Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
File:                     hLuutws_HQZxY1itmi7P730hJvs.mft (raw, json)
Hash identifier:          cNGT+l7Nk+Yea4txI8KoHvpXqbGiRd6f+XuDFXmQZog=
Subject key identifier:   91:94:17:8A:B6:3E:85:1F:46:84:B6:C6:16:D5:98:1E:2C:83:73:42
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Certificate issuer:       /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial:       01A175B9486F18E3BA9CE635730E8413D575
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
Manifest number:          1AC9
Signing time:             Mon 26 Oct 2026 01:00:39 +0000
Manifest this update:     Mon 26 Oct 2026 01:00:39 +0000
Manifest next update:     Tue 27 Oct 2026 01:00:39 +0000
Files and hashes:         1: 6-MYWUgNN_QLhajw01TPQypu9qo.roa (hash: u38LNGCNm7hapDrGswDbeJazlaHgAyILiY9j6QwpBsg=)
                          2: E9zZAnLobJdxCJ_CMObNo6B0tg0.roa (hash: gKx/4RJ8SdZlVgi0Sh6XpvjZo+kkGJvfp88hpXTMS3s=)
                          3: Gj_KMBJbJSrcc2TVvL9u56hzgdM.roa (hash: otqXS+JeceT68wkSJPWrG1/A/vyc30taCbvfR1CTCrc=)
                          4: Is4ZsOkA4ognMGIQHzhjm6hHarA.roa (hash: EQqUs3Tbbc3EDtczOgdmk5Vx/6Xxwbf61H1i0BVYet0=)
                          5: hLuutws_HQZxY1itmi7P730hJvs.crl (hash: kM7NciXUqdu2m6nNqb7H/alojqaeS6YskErKLqMTYW4=)
                          6: piqonsXFBrG6rXRd3eemw24RFpc.roa (hash: nKq7t9jFZ72mSjyumQVPsGsNkyCxwxThmoOAWXTbJcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:b9:48:6f:18:e3:ba:9c:e6:35:73:0e:84:13:d5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
        Validity
            Not Before: Oct 26 01:00:39 2026 GMT
            Not After : Oct 27 01:00:39 2026 GMT
        Subject: CN=9194178ab63e851f4684b6c616d5981e2c837342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:c8:25:ee:f4:2e:d6:8b:a3:a9:60:d5:07:
                    86:6f:48:29:e5:1f:be:70:c9:db:98:2f:6b:71:47:
                    76:60:27:b9:c6:41:b0:d6:41:1f:6e:f8:23:ba:50:
                    70:f7:db:5a:6f:96:a4:39:d4:67:e2:09:f7:67:6e:
                    a3:11:23:13:c8:2c:3b:76:26:92:9d:91:e0:97:0d:
                    0d:35:48:8c:9c:56:64:a3:ee:b3:6a:bd:f2:ca:e9:
                    eb:60:8a:e2:14:6e:37:b7:88:bf:5b:c3:52:de:e5:
                    0a:df:f0:e1:a6:71:d8:7c:94:e4:a0:54:1d:4e:13:
                    b8:60:0b:f9:59:e5:ca:61:f9:24:d8:3c:f7:f2:df:
                    12:bc:72:54:26:db:5f:00:a6:2c:fe:e6:4a:62:62:
                    a4:9a:91:40:a5:4a:69:de:9c:85:de:bb:9f:91:3f:
                    fe:d8:e9:42:9e:e0:5d:a7:06:33:a4:a3:d3:14:cc:
                    d6:4f:88:10:d6:e0:02:d1:13:1e:0b:c4:05:ba:87:
                    ca:db:75:6f:21:55:23:71:2d:b6:23:ae:46:c0:93:
                    07:de:fb:00:1e:da:d7:ca:9b:1b:91:11:84:a8:a0:
                    07:fd:77:d0:a0:ea:01:14:99:26:3d:7b:2f:3f:a2:
