Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
File:                     ENJnhg06QDsA4aYcVDSs_265c5Q.mft (raw, json)
Hash identifier:          /UU2DIM1H8hjZiB6NOcEBsnEPSixx4fcIR762b6mBZ4=
Subject key identifier:   FC:F4:8F:70:04:8A:EB:D3:57:D7:02:76:C1:BA:EB:B4:E4:27:2B:B3
Authority key identifier: 10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
Certificate issuer:       /CN=10d267860d3a403b00e1a61c5434acff6eb97394
Certificate serial:       01A10392730C272437A4D686535D33C376C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
Manifest number:          1A19
Signing time:             Sat 03 Oct 2026 21:01:31 +0000
Manifest this update:     Sat 03 Oct 2026 21:01:31 +0000
Manifest next update:     Sun 04 Oct 2026 21:01:31 +0000
Files and hashes:         1: 8AFAw8J8BylZNxkuCYZxLwFMDu4.roa (hash: rqqV4vNuT7ox7Umt3jz1Rj0aoR+gnpbzztReONXP05Y=)
                          2: ENJnhg06QDsA4aYcVDSs_265c5Q.crl (hash: 1z2oQViMFuiuBHs9oBZqJQC+nTDuXPdW2EVJO6upi0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:92:73:0c:27:24:37:a4:d6:86:53:5d:33:c3:76:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d267860d3a403b00e1a61c5434acff6eb97394
        Validity
            Not Before: Oct  3 21:01:31 2026 GMT
            Not After : Oct  4 21:01:31 2026 GMT
        Subject: CN=fcf48f70048aebd357d70276c1baebb4e4272bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:16:67:5f:85:0c:f0:8c:41:62:1b:c0:5a:
                    e7:3b:d4:fd:1f:14:86:9c:29:2f:51:9f:ee:9b:8c:
                    07:e6:38:b7:cf:ec:3d:a2:3d:bf:ed:5f:e4:fc:e2:
                    0c:7e:ee:74:54:85:6f:c8:a1:c1:8c:17:2b:7a:37:
                    f8:ed:a5:78:3f:5b:3e:37:b1:22:8c:3a:85:3e:d5:
                    91:e3:a7:2f:20:88:b1:77:54:86:ff:f6:38:87:25:
                    b2:e1:17:8e:04:43:e9:8b:b5:56:8e:7b:bd:d2:fe:
                    8e:0f:08:e9:8c:f3:ce:da:2a:58:e3:72:be:7b:62:
                    37:7f:a5:6f:b0:e2:84:cd:05:ae:72:94:d2:3c:65:
                    d4:23:d7:61:d0:6b:61:15:b5:a1:d2:a3:31:0e:af:
                    fd:ef:c0:47:f8:24:20:93:1b:6d:6f:ee:52:dc:28:
                    ba:b6:1f:11:c4:a6:f3:12:06:31:6f:e0:3b:c2:02:
                    01:61:90:05:a5:5c:0e:1c:c8:24:68:62:14:1c:6c:
                    94:b7:67:60:4b:bc:8c:7b:8c:fd:8d:c0:50:43:eb:
                    82:bd:8e:82:8d:25:a1:6f:57:a4:0c:ce:bc:8a:9c:
                    57:df:f1:df:43:e2:db:44:28:01:1d:07:5d:f4:69:
                    17:7c:df:86:68:b3:20:fe:58:26:23:b8:58:99:a3:
                    8d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F4:8F:70:04:8A:EB:D3:57:D7:02:76:C1:BA:EB:B4:E4:27:2B:B3
