Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
File:                     MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json)
Hash identifier:          9SjoaLIxEEv9VCkDJ5PndqjbHWmgTCJO3LQqIDFX97g=
Subject key identifier:   9D:D6:1C:4C:BB:D5:02:4E:84:1B:04:6B:F5:50:CB:CE:78:8A:BB:07
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Certificate issuer:       /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial:       01A10B82300426B2BAD4F916CEB045DF92D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
Manifest number:          1A8A
Signing time:             Mon 05 Oct 2026 10:00:43 +0000
Manifest this update:     Mon 05 Oct 2026 10:00:43 +0000
Manifest next update:     Tue 06 Oct 2026 10:00:43 +0000
Files and hashes:         1: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: 6GIf4Yo0He+AtWEOsKJwKBj7dJh5X8N5zyaHOAzajHo=)
                          2: qeezGpylFYQWdw5Zzwgz6qTCezQ.roa (hash: 81jQgwS6nCCkT6pNsFrxENxQzb13LmVBgngNENTsUtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 08:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0b:82:30:04:26:b2:ba:d4:f9:16:ce:b0:45:df:92:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
        Validity
            Not Before: Oct  5 10:00:43 2026 GMT
            Not After : Oct  6 10:00:43 2026 GMT
        Subject: CN=9dd61c4cbbd5024e841b046bf550cbce788abb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:98:78:26:1f:ef:c1:5a:41:57:7d:23:ca:8e:
                    db:e2:d0:89:e4:bc:52:86:e9:33:33:3b:6c:82:7c:
                    c9:bb:b1:48:72:14:3f:c7:f8:98:cd:2c:ea:13:b9:
                    8d:12:65:63:e0:34:ce:64:33:6e:3a:cc:f5:6b:7e:
                    32:aa:82:fc:0c:3f:eb:ba:50:78:15:81:d1:55:1c:
                    64:5b:22:17:66:27:fd:be:e7:b2:25:f2:23:a3:8d:
                    1c:db:18:00:59:5a:51:ad:73:5b:05:fa:9b:6d:73:
                    17:18:ec:ec:df:00:a8:53:94:97:d2:d0:d7:3b:73:
                    8c:e4:c0:c6:ee:47:41:6b:14:99:85:76:e1:58:8d:
                    3d:34:2a:33:29:6a:43:40:d9:c5:31:91:5f:8e:6b:
                    f2:3d:f6:bb:ae:83:dd:cf:22:50:aa:c5:f5:04:b6:
                    f3:e1:9d:d5:d4:d1:31:21:06:db:ae:8f:ba:1e:9e:
                    b4:a7:66:56:b3:d7:b3:0c:cb:be:82:26:5a:6b:8a:
                    96:d3:68:d3:ff:8c:54:91:39:b4:77:4c:b5:6b:73:
                    b4:44:0d:23:9a:e4:89:96:9e:01:83:61:37:f6:78:
                    fc:52:e9:cf:82:ce:e6:90:d0:9a:cc:67:c7:ec:a3:
                    87:28:75:61:11:a6:81:6e:ad:2b:6b:59:44:75:7d:
                    5c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D6:1C:4C:BB:D5:02:4E:84:1B:04:6B:F5:50:CB:CE:78:8A:BB:07
            X509v3 Authority Key Identifier:
                keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b4:f6:06:d8:35:24:30:00:f7:16:52:a2:af:fd:3b:bc:45:
         3e:e9:59:08:82:a1:9a:a6:a9:a6:11:db:1e:fe:aa:74:4c:36:
         8a:28:96:d1:32:c8:cd:9f:47:48:19:8b:79:b1:f2:b5:e0:14:
         f2:61:a3:0f:1f:a9:37:33:16:37:32:91:b5:2b:65:1d:34:65:
         47:e6:0f:79:e0:44:ff:37:8d:ad:62:34:f1:03:0d:74:77:2b:
         64:a5:e9:f4:44:01:c9:85:fb:6b:f2:42:ae:34:ef:22:10:61:
         c7:ae:d7:06:28:21:59:84:92:dd:cb:d1:4b:02:28:a8:b1:07:
         9b:a1:14:53:96:b7:c7:6d:86:05:80:5b:83:34:44:fd:35:6f:
         6d:76:bf:d5:de:dd:05:9a:17:94:f0:cc:c2:50:dd:67:74:0b:
         d9:aa:01:96:fc:b1:40:fb:82:1e:6c:aa:33:43:21:96:dc:ad:
         40:14:26:f7:4c:56:78:b8:9f:87:c4:6b:07:dc:05:86:b2:00:
         0f:55:0f:4d:c8:e5:8c:c5:25:23:0e:60:ab:c5:b5:59:40:af:
         19:c7:24:00:c9:a5:e0:bd:bd:fa:b5:04:39:b0:9c:c5:ee:18:
         b6:c5:4a:e0:f9:b2:1a:b2:a2:85:a3:7b:b6:54:88:f9:26:46:
         dc:81:71:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaELgjAEJrK61PkWzrBF35LRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTk1YzNiYjA1MDU4NmI1ZjRlNTAwNDExODAwN2M0OGIz
NGVhZTUwHhcNMjYxMDA1MTAwMDQzWhcNMjYxMDA2MTAwMDQzWjAzMTEwLwYDVQQD
Eyg5ZGQ2MWM0Y2JiZDUwMjRlODQxYjA0NmJmNTUwY2JjZTc4OGFiYjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArph4Jh/vwVpBV30jyo7b4tCJ5LxS
hukzMztsgnzJu7FIchQ/x/iYzSzqE7mNEmVj4DTOZDNuOsz1a34yqoL8DD/rulB4
FYHRVRxkWyIXZif9vueyJfIjo40c2xgAWVpRrXNbBfqbbXMXGOzs3wCoU5SX0tDX
O3OM5MDG7kdBaxSZhXbhWI09NCozKWpDQNnFMZFfjmvyPfa7roPdzyJQqsX1BLbz
4Z3V1NExIQbbro+6Hp60p2ZWs9ezDMu+giZaa4qW02jT/4xUkTm0d0y1a3O0RA0j
muSJlp4Bg2E39nj8UunPgs7mkNCazGfH7KOHKHVhEaaBbq0ra1lEdX1coQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3WHEy71QJOhBsEa/VQy854irsHMB8GA1UdIwQY
MBaAFDAZXDuwUFhrX05QBBGAB8SLNOrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQt
YjQyMWMzOGIyZjdmLzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQtYjQyMWMzOGIyZjdm
LzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbT2Btg1
JDAA9xZSoq/9O7xFPulZCIKhmqapphHbHv6qdEw2iiiW0TLIzZ9HSBmLebHyteAU
8mGjDx+pNzMWNzKRtStlHTRlR+YPeeBE/zeNrWI08QMNdHcrZKXp9EQByYX7a/JC
rjTvIhBhx67XBighWYSS3cvRSwIoqLEHm6EUU5a3x22GBYBbgzRE/TVvbXa/1d7d
BZoXlPDMwlDdZ3QL2aoBlvyxQPuCHmyqM0MhltytQBQm90xWeLifh8RrB9wFhrIA
D1UPTcjljMUlIw5gq8W1WUCvGcckAMml4L29+rUEObCcxe4YtsVK4PmyGrKihaN7
tlSI+SZG3IFxvg==
-----END CERTIFICATE-----
Generated at Mon Oct 5 13:27:20 2026 by rpki-client