Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File:                     CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier:          WklMCTRjqC6MWRwF+X11h49U/uH02PZYhmFg5Pg/VaQ=
Subject key identifier:   3A:89:F5:C8:67:9E:0B:7C:18:D7:CC:A7:4B:5F:F1:32:F9:5E:93:5C
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer:       /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial:       01A179287633A1FDB29DAD2B8B74F8C4774A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number:          06B4
Signing time:             Mon 26 Oct 2026 17:00:57 +0000
Manifest this update:     Mon 26 Oct 2026 17:00:57 +0000
Manifest next update:     Tue 27 Oct 2026 17:00:57 +0000
Files and hashes:         1: 1-oF-we2cmHSHaID5tDY175ejYyc.roa (hash: dJ5RifzmXnjb10Iv95+voBaC+89de9KOSKWwWpiVAmQ=)
                          2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: f7m8XeUhOxwj77SXwXEsQEAkf6UYFbTREkYvEIj2Euw=)
                          3: tSi7rgFlmfh1P4HXVwQwVPU47ak.roa (hash: a+hi0S0VRR6DQeW+YfoSxvunfpCb33mxDCeififJ5+A=)
                          4: wOsJVEziUaOvFA1iNE3ry9kPQfE.roa (hash: FAa7Ewjlb7OE+5koslUqaQRcv1OSsbCB7gnK+sa/8FI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:28:76:33:a1:fd:b2:9d:ad:2b:8b:74:f8:c4:77:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
        Validity
            Not Before: Oct 26 17:00:57 2026 GMT
            Not After : Oct 27 17:00:57 2026 GMT
        Subject: CN=3a89f5c8679e0b7c18d7cca74b5ff132f95e935c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:82:b8:4f:35:09:e6:02:b3:cd:10:ec:d8:dc:
                    ae:ba:c8:fe:26:76:5a:03:ca:4b:36:f6:96:63:40:
                    fc:ee:35:d4:10:b5:5a:e0:d6:99:40:aa:f1:d4:ae:
                    9b:9f:17:49:bf:ac:72:de:51:ba:73:12:93:4f:37:
                    b1:ed:ce:6f:28:82:cb:86:d7:bc:88:66:1f:2f:bd:
                    ae:56:df:fb:23:f7:6c:17:d8:10:48:96:0c:23:e5:
                    06:c3:b4:f4:c1:a5:41:36:7c:39:1c:d0:18:e8:ed:
                    6e:c9:a7:55:cf:f3:72:16:d0:9c:32:5f:57:ad:2b:
                    9c:8a:bb:e7:8c:27:55:03:2c:d9:c7:d3:08:3f:a9:
                    c7:5d:7f:40:91:5c:5d:9e:72:19:b5:a8:fe:de:6c:
                    2b:75:40:f5:78:01:8b:b3:30:0f:a4:8c:c4:54:0f:
                    98:c9:6b:fc:f3:08:55:92:d9:c7:f2:0d:31:05:41:
                    e4:6c:00:28:6d:97:85:ed:c2:36:6b:c7:44:52:e5:
                    0d:b5:76:f1:0b:38:dc:cb:22:9d:b6:23:0c:48:fe:
                    d6:89:61:af:b8:5c:8d:7e:ce:3f:fd:b4:34:3b:01:
                    09:f4:21:60:42:ee:a8:7c:39:ed:9a:9f:21:52:94:
                    bd:09:d8:9e:b2:f9:90:89:e9:15:4a:04:4d:55:07:
