Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
File:                     i4GUQccJMDSp1GVqL202qyQDP-Q.mft (raw, json)
Hash identifier:          fA8jzR3uUVqbbyaRwFyVNW3HpeS40FM0uBo1WsP9KQw=
Subject key identifier:   7E:4B:D1:BC:D5:ED:B8:29:C9:5F:4F:53:EF:14:81:98:93:68:83:BB
Authority key identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
Certificate issuer:       /CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Certificate serial:       01A1A1EDA0D209D597C915C1D495E1E07AAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
Manifest number:          054E
Signing time:             Tue 03 Nov 2026 15:01:07 +0000
Manifest this update:     Tue 03 Nov 2026 15:01:07 +0000
Manifest next update:     Wed 04 Nov 2026 15:01:07 +0000
Files and hashes:         1: WYq_SwOSBS5C2flPsPwqJm7TWQ0.roa (hash: 6TuNzzukIi+p4GfJ3ZlekfC6HWDwvlGuM10xKCq4iF4=)
                          2: i4GUQccJMDSp1GVqL202qyQDP-Q.crl (hash: HAeTv7+siT2mcBqz+TuE55FqZNm9EXSeCeXiIdU8o3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Nov 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a1:ed:a0:d2:09:d5:97:c9:15:c1:d4:95:e1:e0:7a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
        Validity
            Not Before: Nov  3 15:01:07 2026 GMT
            Not After : Nov  4 15:01:07 2026 GMT
        Subject: CN=7e4bd1bcd5edb829c95f4f53ef148198936883bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d4:b9:5b:58:89:f6:23:a1:be:9d:aa:80:97:
                    85:a3:8d:2d:ca:59:ba:36:e6:ee:a1:c4:56:bc:55:
                    ec:e3:cd:19:e1:30:13:e9:7a:9e:7b:f5:ff:ea:07:
                    86:60:20:26:1b:1b:23:6e:09:04:a9:bc:1d:62:ed:
                    40:7e:27:81:ae:0a:3f:9e:04:2f:67:78:b1:65:99:
                    c4:b6:3a:f7:9e:18:87:8b:02:aa:82:f9:4a:88:23:
                    4d:76:d9:a0:61:6c:a6:17:d2:75:ec:16:ae:3c:e0:
                    b1:d8:a1:b4:b6:66:ba:7a:05:60:63:cb:68:70:9f:
                    e1:08:80:6f:30:3c:73:39:5b:f2:9a:3e:a9:a1:66:
                    1e:ee:9f:6e:42:d2:93:5f:92:d5:e7:0b:85:5d:69:
                    fb:ad:93:a0:a0:e6:38:fe:6c:0c:3a:b1:db:60:aa:
                    bf:74:17:89:51:fe:61:22:67:65:ab:37:a4:29:f4:
                    84:9a:85:ec:f8:2d:1e:46:48:c6:fb:5a:57:0e:6b:
                    a8:d6:00:5c:3f:d1:27:6a:4f:d5:07:a4:e8:bd:19:
                    e4:35:1e:97:3c:92:06:88:ca:e3:28:b8:67:58:17:
                    5a:52:88:29:d9:60:c1:56:45:56:73:3e:36:d2:cc:
                    23:c5:00:a9:e9:26:f1:3a:43:df:cc:01:61:3e:be:
                    7a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4B:D1:BC:D5:ED:B8:29:C9:5F:4F:53:EF:14:81:98:93:68:83:BB
