Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
File:                     APfVbNN-MeClJfW7GluvX0meQG0.mft (raw, json)
Hash identifier:          4QG6wPkpss+DLi3KgfzE7KhbjH8doti0XSV6oP2FY2s=
Subject key identifier:   08:2E:80:9A:06:7E:AA:C2:A7:0A:0C:56:3D:69:A5:BF:12:4E:E1:2A
Authority key identifier: 00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
Certificate issuer:       /CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Certificate serial:       01A13F399857F94126167DA8E10425341260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
Manifest number:          19FA
Signing time:             Thu 15 Oct 2026 11:01:41 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:41 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:41 +0000
Files and hashes:         1: APfVbNN-MeClJfW7GluvX0meQG0.crl (hash: RJHxik+lB+KNcfZb4FmA+dnHbSLl2TOlFYku/ZNWH1E=)
                          2: UGPRCcRwCxmD212yXnFn6rGxyZs.roa (hash: Rr/MnDTFXlxKNuJFFVDipyDc937yhBa1XA4JFiwrOyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:98:57:f9:41:26:16:7d:a8:e1:04:25:34:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
        Validity
            Not Before: Oct 15 11:01:41 2026 GMT
            Not After : Oct 16 11:01:41 2026 GMT
        Subject: CN=082e809a067eaac2a70a0c563d69a5bf124ee12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:38:a0:3d:ae:40:e0:27:b3:82:1f:10:2b:32:
                    e3:7c:b9:f2:da:3a:6a:e1:83:2f:39:b9:76:04:43:
                    5f:ba:e4:e0:b5:63:8d:28:cf:d8:69:34:f7:92:a1:
                    5c:eb:7e:89:95:92:e0:79:06:48:12:c2:ec:88:f8:
                    87:c6:c8:b6:9b:8d:a9:cd:06:47:5e:03:98:c8:e4:
                    a8:a0:99:dc:23:62:ac:93:30:8c:0e:80:59:bf:7e:
                    8a:f0:c3:9d:17:b1:0b:bf:0a:e2:40:6f:1d:fb:a8:
                    f9:92:22:56:5e:29:67:a6:28:36:c9:56:c5:87:ad:
                    e6:ef:05:d9:5b:dc:cd:c3:d6:f7:d1:cd:23:81:10:
                    b1:25:7c:fb:14:7c:55:fa:fd:fc:6b:fe:cd:d5:59:
                    04:2c:81:e5:95:f8:86:3a:1b:e9:67:a2:6f:c2:41:
                    d9:1b:b6:27:8a:f1:89:d9:d8:47:6f:81:c6:6d:d1:
                    9f:01:c2:bc:d0:5b:19:83:15:84:96:28:1a:02:21:
                    e6:dc:46:35:c9:f6:fa:1e:5f:d6:5a:c8:52:4e:ad:
                    27:b2:9e:af:8e:14:b0:fe:19:ff:87:3f:64:63:3c:
                    47:98:7d:8b:0d:c4:45:20:cd:0c:d9:e3:36:64:36:
                    24:79:1f:07:0f:7e:db:eb:f9:83:ce:99:00:8e:eb:
                    ce:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2E:80:9A:06:7E:AA:C2:A7:0A:0C:56:3D:69:A5:BF:12:4E:E1:2A
            X509v3 Authority Key Identifier:
