Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
File:                     mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft (raw, json)
Hash identifier:          5OftlJzgmV2bcisdMLZJG8bRPrS6K0CpMPL/OXPjbpE=
Subject key identifier:   15:5B:21:49:DA:FF:EF:05:46:AD:31:13:48:8E:93:E9:0D:78:DF:BC
Authority key identifier: 98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
Certificate issuer:       /CN=985b50a10d2d58c67503eaaa701e510915dd5192
Certificate serial:       01A13B9285C41A88B6AF64259A26B5528AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
Manifest number:          09FF
Signing time:             Wed 14 Oct 2026 18:00:20 +0000
Manifest this update:     Wed 14 Oct 2026 18:00:20 +0000
Manifest next update:     Thu 15 Oct 2026 18:00:20 +0000
Files and hashes:         1: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl (hash: It3SN5uF7nYYnXfBmI+s+TVlPaww8AoMKE8FzkeZnkg=)
                          2: qOMNY6hVgy-QhQyOIQ4S2QZXLHI.roa (hash: sAeYUG9d4ti78IMqnSOELZESU1YQF01cfT/pGko2jnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 18:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:92:85:c4:1a:88:b6:af:64:25:9a:26:b5:52:8a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985b50a10d2d58c67503eaaa701e510915dd5192
        Validity
            Not Before: Oct 14 18:00:20 2026 GMT
            Not After : Oct 15 18:00:20 2026 GMT
        Subject: CN=155b2149daffef0546ad3113488e93e90d78dfbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:2b:71:5f:11:d0:27:3b:03:37:dd:f7:27:
                    52:57:41:a2:84:23:fd:48:99:43:34:2d:e2:68:0f:
                    99:62:90:31:5b:d8:95:50:83:90:c8:26:42:c3:8f:
                    e5:0d:dc:b4:b8:e9:9b:c0:4c:af:4b:f4:e6:cb:01:
                    1b:ec:a0:e1:6e:09:51:9c:f6:b5:41:04:4a:ac:b8:
                    20:b4:27:fc:3a:57:59:53:2d:8a:48:1f:f7:01:50:
                    80:c6:d1:c1:8d:af:95:93:a9:45:62:89:d1:f7:9b:
                    2b:59:e1:0d:52:12:61:5e:30:98:aa:8c:fc:34:c9:
                    f8:c1:7b:70:be:57:75:8b:d2:02:7f:51:f0:64:04:
                    63:20:c5:88:22:53:d9:33:9a:04:16:e0:36:ca:48:
                    90:6a:57:3e:44:88:56:f7:7c:15:1d:df:e2:ce:fb:
                    55:47:e9:9e:be:47:82:7a:39:c4:c7:cf:cf:01:86:
                    8c:aa:35:99:f4:ea:95:0f:b3:2a:5b:2f:07:c7:a5:
                    4a:dc:aa:90:2e:da:4d:48:57:a1:7e:71:c5:92:c3:
                    9c:97:6c:f6:ac:60:20:31:d5:c6:54:ab:55:65:ea:
                    8d:2c:08:46:22:2e:56:06:55:67:9c:32:90:81:50:
                    42:84:f8:ce:bd:94:c3:81:6d:f1:fa:c0:84:c5:a1:
                    5a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5B:21:49:DA:FF:EF:05:46:AD:31:13:48:8E:93:E9:0D:78:DF:BC
            X509v3 Authority Key Identifier:
                keyid:98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e3:ef:9f:d9:9c:bd:f2:90:40:ca:fb:c5:03:c8:46:10:34:
         8c:56:3e:0e:f6:80:d4:2e:7e:7b:f7:a8:6e:e7:83:fc:a3:8b:
         3d:91:e3:f5:c6:37:a6:59:3f:ea:82:a5:f6:e4:ea:f6:2f:cf:
         23:a4:0d:99:d2:8c:1c:96:5d:82:37:b3:57:10:60:d5:c3:12:
         ad:ab:1c:d0:54:ca:61:4d:c6:1b:db:d8:3a:b3:92:48:4b:28:
         75:43:ca:68:8e:7f:c7:58:54:ca:2a:24:75:d3:b0:45:68:ed:
         0a:ff:bb:33:93:e6:9e:a1:b9:10:a1:10:57:0a:74:56:4b:10:
         6d:72:8d:21:ed:3f:95:f8:ce:5a:61:db:f3:6b:2e:05:b1:33:
         88:68:32:f3:c8:6b:0f:89:09:7c:04:2c:81:5a:98:39:f8:f6:
         f6:ed:c6:27:2e:7f:1a:53:6a:40:d2:6f:61:8b:0d:79:76:2f:
         33:07:45:40:e3:de:8d:b9:55:6d:ce:53:0a:4a:d8:e8:21:26:
         14:98:d6:79:ca:2c:50:bb:29:e7:b8:db:35:08:02:17:30:7d:
         f0:11:58:cf:cb:30:f9:86:6c:ca:db:cf:b0:d7:34:8b:a4:a2:
         d0:bf:4b:a4:fa:f6:f2:a0:81:52:39:ae:e9:7a:5c:5b:f6:4b:
         55:1d:f6:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE7koXEGoi2r2Qlmia1UorxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NWI1MGExMGQyZDU4YzY3NTAzZWFhYTcwMWU1MTA5MTVk
ZDUxOTIwHhcNMjYxMDE0MTgwMDIwWhcNMjYxMDE1MTgwMDIwWjAzMTEwLwYDVQQD
EygxNTViMjE0OWRhZmZlZjA1NDZhZDMxMTM0ODhlOTNlOTBkNzhkZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonUrcV8R0Cc7Azfd9ydSV0GihCP9
SJlDNC3iaA+ZYpAxW9iVUIOQyCZCw4/lDdy0uOmbwEyvS/TmywEb7KDhbglRnPa1
QQRKrLggtCf8OldZUy2KSB/3AVCAxtHBja+Vk6lFYonR95srWeENUhJhXjCYqoz8
NMn4wXtwvld1i9ICf1HwZARjIMWIIlPZM5oEFuA2ykiQalc+RIhW93wVHd/izvtV
R+mevkeCejnEx8/PAYaMqjWZ9OqVD7MqWy8Hx6VK3KqQLtpNSFehfnHFksOcl2z2
rGAgMdXGVKtVZeqNLAhGIi5WBlVnnDKQgVBChPjOvZTDgW3x+sCExaFabwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVbIUna/+8FRq0xE0iOk+kNeN+8MB8GA1UdIwQY
MBaAFJhbUKENLVjGdQPqqnAeUQkV3VGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81Njg5YjAtYWY2ZC00MzgxLTg5OTIt
OTBmNjcxOWU2N2I5LzEvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81Njg5YjAtYWY2ZC00MzgxLTg5OTItOTBmNjcxOWU2N2I5
LzEvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQePvn9mc
vfKQQMr7xQPIRhA0jFY+DvaA1C5+e/eobueD/KOLPZHj9cY3plk/6oKl9uTq9i/P
I6QNmdKMHJZdgjezVxBg1cMSrasc0FTKYU3GG9vYOrOSSEsodUPKaI5/x1hUyiok
ddOwRWjtCv+7M5PmnqG5EKEQVwp0VksQbXKNIe0/lfjOWmHb82suBbEziGgy88hr
D4kJfAQsgVqYOfj29u3GJy5/GlNqQNJvYYsNeXYvMwdFQOPejblVbc5TCkrY6CEm
FJjWecosULsp57jbNQgCFzB98BFYz8sw+YZsytvPsNc0i6Si0L9LpPr28qCBUjmu
6XpcW/ZLVR32nw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 02:07:39 2026 by rpki-client