                    6d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:89:F5:C8:67:9E:0B:7C:18:D7:CC:A7:4B:5F:F1:32:F9:5E:93:5C
            X509v3 Authority Key Identifier:
                keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:47:c4:c6:f9:92:b6:79:fc:80:22:e1:b2:38:a2:b1:62:a6:
         77:9c:0b:3f:da:d1:6a:b1:c1:14:3c:ad:87:46:59:71:71:85:
         75:b1:07:28:64:3d:4f:8e:10:73:0d:ee:66:7b:00:ad:09:f4:
         25:d9:2b:d4:c5:b4:60:b7:2e:d1:b5:11:84:a9:42:2a:41:7e:
         c1:a4:53:79:5c:6c:86:cb:b4:0e:a0:e7:ec:f3:e6:9e:4f:e9:
         42:00:b8:ee:c5:2f:4c:a0:3b:40:65:29:a4:5d:af:dc:be:9d:
         be:73:3f:7c:b9:3c:92:58:de:71:81:a1:44:6a:39:00:4f:0e:
         f9:3d:de:83:5c:70:99:c3:f8:b0:92:a3:c2:ce:dc:25:74:9c:
         01:fa:65:e5:6d:08:70:de:64:9c:73:f9:f5:ba:e7:04:e0:94:
         49:ec:55:80:0e:fb:4f:6b:56:36:d2:97:a7:e4:1e:4e:eb:09:
         94:bf:86:85:e4:8e:7f:80:07:1f:a0:a5:74:b8:0f:5c:bf:79:
         c6:8e:6d:f3:76:ec:6b:02:e1:0e:44:84:96:66:9c:03:18:57:
         74:83:44:21:44:fa:1f:3d:86:4b:5d:7d:e3:9e:86:bc:f3:08:
         1d:a7:dd:7c:cb:c7:f4:1e:d8:0a:9b:f9:6b:70:4b:04:84:25:
         94:15:a2:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5KHYzof2yna0ri3T4xHdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MjEwMGYwYjE5OTFkODBhNDY0MjFkOWZlNTE0N2YyZDU1
YWM5MzAwHhcNMjYxMDI2MTcwMDU3WhcNMjYxMDI3MTcwMDU3WjAzMTEwLwYDVQQD
EygzYTg5ZjVjODY3OWUwYjdjMThkN2NjYTc0YjVmZjEzMmY5NWU5MzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIK4TzUJ5gKzzRDs2Nyuusj+JnZa
A8pLNvaWY0D87jXUELVa4NaZQKrx1K6bnxdJv6xy3lG6cxKTTzex7c5vKILLhte8
iGYfL72uVt/7I/dsF9gQSJYMI+UGw7T0waVBNnw5HNAY6O1uyadVz/NyFtCcMl9X
rSucirvnjCdVAyzZx9MIP6nHXX9AkVxdnnIZtaj+3mwrdUD1eAGLszAPpIzEVA+Y
yWv88whVktnH8g0xBUHkbAAobZeF7cI2a8dEUuUNtXbxCzjcyyKdtiMMSP7WiWGv
uFyNfs4//bQ0OwEJ9CFgQu6ofDntmp8hUpS9CdiesvmQiekVSgRNVQdtAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqJ9chnngt8GNfMp0tf8TL5XpNcMB8GA1UdIwQY
MBaAFAghAPCxmR2ApGQh2f5RR/LVWskwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQt
NDA5ODlkMGRmYzVjLzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQtNDA5ODlkMGRmYzVj
LzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUfExvmS
tnn8gCLhsjiisWKmd5wLP9rRarHBFDyth0ZZcXGFdbEHKGQ9T44Qcw3uZnsArQn0
Jdkr1MW0YLcu0bURhKlCKkF+waRTeVxshsu0DqDn7PPmnk/pQgC47sUvTKA7QGUp
pF2v3L6dvnM/fLk8kljecYGhRGo5AE8O+T3eg1xwmcP4sJKjws7cJXScAfpl5W0I
cN5knHP59brnBOCUSexVgA77T2tWNtKXp+QeTusJlL+GheSOf4AHH6CldLgPXL95
xo5t83bsawLhDkSElmacAxhXdINEIUT6Hz2GS119456GvPMIHafdfMvH9B7YCpv5
a3BLBIQllBWilQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:39:43 2026 by rpki-client