Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.mft
File:                     0jhBasikxn8MHXSqHFwe_SmC3Zg.mft (raw, json)
Hash identifier:          sV9Hxl7PtbqIVzOpOt6CeHVJ7FcDFvsr/UMN2/SPLd4=
Subject key identifier:   59:89:8F:89:CA:65:11:E8:BE:16:94:7D:58:91:25:6C:56:80:C7:AB
Authority key identifier: D2:38:41:6A:C8:A4:C6:7F:0C:1D:74:AA:1C:5C:1E:FD:29:82:DD:98
Certificate issuer:       /CN=d238416ac8a4c67f0c1d74aa1c5c1efd2982dd98
Certificate serial:       01A18977C60F2B7DC889C0285743A4F70E7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jhBasikxn8MHXSqHFwe_SmC3Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.mft
Manifest number:          0145
Signing time:             Thu 29 Oct 2026 21:01:30 +0000
Manifest this update:     Thu 29 Oct 2026 21:01:30 +0000
Manifest next update:     Fri 30 Oct 2026 21:01:30 +0000
Files and hashes:         1: 0jhBasikxn8MHXSqHFwe_SmC3Zg.crl (hash: xl9ts9jxM1tRp+ji5enU06lADkr33vhRlbO5FUeNnhE=)
                          2: z4scIEhsai2SiPvFPY8Jm70JBSM.roa (hash: qL/WQ7181fmgrfOQNCVUM/gFKkB/ThaOziSxysnkWrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jhBasikxn8MHXSqHFwe_SmC3Zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 21:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:89:77:c6:0f:2b:7d:c8:89:c0:28:57:43:a4:f7:0e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d238416ac8a4c67f0c1d74aa1c5c1efd2982dd98
        Validity
            Not Before: Oct 29 21:01:30 2026 GMT
            Not After : Oct 30 21:01:30 2026 GMT
        Subject: CN=59898f89ca6511e8be16947d5891256c5680c7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:e5:94:6f:c4:c2:d3:00:72:1e:98:69:04:
                    c0:ac:b5:58:17:d5:b4:dc:c9:66:06:29:d2:3b:80:
                    bd:5d:4b:10:2a:de:e1:e4:de:50:c0:93:a1:45:7e:
                    20:30:97:38:8a:6a:a1:26:bd:92:0d:7b:55:00:c4:
                    2f:e6:37:a4:bd:d1:35:74:22:36:13:c3:cc:53:eb:
                    84:e1:c8:5b:07:c6:fd:97:40:a7:1f:4e:fa:bd:d4:
                    ec:fc:cf:70:64:c8:e9:bc:0e:41:58:ef:cf:d3:31:
                    65:c6:10:75:d5:e3:51:42:85:f6:86:4e:c4:c2:c6:
                    74:4e:46:17:ce:a5:0b:3b:ff:81:ec:51:4d:04:ef:
                    9b:65:75:0a:c2:e4:3a:f6:da:f6:0c:f8:5e:6d:32:
                    b8:65:25:c6:51:e6:fa:b1:32:25:73:c2:be:d1:bb:
                    60:fe:bf:a8:bf:54:a1:d9:96:bd:c1:88:e7:60:48:
                    49:62:4a:bc:c6:d1:dd:89:21:d9:4b:7f:c2:08:2c:
                    e6:da:7f:e7:9c:0d:9f:f6:7a:a9:57:bf:1d:71:29:
                    83:8e:28:71:8b:7c:63:12:d7:28:b2:99:44:b7:82:
                    4d:a9:8d:ae:b1:2b:53:08:d2:61:27:28:a0:34:02:
                    04:a8:d1:24:d7:19:9a:f6:95:01:74:e1:23:f9:a2:
                    18:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:89:8F:89:CA:65:11:E8:BE:16:94:7D:58:91:25:6C:56:80:C7:AB
