Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File:                     t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier:          spDPqfwbOMaE/P9EMEH9Bgo6ToJdPBlNAS2uEtNcb/c=
Subject key identifier:   A2:4E:59:7A:81:D7:03:B7:27:6E:6A:8E:9F:55:DD:1B:C1:47:B1:71
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer:       /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial:       01A17E17FB4E22C516B2397DEF53FE7C6F1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number:          05D6
Signing time:             Tue 27 Oct 2026 16:01:03 +0000
Manifest this update:     Tue 27 Oct 2026 16:01:03 +0000
Manifest next update:     Wed 28 Oct 2026 16:01:03 +0000
Files and hashes:         1: 1LsBmA-SbOfGa2eleJLL4F-PoS0.roa (hash: fOsQjw7Bt8zL6Bscj5Hp28N4r7Zpof4N2iXErdaa6yA=)
                          2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: WV8J7Bn1tCxY2nc4A4Gk1Lbv7kKmIo1hx6ydzFGeVDM=)
                          3: yUSfqsPPl1YTQhIE73fMTmMnfkE.roa (hash: yAZHs4HcwBg1li8wEtRge9Bo9Q1pztQUu5urOyY+7Fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:17:fb:4e:22:c5:16:b2:39:7d:ef:53:fe:7c:6f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
        Validity
            Not Before: Oct 27 16:01:03 2026 GMT
            Not After : Oct 28 16:01:03 2026 GMT
        Subject: CN=a24e597a81d703b7276e6a8e9f55dd1bc147b171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:ac:ae:0b:3c:b5:b8:27:b8:9c:b7:3d:f9:
                    fe:b8:28:40:f1:30:01:ae:7b:04:e6:a2:d5:f0:bb:
                    f2:b4:c6:77:9d:25:9d:d1:69:5c:e1:89:85:8f:3f:
                    c2:94:01:50:d6:55:00:bf:2d:0a:c1:c7:b5:46:18:
                    07:cf:a8:28:8a:5e:b9:f3:77:23:3f:9e:41:d2:a4:
                    c3:53:20:f6:05:dd:e4:de:2d:0b:dc:b0:28:95:a3:
                    5e:73:54:29:59:5c:fe:f4:e0:cf:d9:ff:80:4a:b4:
                    3a:01:82:fa:0b:96:f0:25:b2:46:ae:48:ef:8e:9a:
                    0b:59:2d:b6:42:83:b3:bd:73:72:6e:f3:31:5c:86:
                    72:d7:d3:39:fa:a2:83:31:d6:aa:17:30:68:3f:37:
                    79:99:35:b9:22:39:76:20:22:09:6b:69:e7:f9:41:
                    cc:a3:0c:08:38:a8:67:3a:59:7c:d6:e9:b4:42:c1:
                    60:6c:a1:2e:64:98:f2:a4:f8:cf:53:88:51:74:64:
                    66:9d:d9:3e:71:f2:5e:5b:1a:86:73:5a:f0:b7:73:
                    f8:69:6b:a5:16:8c:51:5d:66:ef:02:2e:6c:a5:3c:
                    8f:4f:86:ce:12:73:cf:51:00:6f:d4:83:cf:64:2d:
                    71:c6:8c:3b:db:fd:16:35:14:36:ed:f2:5f:ff:58:
                    52:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4E:59:7A:81:D7:03:B7:27:6E:6A:8E:9F:55:DD:1B:C1:47:B1:71