            X509v3 Authority Key Identifier:
                keyid:8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1d:11:95:c4:15:f4:f5:99:0e:6d:e6:e3:c8:35:d8:58:68:
         65:63:44:1d:9e:79:44:75:78:28:9f:71:55:dd:27:fa:9d:a4:
         4c:81:9a:f0:cb:fc:58:92:fe:1d:17:3f:a1:4f:7d:66:f3:ad:
         f0:5d:7d:af:24:f9:62:8a:df:db:8a:18:07:36:cd:ff:88:a5:
         12:6f:66:7f:cd:d2:57:19:c3:9f:dd:9c:30:37:03:f9:43:55:
         14:6a:59:5d:af:4e:f0:18:2b:e6:2b:2a:37:56:7b:41:cf:71:
         1f:86:16:dc:4b:54:55:27:8c:8d:0d:78:74:17:54:c2:cb:db:
         bd:20:ee:06:28:35:35:6b:95:9a:98:91:d4:92:12:58:89:d7:
         26:8b:8b:1d:03:a6:83:42:7a:b9:e7:6d:d9:0f:fb:10:59:04:
         17:7c:f7:48:de:fd:c3:ec:0a:8c:68:44:55:8c:d8:2b:cb:32:
         71:eb:b3:ee:e4:5b:80:37:fb:83:2d:43:f1:01:f7:eb:c0:ca:
         88:c6:76:11:44:b4:82:dd:6d:c0:2f:ca:f8:93:79:49:d8:25:
         a9:67:ad:b6:d7:3c:00:67:dd:b0:58:26:11:1e:ff:be:f4:50:
         fa:6a:e3:0e:44:a0:a8:f9:93:16:a1:41:9a:34:19:e9:de:1b:
         58:3f:94:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGh7aDSCdWXyRXB1JXh4HqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiODE5NDQxYzcwOTMwMzRhOWQ0NjU2YTJmNmQzNmFiMjQw
MzNmZTQwHhcNMjYxMTAzMTUwMTA3WhcNMjYxMTA0MTUwMTA3WjAzMTEwLwYDVQQD
Eyg3ZTRiZDFiY2Q1ZWRiODI5Yzk1ZjRmNTNlZjE0ODE5ODkzNjg4M2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09S5W1iJ9iOhvp2qgJeFo40tylm6
NubuocRWvFXs480Z4TAT6Xqee/X/6geGYCAmGxsjbgkEqbwdYu1AfieBrgo/ngQv
Z3ixZZnEtjr3nhiHiwKqgvlKiCNNdtmgYWymF9J17BauPOCx2KG0tma6egVgY8to
cJ/hCIBvMDxzOVvymj6poWYe7p9uQtKTX5LV5wuFXWn7rZOgoOY4/mwMOrHbYKq/
dBeJUf5hImdlqzekKfSEmoXs+C0eRkjG+1pXDmuo1gBcP9Enak/VB6TovRnkNR6X
PJIGiMrjKLhnWBdaUogp2WDBVkVWcz420swjxQCp6SbxOkPfzAFhPr56cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5L0bzV7bgpyV9PU+8UgZiTaIO7MB8GA1UdIwQY
MBaAFIuBlEHHCTA0qdRlai9tNqskAz/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTRHVVFjY0pNRFNwMUdWcUwyMDJxeVFEUC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZmZiMTktZDQ2Ny00ZWU1LThjZjYt
ZjYzZDIwYTc4Zjc1LzEvaTRHVVFjY0pNRFNwMUdWcUwyMDJxeVFEUC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kZmZiMTktZDQ2Ny00ZWU1LThjZjYtZjYzZDIwYTc4Zjc1
LzEvaTRHVVFjY0pNRFNwMUdWcUwyMDJxeVFEUC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASB0RlcQV
9PWZDm3m48g12FhoZWNEHZ55RHV4KJ9xVd0n+p2kTIGa8Mv8WJL+HRc/oU99ZvOt
8F19ryT5Yorf24oYBzbN/4ilEm9mf83SVxnDn92cMDcD+UNVFGpZXa9O8Bgr5isq
N1Z7Qc9xH4YW3EtUVSeMjQ14dBdUwsvbvSDuBig1NWuVmpiR1JISWInXJouLHQOm
g0J6uedt2Q/7EFkEF3z3SN79w+wKjGhEVYzYK8syceuz7uRbgDf7gy1D8QH368DK
iMZ2EUS0gt1twC/K+JN5SdglqWetttc8AGfdsFgmER7/vvRQ+mrjDkSgqPmTFqFB
mjQZ6d4bWD+UKQ==
-----END CERTIFICATE-----
Generated at Wed Nov 4 01:14:50 2026 by rpki-client