Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
File:                     pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json)
Hash identifier:          or5m8DCD1BZb4KpLDBk/JicASnKG1DiNus9+4igB3NU=
Subject key identifier:   EF:9C:2E:AF:31:5A:B5:B2:CE:67:55:28:93:1C:B2:E0:4F:11:79:52
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Certificate issuer:       /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial:       01A17E862EFBD73D177B4FBADB7B42A6BC72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
Manifest number:          13DB
Signing time:             Tue 27 Oct 2026 18:01:25 +0000
Manifest this update:     Tue 27 Oct 2026 18:01:25 +0000
Manifest next update:     Wed 28 Oct 2026 18:01:25 +0000
Files and hashes:         1: nS0y39FHd_KBicbFUGi66q7vdag.roa (hash: Z3Fr6bAjwL99ER5kh2Zqj12sGL3oFe9ZTzwUUnAJ/DY=)
                          2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: LXwnW2Ca1BO7WNFzfmwcYTXW9KKD6/4J/LvxIcwjOpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:86:2e:fb:d7:3d:17:7b:4f:ba:db:7b:42:a6:bc:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
        Validity
            Not Before: Oct 27 18:01:25 2026 GMT
            Not After : Oct 28 18:01:25 2026 GMT
        Subject: CN=ef9c2eaf315ab5b2ce675528931cb2e04f117952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7b:4a:14:a1:7d:e8:3d:ea:be:82:b9:32:3b:
                    59:ce:df:b5:d6:c0:a3:36:e4:75:7e:32:73:e2:c9:
                    d7:05:af:66:82:8d:10:0f:1b:fc:7c:17:30:38:34:
                    4c:8e:de:93:9c:44:7a:c6:b5:a0:f4:68:75:b4:cd:
                    0a:c4:95:0c:92:6a:c2:cb:57:44:2d:d4:e6:b9:91:
                    e6:72:9c:f1:55:a4:ff:a6:38:a9:7a:fc:0f:3c:ca:
                    b0:0d:12:9c:5b:db:1b:c0:79:b6:ff:64:20:9f:f5:
                    a6:68:a4:0c:5a:e9:83:32:07:95:27:e1:dd:bb:12:
                    cc:55:80:df:db:c3:4b:29:ae:df:38:83:47:8f:6a:
                    1e:ce:e6:ac:db:45:31:f7:dc:09:54:37:0b:b0:56:
                    e2:2d:c8:b1:19:1a:42:77:36:4e:be:41:b3:cf:b4:
                    26:c0:83:b6:68:3a:7b:a6:d5:41:c2:3f:06:fa:a9:
                    b8:c3:26:a6:25:88:03:d2:76:69:c4:74:63:b9:8b:
                    58:8d:a4:2b:e8:4e:ee:7c:cb:7a:4e:8a:8e:63:80:
                    d1:50:6a:f6:95:6b:21:76:1f:4a:28:47:28:4c:4a:
                    45:a9:9c:4f:32:87:e1:a4:e6:a9:2d:7e:38:90:3a:
                    3e:dc:f2:7e:76:24:31:b3:e7:29:17:5e:44:03:ed:
                    a8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9C:2E:AF:31:5A:B5:B2:CE:67:55:28:93:1C:B2:E0:4F:11:79:52
            X509v3 Authority Key Identifier:
                keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:dc:4f:ee:5b:a7:d3:10:06:64:a0:05:cb:2b:33:3d:9f:
         d1:f2:06:45:de:c5:6c:f1:16:e4:42:f8:0a:30:76:11:68:42:
         29:f3:cb:2f:e8:f6:42:25:5c:c5:72:d6:9c:11:89:36:4a:40:
         2b:4a:b1:b6:b0:80:5e:39:cc:8c:e2:e2:85:c6:e5:00:45:2c:
         06:47:72:b3:b2:49:23:6f:24:a6:b6:93:47:0d:c7:0f:30:49:
         a4:b7:0f:a2:2f:9e:7d:37:88:b1:a3:da:4f:4e:e8:8e:b0:e9:
         8c:e5:57:5b:85:76:fb:9a:e2:8b:84:6e:a8:06:d7:b8:c8:9c:
         a6:0b:39:99:02:4f:f9:1c:43:b9:29:28:19:52:61:0e:65:2d:
         36:c2:aa:60:78:30:e3:5f:a3:9e:a0:d2:be:22:7c:6a:0a:7b:
         06:38:49:b2:c7:da:64:3f:e5:60:2b:bd:e8:de:53:9a:bc:06:
         b3:4e:bc:5b:25:18:a3:b5:a9:e3:53:b2:04:1c:e9:4b:b1:1d:
         e4:53:f5:55:f2:0f:41:04:b0:dd:ae:87:59:ea:4f:8d:37:35:
         31:07:e4:15:22:c3:92:eb:fb:4a:80:7f:96:6c:be:53:b4:4f:
         9b:69:60:3e:6f:73:56:9a:d3:e9:9a:84:1a:73:40:bd:e0:96:
         1c:92:fb:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+hi771z0Xe0+623tCprxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTI5ZmNkNjFkYzY5ZGNjZmJlMDFkNWZmMDAzNWI0MWFj
OTUyNjAwHhcNMjYxMDI3MTgwMTI1WhcNMjYxMDI4MTgwMTI1WjAzMTEwLwYDVQQD
EyhlZjljMmVhZjMxNWFiNWIyY2U2NzU1Mjg5MzFjYjJlMDRmMTE3OTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3tKFKF96D3qvoK5MjtZzt+11sCj
NuR1fjJz4snXBa9mgo0QDxv8fBcwODRMjt6TnER6xrWg9Gh1tM0KxJUMkmrCy1dE
LdTmuZHmcpzxVaT/pjipevwPPMqwDRKcW9sbwHm2/2Qgn/WmaKQMWumDMgeVJ+Hd
uxLMVYDf28NLKa7fOINHj2oezuas20Ux99wJVDcLsFbiLcixGRpCdzZOvkGzz7Qm
wIO2aDp7ptVBwj8G+qm4wyamJYgD0nZpxHRjuYtYjaQr6E7ufMt6ToqOY4DRUGr2
lWshdh9KKEcoTEpFqZxPMofhpOapLX44kDo+3PJ+diQxs+cpF15EA+2oOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+cLq8xWrWyzmdVKJMcsuBPEXlSMB8GA1UdIwQY
MBaAFKSSn81h3Gncz74B1f8ANbQayVJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUt
ZWJhOWM1Y2IzMmQwLzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81YTIxMTctZjU4My00NDVkLWI3MmUtZWJhOWM1Y2IzMmQw
LzEvcEpLZnpXSGNhZHpQdmdIVl93QTF0QnJKVW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1DcT+5b
p9MQBmSgBcsrMz2f0fIGRd7FbPEW5EL4CjB2EWhCKfPLL+j2QiVcxXLWnBGJNkpA
K0qxtrCAXjnMjOLihcblAEUsBkdys7JJI28kpraTRw3HDzBJpLcPoi+efTeIsaPa
T07ojrDpjOVXW4V2+5rii4RuqAbXuMicpgs5mQJP+RxDuSkoGVJhDmUtNsKqYHgw
41+jnqDSviJ8agp7BjhJssfaZD/lYCu96N5TmrwGs068WyUYo7Wp41OyBBzpS7Ed
5FP1VfIPQQSw3a6HWepPjTc1MQfkFSLDkuv7SoB/lmy+U7RPm2lgPm9zVprT6ZqE
GnNAveCWHJL7yQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:02:14 2026 by rpki-client