Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
File:                     W8FQNhC_gthoe3rvuHmmV4cE8yo.mft (raw, json)
Hash identifier:          +VJG4gZvPv5xNxRLKVGHdfN/kF0/wAZLUtxmufzsEXM=
Subject key identifier:   3E:CE:B3:8D:0F:FE:D9:CE:D9:F2:75:23:7D:AB:7F:1B:5C:35:A7:CF
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Certificate issuer:       /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial:       01A17B4D90B496CEC5A5E18C0E41584B86E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
Manifest number:          1169
Signing time:             Tue 27 Oct 2026 03:00:43 +0000
Manifest this update:     Tue 27 Oct 2026 03:00:43 +0000
Manifest next update:     Wed 28 Oct 2026 03:00:43 +0000
Files and hashes:         1: B0Nzi0KPmBzsRwCcaOQTr4IZj3c.roa (hash: M9IO9N8Wvl4kyq0u6m4e8M0Rst08DkHbpdIjVsY0XC8=)
                          2: W8FQNhC_gthoe3rvuHmmV4cE8yo.crl (hash: 7Od5VKSqCYot8n0JrVB4WN0fC0LBkzxc2M8Ak1XVp+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:4d:90:b4:96:ce:c5:a5:e1:8c:0e:41:58:4b:86:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
        Validity
            Not Before: Oct 27 03:00:43 2026 GMT
            Not After : Oct 28 03:00:43 2026 GMT
        Subject: CN=3eceb38d0ffed9ced9f275237dab7f1b5c35a7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:74:04:26:53:9d:02:60:7a:22:a4:06:89:30:
                    cf:07:98:c6:19:03:76:d8:d0:5e:45:dd:9b:d5:cb:
                    45:27:32:5b:1c:01:42:fb:e4:b2:06:2a:fc:f2:c5:
                    b1:ef:e4:54:75:ed:2f:b7:db:fa:ec:de:62:ed:32:
                    bc:11:d6:eb:61:8d:f1:a9:ba:ea:9a:6d:98:0c:ed:
                    54:e9:26:a9:e7:2c:3e:80:b6:b9:0e:f7:8d:af:ad:
                    01:db:f8:cf:93:02:3b:d5:4d:f7:6e:14:0b:ca:ae:
                    e5:a7:98:00:dc:74:91:94:b9:7f:15:f4:6a:47:16:
                    cb:88:05:3c:32:bc:00:e6:d4:a2:cc:f9:78:2c:51:
                    cf:ba:17:1b:94:7c:35:8a:b3:e5:0b:35:af:e3:5f:
                    b0:52:17:84:76:6d:05:f8:c3:a6:86:39:67:6c:db:
                    ef:99:96:46:ad:41:24:b4:3a:66:d3:eb:97:18:0a:
                    49:e2:7f:96:d8:70:4b:f1:f3:05:d2:31:6e:18:82:
                    aa:de:bf:9e:4d:a1:55:1e:a4:bc:82:b9:91:36:05:
                    98:08:d3:b6:17:4b:5c:97:0c:2b:b1:ea:77:3b:67:
                    34:cd:3b:0d:56:c4:19:bf:09:1d:f7:f4:80:0c:04:
                    48:eb:2a:a0:a6:c6:7d:2e:2d:97:89:51:aa:64:20:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CE:B3:8D:0F:FE:D9:CE:D9:F2:75:23:7D:AB:7F:1B:5C:35:A7:CF
