Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
File:                     Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json)
Hash identifier:          UssoZjjKvyXF7V74gQfGMP7LM7CuJfdOFdAzFDQpkvE=
Subject key identifier:   F1:DE:D0:FD:ED:00:E1:F3:F9:9C:98:E7:5E:4F:0A:C3:20:68:EE:46
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Certificate issuer:       /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial:       01A101A39BC104247EBA86F3DAA77DA8452A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
Manifest number:          15C8
Signing time:             Sat 03 Oct 2026 12:01:01 +0000
Manifest this update:     Sat 03 Oct 2026 12:01:01 +0000
Manifest next update:     Sun 04 Oct 2026 12:01:01 +0000
Files and hashes:         1: 7NuKOIx2N6cCR-BbRM3-xYumC8g.roa (hash: MvnbzvuoGjdD5urWboJ+vbaG/5CXLP/zXZ98k/eTnD8=)
                          2: 8YHYJKejClzJHQyWmQyoXfMGo7c.roa (hash: hjyF8It1A4EPMePr0TlEaEGlDpxI1/XUazn11vRCxOU=)
                          3: CXrIvb9m88q-TS49THuUPClhYR0.roa (hash: xgXK7vEW2/Cmim2d4EiMIKxK9YtLKnHTxncTpuXS9bs=)
                          4: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: eGee45tHExYUY5TgTEtMDeJ7OFhofHXQSvBuZ1rV0Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:a3:9b:c1:04:24:7e:ba:86:f3:da:a7:7d:a8:45:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
        Validity
            Not Before: Oct  3 12:01:01 2026 GMT
            Not After : Oct  4 12:01:01 2026 GMT
        Subject: CN=f1ded0fded00e1f3f99c98e75e4f0ac32068ee46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:c8:d4:28:61:0b:6b:77:ec:b1:ad:5c:2c:
                    5d:c3:8e:d0:7f:44:b3:e6:65:9d:87:5c:ed:41:a7:
                    cb:b4:f6:74:bd:ec:a5:d7:cf:78:95:72:6f:63:3c:
                    43:99:4c:71:2a:cd:bd:65:2f:83:17:b3:5b:ff:26:
                    45:a0:84:da:94:8f:92:c4:9f:01:48:f6:4d:f7:7b:
                    ed:30:0a:54:c1:3a:51:66:e2:64:a5:53:2d:58:3d:
                    9f:59:71:84:69:eb:c7:34:75:35:fa:bf:af:2c:0e:
                    0f:f1:7f:6a:80:31:b7:12:d6:bf:4c:6f:d0:85:1c:
                    c8:ab:79:91:1d:18:15:8a:88:43:ed:90:f4:fe:85:
                    d4:2f:48:36:60:2a:59:f9:9a:8e:d1:3f:d7:6f:9f:
                    1c:8d:a1:a2:36:3c:c0:f1:12:77:fc:5f:2c:29:33:
                    9a:82:65:74:df:aa:d2:65:ae:f8:9b:83:b0:d2:1b:
                    79:62:49:04:0a:a5:04:bc:49:1e:d4:77:a4:e3:8a:
                    ef:01:39:df:1b:87:87:19:b4:eb:1e:68:db:15:36:
                    66:8b:dc:14:55:14:0b:1e:6f:68:b9:46:d9:1b:b5:
                    5f:e1:dd:63:27:88:6e:b5:f3:2c:5f:75:79:23:76:
