Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File:                     ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier:          DLmfCEFrGzeLLK550XfiHb1rbg5TjKF6TN1RyjLcYu4=
Subject key identifier:   F7:A5:8B:24:29:09:AD:60:9E:3B:7B:A8:A6:EA:4C:29:20:E2:1B:BF
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer:       /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial:       01A1754B4C204A2C3B8D5EE307A300863833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number:          1AC4
Signing time:             Sun 25 Oct 2026 23:00:31 +0000
Manifest this update:     Sun 25 Oct 2026 23:00:31 +0000
Manifest next update:     Mon 26 Oct 2026 23:00:31 +0000
Files and hashes:         1: 55TydbG7XIPM3ovk6O_qtpxMT5g.roa (hash: Irnfw7dwlSnEFTktO5O7WLJDCKpVdnM7re9+EYkh2Fg=)
                          2: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: EgVvM4/EIVCcBu+JQO7nW5ddjRq1tIydBzbgNhcKlMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:4b:4c:20:4a:2c:3b:8d:5e:e3:07:a3:00:86:38:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
        Validity
            Not Before: Oct 25 23:00:31 2026 GMT
            Not After : Oct 26 23:00:31 2026 GMT
        Subject: CN=f7a58b242909ad609e3b7ba8a6ea4c2920e21bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:b3:6e:15:78:6b:6d:20:f6:35:c6:31:09:
                    e4:0f:cc:b5:98:0b:50:84:66:f5:91:47:a3:08:97:
                    50:b1:69:47:88:25:48:87:7b:48:6e:01:4a:92:00:
                    e8:00:dd:48:96:57:33:0b:27:ba:4e:be:7f:57:69:
                    bb:f9:9f:c2:99:29:db:bb:c2:64:92:d8:9c:e1:06:
                    13:32:9a:91:a7:97:e1:4c:7d:6a:70:2b:49:71:e8:
                    39:f3:45:f7:f1:d2:26:ca:94:cf:34:25:8e:9d:ad:
                    cb:7d:54:60:b0:a7:52:40:55:85:b6:66:c9:3b:d8:
                    f0:23:ab:05:32:8b:d9:6f:ed:a6:d6:98:17:55:41:
                    8f:d1:87:fb:52:f1:26:27:cf:62:f0:52:54:66:f4:
                    96:0e:fa:67:2f:eb:1b:b9:eb:f4:04:41:ed:59:3c:
                    ac:43:41:ec:da:0e:4b:88:4a:56:5e:4b:ee:7f:01:
                    69:05:2d:01:c2:9b:6b:69:db:62:e2:6b:68:f4:32:
                    ae:56:d7:ff:aa:1b:76:8d:eb:32:7c:68:9a:8a:49:
                    62:3e:a3:0d:d9:ed:d0:72:09:f4:c9:f4:ff:75:89:
                    ce:e2:f5:1b:4c:f3:ca:91:a6:bb:18:19:1b:df:f6:
                    a8:ac:09:35:70:32:94:20:a6:85:04:43:64:d0:0e:
                    dd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A5:8B:24:29:09:AD:60:9E:3B:7B:A8:A6:EA:4C:29:20:E2:1B:BF
            X509v3 Authority Key Identifier:
                keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d5:51:2b:ac:f4:db:ae:ba:01:62:be:97:5e:a5:4a:ae:75:
         04:b3:68:5e:35:31:ce:60:f7:dc:3a:d1:8f:20:77:c1:83:bc:
         27:e2:a0:2b:eb:43:0b:ae:24:f5:75:1d:05:2b:71:e6:a2:61:
         d7:a6:04:fb:e8:52:74:ad:cd:01:f5:f9:c2:a9:f2:ab:8e:e9:
         ee:e0:63:c8:6b:c9:e3:57:ab:2a:85:19:11:eb:c8:05:d0:fc:
         10:b6:ed:84:d6:41:a1:06:e7:d1:82:87:11:8b:a1:11:d9:ee:
         99:9a:d0:2b:29:73:f5:f0:db:c0:68:95:a5:ee:99:b9:68:f2:
         62:03:8b:89:ac:f1:1e:17:3c:a0:d4:90:93:f0:20:7e:47:83:
         71:ba:1a:cc:53:99:8b:c8:bc:a9:88:0a:a6:1e:c8:4f:8e:eb:
         16:f7:d4:30:35:46:bc:5e:88:c1:3a:50:26:72:59:fb:dd:0e:
         7a:48:f3:5f:44:6e:bc:67:a9:da:b3:2f:03:9f:a7:b8:a1:7c:
         ff:a5:52:77:57:46:36:61:4f:95:f4:d4:7d:af:f2:f7:91:8f:
         df:ff:48:7d:cf:21:55:27:b3:d4:8c:96:31:f3:b2:69:44:a1:
         3b:b1:cc:96:a2:4e:df:ab:5c:7b:e6:44:b6:08:a7:6f:e5:b5:
         1a:9a:a4:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF1S0wgSiw7jV7jB6MAhjgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OGYyMDMwOTk2MmY3YzZlMWMzMjY3ZjA4M2UxMjRkODNk
ZDc2ZmMwHhcNMjYxMDI1MjMwMDMxWhcNMjYxMDI2MjMwMDMxWjAzMTEwLwYDVQQD
EyhmN2E1OGIyNDI5MDlhZDYwOWUzYjdiYThhNmVhNGMyOTIwZTIxYmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDKzbhV4a20g9jXGMQnkD8y1mAtQ
hGb1kUejCJdQsWlHiCVIh3tIbgFKkgDoAN1IllczCye6Tr5/V2m7+Z/CmSnbu8Jk
ktic4QYTMpqRp5fhTH1qcCtJceg580X38dImypTPNCWOna3LfVRgsKdSQFWFtmbJ
O9jwI6sFMovZb+2m1pgXVUGP0Yf7UvEmJ89i8FJUZvSWDvpnL+sbuev0BEHtWTys
Q0Hs2g5LiEpWXkvufwFpBS0Bwptradti4mto9DKuVtf/qht2jesyfGiaikliPqMN
2e3Qcgn0yfT/dYnO4vUbTPPKkaa7GBkb3/aorAk1cDKUIKaFBENk0A7dQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeliyQpCa1gnjt7qKbqTCkg4hu/MB8GA1UdIwQY
MBaAFIaPIDCZYvfG4cMmfwg+Ek2D3Xb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMjZjZWUtZjE2Yy00NWE4LTk3YjIt
NjIzMzg0ZjNlMTI1LzEvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xMjZjZWUtZjE2Yy00NWE4LTk3YjItNjIzMzg0ZjNlMTI1
LzEvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9VRK6z0
2666AWK+l16lSq51BLNoXjUxzmD33DrRjyB3wYO8J+KgK+tDC64k9XUdBStx5qJh
16YE++hSdK3NAfX5wqnyq47p7uBjyGvJ41erKoUZEevIBdD8ELbthNZBoQbn0YKH
EYuhEdnumZrQKylz9fDbwGiVpe6ZuWjyYgOLiazxHhc8oNSQk/AgfkeDcboazFOZ
i8i8qYgKph7IT47rFvfUMDVGvF6IwTpQJnJZ+90OekjzX0RuvGep2rMvA5+nuKF8
/6VSd1dGNmFPlfTUfa/y95GP3/9Ifc8hVSez1IyWMfOyaUShO7HMlqJO36tce+ZE
tginb+W1GpqkdQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 10:54:04 2026 by rpki-client