Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
File:                     9SHhdPhPcWWWHUG2jqcmLigzfWk.mft (raw, json)
Hash identifier:          uPhdOYxPeMBmGjO0MiRFEFmJhtSUfDE7UP8wATegHMc=
Subject key identifier:   EB:DC:16:E1:4B:A8:5C:D3:99:EE:63:75:77:16:15:FD:2F:EE:E0:DA
Authority key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
Certificate issuer:       /CN=f521e174f84f7165961d41b68ea7262e28337d69
Certificate serial:       01A11B6356301396796727BACD25262BB204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
Manifest number:          0414
Signing time:             Thu 08 Oct 2026 12:00:57 +0000
Manifest this update:     Thu 08 Oct 2026 12:00:57 +0000
Manifest next update:     Fri 09 Oct 2026 12:00:57 +0000
Files and hashes:         1: 1-rxopH5LJ9Uzi5ISHJXR-dur0jc.roa (hash: aHfsmVZKRy+7AFPaygX163J+5qjXxNU2emyKoCQGtN0=)
                          2: 9SHhdPhPcWWWHUG2jqcmLigzfWk.crl (hash: 626bFunJN9eyYFwcKL2D/RzgBE/b/YTZjAa1atog6EI=)
                          3: F_pPHJDcrHyVOVWzvhakia7DJiQ.roa (hash: tFJBSOLCH7tZWWFthieckptanNdtDSMnw7UCYwe6+Kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:63:56:30:13:96:79:67:27:ba:cd:25:26:2b:b2:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f521e174f84f7165961d41b68ea7262e28337d69
        Validity
            Not Before: Oct  8 12:00:57 2026 GMT
            Not After : Oct  9 12:00:57 2026 GMT
        Subject: CN=ebdc16e14ba85cd399ee6375771615fd2feee0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:18:8f:1e:0a:68:0c:50:eb:71:7a:33:f2:
                    e9:52:e0:cf:63:1c:37:ab:6d:da:b6:79:5d:a9:56:
                    be:81:a9:95:6b:e5:b1:1e:05:b8:c0:0e:42:5b:f8:
                    35:89:ea:bb:9b:62:3c:4f:10:d1:84:52:73:53:a0:
                    07:a1:4f:13:5e:8d:be:49:26:b2:bc:6e:3d:2f:bf:
                    dc:e9:d7:00:0e:ee:c3:e3:8f:bd:ee:42:ba:8d:08:
                    e6:d7:a4:26:30:f9:18:e3:70:44:50:58:81:28:67:
                    9b:9b:6d:fd:d5:c0:a3:2a:3a:90:d7:00:43:aa:56:
                    71:d4:e9:ac:0c:d2:ff:b4:99:ff:f5:55:91:12:cc:
                    81:81:9d:25:52:a0:f8:ab:f4:b2:8d:9e:c1:86:d2:
                    71:2f:09:f2:80:a4:6e:8f:e1:b4:f6:d1:f5:01:a2:
                    00:2e:cc:05:56:5a:67:63:77:13:c4:ac:51:94:41:
                    7b:e0:14:1c:03:25:01:7e:23:eb:7a:4b:c9:19:86:
                    fc:47:d8:13:1e:b3:a6:63:32:d6:16:3f:b7:ba:72:
                    b9:be:27:aa:7a:55:41:7b:21:ec:bb:03:67:07:07:
                    77:ed:47:b3:7b:b6:a5:47:67:55:99:b6:3d:8f:24:
                    7f:8b:e9:ea:fe:f3:d0:00:66:77:51:87:ad:f9:dd:
                    11:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DC:16:E1:4B:A8:5C:D3:99:EE:63:75:77:16:15:FD:2F:EE:E0:DA
