Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
File:                     y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json)
Hash identifier:          y6KnC5QeJig4u0lEvjKtwne9jtgG5wNe3mBkLlpztjU=
Subject key identifier:   C8:59:4A:03:60:B0:12:45:BF:E7:43:17:80:84:2E:9C:84:B4:E6:07
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Certificate issuer:       /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial:       01A134B4FE73437B85A9CE73A9558AC541E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
Manifest number:          19AD
Signing time:             Tue 13 Oct 2026 10:00:39 +0000
Manifest this update:     Tue 13 Oct 2026 10:00:39 +0000
Manifest next update:     Wed 14 Oct 2026 10:00:39 +0000
Files and hashes:         1: 7wFOH7ecwAxbcPrjKMH8DMVlPm4.roa (hash: oDFpn/TpGeL3vgneJ/VQgGBHX/EOeGEzI4ysPf7pfaY=)
                          2: QLOd9vMTP4FPhghSPou0JbJuhUE.roa (hash: RwuImmn6QOcjTBNhpw2cK0vTsfjOTjWE/72ESbcTKQg=)
                          3: Y-pJ0zt5xFwsfApM5zD_msTaIqQ.roa (hash: a+YKFLuDobsKmaDDpSgIi2ckC2hwZqdDdY5fKql5U+8=)
                          4: oBXcY9E5U1GBb72h8m09mGmm-Vo.roa (hash: 9fw2PFDyEVoaxUE4CEIY7mthU2LIqsQo2HGJzEoheK4=)
                          5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: 4NddZcsgDGmJfI3efoyykaljtoJCqqZR0tLfJk67H/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:b4:fe:73:43:7b:85:a9:ce:73:a9:55:8a:c5:41:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
        Validity
            Not Before: Oct 13 10:00:39 2026 GMT
            Not After : Oct 14 10:00:39 2026 GMT
        Subject: CN=c8594a0360b01245bfe7431780842e9c84b4e607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:27:8f:36:64:32:b5:2e:53:41:e6:fd:e2:20:
                    32:e4:7c:da:23:af:ac:1c:4b:90:89:8c:2d:a0:dd:
                    af:fc:09:db:f9:75:df:4b:6f:32:56:4d:b0:54:fa:
                    8c:1a:aa:61:70:be:9d:6e:fa:b8:14:64:8c:0b:e9:
                    99:ff:b0:92:f1:d9:2f:36:c0:c2:16:c8:cd:7b:94:
                    6a:44:73:93:29:49:e8:03:10:5e:5f:cb:cb:93:bd:
                    4a:6d:8e:cf:14:bf:4e:eb:0c:3e:8c:ca:10:a6:d2:
                    13:73:05:a8:03:53:6c:b9:6e:48:ec:49:47:8f:15:
                    7a:f7:5e:12:e9:4c:9e:03:24:c0:19:67:23:14:2d:
                    70:74:56:d9:5c:ea:b4:7f:af:29:a6:d9:a0:8c:a3:
                    b7:ba:34:56:5c:34:03:a3:47:2d:a2:da:25:e7:6c:
                    0e:68:11:61:c4:88:bf:58:a2:21:a1:91:cb:1d:9c:
                    b7:10:2e:ed:13:bd:5b:38:3d:3e:c9:45:90:1b:bf:
                    69:96:6e:87:72:99:a0:fd:4a:86:6a:34:5e:53:e6:
                    08:a6:ca:8a:7d:c2:57:32:a4:b9:19:9c:52:3f:cf:
                    ae:a1:cf:d9:4f:03:c1:9f:dc:6a:37:44:06:33:ff:
