Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
File:                     1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft (raw, json)
Hash identifier:          HYWPlYNoAKfPVW1yCAjzNlhQCRtlrdtltHs0+rikKWY=
Subject key identifier:   D3:98:D5:4D:BC:36:96:2E:A8:BD:A6:1B:26:34:A1:B7:F7:54:B3:CB
Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
Certificate issuer:       /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Certificate serial:       01A13E265F5E5321CA39841B289B6AB9956B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 06:01:04 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:04 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:04 +0000
Files and hashes:         1: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl (hash: AIDCsNHMB21YtRjVBa/iYSDIJeVcxPcmSwOP1SCR7ss=)
                          2: L_TvjuvkS8Ae6hr2C351DvSCXtw.roa (hash: iKhq8WVW3Ih/b09mpbpUlZEB5fDDBgm0pJSp3ErD2hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:5f:5e:53:21:ca:39:84:1b:28:9b:6a:b9:95:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
        Validity
            Not Before: Oct 15 06:01:04 2026 GMT
            Not After : Oct 16 06:01:04 2026 GMT
        Subject: CN=d398d54dbc36962ea8bda61b2634a1b7f754b3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:93:26:a5:3a:07:fd:f2:49:c1:87:4c:91:
                    7b:c0:a3:bd:0e:29:6b:da:2f:c0:b3:bd:f4:2c:60:
                    08:31:fe:7b:37:03:13:4f:23:43:37:20:da:e5:84:
                    e5:f2:40:55:a5:69:11:e0:f5:51:fc:bb:e9:73:a9:
                    dc:09:a4:23:68:5f:4d:52:69:c0:ae:26:a8:c2:c4:
                    f7:a9:75:e4:cd:9b:7d:fe:ff:23:24:62:70:a2:1c:
                    d8:e2:1e:82:db:2b:d3:22:cf:88:76:7f:76:a4:2c:
                    60:28:fc:c8:0b:e6:1a:d9:10:86:2c:c2:69:ea:de:
                    d4:48:a3:29:e0:9a:b3:b9:70:73:6e:fa:f3:ce:28:
                    5b:88:4a:e3:2d:7d:08:55:8a:23:56:b5:e8:84:e7:
                    36:f4:8e:17:b5:68:fd:23:26:fa:4f:9d:48:31:fa:
                    ce:7b:72:93:63:dc:f7:fd:c0:31:6d:3c:15:58:f6:
                    fa:71:49:cc:49:b6:19:a1:b9:b3:49:e1:02:29:de:
                    bc:e2:8b:eb:40:8b:99:04:c9:e9:60:e2:c1:09:07:
                    00:d9:5a:33:b1:43:e8:d4:de:17:97:b6:45:6f:41:
                    e5:f1:e6:1d:32:fe:85:e4:a2:62:45:3d:fe:e3:71:
                    3c:d2:8e:d1:4b:89:ac:04:c2:e5:d1:5c:07:5b:41:
                    9b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:98:D5:4D:BC:36:96:2E:A8:BD:A6:1B:26:34:A1:B7:F7:54:B3:CB
            X509v3 Authority Key Identifier:
                keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:23:ea:f1:54:79:7f:82:13:88:ac:76:10:6a:66:15:36:4e:
         78:b9:2d:ee:98:c5:19:0a:54:9d:48:cb:f5:12:d7:78:d7:49:
         76:2d:e1:b9:19:9e:1b:a3:83:7f:03:f2:6f:92:68:9f:05:12:
         94:83:d4:52:39:91:c5:eb:44:b8:41:55:d7:66:89:4b:22:fe:
         46:a2:b5:ce:b3:49:0b:1e:e0:f9:e0:fa:7c:de:86:b4:03:66:
         29:1b:b8:54:5d:39:33:2d:a9:05:6a:2b:0b:70:37:af:f9:1c:
         9d:b2:75:73:5d:42:92:f4:fa:93:49:f7:31:cf:24:69:f5:19:
         5b:d3:fa:df:27:49:00:bc:ff:df:2b:0c:15:fb:71:bb:eb:91:
         7c:d4:5f:d8:56:2e:eb:6a:c1:3b:ae:86:8c:50:92:c3:6b:88:
         32:f7:23:29:77:cd:96:80:41:c7:75:a6:e2:45:2b:dc:6d:f0:
         4b:a1:e9:6a:91:ca:cb:40:1d:98:1d:22:4b:a5:da:ec:13:7e:
         5c:79:d5:bf:9d:27:3f:8d:bd:08:27:d3:98:4f:fb:6e:9a:19:
         4e:63:97:81:72:a7:3f:ce:b4:24:7f:01:15:68:a8:7a:92:2d:
         8c:86:be:2f:5d:9c:b0:9d:89:a2:99:7e:98:c8:75:4b:86:7d:
         38:b4:8f:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+Jl9eUyHKOYQbKJtquZVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjZmNDgyN2M1OGNiMjhmOTk2YTlhYWViMzQ4ZjFmZDI2
YTBjYTUwHhcNMjYxMDE1MDYwMTA0WhcNMjYxMDE2MDYwMTA0WjAzMTEwLwYDVQQD
EyhkMzk4ZDU0ZGJjMzY5NjJlYThiZGE2MWIyNjM0YTFiN2Y3NTRiM2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztiTJqU6B/3yScGHTJF7wKO9Dilr
2i/As730LGAIMf57NwMTTyNDNyDa5YTl8kBVpWkR4PVR/Lvpc6ncCaQjaF9NUmnA
riaowsT3qXXkzZt9/v8jJGJwohzY4h6C2yvTIs+Idn92pCxgKPzIC+Ya2RCGLMJp
6t7USKMp4JqzuXBzbvrzzihbiErjLX0IVYojVrXohOc29I4XtWj9Iyb6T51IMfrO
e3KTY9z3/cAxbTwVWPb6cUnMSbYZobmzSeECKd684ovrQIuZBMnpYOLBCQcA2Voz
sUPo1N4Xl7ZFb0Hl8eYdMv6F5KJiRT3+43E80o7RS4msBMLl0VwHW0GbiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOY1U28NpYuqL2mGyY0obf3VLPLMB8GA1UdIwQY
MBaAFNf29IJ8WMso+Zapqus0jx/SagylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mOTNkYjgtMGU3ZC00ZWE2LTg5MWQt
NzBjNjdmMTI2YmYyLzEvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9mOTNkYjgtMGU3ZC00ZWE2LTg5MWQtNzBjNjdmMTI2YmYy
LzEvMV9iMGdueFl5eWo1bHFtcTZ6U1BIOUpxREtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSPq8VR5
f4ITiKx2EGpmFTZOeLkt7pjFGQpUnUjL9RLXeNdJdi3huRmeG6ODfwPyb5JonwUS
lIPUUjmRxetEuEFV12aJSyL+RqK1zrNJCx7g+eD6fN6GtANmKRu4VF05My2pBWor
C3A3r/kcnbJ1c11CkvT6k0n3Mc8kafUZW9P63ydJALz/3ysMFftxu+uRfNRf2FYu
62rBO66GjFCSw2uIMvcjKXfNloBBx3Wm4kUr3G3wS6HpapHKy0AdmB0iS6Xa7BN+
XHnVv50nP429CCfTmE/7bpoZTmOXgXKnP860JH8BFWioepItjIa+L12csJ2Jopl+
mMh1S4Z9OLSPOw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:25 2026 by rpki-client