            X509v3 Authority Key Identifier:
                keyid:D2:38:41:6A:C8:A4:C6:7F:0C:1D:74:AA:1C:5C:1E:FD:29:82:DD:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jhBasikxn8MHXSqHFwe_SmC3Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1a:ad:d2:e8:21:76:f6:aa:3b:9d:ed:fc:76:ec:4a:62:fb:
         62:43:30:9a:71:29:0e:af:4e:6e:d2:f9:b6:0b:bd:2a:65:ba:
         9b:69:9d:73:29:80:18:a8:30:d9:b5:7e:7c:a5:9a:a4:3f:96:
         a9:bc:1a:cd:95:7e:ef:56:4b:af:5c:56:7a:7f:9e:d3:29:24:
         33:fc:4a:bf:fb:8f:55:f8:75:87:db:41:68:79:42:2d:c0:7c:
         a3:ca:21:cc:9d:6f:c1:4e:c8:69:46:73:e3:b1:64:b7:08:54:
         3a:78:29:c2:37:15:5e:8b:34:f0:ac:7f:8e:8c:8a:08:ed:6f:
         15:3b:d9:54:04:44:03:f9:8c:00:99:6e:34:39:04:28:4f:e0:
         29:a9:9a:36:dd:8a:c2:a0:a1:52:13:3d:bd:aa:25:5b:91:5b:
         30:6d:d5:87:7b:69:e1:69:1e:cf:d0:2e:70:c2:4b:e9:2b:7b:
         5f:b2:29:c5:15:f8:cf:e2:b4:02:2d:36:b6:2c:a8:2a:be:2c:
         a5:b3:46:7d:f4:8c:a2:9d:93:b4:da:85:0d:7a:38:6a:80:c1:
         83:2d:36:de:76:86:c1:af:55:03:4a:ba:57:12:69:30:ff:b4:
         f4:4c:0b:e6:65:32:6c:e8:32:85:7c:a4:d5:35:1b:d0:11:81:
         0e:e6:40:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGJd8YPK33IicAoV0Ok9w58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzg0MTZhYzhhNGM2N2YwYzFkNzRhYTFjNWMxZWZkMjk4
MmRkOTgwHhcNMjYxMDI5MjEwMTMwWhcNMjYxMDMwMjEwMTMwWjAzMTEwLwYDVQQD
Eyg1OTg5OGY4OWNhNjUxMWU4YmUxNjk0N2Q1ODkxMjU2YzU2ODBjN2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvLllG/EwtMAch6YaQTArLVYF9W0
3MlmBinSO4C9XUsQKt7h5N5QwJOhRX4gMJc4imqhJr2SDXtVAMQv5jekvdE1dCI2
E8PMU+uE4chbB8b9l0CnH076vdTs/M9wZMjpvA5BWO/P0zFlxhB11eNRQoX2hk7E
wsZ0TkYXzqULO/+B7FFNBO+bZXUKwuQ69tr2DPhebTK4ZSXGUeb6sTIlc8K+0btg
/r+ov1Sh2Za9wYjnYEhJYkq8xtHdiSHZS3/CCCzm2n/nnA2f9nqpV78dcSmDjihx
i3xjEtcosplEt4JNqY2usStTCNJhJyigNAIEqNEk1xma9pUBdOEj+aIYKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmJj4nKZRHovhaUfViRJWxWgMerMB8GA1UdIwQY
MBaAFNI4QWrIpMZ/DB10qhxcHv0pgt2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpoQmFzaWt4bjhNSFhTcUhGd2VfU21DM1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83ZTJiMGEtYThlZC00N2I3LTlkNzQt
YWI5NzVmN2QzNTMzLzEvMGpoQmFzaWt4bjhNSFhTcUhGd2VfU21DM1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83ZTJiMGEtYThlZC00N2I3LTlkNzQtYWI5NzVmN2QzNTMz
LzEvMGpoQmFzaWt4bjhNSFhTcUhGd2VfU21DM1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBqt0ugh
dvaqO53t/HbsSmL7YkMwmnEpDq9ObtL5tgu9KmW6m2mdcymAGKgw2bV+fKWapD+W
qbwazZV+71ZLr1xWen+e0ykkM/xKv/uPVfh1h9tBaHlCLcB8o8ohzJ1vwU7IaUZz
47FktwhUOngpwjcVXos08Kx/joyKCO1vFTvZVAREA/mMAJluNDkEKE/gKamaNt2K
wqChUhM9vaolW5FbMG3Vh3tp4Wkez9AucMJL6St7X7IpxRX4z+K0Ai02tiyoKr4s
pbNGffSMop2TtNqFDXo4aoDBgy023naGwa9VA0q6VxJpMP+09EwL5mUybOgyhXyk
1TUb0BGBDuZAjw==
-----END CERTIFICATE-----
Generated at Fri Oct 30 07:11:11 2026 by rpki-client