Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File:                     khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier:          1L2lJj5tLCFNbKXiplyIZhaefuyQ+V2F+FFDXndAkKM=
Subject key identifier:   1D:BA:46:CA:4F:2C:09:F3:62:4B:99:66:F1:43:6C:AC:BB:97:6E:B3
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer:       /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial:       01A136359A75C886DE82678F520D112163EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number:          1AA5
Signing time:             Tue 13 Oct 2026 17:00:44 +0000
Manifest this update:     Tue 13 Oct 2026 17:00:44 +0000
Manifest next update:     Wed 14 Oct 2026 17:00:44 +0000
Files and hashes:         1: A1nEUnrB-g7UvNeFNazAqdfEuPw.asa (hash: g5ckj5Q7NbmWhTpWmG7k/WL0QSo/Y089T753872jzp8=)
                          2: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
                          3: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: LsWVfOXqTiWAG/0VVUc29eZwwPWc1CZI6C2mWGJOpuE=)
                          4: v-MzIERZsnmBsizF0Xmn80GpIZg.roa (hash: gdi5Uy+plcQlvC9GleXkxn0OdKGlCYXfDR9Puprpgoo=)
                          5: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:36:35:9a:75:c8:86:de:82:67:8f:52:0d:11:21:63:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
        Validity
            Not Before: Oct 13 17:00:44 2026 GMT
            Not After : Oct 14 17:00:44 2026 GMT
        Subject: CN=1dba46ca4f2c09f3624b9966f1436cacbb976eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:91:55:0f:f2:aa:89:04:6c:8a:e4:f7:5c:
                    35:0f:a9:64:3e:2c:1c:fc:55:5a:58:bb:2f:e0:db:
                    f9:94:2f:b2:08:73:75:1d:f1:4c:02:c3:98:fa:c5:
                    36:fa:8e:f3:29:86:25:f5:97:ea:82:49:42:3d:fa:
                    c8:65:38:97:f1:cc:c1:10:6c:f3:3c:01:cd:3f:96:
                    03:1f:aa:4b:44:25:96:15:1f:dc:ff:ab:a4:22:10:
                    d1:09:8c:23:76:e6:c5:9c:6f:8c:c9:62:a2:07:38:
                    55:d3:34:1e:7a:cb:bd:72:63:38:37:a2:3f:ef:38:
                    be:3e:ab:06:48:67:24:53:7d:1a:a2:8c:5b:26:50:
                    a3:ef:16:a2:b3:ff:9b:e4:1e:bb:b5:90:46:06:15:
                    29:6a:60:39:6a:15:a9:20:c1:31:35:5c:45:48:69:
                    b6:83:02:31:d4:7e:fd:62:1e:af:17:a7:27:c4:c6:
                    02:b9:c4:ad:54:98:b1:19:bb:95:5e:31:2f:d0:e8:
                    2f:50:f9:f7:e4:8d:af:ff:38:b0:4c:63:61:93:2a:
                    f6:7d:f5:1b:59:c5:8e:2e:13:3f:24:76:e4:cd:15:
                    41:3e:9b:22:da:9c:7f:d2:dc:8d:64:52:3c:0f:39:
                    42:19:0a:a4:5b:7e:88:39:e9:03:3b:33:9f:ec:f8:
                    7b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BA:46:CA:4F:2C:09:F3:62:4B:99:66:F1:43:6C:AC:BB:97:6E:B3
            X509v3 Authority Key Identifier:
                keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e4:e7:7d:34:1b:de:33:10:93:f9:b0:b1:c1:08:3b:f9:b5:
         82:fe:34:98:3b:8f:13:77:44:23:f1:33:3b:5e:93:96:38:5c:
         1e:93:9e:06:34:36:a6:98:66:73:e0:3f:95:d7:62:ab:ef:58:
         04:80:f3:e3:30:c6:bb:df:13:b1:0a:88:98:77:b9:55:1d:ac:
         f6:43:9d:2f:74:03:ca:27:ef:b1:16:a9:7f:55:de:05:94:8a:
         48:d7:26:b4:8b:b8:86:ae:97:2e:04:30:ce:17:d3:44:af:3d:
         3b:be:a5:3e:ca:a0:5a:60:bd:dd:23:94:a6:cc:f3:93:91:59:
         1c:c7:03:85:82:72:8d:e0:a6:d5:8f:1f:09:1f:4d:49:b7:54:
         00:b8:cd:31:b1:75:25:f2:15:73:14:e1:bb:93:64:2b:25:dc:
         d0:dc:e1:25:0f:d5:14:7f:61:8e:bf:4f:d0:64:c7:78:36:24:
         a0:9d:2e:4f:ef:3f:38:be:91:09:7d:fb:51:4b:f4:ce:8f:0b:
         d9:29:a1:a1:b0:de:e6:7b:48:78:57:bd:fc:9a:56:a1:e4:0a:
         55:64:6b:21:e7:5f:3d:43:37:5f:39:1a:5f:db:3c:d3:57:20:
         c3:08:a1:50:14:03:ce:dc:2c:62:3b:26:ce:67:fa:f2:da:78:
         35:2e:93:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE2NZp1yIbegmePUg0RIWPsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjYxMDEzMTcwMDQ0WhcNMjYxMDE0MTcwMDQ0WjAzMTEwLwYDVQQD
EygxZGJhNDZjYTRmMmMwOWYzNjI0Yjk5NjZmMTQzNmNhY2JiOTc2ZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxomRVQ/yqokEbIrk91w1D6lkPiwc
/FVaWLsv4Nv5lC+yCHN1HfFMAsOY+sU2+o7zKYYl9ZfqgklCPfrIZTiX8czBEGzz
PAHNP5YDH6pLRCWWFR/c/6ukIhDRCYwjdubFnG+MyWKiBzhV0zQeesu9cmM4N6I/
7zi+PqsGSGckU30aooxbJlCj7xais/+b5B67tZBGBhUpamA5ahWpIMExNVxFSGm2
gwIx1H79Yh6vF6cnxMYCucStVJixGbuVXjEv0OgvUPn35I2v/ziwTGNhkyr2ffUb
WcWOLhM/JHbkzRVBPpsi2px/0tyNZFI8DzlCGQqkW36IOekDOzOf7Ph7fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB26RspPLAnzYkuZZvFDbKy7l26zMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOTnfTQb
3jMQk/mwscEIO/m1gv40mDuPE3dEI/EzO16TljhcHpOeBjQ2pphmc+A/lddiq+9Y
BIDz4zDGu98TsQqImHe5VR2s9kOdL3QDyifvsRapf1XeBZSKSNcmtIu4hq6XLgQw
zhfTRK89O76lPsqgWmC93SOUpszzk5FZHMcDhYJyjeCm1Y8fCR9NSbdUALjNMbF1
JfIVcxThu5NkKyXc0NzhJQ/VFH9hjr9P0GTHeDYkoJ0uT+8/OL6RCX37UUv0zo8L
2SmhobDe5ntIeFe9/JpWoeQKVWRrIedfPUM3XzkaX9s801cgwwihUBQDztwsYjsm
zmf68tp4NS6TZg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 20:52:31 2026 by rpki-client