Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File:                     12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier:          rZB+pVyzjxfPVFRTOaKDcBWxRmwM1lAdgvoPuak6vW8=
Subject key identifier:   A9:F7:E3:91:49:AC:CC:54:21:3E:65:59:13:A6:F3:BC:1C:06:39:7D
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer:       /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial:       01A13E261C3B43151A205DBF047761E0C8E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number:          1AB4
Signing time:             Thu 15 Oct 2026 06:00:47 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:47 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:47 +0000
Files and hashes:         1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: dZev32xnvmPd1fyie0+XOyeJBqvE6kaeWipeUG+kiAE=)
                          2: 1N-KhQzruMGSdoGiZ7CO4u7ckk8.roa (hash: FLfbiUatng7gGWOmNIMwpoiBvu3NsECWb2uDXnrhlvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:1c:3b:43:15:1a:20:5d:bf:04:77:61:e0:c8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
        Validity
            Not Before: Oct 15 06:00:47 2026 GMT
            Not After : Oct 16 06:00:47 2026 GMT
        Subject: CN=a9f7e39149accc54213e655913a6f3bc1c06397d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:5f:fe:35:bf:81:75:45:76:e3:7e:fc:d8:
                    ca:ee:a1:0c:44:0b:c3:c2:c2:16:a0:af:40:8e:70:
                    9c:d6:76:68:6a:b9:0a:f5:ec:e6:85:46:ef:21:3e:
                    fc:e9:67:d7:6f:6a:9d:62:bf:14:4b:93:47:2b:4c:
                    3a:d8:25:cf:05:55:f7:2b:8d:38:9d:ae:e5:84:fc:
                    fb:cb:b1:c0:24:43:01:c6:78:77:97:f0:7b:b0:f9:
                    88:7d:21:06:9b:d7:86:09:bf:cb:c7:fd:77:66:62:
                    4a:30:f6:83:58:ca:d4:5e:6e:68:b2:de:f9:df:3e:
                    25:8a:81:55:00:0c:96:46:52:9f:c3:e9:f2:2b:76:
                    54:f2:7b:5f:10:6e:9b:00:16:6b:be:64:7f:7e:55:
                    a7:96:cc:b8:e4:86:9c:e1:5e:2c:0b:a6:f5:8e:a8:
                    c3:98:89:03:cc:21:a5:e3:33:7a:ef:11:8a:48:ad:
                    45:85:09:48:bc:fa:7a:2f:01:f5:88:19:98:3f:e1:
                    f1:83:41:32:2c:3c:2f:39:8a:09:53:e7:d9:21:a0:
                    46:60:36:50:bb:b9:f7:32:c0:e2:bb:3b:06:a1:99:
                    4a:5b:ae:ad:d6:0f:ee:ed:dd:1b:e7:ab:f8:5c:51:
                    11:2e:cb:9d:b3:30:a0:0a:8d:d1:be:db:7e:06:63:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F7:E3:91:49:AC:CC:54:21:3E:65:59:13:A6:F3:BC:1C:06:39:7D
            X509v3 Authority Key Identifier:
                keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:78:13:52:dc:fa:03:df:86:a8:af:ae:56:c1:b9:36:79:41:
         e7:62:a2:a6:de:82:67:6a:af:43:a3:5f:31:9d:fc:61:50:57:
         00:81:e1:83:12:45:a8:aa:5a:e4:de:a2:ea:38:d8:a2:27:54:
         b7:a7:92:b4:b1:fc:41:88:37:bb:bf:09:76:8a:65:ab:08:10:
         38:a3:7f:a7:0e:8c:41:a8:99:31:e5:6f:5b:09:02:dc:00:79:
         b2:ca:e7:94:cf:ca:63:26:2c:c6:89:e9:ec:3a:59:e8:f8:01:
         52:6b:5a:70:07:0c:f6:30:b5:a5:09:11:da:b6:ad:29:58:e0:
         22:03:8c:d8:36:53:a2:b6:3e:dd:a3:5e:7e:54:30:d6:23:45:
         88:9b:ad:57:69:e3:81:e7:1f:b7:87:90:2a:91:07:f5:22:d1:
         e1:10:50:e7:27:92:8d:86:68:ed:ef:cd:f1:1f:73:81:69:25:
         13:49:dd:65:a1:f5:29:86:d8:5b:88:2f:40:32:04:8e:62:c7:
         5f:79:34:ed:a8:30:3f:ac:91:c8:e1:ae:d9:22:f9:16:87:59:
         e8:64:6b:6a:d0:35:78:eb:99:c0:52:5f:c0:c5:8e:87:4e:22:
         7b:3c:41:22:02:d6:28:bd:7d:87:3f:b7:d8:84:eb:51:8a:d7:
         b5:78:11:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+Jhw7QxUaIF2/BHdh4MjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjZmYzZmMWI4ZTJiNjA0ZjdmYjczYzI5ZmQ1ZDY4OWEw
ZWE4MWQwHhcNMjYxMDE1MDYwMDQ3WhcNMjYxMDE2MDYwMDQ3WjAzMTEwLwYDVQQD
EyhhOWY3ZTM5MTQ5YWNjYzU0MjEzZTY1NTkxM2E2ZjNiYzFjMDYzOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKJf/jW/gXVFduN+/NjK7qEMRAvD
wsIWoK9AjnCc1nZoarkK9ezmhUbvIT786WfXb2qdYr8US5NHK0w62CXPBVX3K404
na7lhPz7y7HAJEMBxnh3l/B7sPmIfSEGm9eGCb/Lx/13ZmJKMPaDWMrUXm5ost75
3z4lioFVAAyWRlKfw+nyK3ZU8ntfEG6bABZrvmR/flWnlsy45Iac4V4sC6b1jqjD
mIkDzCGl4zN67xGKSK1FhQlIvPp6LwH1iBmYP+Hxg0EyLDwvOYoJU+fZIaBGYDZQ
u7n3MsDiuzsGoZlKW66t1g/u7d0b56v4XFERLsudszCgCo3Rvtt+BmMCtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKn345FJrMxUIT5lWROm87wcBjl9MB8GA1UdIwQY
MBaAFNdm/G8bjitgT3+3PCn9XWiaDqgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzIt
M2VmM2ZkOTY5OTU3LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMzgyOWEtOTUyNy00NDRiLWJkNzItM2VmM2ZkOTY5OTU3
LzEvMTJiOGJ4dU9LMkJQZjdjOEtmMWRhSm9PcUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3gTUtz6
A9+GqK+uVsG5NnlB52Kipt6CZ2qvQ6NfMZ38YVBXAIHhgxJFqKpa5N6i6jjYoidU
t6eStLH8QYg3u78JdoplqwgQOKN/pw6MQaiZMeVvWwkC3AB5ssrnlM/KYyYsxonp
7DpZ6PgBUmtacAcM9jC1pQkR2ratKVjgIgOM2DZTorY+3aNeflQw1iNFiJutV2nj
gecft4eQKpEH9SLR4RBQ5yeSjYZo7e/N8R9zgWklE0ndZaH1KYbYW4gvQDIEjmLH
X3k07agwP6yRyOGu2SL5FodZ6GRratA1eOuZwFJfwMWOh04iezxBIgLWKL19hz+3
2ITrUYrXtXgRoA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:13:24 2026 by rpki-client