                keyid:00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:bf:7d:ea:09:81:8c:e4:42:4d:4e:93:bd:3b:68:73:a4:1e:
         12:f1:02:ca:34:33:4b:84:9a:37:3b:7d:84:97:2c:59:da:08:
         a8:4c:60:3c:1f:ee:3a:66:0d:19:1c:72:e2:10:97:34:6f:83:
         dd:0d:c5:9f:26:0e:e9:a7:93:9c:4c:39:67:6d:06:70:8f:5d:
         3f:de:58:6d:20:e5:2e:4a:68:46:f5:62:01:3c:01:a2:e3:b4:
         0e:ec:94:35:ba:e0:70:ff:97:c8:41:88:90:86:5e:da:98:03:
         82:0b:db:1b:42:c2:63:d4:3b:68:67:b4:43:83:39:28:dc:f8:
         1e:36:ad:9a:bb:2f:7b:91:0b:48:27:37:e2:c1:26:1d:d2:47:
         73:59:85:72:0e:c9:ce:3c:20:aa:ab:9c:4c:b9:27:0f:5b:26:
         8c:38:22:3c:2b:d3:bf:1e:e8:16:11:39:80:44:2a:35:aa:5e:
         86:7e:10:d4:3c:39:cc:b9:71:8a:ad:da:9b:48:84:40:e6:e3:
         2f:98:41:96:04:6f:c9:90:af:80:f7:04:61:a6:e8:8e:05:c3:
         a6:10:b3:28:4c:c3:c3:d9:bd:e9:56:29:23:b3:23:31:9e:c7:
         ed:99:bb:52:a0:88:73:eb:f9:40:a5:99:13:f2:df:be:e1:83:
         08:31:67:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/OZhX+UEmFn2o4QQlNBJgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZjdkNTZjZDM3ZTMxZTBhNTI1ZjViYjFhNWJhZjVmNDk5
ZTQwNmQwHhcNMjYxMDE1MTEwMTQxWhcNMjYxMDE2MTEwMTQxWjAzMTEwLwYDVQQD
EygwODJlODA5YTA2N2VhYWMyYTcwYTBjNTYzZDY5YTViZjEyNGVlMTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TigPa5A4Cezgh8QKzLjfLny2jpq
4YMvObl2BENfuuTgtWONKM/YaTT3kqFc636JlZLgeQZIEsLsiPiHxsi2m42pzQZH
XgOYyOSooJncI2KskzCMDoBZv36K8MOdF7ELvwriQG8d+6j5kiJWXilnpig2yVbF
h63m7wXZW9zNw9b30c0jgRCxJXz7FHxV+v38a/7N1VkELIHllfiGOhvpZ6JvwkHZ
G7YnivGJ2dhHb4HGbdGfAcK80FsZgxWEligaAiHm3EY1yfb6Hl/WWshSTq0nsp6v
jhSw/hn/hz9kYzxHmH2LDcRFIM0M2eM2ZDYkeR8HD37b6/mDzpkAjuvOUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgugJoGfqrCpwoMVj1ppb8STuEqMB8GA1UdIwQY
MBaAFAD31WzTfjHgpSX1uxpbr19JnkBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVBmVmJOTi1NZUNsSmZXN0dsdXZYMG1lUUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84Y2I3ZWEtZDc1ZC00NmY2LWE1YzMt
MTNiMjllYWUxOWIzLzEvQVBmVmJOTi1NZUNsSmZXN0dsdXZYMG1lUUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC84Y2I3ZWEtZDc1ZC00NmY2LWE1YzMtMTNiMjllYWUxOWIz
LzEvQVBmVmJOTi1NZUNsSmZXN0dsdXZYMG1lUUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADb996gmB
jORCTU6TvTtoc6QeEvECyjQzS4SaNzt9hJcsWdoIqExgPB/uOmYNGRxy4hCXNG+D
3Q3FnyYO6aeTnEw5Z20GcI9dP95YbSDlLkpoRvViATwBouO0DuyUNbrgcP+XyEGI
kIZe2pgDggvbG0LCY9Q7aGe0Q4M5KNz4Hjatmrsve5ELSCc34sEmHdJHc1mFcg7J
zjwgqqucTLknD1smjDgiPCvTvx7oFhE5gEQqNapehn4Q1Dw5zLlxiq3am0iEQObj
L5hBlgRvyZCvgPcEYabojgXDphCzKEzDw9m96VYpI7MjMZ7H7Zm7UqCIc+v5QKWZ
E/LfvuGDCDFnQA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:00 2026 by rpki-client