Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File:                     acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier:          vwv0e3iXXpRYxeC8GAClFqm5eH3R2BLhHmSjQKi9KK4=
Subject key identifier:   EC:16:E5:CC:AB:2E:13:E3:AE:F6:A0:81:0B:B2:10:6B:2A:4C:EB:BC
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer:       /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial:       01A17739F994161FCAEBB4550F2A3CA681DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number:          1AC5
Signing time:             Mon 26 Oct 2026 08:00:50 +0000
Manifest this update:     Mon 26 Oct 2026 08:00:50 +0000
Manifest next update:     Tue 27 Oct 2026 08:00:50 +0000
Files and hashes:         1: 8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa (hash: hTQqJteeaF5ZjxlYrkjPbZjafNKCCRD7RpYTaq51+Q4=)
                          2: WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa (hash: WNLKDaJxOe6Uz6jgAOWxAF+kTRgHf8gZjh0RxUla/9E=)
                          3: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: xxmxFIR1GVliEXOP+zLs53g8rE/MtNolHzEXZQQZGWI=)
                          4: gKFSZ12cdmISn4h5sbRx_f8ayV0.roa (hash: EtpOpvk7x1JOKFPhiQBQKjgaBtJnr2gJBSccIdWGROA=)
                          5: yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa (hash: TjYy4/mDVjYziy+CeletARV0PQ6H5KzIho/639xxwbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:77:39:f9:94:16:1f:ca:eb:b4:55:0f:2a:3c:a6:81:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
        Validity
            Not Before: Oct 26 08:00:50 2026 GMT
            Not After : Oct 27 08:00:50 2026 GMT
        Subject: CN=ec16e5ccab2e13e3aef6a0810bb2106b2a4cebbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:13:7a:bc:a2:8c:6c:26:db:b3:70:53:ab:ae:
                    55:e8:24:ec:07:dd:a5:d2:0c:8c:25:cd:a4:67:49:
                    7b:24:a4:45:da:e7:5d:9d:3e:05:07:61:97:46:cf:
                    30:6a:0a:36:6b:8f:bd:36:33:a5:f9:1d:e1:3b:9c:
                    c5:3a:e1:27:11:d1:be:e9:52:60:b0:61:c1:c8:42:
                    47:f0:8f:b2:a2:85:62:34:8f:1e:fa:2e:c9:d6:28:
                    29:a0:5c:ba:66:56:fc:df:ee:5a:44:3c:8a:ee:2b:
                    00:8a:f3:4c:43:30:88:70:bf:3d:e1:fe:57:b5:1c:
                    50:2b:6e:1c:cd:f8:d2:dd:22:96:d6:3c:e3:fc:f6:
                    5d:3c:c1:d1:01:63:46:81:23:8b:16:b7:d8:40:14:
                    e1:27:7e:97:5e:67:56:ed:88:2c:39:b6:d3:eb:75:
                    f0:48:a7:74:41:d4:f8:73:39:8a:ae:4d:b9:0d:35:
                    69:5b:20:9a:e8:50:01:25:ff:98:a6:1b:38:d7:8b:
                    5e:aa:e2:f0:1f:48:57:e8:5a:33:fc:6e:5a:80:a0:
                    bc:f5:6a:94:8e:b9:44:35:1f:ab:8a:cf:06:c9:f7:
                    ff:13:20:2a:c2:84:13:2d:00:50:a3:66:21:77:d8:
                    47:45:13:6d:aa:8e:bf:7e:19:ac:0f:e5:67:79:a0:
                    6b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:16:E5:CC:AB:2E:13:E3:AE:F6:A0:81:0B:B2:10:6B:2A:4C:EB:BC
            X509v3 Authority Key Identifier:
                keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:55:5e:9d:57:34:21:32:78:e3:ad:3f:f2:64:2d:b4:e6:39:
         0a:68:d6:56:47:37:8b:b7:26:9f:ca:9c:0f:26:df:1a:b7:f7:
         08:50:18:9e:5a:05:94:75:51:fc:63:fa:ee:9d:b1:6b:35:55:
         34:0d:62:10:aa:e4:e2:61:08:de:5f:4d:f5:bf:5f:6b:aa:47:
         8b:85:06:2b:2a:8b:d1:70:cf:2c:9a:ca:7f:94:d8:cd:69:b7:
         53:de:b3:18:d6:1d:45:a4:de:72:99:8b:0f:85:44:30:4b:63:
         b2:7a:3f:80:f8:13:4e:b2:63:13:b0:15:3d:f1:90:2b:3b:c0:
         16:e4:75:69:12:69:b1:78:ce:cd:e9:f5:be:ac:4c:3d:32:6d:
         f2:52:d4:e6:f8:c3:ec:22:58:64:70:7f:ea:70:1f:5a:7e:66:
         79:3c:07:be:45:34:0f:88:20:29:fe:76:58:83:a2:f8:67:08:
         d2:1b:33:0a:68:ba:5d:38:93:fb:fa:38:8d:e6:76:68:66:eb:
         6e:6d:63:37:ed:fc:cd:25:e4:77:bd:42:d7:0e:61:d7:65:c6:
         dc:e8:c2:12:45:85:69:5d:96:52:92:e3:d9:43:8d:f1:d3:89:
         81:18:cb:ff:1c:5b:24:65:7a:0a:ab:22:9d:22:cb:a1:71:77:
         bf:28:91:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3OfmUFh/K67RVDyo8poHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl
Yjc2ZWQwHhcNMjYxMDI2MDgwMDUwWhcNMjYxMDI3MDgwMDUwWjAzMTEwLwYDVQQD
EyhlYzE2ZTVjY2FiMmUxM2UzYWVmNmEwODEwYmIyMTA2YjJhNGNlYmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hN6vKKMbCbbs3BTq65V6CTsB92l
0gyMJc2kZ0l7JKRF2uddnT4FB2GXRs8wago2a4+9NjOl+R3hO5zFOuEnEdG+6VJg
sGHByEJH8I+yooViNI8e+i7J1igpoFy6Zlb83+5aRDyK7isAivNMQzCIcL894f5X
tRxQK24czfjS3SKW1jzj/PZdPMHRAWNGgSOLFrfYQBThJ36XXmdW7YgsObbT63Xw
SKd0QdT4czmKrk25DTVpWyCa6FABJf+Yphs414tequLwH0hX6Foz/G5agKC89WqU
jrlENR+ris8Gyff/EyAqwoQTLQBQo2Yhd9hHRRNtqo6/fhmsD+VneaBr/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwW5cyrLhPjrvaggQuyEGsqTOu8MB8GA1UdIwQY
MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt
ZjQ3YWU3ZGRhZWMwLzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw
LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlVenVc0
ITJ4460/8mQttOY5CmjWVkc3i7cmn8qcDybfGrf3CFAYnloFlHVR/GP67p2xazVV
NA1iEKrk4mEI3l9N9b9fa6pHi4UGKyqL0XDPLJrKf5TYzWm3U96zGNYdRaTecpmL
D4VEMEtjsno/gPgTTrJjE7AVPfGQKzvAFuR1aRJpsXjOzen1vqxMPTJt8lLU5vjD
7CJYZHB/6nAfWn5meTwHvkU0D4ggKf52WIOi+GcI0hszCmi6XTiT+/o4jeZ2aGbr
bm1jN+38zSXkd71C1w5h12XG3OjCEkWFaV2WUpLj2UON8dOJgRjL/xxbJGV6Cqsi
nSLLoXF3vyiRJQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 14:22:45 2026 by rpki-client