            X509v3 Authority Key Identifier:
                keyid:F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b6:ae:27:f0:51:33:cf:ef:09:49:a3:3a:d3:6b:75:6c:c9:
         81:1d:ef:8c:ae:bc:72:fe:04:d1:4c:d4:8e:ab:4b:f2:2a:89:
         68:0b:75:3d:a4:99:89:1c:63:20:eb:7e:cf:3c:de:88:c1:f8:
         b7:58:c5:f9:60:52:8b:73:8d:da:59:fd:21:c8:ae:8b:8d:09:
         af:6d:98:9f:26:01:b7:48:cc:bc:08:d1:2e:59:7a:ea:79:b5:
         3f:cd:5b:19:d6:2d:92:fa:a5:85:e8:b4:15:05:ee:3f:34:37:
         2e:85:38:6e:e8:5f:74:fb:7e:0f:11:0b:db:5c:27:f2:b8:ed:
         90:b0:b2:db:d4:37:af:0c:3e:f0:de:cc:1b:d9:68:2b:a4:10:
         5c:a3:03:72:f9:65:b5:0c:3b:f0:52:af:66:02:66:9e:cc:30:
         34:4c:93:38:7f:58:57:63:45:a6:57:29:b6:48:e1:0e:4f:ce:
         04:00:3a:10:54:60:89:f4:67:42:e1:9f:90:5b:40:99:73:ae:
         59:e8:fc:ec:0c:e7:4c:f9:ff:2a:3a:2c:58:60:19:f1:bf:b4:
         5e:de:7c:9c:d3:6c:d5:68:20:58:02:cc:81:76:a9:e2:1a:2e:
         7e:b2:07:e7:03:d9:89:d4:41:0d:45:0e:6e:b7:46:20:ec:30:
         70:c5:02:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEbY1YwE5Z5Zye6zSUmK7IEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MjFlMTc0Zjg0ZjcxNjU5NjFkNDFiNjhlYTcyNjJlMjgz
MzdkNjkwHhcNMjYxMDA4MTIwMDU3WhcNMjYxMDA5MTIwMDU3WjAzMTEwLwYDVQQD
EyhlYmRjMTZlMTRiYTg1Y2QzOTllZTYzNzU3NzE2MTVmZDJmZWVlMGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxEYjx4KaAxQ63F6M/LpUuDPYxw3
q23atnldqVa+gamVa+WxHgW4wA5CW/g1ieq7m2I8TxDRhFJzU6AHoU8TXo2+SSay
vG49L7/c6dcADu7D44+97kK6jQjm16QmMPkY43BEUFiBKGebm2391cCjKjqQ1wBD
qlZx1OmsDNL/tJn/9VWREsyBgZ0lUqD4q/SyjZ7BhtJxLwnygKRuj+G09tH1AaIA
LswFVlpnY3cTxKxRlEF74BQcAyUBfiPrekvJGYb8R9gTHrOmYzLWFj+3unK5vieq
elVBeyHsuwNnBwd37Ueze7alR2dVmbY9jyR/i+nq/vPQAGZ3UYet+d0RjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvcFuFLqFzTme5jdXcWFf0v7uDaMB8GA1UdIwQY
MBaAFPUh4XT4T3Fllh1Bto6nJi4oM31pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVNIaGRQaFBjV1dXSFVHMmpxY21MaWd6ZldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kOWEwMTAtZDVmNy00NjYxLThkMzIt
ZGQwNjExMWYzZjk2LzEvOVNIaGRQaFBjV1dXSFVHMmpxY21MaWd6ZldrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kOWEwMTAtZDVmNy00NjYxLThkMzItZGQwNjExMWYzZjk2
LzEvOVNIaGRQaFBjV1dXSFVHMmpxY21MaWd6ZldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLauJ/BR
M8/vCUmjOtNrdWzJgR3vjK68cv4E0UzUjqtL8iqJaAt1PaSZiRxjIOt+zzzeiMH4
t1jF+WBSi3ON2ln9Iciui40Jr22YnyYBt0jMvAjRLll66nm1P81bGdYtkvqlhei0
FQXuPzQ3LoU4buhfdPt+DxEL21wn8rjtkLCy29Q3rww+8N7MG9loK6QQXKMDcvll
tQw78FKvZgJmnswwNEyTOH9YV2NFplcptkjhDk/OBAA6EFRgifRnQuGfkFtAmXOu
Wej87AznTPn/KjosWGAZ8b+0Xt58nNNs1WggWALMgXap4houfrIH5wPZidRBDUUO
brdGIOwwcMUCXQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:01:19 2026 by rpki-client