Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
File:                     XWwVypA9fSVFPq619ySgTjqmWQg.mft (raw, json)
Hash identifier:          8/QXoaGXORpq3+x2adFSDuYque8k6hVf2d7eZfYV81s=
Subject key identifier:   95:FC:77:E6:CD:CA:AA:9E:73:86:78:76:B5:08:22:FA:BC:4C:40:B8
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Certificate issuer:       /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial:       01A10091770E0D509B141C7644F4283FF0D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
Manifest number:          1A94
Signing time:             Sat 03 Oct 2026 07:01:35 +0000
Manifest this update:     Sat 03 Oct 2026 07:01:35 +0000
Manifest next update:     Sun 04 Oct 2026 07:01:35 +0000
Files and hashes:         1: 3t8az_xmWCwRgwYdF8ntbUiTIo4.asa (hash: OYtFSUrUtQCeFSpMmkc6CELhcO6KgL/e+r+O7ChwoMw=)
                          2: 98276ywNR3GWE3eA4GBIWlMqClE.asa (hash: QZoO0A1vljWFvsSQFCIsfrovq51qQKECKf/LpyJyKgc=)
                          3: PRbbcfFVNFIHvCLuBhm9svvvFeY.asa (hash: TTKXbBMADa8jzEvKjCjU8NuDyyjAgBi2zrMscCgrZ3o=)
                          4: XWwVypA9fSVFPq619ySgTjqmWQg.crl (hash: ojdNK9M0q9oqFHrvoQhYzpJksa4+DrfkyV1vS/YIIxY=)
                          5: fsfsFG6c-uDOrtkFycj7XUTrSFs.roa (hash: /2iuoJT/Z9P4V0/09Vme7KEMEVlGA2pEZglck+m/U0E=)
                          6: obrcupVsssO_agB28qMpvHAxeW4.roa (hash: GS+FF6yB/em6e/eXYvpbII2ejEv9rt1t/93lekFQ52Y=)
                          7: otlDwitKEaIJU2uBA1kA4FQjaiM.roa (hash: PnlNyi9JuqZEzROpx8dqkQn2kawiLgt6YWBA0/7GyGs=)
                          8: royOJADOHC1NNGIUFUSG8i3BLQ0.roa (hash: 2PUXEpyjrcM46Q23bjPi20e6P3M7C3MjAxYWgm68WVY=)
                          9: xE39Ruj0m92ceMsS3LNfFTVLuDk.roa (hash: X8+e4gKAkSWFlzWGvgEu09Paqpm627rMwTZHilH3gFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:91:77:0e:0d:50:9b:14:1c:76:44:f4:28:3f:f0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
        Validity
            Not Before: Oct  3 07:01:35 2026 GMT
            Not After : Oct  4 07:01:35 2026 GMT
        Subject: CN=95fc77e6cdcaaa9e73867876b50822fabc4c40b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:c7:78:02:0e:18:9d:f6:10:ee:d8:36:2a:
                    e5:54:e7:00:4d:d5:91:22:8b:54:d8:45:de:51:f5:
                    e5:eb:e5:36:b2:4e:22:0f:dc:4b:24:bc:f3:36:35:
                    26:29:cf:54:c1:81:92:f8:2e:17:5c:64:fc:ca:51:
                    d9:70:eb:2d:04:f9:e4:a3:ee:4d:0c:81:95:db:fb:
                    20:a7:33:f6:45:33:b7:1c:eb:e2:5b:fc:4d:6a:84:
                    d1:6a:26:f1:3b:ef:f8:0a:30:df:02:9f:e1:bc:35:
                    79:ad:ca:83:28:d7:f2:b7:ca:fa:4c:48:05:71:aa:
                    ca:8b:eb:39:26:be:32:86:dd:43:66:13:9d:49:4c:
                    b0:f0:3d:a8:da:80:cd:b9:e3:f3:b6:98:16:94:34:
                    00:c5:17:60:e4:71:eb:8c:4d:b9:5a:60:f5:2c:60:
                    5c:73:c4:40:7f:2e:aa:46:b2:4a:7d:86:33:3d:f8:
                    be:6e:48:44:e5:d0:4e:08:d2:6d:fc:b9:cb:96:c6:
                    a2:82:a7:fc:fe:38:be:1e:5a:9c:a7:b6:c5:18:d9:
                    ae:36:d7:52:a5:b2:c5:8f:59:9a:6e:f5:05:c4:2d:
                    e5:1f:27:69:1f:d3:86:d0:be:20:ce:53:9d:b2:a2:
                    70:1a:7f:92:52:69:28:a1:ad:37:68:32:20:60:19:
                    df:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FC:77:E6:CD:CA:AA:9E:73:86:78:76:B5:08:22:FA:BC:4C:40:B8
            X509v3 Authority Key Identifier:
                keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:eb:5f:92:28:ea:8c:f8:82:29:e8:89:39:bd:5e:08:c5:f7:
         7a:31:c4:79:0b:ff:90:84:3e:03:2e:3b:af:4e:e0:b9:2b:87:
         f3:ed:81:f7:f5:73:77:b8:a1:ca:db:54:05:75:d9:2c:9c:76:
         85:a2:22:39:f2:22:ee:ee:7a:5c:b2:2e:17:96:d5:d7:17:ab:
         ec:1f:3c:0b:48:c9:ae:68:91:fb:2f:55:3c:56:79:28:56:e1:
         eb:bc:82:da:59:38:c3:da:1a:fd:91:c0:b1:26:8c:dd:90:0d:
         3a:9d:55:a3:b3:48:df:0d:6e:32:40:77:3d:8f:2a:98:94:94:
         9b:cc:e4:5e:42:43:7c:9a:48:77:d6:e5:b5:df:d6:62:2f:53:
         ff:76:b3:e3:cb:fe:c3:90:2d:4f:32:58:14:b3:fc:1d:12:3c:
         e4:e1:83:02:05:4d:eb:40:95:b7:5a:10:89:c4:5e:ab:a0:44:
         89:96:45:b0:ec:9e:9f:94:59:08:52:ec:b4:b7:df:53:6c:c0:
         6c:0a:05:3e:09:e6:02:d1:7b:fd:90:b0:85:22:14:c8:a1:13:
         f3:b8:8e:30:76:6c:83:5a:56:a0:5c:64:93:74:56:ac:62:28:
         2d:0c:c9:7b:6f:48:cc:1b:87:bf:3f:94:7b:d7:58:6c:ec:d4:
         28:ed:f5:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEAkXcODVCbFBx2RPQoP/DXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNmMxNWNhOTAzZDdkMjU0NTNlYWViNWY3MjRhMDRlM2Fh
NjU5MDgwHhcNMjYxMDAzMDcwMTM1WhcNMjYxMDA0MDcwMTM1WjAzMTEwLwYDVQQD
Eyg5NWZjNzdlNmNkY2FhYTllNzM4Njc4NzZiNTA4MjJmYWJjNGM0MGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq3HeAIOGJ32EO7YNirlVOcATdWR
IotU2EXeUfXl6+U2sk4iD9xLJLzzNjUmKc9UwYGS+C4XXGT8ylHZcOstBPnko+5N
DIGV2/sgpzP2RTO3HOviW/xNaoTRaibxO+/4CjDfAp/hvDV5rcqDKNfyt8r6TEgF
carKi+s5Jr4yht1DZhOdSUyw8D2o2oDNuePztpgWlDQAxRdg5HHrjE25WmD1LGBc
c8RAfy6qRrJKfYYzPfi+bkhE5dBOCNJt/LnLlsaigqf8/ji+Hlqcp7bFGNmuNtdS
pbLFj1mabvUFxC3lHydpH9OG0L4gzlOdsqJwGn+SUmkooa03aDIgYBnfkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJX8d+bNyqqec4Z4drUIIvq8TEC4MB8GA1UdIwQY
MBaAFF1sFcqQPX0lRT6utfckoE46plkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFd3VnlwQTlmU1ZGUHE2MTl5U2dUanFtV1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yODY0YzgtYzA0Mi00MjhmLWEwMmQt
M2IzNGMyM2I5YzVhLzEvWFd3VnlwQTlmU1ZGUHE2MTl5U2dUanFtV1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yODY0YzgtYzA0Mi00MjhmLWEwMmQtM2IzNGMyM2I5YzVh
LzEvWFd3VnlwQTlmU1ZGUHE2MTl5U2dUanFtV1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOtfkijq
jPiCKeiJOb1eCMX3ejHEeQv/kIQ+Ay47r07guSuH8+2B9/Vzd7ihyttUBXXZLJx2
haIiOfIi7u56XLIuF5bV1xer7B88C0jJrmiR+y9VPFZ5KFbh67yC2lk4w9oa/ZHA
sSaM3ZANOp1Vo7NI3w1uMkB3PY8qmJSUm8zkXkJDfJpId9bltd/WYi9T/3az48v+
w5AtTzJYFLP8HRI85OGDAgVN60CVt1oQicReq6BEiZZFsOyen5RZCFLstLffU2zA
bAoFPgnmAtF7/ZCwhSIUyKET87iOMHZsg1pWoFxkk3RWrGIoLQzJe29IzBuHvz+U
e9dYbOzUKO318A==
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:11:46 2026 by rpki-client