:59:a3:0d:84:a3:19:38:b0:d4:8f:7a:24:
         b0:43:38:66:a9:ce:82:cb:70:b0:e9:1e:1a:e7:ef:a0:52:2d:
         d5:c6:e2:fc:ec:d8:46:f1:28:8e:50:75:a3:ab:36:42:aa:68:
         93:a0:d0:49:f8:12:11:16:8c:63:a7:bf:4e:fd:be:59:32:8a:
         0d:ac:ac:d9:36:50:b3:db:6e:1a:3c:91:b7:7b:79:00:57:ab:
         1c:22:e3:72:b2:12:2a:e9:3b:92:c6:85:7e:80:ab:89:21:b1:
         b5:7c:2d:02:79:28:91:b1:e0:34:8a:ec:c4:05:1b:e9:34:67:
         e9:36:cd:bc:e5:66:f0:c6:46:76:bf:12:00:36:d8:bf:19:67:
         d4:4a:b2:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGKwL7aO1HzHmgyx56qTalXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzZmMmU0MjUyMmU5OGQzNzZiZTM4YTg5ZTVkZDUxYWJi
Zjc5OTYwHhcNMjYxMDMwMDMwMDQ5WhcNMjYxMDMxMDMwMDQ5WjAzMTEwLwYDVQQD
Eyg0MDNjYjY1MDk1N2M5MDU0OWUzMWYzMWUwMTM3YmFiNDhiMTAyZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLinMXTK1SgW/OzLvo4iSFN3VtqJ
AinF+mMh943z0kHtcVZVp5jTKGoR+sq0xO7Qs8UjtMI173gFLNrerg3P7o1X8gmU
3kG9MHzpRg/eF+9Um8UxeIySFBaECNLkYM9Nvx/b+d+RNusuTEbeot6aht2pqbwD
tyqkrMr7a1AZlPeffKrK75QTq6N9JGNdwzidrPnyVPmDkVB+wJyhuCetuiadrfO1
gt13JHbKcXPjag7F3WU6/l9AKdVULFUrvGL7T5XgeWTXIPCZe1qIC8V/pBpQtubv
IMkTZkM1mrBQQT1SkrGcq1OP7PmnCscn+ACLaHZZGwhawlOxykzblGHIKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEA8tlCVfJBUnjHzHgE3urSLEC/YMB8GA1UdIwQY
MBaAFLI28uQlIumNN2vjionl3VGrv3mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYt
NmVhYTFjODk4MjRhLzEvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYtNmVhYTFjODk4MjRh
LzEvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpfbaMrg
OLL54LTqeN/wzbwitMnqZBfXNYnS+4U3SFnI6C61nxDaMj3fr53cjlgzqnaRg2CJ
f0oV3TqEHQNBTWfmx3wIEfz0oDXVAa3ed26wkd64RZsmoeFBQOZvuK3w/0qx+ZQq
1ttBImzJGCnloFr2WaMNhKMZOLDUj3oksEM4ZqnOgstwsOkeGufvoFIt1cbi/OzY
RvEojlB1o6s2Qqpok6DQSfgSERaMY6e/Tv2+WTKKDays2TZQs9tuGjyRt3t5AFer
HCLjcrISKuk7ksaFfoCriSGxtXwtAnkokbHgNIrsxAUb6TRn6TbNvOVm8MZGdr8S
ADbYvxln1EqyKQ==
-----END CERTIFICATE-----
Generated at Fri Oct 30 06:25:42 2026 by rpki-client