            X509v3 Authority Key Identifier:
                keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5b:06:9a:b7:47:2c:ac:46:18:2c:4c:92:21:b8:84:98:04:
         b0:40:2e:9a:cc:f9:4e:aa:10:6f:d4:ac:f6:26:60:20:b8:d1:
         f3:ff:a7:10:5f:24:04:36:6c:d1:c6:1a:ea:3e:0b:57:c4:04:
         d6:ce:0e:cc:77:2b:67:7b:43:9f:14:66:15:9c:2e:53:d3:f8:
         34:52:2a:e3:78:66:83:98:85:c6:10:38:82:e3:60:cd:76:e0:
         57:f5:dd:a6:c7:77:6f:34:c8:b6:81:68:6b:fe:f6:d2:fa:ba:
         e4:ca:9b:e7:d0:f0:53:82:e1:d1:6b:bd:46:00:86:dc:cd:70:
         bc:60:1c:de:5b:30:17:c9:20:8d:86:5b:fb:14:d0:07:22:20:
         d5:71:6e:5a:8c:26:3a:5b:c0:6f:40:69:30:82:a8:a6:c9:68:
         61:00:81:ac:0e:36:33:bf:8d:cc:8d:2e:96:12:3c:5d:52:0b:
         b6:f5:2d:d6:3a:96:e6:a7:94:60:21:62:45:af:7c:cb:05:7a:
         35:93:19:fb:fd:8e:38:a6:8a:24:f6:a6:ca:ec:ad:b1:42:9e:
         4c:73:09:be:a2:0e:a2:34:73:81:59:7a:15:97:01:74:af:29:
         4a:4d:0f:9c:15:4e:80:2a:08:13:6f:c4:17:a2:9b:9e:7e:16:
         ce:3a:7d:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+F/tOIsUWsjl971P+fG8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NTRiMjJjNTU0MDUwOGQ5NjI5YTMxMWVmMWU4MzU0MzY1
N2M0ZWUwHhcNMjYxMDI3MTYwMTAzWhcNMjYxMDI4MTYwMTAzWjAzMTEwLwYDVQQD
EyhhMjRlNTk3YTgxZDcwM2I3Mjc2ZTZhOGU5ZjU1ZGQxYmMxNDdiMTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHGsrgs8tbgnuJy3Pfn+uChA8TAB
rnsE5qLV8LvytMZ3nSWd0Wlc4YmFjz/ClAFQ1lUAvy0Kwce1RhgHz6goil6583cj
P55B0qTDUyD2Bd3k3i0L3LAolaNec1QpWVz+9ODP2f+ASrQ6AYL6C5bwJbJGrkjv
jpoLWS22QoOzvXNybvMxXIZy19M5+qKDMdaqFzBoPzd5mTW5Ijl2ICIJa2nn+UHM
owwIOKhnOll81um0QsFgbKEuZJjypPjPU4hRdGRmndk+cfJeWxqGc1rwt3P4aWul
FoxRXWbvAi5spTyPT4bOEnPPUQBv1IPPZC1xxow72/0WNRQ27fJf/1hSbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJOWXqB1wO3J25qjp9V3RvBR7FxMB8GA1UdIwQY
MBaAFLdUsixVQFCNlimjEe8eg1Q2V8TuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iNTUxM2EtYmE2OS00OGM0LTk1ZWUt
NTZlYzEzMjY5YTFjLzEvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iNTUxM2EtYmE2OS00OGM0LTk1ZWUtNTZlYzEzMjY5YTFj
LzEvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1sGmrdH
LKxGGCxMkiG4hJgEsEAumsz5TqoQb9Ss9iZgILjR8/+nEF8kBDZs0cYa6j4LV8QE
1s4OzHcrZ3tDnxRmFZwuU9P4NFIq43hmg5iFxhA4guNgzXbgV/Xdpsd3bzTItoFo
a/720vq65Mqb59DwU4Lh0Wu9RgCG3M1wvGAc3lswF8kgjYZb+xTQByIg1XFuWowm
OlvAb0BpMIKopsloYQCBrA42M7+NzI0ulhI8XVILtvUt1jqW5qeUYCFiRa98ywV6
NZMZ+/2OOKaKJPamyuytsUKeTHMJvqIOojRzgVl6FZcBdK8pSk0PnBVOgCoIE2/E
F6Kbnn4Wzjp9Cg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:48:00 2026 by rpki-client