Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
File:                     aNVC9HJ2FI-se4mU780q8Q56SEo.mft (raw, json)
Hash identifier:          OEy9grR8ZKkw7BHV14xADz1eSyk0Z2JYWuASCCSE8yQ=
Subject key identifier:   A9:6E:79:2C:0D:60:A9:EB:EA:5E:AE:E4:F8:BD:74:53:7D:5A:0E:D3
Authority key identifier: 68:D5:42:F4:72:76:14:8F:AC:7B:89:94:EF:CD:2A:F1:0E:7A:48:4A
Certificate issuer:       /CN=68d542f47276148fac7b8994efcd2af10e7a484a
Certificate serial:       01A1197446CAAEA96BE23FD8EEEDF25D36C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
Manifest number:          010B
Signing time:             Thu 08 Oct 2026 03:00:12 +0000
Manifest this update:     Thu 08 Oct 2026 03:00:12 +0000
Manifest next update:     Fri 09 Oct 2026 03:00:12 +0000
Files and hashes:         1: HSSRUKBEGAwzctbuSfK5pqFW7og.roa (hash: JzHF9cnYKiNULXtoW5fjwRQd1kJW6OGN1ZbOkNwiJFU=)
                          2: aNVC9HJ2FI-se4mU780q8Q56SEo.crl (hash: lghLDqBQb0lO0uNyUuQkXGv2K5mfUGkZmbiQTarhkFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:74:46:ca:ae:a9:6b:e2:3f:d8:ee:ed:f2:5d:36:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d542f47276148fac7b8994efcd2af10e7a484a
        Validity
            Not Before: Oct  8 03:00:12 2026 GMT
            Not After : Oct  9 03:00:12 2026 GMT
        Subject: CN=a96e792c0d60a9ebea5eaee4f8bd74537d5a0ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:a3:7f:e2:c8:36:9f:d9:29:6e:bc:92:32:
                    9f:df:77:b7:1a:7a:01:1a:38:e2:f3:39:28:2b:66:
                    06:51:fd:d4:d6:a3:19:2f:a3:b9:76:76:b2:46:95:
                    c5:51:a7:0c:20:90:7b:88:75:92:91:a2:89:2a:da:
                    e8:83:57:99:2c:dd:22:5a:36:fc:23:a6:8e:bc:bb:
                    ee:fb:cf:ce:36:fd:70:31:f8:45:6c:c1:95:c5:52:
                    df:8d:8e:7c:f2:86:e9:cf:a0:73:f0:a3:60:f1:72:
                    67:20:73:30:f3:ca:7a:a8:ac:00:53:03:3b:d3:86:
                    4b:d8:cd:3b:be:4f:aa:97:a0:8a:ee:2d:68:5c:01:
                    1b:1e:17:c8:da:df:a2:b1:8f:71:23:5b:3f:a1:bf:
                    be:7a:02:69:2f:43:dd:69:c4:1b:bc:6d:ff:fb:9e:
                    0c:69:d1:b8:f5:32:fa:c6:9d:a4:ad:02:fc:a6:e4:
                    a3:99:75:cd:d9:2d:e3:7b:0f:d3:17:bb:79:8f:a1:
                    91:60:50:95:75:1b:e5:0b:81:04:28:10:d9:88:00:
                    85:36:f7:78:b8:79:e3:33:65:a1:18:ce:df:38:d6:
                    41:df:8c:71:9f:2f:02:81:b6:2d:b2:5b:81:a9:d6:
                    49:28:30:c1:a5:2f:b7:cf:ee:3a:9f:0f:e5:a2:e9:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6E:79:2C:0D:60:A9:EB:EA:5E:AE:E4:F8:BD:74:53:7D:5A:0E:D3
            X509v3 Authority Key Identifier:
                keyid:68:D5:42:F4:72:76:14:8F:AC:7B:89:94:EF:CD:2A:F1:0E:7A:48:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:0d:27:86:79:dd:b2:45:b3:37:eb:38:5c:1d:84:cd:c1:ef:
         ca:08:b7:0a:30:6c:9a:d5:42:2e:1b:e1:88:31:bb:7b:ca:95:
         b3:16:a7:a7:e2:a6:4b:a4:96:6d:d8:f0:8e:6a:a5:17:fb:03:
         6e:ff:f0:12:05:3a:d7:25:0a:c7:ad:7e:1f:33:c7:56:de:ce:
         8c:3a:3c:3e:9c:88:fc:f1:03:5a:cd:45:c0:0c:6a:a4:c7:a5:
         f7:fa:4b:48:0c:87:31:ea:58:dd:4f:2c:43:75:7b:cd:26:ef:
         b7:cd:5c:91:e2:ae:0e:ba:df:7b:40:45:41:15:03:c8:13:24:
         ea:04:bd:15:a6:ea:3a:c6:95:65:ae:5c:26:8f:39:cc:59:be:
         f7:99:a3:5f:0b:f3:1b:b1:51:cb:53:e3:18:93:7c:f2:35:0e:
         cc:10:c7:61:c5:b7:c9:1b:5a:ce:1d:d3:28:99:da:78:8f:41:
         f9:ea:6a:22:b6:6e:3b:58:29:f0:c2:49:8c:51:b3:17:5a:ef:
         69:5e:e0:98:6a:1d:fb:6c:5d:c9:6a:08:c7:26:95:04:e0:40:
         86:42:77:64:0f:14:6a:49:ee:ad:97:62:7d:c3:fc:ec:12:61:
         a0:f4:cd:50:01:cc:75:9c:92:05:19:a0:3c:37:0d:e6:82:98:
         34:b8:20:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZdEbKrqlr4j/Y7u3yXTbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDU0MmY0NzI3NjE0OGZhYzdiODk5NGVmY2QyYWYxMGU3
YTQ4NGEwHhcNMjYxMDA4MDMwMDEyWhcNMjYxMDA5MDMwMDEyWjAzMTEwLwYDVQQD
EyhhOTZlNzkyYzBkNjBhOWViZWE1ZWFlZTRmOGJkNzQ1MzdkNWEwZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHyjf+LINp/ZKW68kjKf33e3GnoB
Gjji8zkoK2YGUf3U1qMZL6O5dnayRpXFUacMIJB7iHWSkaKJKtrog1eZLN0iWjb8
I6aOvLvu+8/ONv1wMfhFbMGVxVLfjY588obpz6Bz8KNg8XJnIHMw88p6qKwAUwM7
04ZL2M07vk+ql6CK7i1oXAEbHhfI2t+isY9xI1s/ob++egJpL0PdacQbvG3/+54M
adG49TL6xp2krQL8puSjmXXN2S3jew/TF7t5j6GRYFCVdRvlC4EEKBDZiACFNvd4
uHnjM2WhGM7fONZB34xxny8CgbYtsluBqdZJKDDBpS+3z+46nw/lounaoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlueSwNYKnr6l6u5Pi9dFN9Wg7TMB8GA1UdIwQY
MBaAFGjVQvRydhSPrHuJlO/NKvEOekhKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5WQzlISjJGSS1zZTRtVTc4MHE4UTU2U0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMzdkMWQtZDRmYi00OTZjLWFmNDkt
MzQyMDY4NGM3ZTQxLzEvYU5WQzlISjJGSS1zZTRtVTc4MHE4UTU2U0VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lMzdkMWQtZDRmYi00OTZjLWFmNDktMzQyMDY4NGM3ZTQx
LzEvYU5WQzlISjJGSS1zZTRtVTc4MHE4UTU2U0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAow0nhnnd
skWzN+s4XB2EzcHvygi3CjBsmtVCLhvhiDG7e8qVsxanp+KmS6SWbdjwjmqlF/sD
bv/wEgU61yUKx61+HzPHVt7OjDo8PpyI/PEDWs1FwAxqpMel9/pLSAyHMepY3U8s
Q3V7zSbvt81ckeKuDrrfe0BFQRUDyBMk6gS9FabqOsaVZa5cJo85zFm+95mjXwvz
G7FRy1PjGJN88jUOzBDHYcW3yRtazh3TKJnaeI9B+epqIrZuO1gp8MJJjFGzF1rv
aV7gmGod+2xdyWoIxyaVBOBAhkJ3ZA8UaknurZdifcP87BJhoPTNUAHMdZySBRmg
PDcN5oKYNLggCw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:34:50 2026 by rpki-client