Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File:                     4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier:          +5tVlFvyxQG7nMthY3I1YHm0FI7QHThQxvVvFC9ilZs=
Subject key identifier:   77:B3:E5:90:7A:BF:1A:9C:D6:1C:38:6B:6C:A6:D0:B4:3A:AF:55:3F
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer:       /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial:       01A13ECB9EC5E27D68CF88B321FE3A640A38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number:          09CB
Signing time:             Thu 15 Oct 2026 09:01:34 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:34 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:34 +0000
Files and hashes:         1: 22Qs5ZZUH-o_UxeMTTaGlozw9ck.roa (hash: dzmFhhN9JFvpfi1wur97KqUtYf7OFbub2fPBQrwEANI=)
                          2: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: QF6OPXG8M98dqYLQ159tmF75L8GzkIdUl6dXi2HcDy0=)
                          3: OOmJ-RkbduxK-k7822kHHTnwfho.roa (hash: Zhhmx3+Bddmr+hDQFTAMK3LPfl5DC3igpcEZIPBCFZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:9e:c5:e2:7d:68:cf:88:b3:21:fe:3a:64:0a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
        Validity
            Not Before: Oct 15 09:01:34 2026 GMT
            Not After : Oct 16 09:01:34 2026 GMT
        Subject: CN=77b3e5907abf1a9cd61c386b6ca6d0b43aaf553f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:db:79:87:88:77:3e:b0:2e:4c:ba:09:0d:
                    e3:15:4c:4c:c3:ea:53:34:9e:2a:7a:b8:af:a8:29:
                    8e:15:28:0f:77:4a:8d:b6:86:3b:51:47:17:88:9b:
                    ca:cd:a9:1c:65:01:8c:c0:d1:d3:66:02:d2:1d:37:
                    8a:e6:84:15:6e:31:dc:11:06:c6:ff:5a:d4:3e:15:
                    3e:82:e7:3e:1a:69:c2:b8:e3:b0:56:7b:1b:a0:cb:
                    00:a4:cd:7b:39:7a:a1:71:cb:f8:b0:b5:64:60:22:
                    78:df:1f:03:07:3b:07:a3:e6:8f:22:35:1d:8f:de:
                    91:38:3d:06:31:7a:88:8b:2a:fd:19:9b:8e:2c:c4:
                    99:1c:0b:b5:1d:fb:a3:23:1a:a6:90:fd:c4:a8:93:
                    3c:6d:21:1a:f1:7c:37:c1:b1:b6:0a:46:a2:54:3f:
                    0a:88:b7:d6:d9:6a:c0:dc:d2:19:5a:f5:10:6f:28:
                    17:26:02:60:dd:72:39:c9:c4:78:3c:b2:fe:c0:af:
                    e7:1a:0d:cb:22:22:35:09:3d:47:db:07:84:36:cb:
                    76:bb:cb:31:f5:fc:55:41:40:6e:24:d9:57:31:37:
                    64:88:b6:85:9b:8b:b0:15:95:f2:68:d2:37:df:6d:
                    7a:ca:7c:11:7d:d9:67:54:1b:b0:a1:fe:36:7a:35:
                    b4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B3:E5:90:7A:BF:1A:9C:D6:1C:38:6B:6C:A6:D0:B4:3A:AF:55:3F