            X509v3 Authority Key Identifier:
                keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:89:fa:55:c5:1a:2c:18:c5:1d:d9:21:93:b5:9b:10:7d:35:
         7e:b8:a9:10:f5:6d:7d:87:94:cd:f3:94:eb:35:bc:a0:14:c6:
         5e:57:9b:2d:5f:9d:fb:ce:1b:78:dd:15:65:8d:94:d0:7b:b4:
         8b:f7:01:08:d3:97:78:11:15:a0:fe:12:ec:71:0a:3d:be:6a:
         6f:ba:8b:ea:50:0f:93:4b:07:f1:ae:e6:17:a3:5b:87:7f:70:
         26:ee:29:0f:77:14:09:2a:45:f7:eb:90:d4:78:39:81:fc:b4:
         36:0c:c7:57:14:f0:b5:09:44:b7:67:be:38:1c:ce:86:69:70:
         af:97:ab:e8:60:ef:88:7c:62:21:fb:97:91:06:b8:16:f4:3d:
         74:01:a4:08:79:db:56:3f:73:c2:eb:59:16:af:90:91:e9:ed:
         65:2e:f4:52:70:3e:29:85:21:0b:b7:2e:e8:ac:be:a6:3e:01:
         1a:63:4e:33:79:07:79:ca:de:c4:e7:fe:a7:4f:df:aa:32:59:
         44:12:d6:9d:ff:c7:79:66:0e:81:8d:85:39:d2:b9:cc:ef:41:
         e8:cc:78:d6:cb:3f:e8:c8:6c:06:cf:ac:0d:f8:0b:af:ea:be:
         92:32:03:ac:df:69:6c:11:2b:9d:fc:88:23:b3:d4:7c:72:82:
         69:84:4d:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7TZC0ls7FpeGMDkFYS4bmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYzE1MDM2MTBiZjgyZDg2ODdiN2FlZmI4NzlhNjU3ODcw
NGYzMmEwHhcNMjYxMDI3MDMwMDQzWhcNMjYxMDI4MDMwMDQzWjAzMTEwLwYDVQQD
EygzZWNlYjM4ZDBmZmVkOWNlZDlmMjc1MjM3ZGFiN2YxYjVjMzVhN2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XQEJlOdAmB6IqQGiTDPB5jGGQN2
2NBeRd2b1ctFJzJbHAFC++SyBir88sWx7+RUde0vt9v67N5i7TK8EdbrYY3xqbrq
mm2YDO1U6Sap5yw+gLa5DveNr60B2/jPkwI71U33bhQLyq7lp5gA3HSRlLl/FfRq
RxbLiAU8MrwA5tSizPl4LFHPuhcblHw1irPlCzWv41+wUheEdm0F+MOmhjlnbNvv
mZZGrUEktDpm0+uXGApJ4n+W2HBL8fMF0jFuGIKq3r+eTaFVHqS8grmRNgWYCNO2
F0tclwwrsep3O2c0zTsNVsQZvwkd9/SADARI6yqgpsZ9Li2XiVGqZCATwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7Os40P/tnO2fJ1I32rfxtcNafPMB8GA1UdIwQY
MBaAFFvBUDYQv4LYaHt677h5pleHBPMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zMGEzMDktYjE4ZS00ZjI3LThlN2Ut
ZTdiMzcyZTRjN2M1LzEvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8zMGEzMDktYjE4ZS00ZjI3LThlN2UtZTdiMzcyZTRjN2M1
LzEvVzhGUU5oQ19ndGhvZTNydnVIbW1WNGNFOHlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIn6VcUa
LBjFHdkhk7WbEH01fripEPVtfYeUzfOU6zW8oBTGXlebLV+d+84beN0VZY2U0Hu0
i/cBCNOXeBEVoP4S7HEKPb5qb7qL6lAPk0sH8a7mF6Nbh39wJu4pD3cUCSpF9+uQ
1Hg5gfy0NgzHVxTwtQlEt2e+OBzOhmlwr5er6GDviHxiIfuXkQa4FvQ9dAGkCHnb
Vj9zwutZFq+QkentZS70UnA+KYUhC7cu6Ky+pj4BGmNOM3kHecrexOf+p0/fqjJZ
RBLWnf/HeWYOgY2FOdK5zO9B6Mx41ss/6MhsBs+sDfgLr+q+kjIDrN9pbBErnfyI
I7PUfHKCaYRNxw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:58:16 2026 by rpki-client