Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File:                     z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier:          2P5JE9LZRcVNDUT73KW3soP85c62ifih+yUxlU/THEQ=
Subject key identifier:   4B:1E:DF:36:44:C4:49:56:22:01:AB:58:E9:C6:B0:AA:FA:F1:ED:BC
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer:       /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial:       01A12BE9620F00BB2A137885EF0DAF9852FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number:          15FC
Signing time:             Sun 11 Oct 2026 17:01:17 +0000
Manifest this update:     Sun 11 Oct 2026 17:01:17 +0000
Manifest next update:     Mon 12 Oct 2026 17:01:17 +0000
Files and hashes:         1: G0xz0bLV9EAQly4_g7VObUShRtE.roa (hash: ABgZUft6yhbazt8klEM2ZtMjod9FBs3oPUw6gWfrGKk=)
                          2: Nl34h2eIaTAhYgUdF-bfPv1rKsw.roa (hash: Td8M1b5eYn7YJIEViFQBLyeZjyCEUobMfRK7pwtir7Y=)
                          3: UhXahydsOo_qiwzRtVGqPmi_pwk.roa (hash: DFHZo+ZnvqIq4efxazwJLIWQqpNgr1YvbSZZDY8hdCA=)
                          4: dMRJpZJ1JNYLWgq3FuqchxjnETE.roa (hash: fce7GbHsuDUNjDLPVqwrMpy3SolSS3TeDUI3vt7NKIY=)
                          5: eTyIZqGBeRs9llTAx7ZMC0wX0a4.roa (hash: O9RU0zVHK29OhSRSOJLSNO075vgHiZ+2AECagLjqPhA=)
                          6: oomUoRc8kAeXbJ8Vact092RPz5A.roa (hash: +kRKbGJLzWAadibg+zB0y/8pWSdZTuvX7OD3gBOEtzw=)
                          7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: bYnr2/yrMuM3YqZzAsAxHCKTOxvGXkdPxkPyGmAbYY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 17:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:e9:62:0f:00:bb:2a:13:78:85:ef:0d:af:98:52:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
        Validity
            Not Before: Oct 11 17:01:17 2026 GMT
            Not After : Oct 12 17:01:17 2026 GMT
        Subject: CN=4b1edf3644c449562201ab58e9c6b0aafaf1edbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f5:20:fa:d0:1b:36:47:42:7e:a3:a9:a8:8e:
                    73:13:45:53:e9:dc:34:52:b3:af:77:3b:96:aa:fd:
                    8b:3b:fd:53:ba:69:d5:e6:ee:20:82:bd:8b:33:00:
                    ef:10:d2:d2:22:86:f7:ba:3a:75:b0:6e:a8:64:a9:
                    94:38:3e:4f:be:e4:55:d8:7c:fc:32:be:50:b0:75:
                    8d:bf:38:ee:0a:cb:b2:f5:4c:d0:f6:10:a4:36:57:
                    8a:d1:16:30:44:6b:06:6b:61:48:d5:35:5d:55:12:
                    d3:03:50:73:cc:cd:c6:10:6c:dc:37:cd:89:d5:d5:
                    61:bb:ba:86:05:ba:29:9a:a3:f4:d3:8f:59:f8:44:
                    79:de:2d:a9:a6:6b:62:42:56:61:dc:9d:0e:1a:a4:
                    ad:f0:0c:fb:0e:d1:8d:ee:67:ec:4c:85:12:a4:2c:
                    99:00:84:b1:ff:d7:c3:a6:f5:46:3e:81:a1:d5:3f:
                    eb:4c:be:c5:32:6e:fd:95:7b:f8:b9:fe:58:3f:75:
                    d4:ca:e3:3f:f6:0c:e2:bf:f4:c8:9c:34:ff:25:6e:
                    1e:2f:c1:00:57:20:15:a0:7d:42:7e:be:b8:f2:2c:
                    7b:42:0b:29:0d:30:16:f0:0e:47:0b:74:6a:78:79:
                    79:3b:d3:84:74:c7:0f:c7:58:54:df:1f:76:9b:b8:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1E:DF:36:44:C4:49:56:22:01:AB:58:E9:C6:B0:AA:FA:F1:ED:BC
            X509v3 Authority Key Identifier:
                keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:00:e9:69:72:a5:a2:f3:08:98:6b:0a:63:8d:48:c3:bf:cc:
         dd:b1:fb:91:2f:18:d5:60:e7:c8:43:0b:45:96:68:b1:7f:00:
         b1:cc:51:79:d3:2b:3a:3c:7f:02:a4:a3:a3:c0:08:f3:0d:13:
         61:a5:8a:24:c6:2d:05:ec:a7:f4:02:cc:70:8b:d7:0a:48:a6:
         48:b3:a9:3c:c8:fe:3a:ca:e2:78:7c:00:12:24:f2:8e:3e:97:
         98:0f:e5:52:7d:3b:22:dc:89:77:08:c0:00:5c:d7:3c:0e:f3:
         9b:ca:50:ec:c7:c0:af:4e:f6:d8:03:e3:eb:17:e4:ee:93:41:
         87:fd:d3:34:f6:cc:b1:06:8b:fd:4a:00:f3:88:74:06:52:7d:
         2b:11:16:92:18:1b:71:30:b3:ee:08:12:40:23:76:2a:3b:64:
         68:14:e7:e5:85:e3:77:b5:71:cb:8a:fc:f7:75:c2:40:e9:a1:
         24:5a:6f:2c:fd:0d:44:5b:a5:a9:ea:a7:21:4e:a9:cc:3e:98:
         68:8d:22:54:62:e9:04:97:03:0a:cd:81:18:c9:f1:5b:0d:fc:
         36:84:5f:8e:73:65:d3:6a:40:9d:1e:40:69:97:a5:cd:6a:90:
         7b:82:cf:8d:ee:ce:3b:42:c3:c7:bb:d6:83:7d:49:7d:7c:a9:
         4b:b0:e1:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEr6WIPALsqE3iF7w2vmFL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZWFjZTcxNGMyOTU2OGVmMTk3MDA3YjE0MWQxMjc1OGNj
NDE1ZDUwHhcNMjYxMDExMTcwMTE3WhcNMjYxMDEyMTcwMTE3WjAzMTEwLwYDVQQD
Eyg0YjFlZGYzNjQ0YzQ0OTU2MjIwMWFiNThlOWM2YjBhYWZhZjFlZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fUg+tAbNkdCfqOpqI5zE0VT6dw0
UrOvdzuWqv2LO/1TumnV5u4ggr2LMwDvENLSIob3ujp1sG6oZKmUOD5PvuRV2Hz8
Mr5QsHWNvzjuCsuy9UzQ9hCkNleK0RYwRGsGa2FI1TVdVRLTA1BzzM3GEGzcN82J
1dVhu7qGBbopmqP0049Z+ER53i2ppmtiQlZh3J0OGqSt8Az7DtGN7mfsTIUSpCyZ
AISx/9fDpvVGPoGh1T/rTL7FMm79lXv4uf5YP3XUyuM/9gziv/TInDT/JW4eL8EA
VyAVoH1Cfr648ix7QgspDTAW8A5HC3RqeHl5O9OEdMcPx1hU3x92m7iF1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEse3zZExElWIgGrWOnGsKr68e28MB8GA1UdIwQY
MBaAFM/qznFMKVaO8ZcAexQdEnWMxBXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMt
OGZkMzk0YjUzNTdjLzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMtOGZkMzk0YjUzNTdj
LzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFADpaXKl
ovMImGsKY41Iw7/M3bH7kS8Y1WDnyEMLRZZosX8AscxRedMrOjx/AqSjo8AI8w0T
YaWKJMYtBeyn9ALMcIvXCkimSLOpPMj+OsrieHwAEiTyjj6XmA/lUn07ItyJdwjA
AFzXPA7zm8pQ7MfAr0722APj6xfk7pNBh/3TNPbMsQaL/UoA84h0BlJ9KxEWkhgb
cTCz7ggSQCN2KjtkaBTn5YXjd7Vxy4r893XCQOmhJFpvLP0NRFulqeqnIU6pzD6Y
aI0iVGLpBJcDCs2BGMnxWw38NoRfjnNl02pAnR5AaZelzWqQe4LPje7OO0LDx7vW
g31JfXypS7DhKw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:29:28 2026 by rpki-client