Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
File:                     BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft (raw, json)
Hash identifier:          LN6KJUbmUpVuF7Io0fWcjOCH9PmckJuGVvJM96CvcXo=
Subject key identifier:   A2:23:09:AC:63:7D:34:4A:10:17:0E:ED:FB:36:CA:F1:D0:CB:06:75
Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Certificate issuer:       /CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Certificate serial:       01A13E25FDA49F3A788405215D128ECF9111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
Manifest number:          1AAA
Signing time:             Thu 15 Oct 2026 06:00:39 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:39 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:39 +0000
Files and hashes:         1: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl (hash: TjiGkzqutjHNT4HZDW98hGK6UOXnDhYTHdhlQFW5K1Q=)
                          2: Nb75t2HmIANRhLGNXjt11cqlJUE.roa (hash: yEAQI/Ds6SqiJnioeA/4ztbYLQANaelVg2ffNspRA+U=)
                          3: OiEBp0GKa1Rrx271L_Ta-KgAi9g.roa (hash: lJRBkYeL9Nu/5ib2lExKbBVlayfZpUDinxzFBIQeINk=)
                          4: sE95hNuQAFs2bwnjWh5tS1eDbyo.roa (hash: lJLEBwFDxhpPzZc0IOmOMH9nwksk79qXsIs7n/ttFwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:25:fd:a4:9f:3a:78:84:05:21:5d:12:8e:cf:91:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
        Validity
            Not Before: Oct 15 06:00:39 2026 GMT
            Not After : Oct 16 06:00:39 2026 GMT
        Subject: CN=a22309ac637d344a10170eedfb36caf1d0cb0675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:fb:aa:0e:74:00:0c:81:d5:58:43:ef:1a:
                    86:36:76:27:c5:96:ba:71:aa:89:de:59:b4:86:a1:
                    1e:e6:f8:7a:25:db:f4:04:08:20:95:d6:ec:36:8f:
                    f5:71:19:56:ee:b5:4a:a8:5c:12:fb:17:4f:0a:c5:
                    50:8b:ad:f3:80:7c:15:4d:cf:6c:4d:5e:09:5c:ab:
                    11:ae:3f:9c:1f:82:0a:de:15:15:d8:c7:3f:62:50:
                    a9:0a:58:fa:02:37:93:7a:51:e5:3f:24:e8:46:a9:
                    b6:0a:9b:38:a6:b2:f3:f3:68:e3:e5:31:5e:33:9c:
                    13:e6:ef:2c:e5:6e:26:bf:20:14:ec:6a:67:34:06:
                    c1:28:6b:73:31:dc:e8:34:74:2b:77:48:11:5e:f8:
                    91:a2:22:c9:f9:e6:d8:c5:ce:e3:18:60:68:dd:10:
                    dc:b9:fa:35:a6:ca:6e:18:ed:51:1d:9c:0c:8f:65:
                    d7:ce:b4:db:81:b4:04:78:8b:bf:6f:44:2e:8c:73:
                    c6:26:6e:6e:f2:b2:7f:fa:48:22:e0:78:6e:7e:dd:
                    71:ae:24:a8:90:aa:c6:5b:08:7b:cd:76:ca:53:19:
                    0e:8a:86:45:ec:c4:3f:07:82:8f:74:21:7f:2b:c0:
                    79:00:e4:81:36:48:1e:46:a6:8c:2e:78:8c:a9:02:
                    17:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:23:09:AC:63:7D:34:4A:10:17:0E:ED:FB:36:CA:F1:D0:CB:06:75
            X509v3 Authority Key Identifier:
                keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:aa:ad:3a:7d:bc:5e:51:ff:64:02:fb:b4:d5:ab:0b:f6:fb:
         d8:49:8f:4e:f9:a3:b7:96:32:60:2d:ae:8f:7e:0b:8b:8b:cf:
         50:6a:a2:c9:92:ff:5a:c1:d8:1d:dd:52:7c:1b:7d:a2:aa:68:
         66:78:ba:29:e7:97:a6:c3:9c:f3:ee:e1:24:72:82:94:7a:8e:
         f5:4d:de:f8:81:c0:83:0b:04:1d:5f:56:ed:d4:ec:36:4f:86:
         54:3c:cf:f3:f4:57:27:36:c7:30:a1:de:2d:71:ab:2f:57:3b:
         99:21:d1:bd:40:f5:5b:42:87:26:c5:2d:6f:eb:89:69:53:79:
         81:58:87:bb:c3:a7:cc:57:f0:77:07:ec:4b:f4:2a:bb:b2:40:
         c1:92:be:d0:49:a6:ed:85:e1:c2:0b:81:43:24:f5:22:1e:b8:
         4a:d3:9d:3d:8d:e5:65:57:a7:96:4f:98:8d:eb:22:d5:65:b5:
         fe:84:ff:c9:81:7d:aa:46:32:96:13:83:53:91:e4:cf:98:40:
         b6:3c:8f:d3:6b:f0:9e:af:cc:ee:e7:59:91:cf:ed:2e:f7:7d:
         46:1a:90:2e:75:64:d8:56:5c:50:06:07:78:82:ae:96:ef:68:
         ef:12:e5:b6:db:86:a3:d4:fc:48:01:e5:6c:79:9d:37:86:76:
         97:9d:55:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+Jf2knzp4hAUhXRKOz5ERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OGVlZmI1YjI2NDgzNTYxNzExYzk5MGYyMGZmNTUyYWM0
ZTJjOWMwHhcNMjYxMDE1MDYwMDM5WhcNMjYxMDE2MDYwMDM5WjAzMTEwLwYDVQQD
EyhhMjIzMDlhYzYzN2QzNDRhMTAxNzBlZWRmYjM2Y2FmMWQwY2IwNjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHf7qg50AAyB1VhD7xqGNnYnxZa6
caqJ3lm0hqEe5vh6Jdv0BAggldbsNo/1cRlW7rVKqFwS+xdPCsVQi63zgHwVTc9s
TV4JXKsRrj+cH4IK3hUV2Mc/YlCpClj6AjeTelHlPyToRqm2Cps4prLz82jj5TFe
M5wT5u8s5W4mvyAU7GpnNAbBKGtzMdzoNHQrd0gRXviRoiLJ+ebYxc7jGGBo3RDc
ufo1pspuGO1RHZwMj2XXzrTbgbQEeIu/b0QujHPGJm5u8rJ/+kgi4Hhuft1xriSo
kKrGWwh7zXbKUxkOioZF7MQ/B4KPdCF/K8B5AOSBNkgeRqaMLniMqQIXwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIjCaxjfTRKEBcO7fs2yvHQywZ1MB8GA1UdIwQY
MBaAFASO77WyZINWFxHJkPIP9VKsTiycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80YjYzNTQtYTdhMy00MzUxLWE3ZGUt
YWVhYzVkOWNkYzdiLzEvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80YjYzNTQtYTdhMy00MzUxLWE3ZGUtYWVhYzVkOWNkYzdi
LzEvQkk3dnRiSmtnMVlYRWNtUThnXzFVcXhPTEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaqtOn28
XlH/ZAL7tNWrC/b72EmPTvmjt5YyYC2uj34Li4vPUGqiyZL/WsHYHd1SfBt9oqpo
Zni6KeeXpsOc8+7hJHKClHqO9U3e+IHAgwsEHV9W7dTsNk+GVDzP8/RXJzbHMKHe
LXGrL1c7mSHRvUD1W0KHJsUtb+uJaVN5gViHu8OnzFfwdwfsS/Qqu7JAwZK+0Emm
7YXhwguBQyT1Ih64StOdPY3lZVenlk+Yjesi1WW1/oT/yYF9qkYylhODU5Hkz5hA
tjyP02vwnq/M7udZkc/tLvd9RhqQLnVk2FZcUAYHeIKulu9o7xLlttuGo9T8SAHl
bHmdN4Z2l51Vkg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:19:27 2026 by rpki-client