Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
File:                     oev1TQKO5HZPYveK2HHb8CYih4g.mft (raw, json)
Hash identifier:          EReMm4beiO/jb887U7CbGmvbEopYjBZMslH+NjT3hYs=
Subject key identifier:   C7:4E:36:1B:42:40:FD:B2:BC:D0:BB:94:62:BA:B2:07:C6:38:3D:8C
Authority key identifier: A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
Certificate issuer:       /CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Certificate serial:       01A182D086397E547298E47BE8ACE2E207C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
Manifest number:          0812
Signing time:             Wed 28 Oct 2026 14:01:06 +0000
Manifest this update:     Wed 28 Oct 2026 14:01:06 +0000
Manifest next update:     Thu 29 Oct 2026 14:01:06 +0000
Files and hashes:         1: 26PCuULcHS-vm3v3fQgA6-1DVmQ.roa (hash: tTyj68LqKHap/YbHLtgQzuaQZ2ESKiv4xe4q4toZyQQ=)
                          2: X7aPlR-pZo6rLSSiJT7Oe8Uyo-s.roa (hash: f8OEucDIP6cYs0bjMa0ASBn6fJHEhpbyHwyN5ykv6sY=)
                          3: cJErKp3l7YOeG09N0R0TYAEpUGg.roa (hash: 7gKjqS1rnbh2fqNlL6j2VX106p+ru9PHs/6B+IxwUi4=)
                          4: kdtriYs5EMHzMm8GxGhb8NfrmqQ.roa (hash: lBWS6NaSe2F942bAeRrCfj/gV/8TvjoRWKgChfD/esI=)
                          5: oev1TQKO5HZPYveK2HHb8CYih4g.crl (hash: ZsLkqI3JHTSYKi4scPVa1rlanwC1xu+2gc/68tJVhlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:d0:86:39:7e:54:72:98:e4:7b:e8:ac:e2:e2:07:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ebf54d028ee4764f62f78ad871dbf026228788
        Validity
            Not Before: Oct 28 14:01:06 2026 GMT
            Not After : Oct 29 14:01:06 2026 GMT
        Subject: CN=c74e361b4240fdb2bcd0bb9462bab207c6383d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:88:45:2b:96:f2:55:4c:5b:39:27:c3:eb:
                    6a:fc:0c:8a:ba:b6:96:6a:05:1a:9b:de:05:0c:86:
                    f6:28:10:db:e6:4e:8f:4e:0e:35:f6:5e:cd:56:32:
                    e4:7a:86:f3:a4:78:55:2e:36:fc:33:b2:d9:47:71:
                    76:9d:53:6e:38:f1:ad:73:db:49:01:ac:41:73:b0:
                    9a:42:9b:ea:07:f1:ad:91:a1:96:cb:fe:78:0d:1a:
                    93:19:97:b2:ad:a1:6e:1e:5b:43:f4:7a:51:b6:9b:
                    d1:6b:9e:41:dd:95:6f:27:e6:8c:48:9b:a9:34:ef:
                    8d:b9:4d:e3:b4:27:15:0d:f6:0b:09:74:55:45:b1:
                    a5:94:67:99:b8:dc:7c:67:89:36:6c:d9:41:c8:c6:
                    cd:43:0f:16:35:ae:01:7e:ff:e8:6a:06:c7:40:a6:
                    b6:ba:b2:fe:bc:04:9c:4b:6b:93:85:54:b9:dd:18:
                    dd:6f:14:bb:08:5b:b8:13:d4:16:32:0d:a1:98:72:
                    8f:33:4e:6c:e3:fa:d7:99:c7:13:1b:23:9e:2d:93:
                    93:4a:3a:85:d4:c6:59:c9:8c:26:7b:96:a4:ad:5d:
                    9f:a9:b0:63:3e:fc:ec:4e:94:ac:34:5a:ba:88:0b:
                    b9:3f:9d:5a:51:37:c3:b5:e0:15:06:fc:54:74:97:
                    ca:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4E:36:1B:42:40:FD:B2:BC:D0:BB:94:62:BA:B2:07:C6:38:3D:8C
            X509v3 Authority Key Identifier:
                keyid:A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ca:61:e9:19:53:93:c7:f8:51:30:b3:65:0e:8a:b4:28:c9:
         0e:a3:43:cb:3b:54:00:e0:09:54:5b:d1:4f:bb:29:c2:10:e1:
         61:83:d9:04:76:15:1a:67:82:08:99:fe:d1:a7:62:7f:b0:30:
         53:72:d9:57:de:0b:f2:d5:30:56:a7:de:8f:c6:c0:d7:05:26:
         a1:61:b8:73:64:93:a7:d1:2f:53:b5:20:57:d7:00:86:ec:b4:
         ff:dd:0b:01:cd:66:56:2e:85:e2:1e:82:3e:b1:9f:c3:2a:95:
         2c:ab:3e:8a:42:b8:5c:de:96:3d:a0:0e:90:60:4d:cc:fa:2e:
         13:4f:e6:1d:bd:fe:93:9f:06:06:2a:78:2c:25:7e:56:50:c6:
         a7:b9:50:2a:fa:48:6f:c6:45:f0:bc:84:3e:53:1d:c6:47:1a:
         9b:ec:1c:f5:0a:17:98:01:54:26:44:00:d1:40:9a:65:28:6f:
         08:8d:77:89:80:17:d3:e4:f8:83:af:4d:70:2d:bf:48:a4:cb:
         45:35:bd:eb:d5:43:63:a9:1c:95:3c:87:b5:68:1c:dd:63:30:
         53:d5:a9:29:a3:df:b9:1a:d4:b5:2d:05:a6:91:bf:46:5f:1f:
         0c:15:46:cc:88:28:7a:db:27:ad:e0:9c:f6:86:c4:3c:64:f8:
         40:dc:36:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGC0IY5flRymOR76Kzi4gfEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZWJmNTRkMDI4ZWU0NzY0ZjYyZjc4YWQ4NzFkYmYwMjYy
Mjg3ODgwHhcNMjYxMDI4MTQwMTA2WhcNMjYxMDI5MTQwMTA2WjAzMTEwLwYDVQQD
EyhjNzRlMzYxYjQyNDBmZGIyYmNkMGJiOTQ2MmJhYjIwN2M2MzgzZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjyIRSuW8lVMWzknw+tq/AyKuraW
agUam94FDIb2KBDb5k6PTg419l7NVjLkeobzpHhVLjb8M7LZR3F2nVNuOPGtc9tJ
AaxBc7CaQpvqB/GtkaGWy/54DRqTGZeyraFuHltD9HpRtpvRa55B3ZVvJ+aMSJup
NO+NuU3jtCcVDfYLCXRVRbGllGeZuNx8Z4k2bNlByMbNQw8WNa4Bfv/oagbHQKa2
urL+vAScS2uThVS53RjdbxS7CFu4E9QWMg2hmHKPM05s4/rXmccTGyOeLZOTSjqF
1MZZyYwme5akrV2fqbBjPvzsTpSsNFq6iAu5P51aUTfDteAVBvxUdJfKQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdONhtCQP2yvNC7lGK6sgfGOD2MMB8GA1UdIwQY
MBaAFKHr9U0CjuR2T2L3ithx2/AmIoeIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2V2MVRRS081SFpQWXZlSzJISGI4Q1lpaDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xYjE3MmEtNjFkMS00MjBjLWEzZGQt
NDdhNWJmNWIzMTNkLzEvb2V2MVRRS081SFpQWXZlSzJISGI4Q1lpaDRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xYjE3MmEtNjFkMS00MjBjLWEzZGQtNDdhNWJmNWIzMTNk
LzEvb2V2MVRRS081SFpQWXZlSzJISGI4Q1lpaDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcph6RlT
k8f4UTCzZQ6KtCjJDqNDyztUAOAJVFvRT7spwhDhYYPZBHYVGmeCCJn+0adif7Aw
U3LZV94L8tUwVqfej8bA1wUmoWG4c2STp9EvU7UgV9cAhuy0/90LAc1mVi6F4h6C
PrGfwyqVLKs+ikK4XN6WPaAOkGBNzPouE0/mHb3+k58GBip4LCV+VlDGp7lQKvpI
b8ZF8LyEPlMdxkcam+wc9QoXmAFUJkQA0UCaZShvCI13iYAX0+T4g69NcC2/SKTL
RTW969VDY6kclTyHtWgc3WMwU9WpKaPfuRrUtS0FppG/Rl8fDBVGzIgoetsnreCc
9obEPGT4QNw2tA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:22:11 2026 by rpki-client