                    fd:85:05:7d:a4:14:60:f4:15:49:a1:26:94:17:54:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:94:17:8A:B6:3E:85:1F:46:84:B6:C6:16:D5:98:1E:2C:83:73:42
            X509v3 Authority Key Identifier:
                keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:73:5e:87:9f:af:3b:8f:a5:6f:36:20:b1:1d:f9:95:34:3f:
         28:e7:0b:78:ab:a4:0a:9c:d9:9f:9a:71:05:eb:d6:aa:23:dd:
         3f:54:46:03:c1:81:fc:d6:df:75:6b:b0:fc:ce:fc:9f:4f:f4:
         d8:43:70:bf:fd:4a:e7:f4:e2:eb:f7:e0:c8:e4:e7:a7:0c:92:
         ab:58:63:3e:66:2f:9a:87:92:15:2f:2d:bd:f6:74:3d:85:09:
         1a:0f:f9:1b:ee:e9:94:5d:68:6a:a9:c4:0e:4f:79:9d:dc:70:
         b9:db:bc:11:6f:55:98:47:65:3f:59:99:fc:f0:4c:64:c0:27:
         83:9a:bc:fc:6c:f2:4d:01:86:9a:64:b2:12:ff:ca:fc:bf:74:
         ad:1d:54:52:bf:25:6e:32:43:8b:57:c0:6e:0d:ff:3a:e7:e1:
         53:fd:2c:90:ef:b9:32:3e:c9:51:84:70:b3:b7:1f:c9:2b:4f:
         a0:75:3a:39:9c:ec:ae:6e:76:91:7e:88:63:1a:6c:1c:99:e5:
         9b:8c:3d:6e:6f:50:51:e9:13:2d:dd:03:c0:c5:26:33:d5:f1:
         d1:0c:3a:99:a7:b9:a8:67:34:35:cc:3b:1f:ac:91:72:7c:73:
         47:25:e9:5c:c1:84:e7:b7:c6:98:0b:07:3c:5d:8b:13:e2:06:
         d9:89:ef:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF1uUhvGOO6nOY1cw6EE9V1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YmJhZWI3MGIzZjFkMDY3MTYzNThhZDlhMmVjZmVmN2Qy
MTI2ZmIwHhcNMjYxMDI2MDEwMDM5WhcNMjYxMDI3MDEwMDM5WjAzMTEwLwYDVQQD
Eyg5MTk0MTc4YWI2M2U4NTFmNDY4NGI2YzYxNmQ1OTgxZTJjODM3MzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwePIJe70LtaLo6lg1QeGb0gp5R++
cMnbmC9rcUd2YCe5xkGw1kEfbvgjulBw99tab5akOdRn4gn3Z26jESMTyCw7diaS
nZHglw0NNUiMnFZko+6zar3yyunrYIriFG43t4i/W8NS3uUK3/DhpnHYfJTkoFQd
ThO4YAv5WeXKYfkk2Dz38t8SvHJUJttfAKYs/uZKYmKkmpFApUpp3pyF3rufkT/+
2OlCnuBdpwYzpKPTFMzWT4gQ1uAC0RMeC8QFuofK23VvIVUjcS22I65GwJMH3vsA
HtrXypsbkRGEqKAH/XfQoOoBFJkmPXsvP6L9hQV9pBRg9BVJoSaUF1TeEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGUF4q2PoUfRoS2xhbVmB4sg3NCMB8GA1UdIwQY
MBaAFIS7rrcLPx0GcWNYrZouz+99ISb7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEx1dXR3c19IUVp4WTFpdG1pN1A3MzBoSnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjdlYjctZTQ5Ni00YzMxLTlmNjct
OTc5MDJkOGE3ZmE2LzEvaEx1dXR3c19IUVp4WTFpdG1pN1A3MzBoSnZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iNjdlYjctZTQ5Ni00YzMxLTlmNjctOTc5MDJkOGE3ZmE2
LzEvaEx1dXR3c19IUVp4WTFpdG1pN1A3MzBoSnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnNeh5+v
O4+lbzYgsR35lTQ/KOcLeKukCpzZn5pxBevWqiPdP1RGA8GB/NbfdWuw/M78n0/0
2ENwv/1K5/Ti6/fgyOTnpwySq1hjPmYvmoeSFS8tvfZ0PYUJGg/5G+7plF1oaqnE
Dk95ndxwudu8EW9VmEdlP1mZ/PBMZMAng5q8/GzyTQGGmmSyEv/K/L90rR1UUr8l
bjJDi1fAbg3/OufhU/0skO+5Mj7JUYRws7cfyStPoHU6OZzsrm52kX6IYxpsHJnl
m4w9bm9QUekTLd0DwMUmM9Xx0Qw6mae5qGc0Ncw7H6yRcnxzRyXpXMGE57fGmAsH
PF2LE+IG2Ynvwg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 07:32:38 2026 by rpki-client