                    43:6e:9d:9a:ed:81:4a:c1:c0:ed:10:b4:ad:18:93:
                    e7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DE:D0:FD:ED:00:E1:F3:F9:9C:98:E7:5E:4F:0A:C3:20:68:EE:46
            X509v3 Authority Key Identifier:
                keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:07:b3:9f:6b:39:68:6c:6a:6f:70:12:35:5a:8b:a3:23:d8:
         a6:a3:db:de:63:99:b0:3f:2e:a2:96:90:56:58:ca:c8:d7:bd:
         19:86:94:67:29:46:e4:8a:3f:31:25:dc:3f:73:e2:ec:eb:24:
         64:7b:fc:40:f1:2f:cc:d0:24:48:2b:de:90:7e:71:ee:2b:d5:
         0a:26:4b:cd:ff:80:37:27:c1:fa:31:1c:f2:4d:df:89:39:c5:
         de:95:7b:62:3a:23:e2:6e:80:ca:0e:da:19:7d:8f:d9:c9:23:
         54:69:69:2f:ea:e3:41:0b:7d:3a:d0:db:a6:9c:23:f6:e8:e1:
         98:0b:c4:5d:f7:f3:b3:87:10:ca:ac:6a:1f:3b:dd:79:48:66:
         b8:ff:89:c2:4a:31:86:1d:b2:1f:fe:3c:37:5b:e4:d8:a9:10:
         21:91:ea:53:e6:b6:50:83:da:2a:1f:06:b4:39:ac:1b:23:eb:
         f8:79:a4:7e:2f:26:e4:1a:d7:29:89:e4:d3:01:34:6a:26:4a:
         1d:c1:22:a6:0b:af:2d:4a:b2:95:3c:30:f9:77:32:ea:65:a1:
         47:e8:79:8b:4e:44:77:21:36:3b:cc:41:9d:33:85:f0:f9:79:
         0b:c2:33:49:ff:9e:4c:c1:33:63:aa:29:0e:64:05:f2:7a:de:
         c9:3b:46:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEBo5vBBCR+uobz2qd9qEUqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMWVkM2Q3YmE1MTFjYTYwMDJkODQ1YjNjMGFhODExMWEz
NTU5Y2YwHhcNMjYxMDAzMTIwMTAxWhcNMjYxMDA0MTIwMTAxWjAzMTEwLwYDVQQD
EyhmMWRlZDBmZGVkMDBlMWYzZjk5Yzk4ZTc1ZTRmMGFjMzIwNjhlZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOXI1ChhC2t37LGtXCxdw47Qf0Sz
5mWdh1ztQafLtPZ0veyl1894lXJvYzxDmUxxKs29ZS+DF7Nb/yZFoITalI+SxJ8B
SPZN93vtMApUwTpRZuJkpVMtWD2fWXGEaevHNHU1+r+vLA4P8X9qgDG3Eta/TG/Q
hRzIq3mRHRgViohD7ZD0/oXUL0g2YCpZ+ZqO0T/Xb58cjaGiNjzA8RJ3/F8sKTOa
gmV036rSZa74m4Ow0ht5YkkECqUEvEke1Hek44rvATnfG4eHGbTrHmjbFTZmi9wU
VRQLHm9ouUbZG7Vf4d1jJ4hutfMsX3V5I3ZDbp2a7YFKwcDtELStGJPncwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHe0P3tAOHz+ZyY515PCsMgaO5GMB8GA1UdIwQY
MBaAFDMe09e6URymAC2EWzwKqBEaNVnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQt
YmFmMjRkZDU4MzlmLzEvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQtYmFmMjRkZDU4Mzlm
LzEvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgezn2s5
aGxqb3ASNVqLoyPYpqPb3mOZsD8uopaQVljKyNe9GYaUZylG5Io/MSXcP3Pi7Osk
ZHv8QPEvzNAkSCvekH5x7ivVCiZLzf+ANyfB+jEc8k3fiTnF3pV7Yjoj4m6Ayg7a
GX2P2ckjVGlpL+rjQQt9OtDbppwj9ujhmAvEXffzs4cQyqxqHzvdeUhmuP+Jwkox
hh2yH/48N1vk2KkQIZHqU+a2UIPaKh8GtDmsGyPr+Hmkfi8m5BrXKYnk0wE0aiZK
HcEipguvLUqylTww+Xcy6mWhR+h5i05EdyE2O8xBnTOF8Pl5C8IzSf+eTMEzY6op
DmQF8nreyTtGAQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 16:23:51 2026 by rpki-client