            X509v3 Authority Key Identifier:
                keyid:10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:cd:b5:d1:60:2a:6e:82:f7:d1:52:3d:8d:56:47:cd:8f:f5:
         73:ef:39:f1:bc:33:69:3e:69:00:be:bb:f1:3f:e3:7f:e3:ca:
         94:0c:3c:97:43:45:d5:9e:68:97:57:24:f3:a2:e8:c4:f1:5a:
         a8:80:c5:35:0b:6a:c3:5e:1c:72:b4:de:39:72:08:db:b0:8f:
         3c:bb:07:0b:1f:d8:3e:a5:a1:47:a2:74:2c:d7:16:2f:45:e0:
         7b:5b:c3:f6:e3:9d:ea:ea:f9:0b:07:72:d9:0c:bf:98:cc:5a:
         49:14:69:4a:22:2a:47:bc:66:9b:5c:25:f4:3c:d8:2f:50:8d:
         a8:75:02:f7:40:78:91:ca:8d:00:03:62:1a:3b:b5:26:3f:54:
         de:dd:c6:5c:36:af:b7:f1:48:60:88:0d:c9:99:41:49:0f:a2:
         17:8c:64:8e:d7:7b:c7:ce:db:94:0b:d7:79:47:60:3f:a2:8c:
         d3:83:04:42:31:ac:78:88:67:59:2b:ea:6c:32:5e:b4:af:71:
         3f:5a:d6:cb:75:55:08:91:6e:fc:ca:ea:63:5f:85:a4:53:07:
         8c:60:cd:93:bd:5e:93:ba:c3:8d:76:d3:69:af:e0:d1:4e:c6:
         5f:86:4c:f8:44:6e:d9:f3:27:e2:58:16:9b:d6:33:fa:d1:0e:
         cc:58:e1:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDknMMJyQ3pNaGU10zw3bBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZDI2Nzg2MGQzYTQwM2IwMGUxYTYxYzU0MzRhY2ZmNmVi
OTczOTQwHhcNMjYxMDAzMjEwMTMxWhcNMjYxMDA0MjEwMTMxWjAzMTEwLwYDVQQD
EyhmY2Y0OGY3MDA0OGFlYmQzNTdkNzAyNzZjMWJhZWJiNGU0MjcyYmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7sWZ1+FDPCMQWIbwFrnO9T9HxSG
nCkvUZ/um4wH5ji3z+w9oj2/7V/k/OIMfu50VIVvyKHBjBcrejf47aV4P1s+N7Ei
jDqFPtWR46cvIIixd1SG//Y4hyWy4ReOBEPpi7VWjnu90v6ODwjpjPPO2ipY43K+
e2I3f6VvsOKEzQWucpTSPGXUI9dh0GthFbWh0qMxDq/978BH+CQgkxttb+5S3Ci6
th8RxKbzEgYxb+A7wgIBYZAFpVwOHMgkaGIUHGyUt2dgS7yMe4z9jcBQQ+uCvY6C
jSWhb1ekDM68ipxX3/HfQ+LbRCgBHQdd9GkXfN+GaLMg/lgmI7hYmaONjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPz0j3AEiuvTV9cCdsG667TkJyuzMB8GA1UdIwQY
MBaAFBDSZ4YNOkA7AOGmHFQ0rP9uuXOUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iNmVmNDItYjhjMC00ZTVhLWJkYTEt
MDM0YmNmNGViZGNiLzEvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9iNmVmNDItYjhjMC00ZTVhLWJkYTEtMDM0YmNmNGViZGNi
LzEvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8210WAq
boL30VI9jVZHzY/1c+858bwzaT5pAL678T/jf+PKlAw8l0NF1Z5ol1ck86LoxPFa
qIDFNQtqw14ccrTeOXII27CPPLsHCx/YPqWhR6J0LNcWL0Xge1vD9uOd6ur5Cwdy
2Qy/mMxaSRRpSiIqR7xmm1wl9DzYL1CNqHUC90B4kcqNAANiGju1Jj9U3t3GXDav
t/FIYIgNyZlBSQ+iF4xkjtd7x87blAvXeUdgP6KM04MEQjGseIhnWSvqbDJetK9x
P1rWy3VVCJFu/MrqY1+FpFMHjGDNk71ek7rDjXbTaa/g0U7GX4ZM+ERu2fMn4lgW
m9Yz+tEOzFjh2w==
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:47:42 2026 by rpki-client