                    75:9f:1c:8c:b8:92:c0:26:d3:e2:3c:ca:cb:eb:8a:
                    35:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:59:4A:03:60:B0:12:45:BF:E7:43:17:80:84:2E:9C:84:B4:E6:07
            X509v3 Authority Key Identifier:
                keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e5:34:a4:ff:00:52:e1:8a:96:19:f6:d4:dc:d6:55:13:16:
         f9:0c:83:5b:0a:54:59:a6:80:00:df:bb:25:46:ae:24:57:1f:
         9f:62:2c:85:b6:1a:5d:44:19:b9:a5:ac:41:2d:ce:e1:3a:65:
         8d:06:14:5a:9a:85:a9:5a:b4:c7:a3:d9:5d:e4:67:31:8b:5c:
         33:b3:91:2a:b9:7b:1c:26:92:ea:ac:cb:06:05:86:e9:82:dc:
         8e:8c:39:c0:00:f1:16:6f:f3:ec:e7:2b:2b:cc:6c:c3:c6:01:
         7f:51:2e:80:23:cf:ce:33:85:ab:92:0b:8e:db:74:c9:1f:11:
         a4:95:06:b4:cf:62:cb:c0:95:e5:fe:63:5f:7f:26:12:08:e9:
         44:e8:a9:94:40:e5:90:b8:a9:90:81:18:99:67:cc:2f:ff:04:
         ca:16:2d:64:7d:f3:e0:95:28:e4:10:ae:91:ae:cc:d2:54:bb:
         f1:13:8b:34:c6:17:46:40:60:02:69:7e:0d:98:87:39:a6:3e:
         34:1d:8b:d6:58:94:0e:c8:02:68:7e:a3:66:fa:be:67:fd:63:
         6e:0a:e3:24:95:4e:a4:3c:fc:57:93:1e:db:3f:ec:ae:6c:91:
         d9:22:65:a5:aa:c6:03:12:fd:7d:b9:13:97:4c:0c:35:99:87:
         75:46:b8:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0tP5zQ3uFqc5zqVWKxUHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZjc0Y2Q4NDY0OTMxMzhmNTIyYzU3YzAwNjViNWM2MDUx
MmRkMDkwHhcNMjYxMDEzMTAwMDM5WhcNMjYxMDE0MTAwMDM5WjAzMTEwLwYDVQQD
EyhjODU5NGEwMzYwYjAxMjQ1YmZlNzQzMTc4MDg0MmU5Yzg0YjRlNjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iePNmQytS5TQeb94iAy5HzaI6+s
HEuQiYwtoN2v/Anb+XXfS28yVk2wVPqMGqphcL6dbvq4FGSMC+mZ/7CS8dkvNsDC
FsjNe5RqRHOTKUnoAxBeX8vLk71KbY7PFL9O6ww+jMoQptITcwWoA1NsuW5I7ElH
jxV6914S6UyeAyTAGWcjFC1wdFbZXOq0f68pptmgjKO3ujRWXDQDo0ctotol52wO
aBFhxIi/WKIhoZHLHZy3EC7tE71bOD0+yUWQG79plm6Hcpmg/UqGajReU+YIpsqK
fcJXMqS5GZxSP8+uoc/ZTwPBn9xqN0QGM/91nxyMuJLAJtPiPMrL64o1kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhZSgNgsBJFv+dDF4CELpyEtOYHMB8GA1UdIwQY
MBaAFMv3TNhGSTE49SLFfABltcYFEt0JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2Yt
OTgyZDFmMjFhMzJiLzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2YtOTgyZDFmMjFhMzJi
LzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuU0pP8A
UuGKlhn21NzWVRMW+QyDWwpUWaaAAN+7JUauJFcfn2IshbYaXUQZuaWsQS3O4Tpl
jQYUWpqFqVq0x6PZXeRnMYtcM7ORKrl7HCaS6qzLBgWG6YLcjow5wADxFm/z7Ocr
K8xsw8YBf1EugCPPzjOFq5ILjtt0yR8RpJUGtM9iy8CV5f5jX38mEgjpROiplEDl
kLipkIEYmWfML/8EyhYtZH3z4JUo5BCuka7M0lS78ROLNMYXRkBgAml+DZiHOaY+
NB2L1liUDsgCaH6jZvq+Z/1jbgrjJJVOpDz8V5Me2z/srmyR2SJlparGAxL9fbkT
l0wMNZmHdUa4zw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:42:33 2026 by rpki-client