Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
File:                     m-Io1xO-xtTJq87C8Aoo6CH8J78.mft (raw, json)
Hash identifier:          0DARgbvIgPfmPDswRcOhfTFbJrHq/ZwmRvh0qTcn/gk=
Subject key identifier:   47:90:49:D4:28:1F:AE:4B:57:3E:BC:5A:1F:DB:54:70:A7:F9:30:ED
Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Certificate issuer:       /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Certificate serial:       01A160E9C696CED70A6EF219D7806A63EF79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
Manifest number:          1A49
Signing time:             Thu 22 Oct 2026 00:01:35 +0000
Manifest this update:     Thu 22 Oct 2026 00:01:35 +0000
Manifest next update:     Fri 23 Oct 2026 00:01:35 +0000
Files and hashes:         1: 0ZGTFrZyUevTua2zs9Lh9hQNybY.roa (hash: zKYr5PtkQA7YlTYVOh/meKgufXnFJ/zrbKe55i+T7vI=)
                          2: m-Io1xO-xtTJq87C8Aoo6CH8J78.crl (hash: 1M4hscvGgjDfbzzSFqjoHgmbPD9lEr0dtuONSFUaAZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:60:e9:c6:96:ce:d7:0a:6e:f2:19:d7:80:6a:63:ef:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
        Validity
            Not Before: Oct 22 00:01:35 2026 GMT
            Not After : Oct 23 00:01:35 2026 GMT
        Subject: CN=479049d4281fae4b573ebc5a1fdb5470a7f930ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:18:ec:93:ce:01:f6:83:7d:e7:fb:36:2c:
                    0a:5b:9c:07:30:f9:bb:cc:3c:94:59:b1:97:6c:b5:
                    3c:19:07:45:d8:03:4b:a3:a2:ad:55:52:5b:1c:ee:
                    a3:1b:0a:e3:dc:95:5c:eb:1b:7e:65:8d:dd:0b:26:
                    a1:7c:39:3f:a0:b1:e6:db:ad:b5:a7:3d:44:b2:5b:
                    df:a5:0c:a0:62:7a:7a:d5:f6:5f:b3:60:a7:3a:13:
                    34:12:f8:01:d4:d8:1f:e1:d4:fa:9c:fb:56:be:3a:
                    4b:05:cb:6f:64:0b:59:d2:e2:7e:27:33:03:71:49:
                    4b:f7:3d:33:d5:d4:b3:29:e1:48:bd:48:db:61:b1:
                    60:61:42:a5:92:cd:51:4f:65:b9:19:a0:b0:ac:70:
                    46:6e:64:f0:5f:7b:9b:f2:18:8d:00:1d:ef:07:ed:
                    84:ad:9c:ce:f4:c3:c5:69:9f:4f:34:16:04:9f:30:
                    1e:98:05:8d:94:42:21:11:51:44:f1:1a:63:d4:77:
                    f8:64:e7:2a:91:00:13:ce:6c:28:94:7e:b1:e9:9b:
                    50:da:d8:e2:13:e0:30:de:c5:d2:fd:b1:d8:70:7b:
                    57:17:5a:ab:02:62:77:82:cd:23:88:93:f3:fa:9a:
                    e7:37:67:08:cb:0e:c3:02:4f:c3:e5:95:a3:c8:ce:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:90:49:D4:28:1F:AE:4B:57:3E:BC:5A:1F:DB:54:70:A7:F9:30:ED
            X509v3 Authority Key Identifier:
                keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7e:2b:8a:34:ab:f0:69:fe:d3:12:c0:80:66:4c:44:52:62:
         90:44:22:3f:2b:75:04:31:ea:68:18:3c:78:4a:5b:10:92:92:
         a8:a8:8e:c9:94:5d:12:84:9d:7c:74:38:ad:5b:1b:37:d3:0c:
         1b:61:8d:68:d3:b8:dc:17:6b:e8:36:eb:4f:b5:3b:90:37:da:
         e6:58:57:a3:30:6d:4e:f1:6e:cc:54:68:6f:a9:c9:a6:8c:28:
         db:ac:0a:f6:96:5a:4c:ac:7c:e4:9f:53:ff:cc:bf:b4:cb:cd:
         1a:6b:76:c8:73:75:5b:a2:ae:71:6b:c1:af:e3:1f:25:c7:2c:
         2c:4e:d5:c1:4a:d7:80:af:fb:1e:c2:cb:b9:65:ee:f3:00:37:
         c3:15:29:4a:d8:9c:19:51:8d:0f:8f:38:62:48:61:1e:6f:2e:
         e2:80:5f:29:f7:59:b4:21:d3:50:5b:6e:38:51:ac:69:71:0a:
         13:30:2c:f0:63:46:67:9c:4f:7d:5c:2e:ec:52:2d:74:4a:a0:
         4e:9e:5b:cd:79:b3:e8:7a:ff:61:09:b3:8f:65:0a:4a:59:66:
         a2:7a:43:96:69:87:3c:34:93:df:e1:27:31:68:64:91:15:f6:
         31:1b:35:e2:0e:2c:0c:a0:4b:2d:4e:1b:5e:ea:8d:63:da:86:
         af:22:bf:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFg6caWztcKbvIZ14BqY+95MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTIyOGQ3MTNiZWM2ZDRjOWFiY2VjMmYwMGEyOGU4MjFm
YzI3YmYwHhcNMjYxMDIyMDAwMTM1WhcNMjYxMDIzMDAwMTM1WjAzMTEwLwYDVQQD
Eyg0NzkwNDlkNDI4MWZhZTRiNTczZWJjNWExZmRiNTQ3MGE3ZjkzMGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzYY7JPOAfaDfef7NiwKW5wHMPm7
zDyUWbGXbLU8GQdF2ANLo6KtVVJbHO6jGwrj3JVc6xt+ZY3dCyahfDk/oLHm2621
pz1EslvfpQygYnp61fZfs2CnOhM0EvgB1Ngf4dT6nPtWvjpLBctvZAtZ0uJ+JzMD
cUlL9z0z1dSzKeFIvUjbYbFgYUKlks1RT2W5GaCwrHBGbmTwX3ub8hiNAB3vB+2E
rZzO9MPFaZ9PNBYEnzAemAWNlEIhEVFE8Rpj1Hf4ZOcqkQATzmwolH6x6ZtQ2tji
E+Aw3sXS/bHYcHtXF1qrAmJ3gs0jiJPz+prnN2cIyw7DAk/D5ZWjyM5c1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeQSdQoH65LVz68Wh/bVHCn+TDtMB8GA1UdIwQY
MBaAFJviKNcTvsbUyavOwvAKKOgh/Ce/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1JbzF4Ty14dFRKcTg3QzhBb282Q0g4Sjc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83OWYxNWEtNWNiYS00ZDQwLWIzMGIt
ZTM1YTIyM2I0OWM3LzEvbS1JbzF4Ty14dFRKcTg3QzhBb282Q0g4Sjc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83OWYxNWEtNWNiYS00ZDQwLWIzMGItZTM1YTIyM2I0OWM3
LzEvbS1JbzF4Ty14dFRKcTg3QzhBb282Q0g4Sjc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnn4rijSr
8Gn+0xLAgGZMRFJikEQiPyt1BDHqaBg8eEpbEJKSqKiOyZRdEoSdfHQ4rVsbN9MM
G2GNaNO43Bdr6DbrT7U7kDfa5lhXozBtTvFuzFRob6nJpowo26wK9pZaTKx85J9T
/8y/tMvNGmt2yHN1W6KucWvBr+MfJccsLE7VwUrXgK/7HsLLuWXu8wA3wxUpStic
GVGND484YkhhHm8u4oBfKfdZtCHTUFtuOFGsaXEKEzAs8GNGZ5xPfVwu7FItdEqg
Tp5bzXmz6Hr/YQmzj2UKSllmonpDlmmHPDST3+EnMWhkkRX2MRs14g4sDKBLLU4b
XuqNY9qGryK/Ww==
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:58:19 2026 by rpki-client