Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
File:                     9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json)
Hash identifier:          Sn/cIKa4pDbs0GciieVX3ZRzWQ0nnd+cd+0jrEgmzF4=
Subject key identifier:   18:E2:26:7E:AC:C5:C9:94:FA:B1:92:F3:71:B8:D1:01:45:89:D5:53
Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Certificate issuer:       /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Certificate serial:       01A12843BD02A59DEA105BCD5C17228FD3D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
Manifest number:          1558
Signing time:             Sun 11 Oct 2026 00:01:30 +0000
Manifest this update:     Sun 11 Oct 2026 00:01:30 +0000
Manifest next update:     Mon 12 Oct 2026 00:01:30 +0000
Files and hashes:         1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: H5smQZ5k1+oXK4FRpj47tmegXrZzQ/3SbRSW8UQNG4M=)
                          2: bvCBuuEdxAUjZ43AaqObXsCRP24.roa (hash: +knVgbiUviDOgcpEQ9q1n1I2+704D2tY8YWzgF0kEqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:43:bd:02:a5:9d:ea:10:5b:cd:5c:17:22:8f:d3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
        Validity
            Not Before: Oct 11 00:01:30 2026 GMT
            Not After : Oct 12 00:01:30 2026 GMT
        Subject: CN=18e2267eacc5c994fab192f371b8d1014589d553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3a:83:fd:32:6f:87:35:a8:17:5b:f3:67:58:
                    87:3f:69:0a:9d:1f:2d:87:ec:da:5f:d2:bf:89:4d:
                    d5:6b:d0:c7:a1:82:64:c2:63:ba:f6:25:c9:02:39:
                    4f:04:56:be:19:8f:23:dd:a2:e0:d8:c3:fb:a8:b2:
                    43:f9:f8:03:95:67:c1:4b:89:7b:37:16:3e:c2:4d:
                    16:24:08:e9:6d:3f:6f:e7:fc:02:01:a4:ee:49:cd:
                    9b:7c:6a:96:b7:c7:95:b3:d2:c8:79:74:d7:a1:e5:
                    3d:ea:19:3d:b0:58:e4:b1:9c:68:6b:fa:7f:7f:94:
                    f9:c9:d0:a3:57:6b:36:81:5f:55:26:54:c2:47:5a:
                    a1:c4:df:74:09:5f:36:86:92:4e:23:3e:98:11:66:
                    dd:10:d7:91:66:fd:7c:34:97:e4:08:3c:2f:f1:25:
                    69:27:cf:bd:d9:a6:9a:69:6b:ef:e7:33:e9:85:67:
                    e0:bd:89:37:7d:bc:19:20:8a:f5:c8:4e:59:3e:11:
                    fb:56:8f:20:63:aa:78:87:00:a1:db:f5:25:98:76:
                    f0:fd:01:af:bf:6f:ac:9a:0e:8f:97:53:ed:dc:7a:
                    b5:27:66:22:82:e9:13:2f:64:fd:2c:37:b1:c7:a2:
                    b1:37:c1:d8:95:27:cb:03:c4:26:d2:37:79:92:e3:
                    75:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E2:26:7E:AC:C5:C9:94:FA:B1:92:F3:71:B8:D1:01:45:89:D5:53
            X509v3 Authority Key Identifier:
                keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ca:6e:ac:58:59:2b:c4:64:bc:38:61:fa:43:c8:7b:aa:73:
         36:9d:27:96:30:5a:ef:65:a4:ba:c1:65:3c:1b:4c:1b:37:13:
         8d:80:53:c5:2c:04:14:9e:eb:95:59:a8:80:bf:da:32:b0:35:
         37:4f:6b:15:5b:cf:20:fd:0d:11:52:46:5b:91:74:70:a9:fa:
         2b:96:ca:da:f9:0e:17:3f:e1:f0:24:4f:dc:3a:51:56:48:62:
         52:89:22:80:65:3b:7a:21:19:71:7f:25:14:24:df:82:39:cf:
         74:c7:fd:c9:f1:b7:1f:c9:60:1a:b1:50:eb:1c:35:86:88:63:
         fc:77:cc:c7:b9:51:4d:24:9c:d9:0f:89:22:7b:d3:d9:17:eb:
         53:df:8e:aa:8b:77:c8:5f:85:8d:59:e9:58:31:45:2f:a6:74:
         50:2a:5a:ab:19:1c:77:ee:18:c8:c5:df:bf:a5:8b:f9:7d:d8:
         37:fe:8e:4a:31:4a:91:46:db:c4:70:22:cf:c7:71:d2:f6:4c:
         a9:74:23:56:a2:2d:b7:7e:3f:fe:15:4b:9d:86:57:1b:7c:1c:
         c7:fe:be:ff:70:e2:30:5d:af:af:87:72:c2:54:a3:f3:ef:30:
         89:39:07:58:a4:64:ea:5d:47:16:14:11:3c:d6:ae:9a:70:ae:
         ac:80:f4:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoQ70CpZ3qEFvNXBcij9PQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NjQ2MDVlYWYxNGI4YjVkMjhlZThkMDc2YzFlMzczOGY3
NTgyNTMwHhcNMjYxMDExMDAwMTMwWhcNMjYxMDEyMDAwMTMwWjAzMTEwLwYDVQQD
EygxOGUyMjY3ZWFjYzVjOTk0ZmFiMTkyZjM3MWI4ZDEwMTQ1ODlkNTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzqD/TJvhzWoF1vzZ1iHP2kKnR8t
h+zaX9K/iU3Va9DHoYJkwmO69iXJAjlPBFa+GY8j3aLg2MP7qLJD+fgDlWfBS4l7
NxY+wk0WJAjpbT9v5/wCAaTuSc2bfGqWt8eVs9LIeXTXoeU96hk9sFjksZxoa/p/
f5T5ydCjV2s2gV9VJlTCR1qhxN90CV82hpJOIz6YEWbdENeRZv18NJfkCDwv8SVp
J8+92aaaaWvv5zPphWfgvYk3fbwZIIr1yE5ZPhH7Vo8gY6p4hwCh2/UlmHbw/QGv
v2+smg6Pl1Pt3Hq1J2YigukTL2T9LDexx6KxN8HYlSfLA8Qm0jd5kuN1owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjiJn6sxcmU+rGS83G40QFFidVTMB8GA1UdIwQY
MBaAFPRkYF6vFLi10o7o0HbB43OPdYJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81MWU5OGQtZDQ4ZS00NWExLTkzMDMt
ZTJkODY0N2ZlNWRkLzEvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81MWU5OGQtZDQ4ZS00NWExLTkzMDMtZTJkODY0N2ZlNWRk
LzEvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcpurFhZ
K8RkvDhh+kPIe6pzNp0nljBa72WkusFlPBtMGzcTjYBTxSwEFJ7rlVmogL/aMrA1
N09rFVvPIP0NEVJGW5F0cKn6K5bK2vkOFz/h8CRP3DpRVkhiUokigGU7eiEZcX8l
FCTfgjnPdMf9yfG3H8lgGrFQ6xw1hohj/HfMx7lRTSSc2Q+JInvT2RfrU9+Oqot3
yF+FjVnpWDFFL6Z0UCpaqxkcd+4YyMXfv6WL+X3YN/6OSjFKkUbbxHAiz8dx0vZM
qXQjVqItt34//hVLnYZXG3wcx/6+/3DiMF2vr4dywlSj8+8wiTkHWKRk6l1HFhQR
PNaumnCurID0SA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:48:38 2026 by rpki-client