Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
File:                     ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json)
Hash identifier:          nywKUNUuZyTcKEo4hB/iitnzrPyVOubZ2Gbl4T2VphM=
Subject key identifier:   EF:88:42:CF:D2:83:98:7D:17:BD:DC:85:73:0D:EB:C7:68:84:00:B7
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Certificate issuer:       /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial:       01A13D1340F1CEDF8FA96F3285C3EFB26819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
Manifest number:          1125
Signing time:             Thu 15 Oct 2026 01:00:34 +0000
Manifest this update:     Thu 15 Oct 2026 01:00:34 +0000
Manifest next update:     Fri 16 Oct 2026 01:00:34 +0000
Files and hashes:         1: 5QIRXwbGdujxdQZQo1ogf2n4ECU.roa (hash: swE11M7pxffwm23eQGI729DPqze3M2Czs+U2Z9G7DZk=)
                          2: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: 6g4i8IF61MvXMQnI2PKhXQ7MWfmG16g/8gsNOu/FToU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:13:40:f1:ce:df:8f:a9:6f:32:85:c3:ef:b2:68:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
        Validity
            Not Before: Oct 15 01:00:34 2026 GMT
            Not After : Oct 16 01:00:34 2026 GMT
        Subject: CN=ef8842cfd283987d17bddc85730debc7688400b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:6a:d9:62:c2:00:f5:46:28:78:d3:10:bf:
                    7a:71:e1:fe:7a:f1:26:ed:79:28:16:05:72:c1:c9:
                    5f:eb:00:92:43:cf:74:c6:f3:b7:2b:c6:57:72:d5:
                    9c:df:6f:ab:1c:bb:d2:d0:05:d4:89:22:a9:74:bc:
                    8f:df:9c:2b:8a:2e:41:c3:80:e6:56:ce:15:57:19:
                    db:d5:99:eb:ce:6b:cd:3a:67:f3:7b:3b:1e:62:30:
                    05:05:f1:30:b5:a8:a4:ff:2a:e7:bc:58:1f:ce:2a:
                    8b:a5:81:e5:ca:54:93:5f:37:ee:9d:b6:b9:45:4f:
                    48:10:2f:5d:0b:e2:c0:55:59:b1:b4:95:01:b7:da:
                    aa:f7:06:d8:04:e1:cb:b5:96:ed:e0:1a:8b:be:4f:
                    34:d1:9c:a9:ab:33:ce:d7:a6:c7:3c:ff:c2:2f:91:
                    de:3a:f6:f2:6d:5d:cd:e1:3a:8d:2a:0d:69:ad:60:
                    b5:0e:95:e2:12:1f:4b:ac:24:1f:96:85:84:3a:2d:
                    76:12:cd:2b:ab:88:ea:8a:7a:54:56:85:2d:55:76:
                    10:98:06:76:92:63:60:ab:d6:ed:f5:47:16:5a:92:
                    5a:81:aa:ae:ab:68:b9:96:71:b8:08:7d:40:a5:08:
                    69:89:4a:7a:aa:d2:c2:74:7c:6e:85:30:0a:85:b0:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:88:42:CF:D2:83:98:7D:17:BD:DC:85:73:0D:EB:C7:68:84:00:B7
            X509v3 Authority Key Identifier:
                keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bd:1a:0a:25:0c:16:8c:8c:ee:3c:2c:1e:af:f1:14:64:ee:
         51:30:9b:c1:fa:7e:bd:a5:c6:6c:15:80:ce:ad:77:93:ab:b9:
         a2:9e:df:39:a1:89:62:78:d7:36:9b:88:20:9f:1d:8d:c2:6a:
         4f:3a:f3:97:56:a3:34:72:27:ee:78:dc:0f:8f:2b:48:06:c0:
         b2:62:e9:d8:5a:6e:78:23:0b:9b:2b:10:7f:ef:45:86:f6:0e:
         55:ad:c2:0c:bf:76:93:4c:7f:23:f1:54:6f:54:1b:7c:dc:0c:
         4b:2b:1f:2d:2a:fd:f1:33:63:a3:f4:0e:ba:20:91:e4:95:9c:
         72:5b:eb:cc:e3:b3:08:66:bc:ff:41:9e:38:b9:d3:c6:f2:81:
         5f:43:34:f1:60:58:13:5e:fd:c6:15:6c:1a:7f:63:dc:67:01:
         50:26:dc:f3:23:2a:9c:ae:a3:4b:56:61:de:67:24:96:fd:90:
         5a:75:b3:40:29:8d:e4:57:1d:ee:ab:48:9f:db:84:71:0c:51:
         15:a9:8b:16:94:4a:67:61:b5:cd:8e:bd:af:6b:ae:9e:45:32:
         42:a0:5f:39:4e:7b:ed:4e:96:6e:3a:88:6c:e8:bd:1b:c1:17:
         4d:c4:f3:95:36:0f:38:e1:c8:9c:0b:35:19:98:24:2e:96:35:
         2f:2e:30:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9E0Dxzt+PqW8yhcPvsmgZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxM2M3NDEzMjU5NzE2MmNkYjJkZDYzNzYwYWJkOTk3MWUz
MGJmNjMwHhcNMjYxMDE1MDEwMDM0WhcNMjYxMDE2MDEwMDM0WjAzMTEwLwYDVQQD
EyhlZjg4NDJjZmQyODM5ODdkMTdiZGRjODU3MzBkZWJjNzY4ODQwMGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2Rq2WLCAPVGKHjTEL96ceH+evEm
7XkoFgVywclf6wCSQ890xvO3K8ZXctWc32+rHLvS0AXUiSKpdLyP35wrii5Bw4Dm
Vs4VVxnb1ZnrzmvNOmfzezseYjAFBfEwtaik/yrnvFgfziqLpYHlylSTXzfunba5
RU9IEC9dC+LAVVmxtJUBt9qq9wbYBOHLtZbt4BqLvk800ZypqzPO16bHPP/CL5He
OvbybV3N4TqNKg1prWC1DpXiEh9LrCQfloWEOi12Es0rq4jqinpUVoUtVXYQmAZ2
kmNgq9bt9UcWWpJagaquq2i5lnG4CH1ApQhpiUp6qtLCdHxuhTAKhbDixQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+IQs/Sg5h9F73chXMN68dohAC3MB8GA1UdIwQY
MBaAFAE8dBMllxYs2y3WN2Cr2ZceML9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTZjODAtMDNhMS00YTRjLTkxY2Yt
MDY4Yjc3ZTkwM2EwLzEvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYTZjODAtMDNhMS00YTRjLTkxY2YtMDY4Yjc3ZTkwM2Ew
LzEvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUL0aCiUM
FoyM7jwsHq/xFGTuUTCbwfp+vaXGbBWAzq13k6u5op7fOaGJYnjXNpuIIJ8djcJq
Tzrzl1ajNHIn7njcD48rSAbAsmLp2FpueCMLmysQf+9FhvYOVa3CDL92k0x/I/FU
b1QbfNwMSysfLSr98TNjo/QOuiCR5JWcclvrzOOzCGa8/0GeOLnTxvKBX0M08WBY
E179xhVsGn9j3GcBUCbc8yMqnK6jS1Zh3mcklv2QWnWzQCmN5Fcd7qtIn9uEcQxR
FamLFpRKZ2G1zY69r2uunkUyQqBfOU577U6WbjqIbOi9G8EXTcTzlTYPOOHInAs1
GZgkLpY1Ly4wxA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:12 2026 by rpki-client