Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
File:                     pX1M_mD4owpND_lLlOut_IjJrBE.mft (raw, json)
Hash identifier:          cl7xz5Ut8vmJUg1P3mBMYzcsQOHThaaMxL4I/qbhYxw=
Subject key identifier:   36:C5:20:40:B0:D7:AA:61:D4:C6:95:95:D3:0D:B9:3D:71:57:B9:4F
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Certificate issuer:       /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial:       01A10738117999AAE2C622ADFB7D46EA14D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
Manifest number:          1159
Signing time:             Sun 04 Oct 2026 14:01:17 +0000
Manifest this update:     Sun 04 Oct 2026 14:01:17 +0000
Manifest next update:     Mon 05 Oct 2026 14:01:17 +0000
Files and hashes:         1: 1y-vwZVrMYSQ5PEHPoi2QvehQzI.roa (hash: cYggAnbxJcT3dfayKBFM1pT3DCCSeOQKuJH//n4lQos=)
                          2: pX1M_mD4owpND_lLlOut_IjJrBE.crl (hash: k0DG5hKnwd2SArRoBkS+rQMK8ZCCLa63Nhuc5TYDzWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:38:11:79:99:aa:e2:c6:22:ad:fb:7d:46:ea:14:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
        Validity
            Not Before: Oct  4 14:01:17 2026 GMT
            Not After : Oct  5 14:01:17 2026 GMT
        Subject: CN=36c52040b0d7aa61d4c69595d30db93d7157b94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:f0:73:fd:bc:07:1a:e6:bb:26:3d:a7:6a:
                    0a:3c:b5:24:b4:95:70:fe:5f:1f:37:f2:67:ea:14:
                    0a:b8:c3:1f:c8:72:a3:74:22:e8:5a:40:97:b0:42:
                    0b:8e:28:a5:93:a1:55:db:4e:58:41:04:54:f5:ca:
                    6a:fd:72:c9:4c:36:1f:b8:81:89:0e:68:e5:44:f1:
                    22:ca:a9:44:70:82:37:48:00:16:b8:6e:c4:a7:02:
                    73:f9:16:5c:fc:de:6d:f8:ea:56:3a:c2:a5:ef:7a:
                    10:55:92:ad:03:4e:17:e1:ed:9c:22:6c:92:26:46:
                    f8:12:84:df:e8:14:0c:fa:33:f8:f0:99:2d:56:4f:
                    4d:09:93:e9:b1:56:ed:25:19:29:23:3c:68:c3:9e:
                    ca:04:5c:0e:e1:6e:0f:d0:1e:db:1d:a5:d3:71:46:
                    fc:6a:eb:b1:21:37:45:94:a5:d4:ef:98:01:b2:2f:
                    56:a7:10:4d:75:8b:c5:e3:21:89:37:a6:36:89:3f:
                    6a:0c:06:35:e3:a4:92:a6:ad:75:14:b8:81:07:d2:
                    a8:90:59:15:45:e4:f9:e1:2f:f1:d0:7f:37:35:ab:
                    a9:12:8c:02:dc:16:a7:86:c5:26:8f:18:4b:63:09:
                    e8:22:9b:56:42:4e:2b:fd:fd:b1:5b:3f:24:cd:e6:
                    28:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C5:20:40:B0:D7:AA:61:D4:C6:95:95:D3:0D:B9:3D:71:57:B9:4F
            X509v3 Authority Key Identifier:
                keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:0e:49:e1:6a:a9:19:8e:cb:5e:6f:52:41:1b:cf:b1:63:ef:
         58:29:b7:07:57:59:7b:c1:77:7d:06:6c:17:df:b0:79:23:b0:
         47:c8:9b:4b:cb:7e:8d:f7:bf:97:89:4a:47:09:71:b9:e1:ff:
         0e:01:42:94:7d:d2:de:31:4a:e4:1f:58:c2:58:c2:96:c1:9a:
         c9:16:b4:11:15:8b:49:af:56:15:e0:9e:f7:17:c0:61:5a:d5:
         14:77:3c:a5:2a:4a:e2:e7:a4:70:d8:00:36:4c:ed:78:4c:59:
         31:60:04:4d:2a:65:d6:45:f8:09:46:28:37:00:4b:fb:5c:3a:
         c7:42:fc:7a:b3:a6:05:f8:71:d0:63:cd:64:ed:f8:78:22:13:
         c0:b6:21:60:58:f3:62:2c:b3:60:38:c3:78:98:2a:25:f2:87:
         2f:9f:38:83:fb:b1:d1:2a:eb:49:6b:33:c8:4e:8c:4c:b8:e2:
         f4:91:5b:e7:67:ac:89:f9:1b:40:26:22:c6:f6:fb:26:7b:62:
         95:0f:e8:45:84:8d:64:ff:ba:d2:07:79:4e:5c:7f:5b:89:48:
         88:2f:0f:d6:7f:93:50:ee:58:95:f2:e7:ad:5a:9c:9c:c4:67:
         d1:ed:13:3b:ef:a6:75:1b:c3:a8:13:4f:5c:d4:47:ad:ac:4a:
         6e:5b:55:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHOBF5marixiKt+31G6hTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2Q0Y2ZlNjBmOGEzMGE0ZDBmZjk0Yjk0ZWJhZGZjODhj
OWFjMTEwHhcNMjYxMDA0MTQwMTE3WhcNMjYxMDA1MTQwMTE3WjAzMTEwLwYDVQQD
EygzNmM1MjA0MGIwZDdhYTYxZDRjNjk1OTVkMzBkYjkzZDcxNTdiOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuDwc/28BxrmuyY9p2oKPLUktJVw
/l8fN/Jn6hQKuMMfyHKjdCLoWkCXsEILjiilk6FV205YQQRU9cpq/XLJTDYfuIGJ
DmjlRPEiyqlEcII3SAAWuG7EpwJz+RZc/N5t+OpWOsKl73oQVZKtA04X4e2cImyS
Jkb4EoTf6BQM+jP48JktVk9NCZPpsVbtJRkpIzxow57KBFwO4W4P0B7bHaXTcUb8
auuxITdFlKXU75gBsi9WpxBNdYvF4yGJN6Y2iT9qDAY146SSpq11FLiBB9KokFkV
ReT54S/x0H83NaupEowC3BanhsUmjxhLYwnoIptWQk4r/f2xWz8kzeYoMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbFIECw16ph1MaVldMNuT1xV7lPMB8GA1UdIwQY
MBaAFKV9TP5g+KMKTQ/5S5TrrfyIyawRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80OGMwNzItMjJkZS00NGQ3LWJlZDgt
ZTgwZjMyMDczZjNkLzEvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80OGMwNzItMjJkZS00NGQ3LWJlZDgtZTgwZjMyMDczZjNk
LzEvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArQ5J4Wqp
GY7LXm9SQRvPsWPvWCm3B1dZe8F3fQZsF9+weSOwR8ibS8t+jfe/l4lKRwlxueH/
DgFClH3S3jFK5B9YwljClsGayRa0ERWLSa9WFeCe9xfAYVrVFHc8pSpK4uekcNgA
NkzteExZMWAETSpl1kX4CUYoNwBL+1w6x0L8erOmBfhx0GPNZO34eCITwLYhYFjz
YiyzYDjDeJgqJfKHL584g/ux0SrrSWszyE6MTLji9JFb52esifkbQCYixvb7Jnti
lQ/oRYSNZP+60gd5Tlx/W4lIiC8P1n+TUO5YlfLnrVqcnMRn0e0TO++mdRvDqBNP
XNRHraxKbltVJw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:00:09 2026 by rpki-client