Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
File:                     fEuRfckEagZWeK4N9NPjA2nFnGk.mft (raw, json)
Hash identifier:          cNsOIty9o9iDcvxPuN7F8yehQ6EUY9zYLX+p3Z9fo+g=
Subject key identifier:   5E:B4:22:7B:E9:9A:03:7B:11:9A:6A:F0:E7:A6:26:58:2C:55:43:7A
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Certificate issuer:       /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial:       01A124664718850065D51B05DD1FC66AF2AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
Manifest number:          1A9F
Signing time:             Sat 10 Oct 2026 06:00:44 +0000
Manifest this update:     Sat 10 Oct 2026 06:00:44 +0000
Manifest next update:     Sun 11 Oct 2026 06:00:44 +0000
Files and hashes:         1: 2WzfG0V96raprl5tsrksiHfaCdM.roa (hash: cj3zFnBwwSp9dR2SjduOa1CA7OqZ5tws9MqCW7cLVIs=)
                          2: GwGQYsMzCM-acyFwRTD_V6RJb1M.roa (hash: yUvTGQ5x8/a8Em1WiCW5G1UcimmI7vXu3ljW5sL9lrQ=)
                          3: ay0zAsb-sMRwuqTNi_w0IDfhaZI.roa (hash: 3u1jyhcVn10YQbx/gEpZqXx9qUydqj7K6pIwggoaC9c=)
                          4: fEuRfckEagZWeK4N9NPjA2nFnGk.crl (hash: HGSZQv2UdVgIbXMxXQsKrcXuwkCo3mHG7ErDYfpYuIA=)
                          5: rjeQuso8QDTQv-e8DadgkyEpULg.roa (hash: 4fHbwtCeYsUoufkC59D0UmTlBIXmN4qyj78Mnr4mr2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:66:47:18:85:00:65:d5:1b:05:dd:1f:c6:6a:f2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
        Validity
            Not Before: Oct 10 06:00:44 2026 GMT
            Not After : Oct 11 06:00:44 2026 GMT
        Subject: CN=5eb4227be99a037b119a6af0e7a626582c55437a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:79:f6:57:a7:7f:5b:22:02:1c:17:e7:bb:25:
                    2d:90:4c:93:14:fe:99:4a:84:16:47:19:41:53:3e:
                    26:51:a8:de:4a:44:39:75:b0:51:82:60:9d:72:fe:
                    fe:d7:ef:f0:76:d7:1a:eb:04:07:39:89:0e:ea:33:
                    0b:47:15:03:1f:3c:a0:f5:f5:05:29:27:60:64:cb:
                    b5:65:37:b8:2b:e2:1d:84:f3:4e:a7:51:07:55:75:
                    97:de:9f:63:e6:14:e1:fa:f9:f6:0a:f4:62:50:2f:
                    32:0d:60:db:3c:a7:a9:eb:ef:16:fc:43:9c:84:a9:
                    21:65:4c:e4:9a:76:87:a3:6c:49:76:3d:df:af:ee:
                    b0:f4:6c:b0:10:0f:39:e1:78:40:08:64:75:65:ab:
                    43:45:fa:d4:20:9b:72:83:02:fc:35:7a:6d:d9:fe:
                    27:c1:d0:52:00:d4:5c:28:d4:cf:26:28:eb:b6:9d:
                    cd:8f:23:23:e2:f6:0d:87:1c:01:ae:18:37:97:0c:
                    a3:5b:eb:f1:9e:8d:56:7b:e7:b5:ac:3e:ee:11:23:
                    da:b3:3a:28:e7:98:41:84:f4:14:58:d3:40:64:bf:
                    05:76:13:f7:90:e9:84:02:ca:0c:f5:9b:bf:b4:80:
                    3b:75:ba:0c:cd:b5:d1:6a:77:95:35:cc:ad:94:e6:
                    a4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B4:22:7B:E9:9A:03:7B:11:9A:6A:F0:E7:A6:26:58:2C:55:43:7A
            X509v3 Authority Key Identifier:
                keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:93:4b:d7:70:68:54:0b:fe:d6:86:b1:eb:18:91:0e:a5:6f:
         d5:96:93:89:2c:87:f0:e0:82:8c:ec:b4:79:10:f9:ac:39:b1:
         19:cd:4c:51:db:5d:a4:fa:f7:5d:90:d3:f3:55:92:3f:4f:0e:
         d4:28:ff:d0:1b:5e:43:ae:e2:71:05:a6:27:d1:80:8f:a6:b6:
         fb:05:bb:59:78:ea:02:ab:da:5e:07:6d:d1:a7:78:a4:c8:4c:
         78:81:19:31:41:f0:da:89:78:ea:ca:47:9b:b0:6a:f0:3f:02:
         f1:7d:04:f7:5f:70:37:87:c9:b0:2d:9b:ed:07:89:e0:7a:a9:
         6c:58:dd:63:f1:69:1d:1f:bc:54:d5:bf:06:d2:6f:65:20:d3:
         2b:43:7f:8c:17:1e:e3:6d:c4:15:ed:12:89:98:fe:69:55:95:
         06:11:45:7f:6d:74:29:6a:d6:04:93:76:21:e7:d7:ff:14:55:
         72:7b:3f:c3:37:15:7e:3c:66:2c:ff:f2:d5:c1:c5:62:f0:32:
         fd:0f:6e:b4:84:8f:fc:42:8e:67:cb:f4:79:78:f1:48:fe:61:
         17:3e:e5:b9:89:ce:64:03:c2:be:7d:31:ec:16:a8:29:5d:01:
         9b:93:8e:af:1e:da:6b:f0:72:fb:22:23:10:4e:46:07:75:86:
         88:d3:01:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEkZkcYhQBl1RsF3R/GavKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNGI5MTdkYzkwNDZhMDY1Njc4YWUwZGY0ZDNlMzAzNjlj
NTljNjkwHhcNMjYxMDEwMDYwMDQ0WhcNMjYxMDExMDYwMDQ0WjAzMTEwLwYDVQQD
Eyg1ZWI0MjI3YmU5OWEwMzdiMTE5YTZhZjBlN2E2MjY1ODJjNTU0MzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXn2V6d/WyICHBfnuyUtkEyTFP6Z
SoQWRxlBUz4mUajeSkQ5dbBRgmCdcv7+1+/wdtca6wQHOYkO6jMLRxUDHzyg9fUF
KSdgZMu1ZTe4K+IdhPNOp1EHVXWX3p9j5hTh+vn2CvRiUC8yDWDbPKep6+8W/EOc
hKkhZUzkmnaHo2xJdj3fr+6w9GywEA854XhACGR1ZatDRfrUIJtygwL8NXpt2f4n
wdBSANRcKNTPJijrtp3NjyMj4vYNhxwBrhg3lwyjW+vxno1We+e1rD7uESPaszoo
55hBhPQUWNNAZL8FdhP3kOmEAsoM9Zu/tIA7dboMzbXRaneVNcytlOakpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF60InvpmgN7EZpq8OemJlgsVUN6MB8GA1UdIwQY
MBaAFHxLkX3JBGoGVniuDfTT4wNpxZxpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84ZDg1ZDctNDA0OS00YjVhLTliZjct
OTFjNzBmNjFhMDY3LzEvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84ZDg1ZDctNDA0OS00YjVhLTliZjctOTFjNzBmNjFhMDY3
LzEvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpNL13Bo
VAv+1oax6xiRDqVv1ZaTiSyH8OCCjOy0eRD5rDmxGc1MUdtdpPr3XZDT81WSP08O
1Cj/0BteQ67icQWmJ9GAj6a2+wW7WXjqAqvaXgdt0ad4pMhMeIEZMUHw2ol46spH
m7Bq8D8C8X0E919wN4fJsC2b7QeJ4HqpbFjdY/FpHR+8VNW/BtJvZSDTK0N/jBce
423EFe0SiZj+aVWVBhFFf210KWrWBJN2IefX/xRVcns/wzcVfjxmLP/y1cHFYvAy
/Q9utISP/EKOZ8v0eXjxSP5hFz7luYnOZAPCvn0x7BaoKV0Bm5OOrx7aa/By+yIj
EE5GB3WGiNMBtg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 15:56:17 2026 by rpki-client