            X509v3 Authority Key Identifier:
                keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:60:12:bf:18:72:4d:be:8e:aa:ab:f4:2d:55:f3:26:cb:a2:
         b3:df:74:1b:dd:8a:c4:77:6e:e9:1d:06:af:8d:cf:91:af:91:
         b5:84:8c:45:97:09:81:88:3c:23:e9:75:58:97:40:6d:4c:bc:
         aa:06:76:9e:0a:9b:62:7e:73:f2:ed:de:20:6a:e8:d3:67:73:
         5e:1d:9d:1c:2f:e0:6d:81:33:d3:2a:47:4a:d1:db:0a:ac:36:
         07:28:e8:60:bc:95:12:76:23:a6:e6:ee:f9:e3:bf:06:e0:fb:
         78:4c:9d:39:0a:8e:ae:cb:14:2b:dd:dd:cf:63:b5:44:9f:36:
         31:6c:ad:0d:ca:a9:7b:2e:2e:a9:92:be:4e:1a:e6:d1:e3:ec:
         d3:da:f7:1e:cf:17:38:0c:ae:be:26:b1:12:02:66:cf:a9:fb:
         78:9e:ea:49:a6:cd:3a:d4:9d:10:6e:26:e9:ac:97:d8:64:26:
         dd:74:7e:8f:bf:bb:dd:eb:3d:e3:0e:19:23:e4:aa:84:24:98:
         5b:fb:f8:0f:a2:60:1a:f0:94:46:21:bf:8c:45:42:70:be:78:
         24:7b:d5:4b:76:ef:9a:65:44:41:56:b8:60:7b:da:70:3d:a0:
         03:52:2c:29:7c:d3:a8:ad:4e:bd:7b:21:88:6d:21:7c:4e:d6:
         22:20:91:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+y57F4n1oz4izIf46ZAo4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjJiYjkyYmJlZTlmNmRlNzc1N2QyNTZkNDhmNjZlMjA3
ZjQ0YWYwHhcNMjYxMDE1MDkwMTM0WhcNMjYxMDE2MDkwMTM0WjAzMTEwLwYDVQQD
Eyg3N2IzZTU5MDdhYmYxYTljZDYxYzM4NmI2Y2E2ZDBiNDNhYWY1NTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSvbeYeIdz6wLky6CQ3jFUxMw+pT
NJ4qerivqCmOFSgPd0qNtoY7UUcXiJvKzakcZQGMwNHTZgLSHTeK5oQVbjHcEQbG
/1rUPhU+guc+GmnCuOOwVnsboMsApM17OXqhccv4sLVkYCJ43x8DBzsHo+aPIjUd
j96ROD0GMXqIiyr9GZuOLMSZHAu1HfujIxqmkP3EqJM8bSEa8Xw3wbG2CkaiVD8K
iLfW2WrA3NIZWvUQbygXJgJg3XI5ycR4PLL+wK/nGg3LIiI1CT1H2weENst2u8sx
9fxVQUBuJNlXMTdkiLaFm4uwFZXyaNI33216ynwRfdlnVBuwof42ejW0wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHez5ZB6vxqc1hw4a2ym0LQ6r1U/MB8GA1UdIwQY
MBaAFOBiu5K77p9t53V9JW1I9m4gf0SvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdLN2tydnVuMjNuZFgwbGJVajJiaUJfUks4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWY1MTgtMTU2Ni00YTZiLTgwNGIt
MWFiNWQ2MjA5ZjU3LzEvNEdLN2tydnVuMjNuZFgwbGJVajJiaUJfUks4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84YWY1MTgtMTU2Ni00YTZiLTgwNGItMWFiNWQ2MjA5ZjU3
LzEvNEdLN2tydnVuMjNuZFgwbGJVajJiaUJfUks4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmASvxhy
Tb6Oqqv0LVXzJsuis990G92KxHdu6R0Gr43Pka+RtYSMRZcJgYg8I+l1WJdAbUy8
qgZ2ngqbYn5z8u3eIGro02dzXh2dHC/gbYEz0ypHStHbCqw2ByjoYLyVEnYjpubu
+eO/BuD7eEydOQqOrssUK93dz2O1RJ82MWytDcqpey4uqZK+Thrm0ePs09r3Hs8X
OAyuviaxEgJmz6n7eJ7qSabNOtSdEG4m6ayX2GQm3XR+j7+73es94w4ZI+SqhCSY
W/v4D6JgGvCURiG/jEVCcL54JHvVS3bvmmVEQVa4YHvacD2gA1IsKXzTqK1OvXsh
iG0hfE7WIiCRBg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:26:34 2026 by rpki-client