Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File:                     YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier:          VaUXJZXP81bb9Wg0gu7w2zB1Tl8yZdOLiOmk1UMUxCc=
Subject key identifier:   61:F1:C1:78:9D:35:D6:55:23:E4:08:85:9C:D9:60:7C:06:B1:24:51
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer:       /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial:       01A117869EA7FD1DC0531FFE565412311CAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number:          1A93
Signing time:             Wed 07 Oct 2026 18:01:00 +0000
Manifest this update:     Wed 07 Oct 2026 18:01:00 +0000
Manifest next update:     Thu 08 Oct 2026 18:01:00 +0000
Files and hashes:         1: EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa (hash: WN1W+AcOMLOyw+Z7FxISMQd+TynXYraLEQDBrawgt44=)
                          2: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: m9UwM+qJqSaEdhKN/sxlZcwyGy95IbzQA/dzF8dPyuE=)
                          3: _tJiHAhGvLVPtYOMlLKCBsGuaeI.roa (hash: 0t/lW4HNsvLF4G+Bu7vWjQlegvcFtdB8mR4eqRFVFzU=)
                          4: d-N2YiUYpoOLPomAp2JVyicVc40.roa (hash: zETEJQC7tB8lRhNeIGpvA+FfF5ncGBNLatmPmvMsTNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 18:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:17:86:9e:a7:fd:1d:c0:53:1f:fe:56:54:12:31:1c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
        Validity
            Not Before: Oct  7 18:01:00 2026 GMT
            Not After : Oct  8 18:01:00 2026 GMT
        Subject: CN=61f1c1789d35d65523e408859cd9607c06b12451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:27:39:24:da:c4:58:d0:49:7e:b7:5f:e8:
                    3a:3e:3a:38:95:32:c7:11:d4:5b:8d:45:bf:28:5f:
                    af:96:60:f2:63:79:5f:fc:2e:b2:4c:83:7c:25:3c:
                    40:6f:a6:ac:44:9f:6b:b2:0c:7c:fd:f5:3a:77:67:
                    66:63:e1:2b:9f:f5:b7:10:39:0c:c0:69:da:8f:d6:
                    7d:75:1d:2a:f4:22:ae:9a:a3:0a:bc:ac:96:8c:43:
                    6b:1c:51:64:c3:71:ac:da:56:1e:ed:de:cd:c2:a9:
                    61:36:75:86:1f:cb:b7:92:05:39:46:56:ab:7e:ee:
                    8d:a7:d3:08:f9:a0:59:61:be:76:99:ee:c8:da:46:
                    cb:32:5c:1a:75:f1:5b:37:a6:65:d6:88:d5:8d:37:
                    c1:cd:6a:60:5e:67:79:b2:20:8c:b8:04:b6:f4:c7:
                    4e:95:26:fa:46:70:e0:b5:67:3c:de:81:99:ff:03:
                    26:ed:b9:b1:8d:3d:d5:c3:87:ad:45:cc:55:1c:13:
                    8d:4e:d0:01:ff:38:5b:b2:38:02:3a:a0:e1:2e:46:
                    be:05:c9:3c:a7:7b:d0:ce:ba:8e:47:fa:4f:ee:99:
                    f8:49:5b:76:f6:cb:31:b0:05:ba:40:b2:e4:6d:39:
                    50:a1:3f:8b:ad:6f:a3:1b:05:6d:3a:59:68:09:78:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F1:C1:78:9D:35:D6:55:23:E4:08:85:9C:D9:60:7C:06:B1:24:51
            X509v3 Authority Key Identifier:
                keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ee:13:72:dd:ff:d2:0f:93:f4:5f:c2:00:43:71:86:79:76:
         7f:30:9d:3b:7c:d3:ac:56:5e:ec:b6:60:49:97:3a:09:52:ef:
         0e:91:44:b2:62:cf:c1:fb:0f:41:8b:91:59:7c:09:08:7d:38:
         a1:c4:8e:5f:b6:f7:67:4e:92:8f:c1:a7:4a:62:0a:ed:9d:e0:
         94:9a:a8:94:04:5e:ed:d3:1f:9c:a7:d3:9b:a3:d2:7a:2b:e1:
         6b:6a:dd:1d:df:a4:78:9b:97:e4:0f:24:e3:4b:76:ff:3e:de:
         18:f2:79:c6:d9:78:fb:aa:28:99:83:31:82:3d:c3:58:3f:1f:
         4c:62:00:bc:1d:b3:10:34:2c:34:76:c5:f6:45:60:f7:16:6e:
         53:01:3f:fd:14:2c:c1:3d:04:1b:4a:91:a6:60:3d:09:0a:d5:
         b0:5f:07:fb:d6:91:d8:2c:27:68:d6:29:ee:5b:51:70:1d:a2:
         9b:90:5f:57:34:38:68:48:19:ce:3b:34:50:98:5a:c5:7d:2b:
         0d:b4:8b:e1:f9:50:3c:fe:79:2a:15:43:21:4f:dd:05:79:e3:
         57:a0:07:d2:62:52:23:a6:26:57:df:40:f8:e7:e6:ea:27:1f:
         1b:eb:3b:5f:d8:ab:90:bf:46:51:02:1f:e6:fe:a0:04:5f:f6:
         ee:85:ce:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEXhp6n/R3AUx/+VlQSMRyvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOGU2YTZhNTQwMTdkZDNiOWIyY2NlMzVmZDVhOWE3ZjJh
NDU0OTgwHhcNMjYxMDA3MTgwMTAwWhcNMjYxMDA4MTgwMTAwWjAzMTEwLwYDVQQD
Eyg2MWYxYzE3ODlkMzVkNjU1MjNlNDA4ODU5Y2Q5NjA3YzA2YjEyNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzEnOSTaxFjQSX63X+g6Pjo4lTLH
EdRbjUW/KF+vlmDyY3lf/C6yTIN8JTxAb6asRJ9rsgx8/fU6d2dmY+Ern/W3EDkM
wGnaj9Z9dR0q9CKumqMKvKyWjENrHFFkw3Gs2lYe7d7NwqlhNnWGH8u3kgU5Rlar
fu6Np9MI+aBZYb52me7I2kbLMlwadfFbN6Zl1ojVjTfBzWpgXmd5siCMuAS29MdO
lSb6RnDgtWc83oGZ/wMm7bmxjT3Vw4etRcxVHBONTtAB/zhbsjgCOqDhLka+Bck8
p3vQzrqOR/pP7pn4SVt29ssxsAW6QLLkbTlQoT+LrW+jGwVtOlloCXi6cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHxwXidNdZVI+QIhZzZYHwGsSRRMB8GA1UdIwQY
MBaAFGCOampUAX3TubLM41/VqafypFSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2Et
MjMyNDk3N2M5MzkzLzEvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2EtMjMyNDk3N2M5Mzkz
LzEvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjO4Tct3/
0g+T9F/CAENxhnl2fzCdO3zTrFZe7LZgSZc6CVLvDpFEsmLPwfsPQYuRWXwJCH04
ocSOX7b3Z06Sj8GnSmIK7Z3glJqolARe7dMfnKfTm6PSeivha2rdHd+keJuX5A8k
40t2/z7eGPJ5xtl4+6oomYMxgj3DWD8fTGIAvB2zEDQsNHbF9kVg9xZuUwE//RQs
wT0EG0qRpmA9CQrVsF8H+9aR2CwnaNYp7ltRcB2im5BfVzQ4aEgZzjs0UJhaxX0r
DbSL4flQPP55KhVDIU/dBXnjV6AH0mJSI6YmV99A+Ofm6icfG+s7X9irkL9GUQIf
5v6gBF/27oXO4A==
-----END CERTIFICATE-----
Generated at Thu Oct 8 00:56:05 2026 by rpki-client