Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.mft
File:                     u72o46G37fejOqiqTb0qhU7_gYE.mft (raw, json)
Hash identifier:          FNferrgRX9qujVNAIjPmO7Fmefn9OSQWVpnXZB9Wois=
Subject key identifier:   98:80:1A:A3:BA:40:91:2F:5C:E6:F4:A7:D4:52:6E:25:A7:33:56:65
Authority key identifier: BB:BD:A8:E3:A1:B7:ED:F7:A3:3A:A8:AA:4D:BD:2A:85:4E:FF:81:81
Certificate issuer:       /CN=bbbda8e3a1b7edf7a33aa8aa4dbd2a854eff8181
Certificate serial:       01A1841A0A16507B9D686E27C2CED43B8A4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u72o46G37fejOqiqTb0qhU7_gYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.mft
Manifest number:          0143
Signing time:             Wed 28 Oct 2026 20:01:01 +0000
Manifest this update:     Wed 28 Oct 2026 20:01:01 +0000
Manifest next update:     Thu 29 Oct 2026 20:01:01 +0000
Files and hashes:         1: Gt-6orGpXZKA9oiAT_yxlXlxxLU.roa (hash: VIGJrby0dx0a4mdrc24JbAt5nTLlizl4UvAfIY1Ljk8=)
                          2: NNe_KVkbtoUNciwcDVdLIM-H_pk.roa (hash: iqBPaLh4Raz6sGJ+2W7WyQyTVa6OZlfKJNf5U6VNov4=)
                          3: u72o46G37fejOqiqTb0qhU7_gYE.crl (hash: w9Jv8qMroukBXjtQA4rzx3EKsI6qLqMwVaTsGxujUrU=)
                          4: zRSMxCTICRmqaApMDWLjvx4v7tc.roa (hash: Xe8tO8CH+JL0TpluqdZvk0OELd/rckLpi+p6kQ2cnSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u72o46G37fejOqiqTb0qhU7_gYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 20:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:84:1a:0a:16:50:7b:9d:68:6e:27:c2:ce:d4:3b:8a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbda8e3a1b7edf7a33aa8aa4dbd2a854eff8181
        Validity
            Not Before: Oct 28 20:01:01 2026 GMT
            Not After : Oct 29 20:01:01 2026 GMT
        Subject: CN=98801aa3ba40912f5ce6f4a7d4526e25a7335665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:50:67:a2:ad:ef:79:db:05:da:0a:af:99:d7:
                    e7:34:18:17:57:5d:91:48:7b:1a:14:f8:d6:22:9d:
                    30:29:8f:6d:04:ee:c6:21:28:0d:0b:47:a1:ac:99:
                    ea:72:59:b9:8c:f9:ab:56:2f:65:cf:6a:71:fb:06:
                    c2:dc:19:f2:75:dd:9d:df:19:e3:bb:1f:5f:6d:db:
                    11:5d:97:f4:b8:2f:4a:1d:97:16:ba:e5:8e:1d:65:
                    b8:08:fb:32:53:73:5b:99:3d:95:b8:d5:2d:e4:92:
                    f2:88:5d:6d:5a:13:30:50:9d:b0:72:1e:36:d8:15:
                    bf:36:8f:fb:cd:44:35:69:b2:c1:be:e5:81:38:b8:
                    4f:23:50:64:bc:60:ab:1c:64:98:94:62:2e:dd:d6:
                    9a:46:63:6f:c5:d5:c1:42:76:9b:c7:75:df:99:46:
                    4f:3f:b6:3d:1b:b2:71:47:82:07:44:f6:0c:ab:77:
                    d8:82:cd:7b:2a:c2:64:b3:78:21:ad:ec:36:90:30:
                    68:46:32:7d:36:74:a5:d4:fa:bb:b6:04:92:99:d4:
                    71:74:b7:d7:e8:b9:c5:29:df:53:a3:e8:80:2d:60:
                    51:44:71:c8:6b:f3:ce:38:cc:ea:8c:51:7d:ce:6a:
                    7d:a2:e0:a8:08:81:1c:c6:a8:c3:aa:fb:fa:ac:e9:
                    1a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:80:1A:A3:BA:40:91:2F:5C:E6:F4:A7:D4:52:6E:25:A7:33:56:65
            X509v3 Authority Key Identifier:
                keyid:BB:BD:A8:E3:A1:B7:ED:F7:A3:3A:A8:AA:4D:BD:2A:85:4E:FF:81:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u72o46G37fejOqiqTb0qhU7_gYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:0f:ba:52:ed:02:2d:d2:a5:51:63:6a:e2:ff:84:52:9e:ef:
         8d:5a:cd:cb:78:98:98:86:7a:50:cf:ec:e8:2a:e6:69:ca:7f:
         5d:43:d5:9d:49:ea:5d:8f:aa:74:03:c5:95:e1:3e:9f:06:94:
         92:fc:28:c7:be:4a:3a:b0:00:76:12:e9:8a:e9:de:44:21:94:
         83:80:82:df:ea:89:60:45:c6:ff:aa:26:34:09:d9:05:76:62:
         32:77:bc:f2:30:8f:32:1e:b0:65:07:c1:31:1c:8c:25:f8:4e:
         e4:7b:55:0c:31:e3:69:dd:3b:4d:84:b2:a5:1c:e3:65:cf:1d:
         3a:ca:f2:64:b2:29:ab:ac:23:68:c2:a1:2a:9b:a0:00:68:97:
         3b:40:31:aa:eb:9a:d8:34:f3:59:95:a0:60:01:6c:8a:50:0c:
         6c:f0:80:df:d1:9c:26:1a:63:7d:01:23:fe:66:83:97:b8:40:
         43:d6:15:f5:8a:70:43:d9:1c:22:aa:ab:bc:80:51:fe:5f:82:
         db:30:af:3e:17:cd:43:de:15:b3:b2:5c:da:0d:52:f6:81:ec:
         18:ab:26:fe:d7:9e:69:b4:ce:6f:5b:6a:93:7b:fd:3b:48:2d:
         77:53:f3:02:a8:5e:3f:4c:59:1b:e0:bf:ff:cb:80:20:e0:c2:
         89:f3:51:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGEGgoWUHudaG4nws7UO4pOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYmRhOGUzYTFiN2VkZjdhMzNhYThhYTRkYmQyYTg1NGVm
ZjgxODEwHhcNMjYxMDI4MjAwMTAxWhcNMjYxMDI5MjAwMTAxWjAzMTEwLwYDVQQD
Eyg5ODgwMWFhM2JhNDA5MTJmNWNlNmY0YTdkNDUyNmUyNWE3MzM1NjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41Bnoq3vedsF2gqvmdfnNBgXV12R
SHsaFPjWIp0wKY9tBO7GISgNC0ehrJnqclm5jPmrVi9lz2px+wbC3Bnydd2d3xnj
ux9fbdsRXZf0uC9KHZcWuuWOHWW4CPsyU3NbmT2VuNUt5JLyiF1tWhMwUJ2wch42
2BW/No/7zUQ1abLBvuWBOLhPI1BkvGCrHGSYlGIu3daaRmNvxdXBQnabx3XfmUZP
P7Y9G7JxR4IHRPYMq3fYgs17KsJks3ghrew2kDBoRjJ9NnSl1Pq7tgSSmdRxdLfX
6LnFKd9To+iALWBRRHHIa/POOMzqjFF9zmp9ouCoCIEcxqjDqvv6rOkaxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiAGqO6QJEvXOb0p9RSbiWnM1ZlMB8GA1UdIwQY
MBaAFLu9qOOht+33ozqoqk29KoVO/4GBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTcybzQ2RzM3ZmVqT3FpcVRiMHFoVTdfZ1lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYmE1MWMtMTc3MC00ZGZhLTgzNjct
MjhmNjhhNGExNDNiLzEvdTcybzQ2RzM3ZmVqT3FpcVRiMHFoVTdfZ1lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wYmE1MWMtMTc3MC00ZGZhLTgzNjctMjhmNjhhNGExNDNi
LzEvdTcybzQ2RzM3ZmVqT3FpcVRiMHFoVTdfZ1lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvA+6Uu0C
LdKlUWNq4v+EUp7vjVrNy3iYmIZ6UM/s6Crmacp/XUPVnUnqXY+qdAPFleE+nwaU
kvwox75KOrAAdhLpiuneRCGUg4CC3+qJYEXG/6omNAnZBXZiMne88jCPMh6wZQfB
MRyMJfhO5HtVDDHjad07TYSypRzjZc8dOsryZLIpq6wjaMKhKpugAGiXO0Axquua
2DTzWZWgYAFsilAMbPCA39GcJhpjfQEj/maDl7hAQ9YV9YpwQ9kcIqqrvIBR/l+C
2zCvPhfNQ94Vs7Jc2g1S9oHsGKsm/teeabTOb1tqk3v9O0gtd1PzAqheP0xZG+C/
/8uAIODCifNRLA==
-----END CERTIFICATE-----
Generated at Thu Oct 29 02:16:52 2026 by rpki-client