Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
File:                     d1XNi-ceKectlpDHzUCHtfJhFvA.mft (raw, json)
Hash identifier:          Q1KRLZ/d7TB1Qk/KnbfbjJFyqy2RCKelptzdKbuFNxw=
Subject key identifier:   B1:46:20:08:6D:BC:83:A0:B7:25:C7:A1:C7:E6:F1:90:59:58:6D:06
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Certificate issuer:       /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial:       01A1908BEB3131110F14B14783F3919F7FDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
Manifest number:          0AF6
Signing time:             Sat 31 Oct 2026 06:00:51 +0000
Manifest this update:     Sat 31 Oct 2026 06:00:51 +0000
Manifest next update:     Sun 01 Nov 2026 06:00:51 +0000
Files and hashes:         1: 9F2fGaXqkwYq7hsidHwhVUABVT0.roa (hash: b+5jUhu8wzSR5Hz+8wVW5uNIAXefzuPQ7RL1+84Zd/s=)
                          2: FJjLx1iJw4VqFKz7FPQ0JyldOfI.roa (hash: ev1W9ohjVf7Q0Z9nGx/i+Cc2wNkdLs6mHMbE9kefqiU=)
                          3: d1XNi-ceKectlpDHzUCHtfJhFvA.crl (hash: 6VoF5Cqe/HUVYZebXXgViB/bD/VOpZhcP97vKUhYtnQ=)
                          4: yj4Baoa8O0cK9liPFSajl18EXPE.roa (hash: qR4NJRolj3aKBGShXLhpMIVXbSB+hmucW84pdI75rZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:90:8b:eb:31:31:11:0f:14:b1:47:83:f3:91:9f:7f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
        Validity
            Not Before: Oct 31 06:00:51 2026 GMT
            Not After : Nov  1 06:00:51 2026 GMT
        Subject: CN=b14620086dbc83a0b725c7a1c7e6f19059586d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:2c:87:29:13:d6:b5:02:25:e5:b4:3b:f7:
                    41:26:a2:34:cd:61:88:19:fa:48:17:ba:68:44:2e:
                    d5:ba:94:a3:13:de:c6:3a:ed:2d:1e:e7:59:37:c4:
                    89:04:c3:5b:14:28:15:1f:e1:2d:61:f3:a5:67:d7:
                    1a:bb:ff:ef:23:ca:98:2d:d8:3a:0e:8a:75:65:be:
                    59:c0:d4:40:29:94:ec:18:d4:90:38:28:8d:fd:f3:
                    f0:20:7e:02:e5:dc:9c:73:55:5d:57:e6:a9:f7:10:
                    3d:a8:55:02:0c:1c:3e:9c:ac:46:48:da:d6:f3:28:
                    63:37:e9:85:5c:45:c0:d7:ce:eb:33:f3:bc:66:07:
                    6e:53:14:f6:73:83:dc:a3:45:4a:98:76:59:3f:6e:
                    4b:04:0f:22:f8:67:91:df:42:0b:ac:ed:ea:ed:13:
                    66:94:f9:dc:85:21:f7:1c:bc:41:c6:ba:26:e7:c5:
                    0e:d5:51:06:b9:49:c4:15:99:d3:a3:98:d8:6a:7d:
                    9a:a6:ec:08:17:f0:b3:92:c8:c7:9d:81:6b:51:c4:
                    36:2f:80:a4:72:b9:3a:3e:a7:6b:e2:5b:6e:76:44:
                    25:52:48:e4:50:51:e4:e7:af:c2:e7:f1:84:b1:b2:
                    0a:be:34:34:f9:70:83:60:7c:01:54:fa:b4:f0:fa:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:46:20:08:6D:BC:83:A0:B7:25:C7:A1:C7:E6:F1:90:59:58:6D:06
            X509v3 Authority Key Identifier:
                keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:65:58:89:95:da:a3:77:fb:bb:6e:a4:3b:ab:f1:d6:c9:aa:
         8e:14:fd:de:e8:32:cb:6c:b0:a9:3c:7c:82:78:f0:f7:37:1f:
         ff:c8:86:87:e5:60:2d:d7:55:f9:25:ec:38:62:a7:d1:73:4d:
         ee:a8:4c:9e:fb:a9:1a:79:1a:59:63:86:ce:e1:c1:88:81:6c:
         30:ff:72:6c:a6:dc:99:f7:94:78:35:fd:3d:19:86:e9:e0:47:
         ff:5e:99:c1:7d:8c:b1:1d:a5:78:73:4d:eb:61:84:52:a6:5d:
         4d:c9:97:c4:3b:a0:47:26:4c:de:06:5f:47:ce:98:77:b0:cf:
         f0:68:1e:a6:1f:4b:3e:a5:d0:36:07:5f:fc:e2:75:18:1d:18:
         d3:27:77:bf:9c:7b:da:f0:15:00:1a:08:b4:4c:ec:f1:7c:ec:
         b3:04:7a:64:b6:09:12:c7:6d:30:82:43:96:86:55:fb:71:04:
         aa:fc:f0:81:c6:15:c4:b2:f1:3f:5c:1d:d7:16:bd:40:3b:7e:
         50:15:43:5d:73:f0:85:72:e6:df:7f:06:0e:8b:02:1f:4a:13:
         30:54:55:03:93:44:12:12:42:19:d4:97:5d:eb:37:dd:3b:57:
         72:18:21:93:3b:e9:8a:f0:bb:2f:d0:b3:84:b6:6d:47:fc:66:
         e6:ae:70:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGQi+sxMREPFLFHg/ORn3/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NTVjZDhiZTcxZTI5ZTcyZDk2OTBjN2NkNDA4N2I1ZjI2
MTE2ZjAwHhcNMjYxMDMxMDYwMDUxWhcNMjYxMTAxMDYwMDUxWjAzMTEwLwYDVQQD
EyhiMTQ2MjAwODZkYmM4M2EwYjcyNWM3YTFjN2U2ZjE5MDU5NTg2ZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+AshykT1rUCJeW0O/dBJqI0zWGI
GfpIF7poRC7VupSjE97GOu0tHudZN8SJBMNbFCgVH+EtYfOlZ9cau//vI8qYLdg6
Dop1Zb5ZwNRAKZTsGNSQOCiN/fPwIH4C5dycc1VdV+ap9xA9qFUCDBw+nKxGSNrW
8yhjN+mFXEXA187rM/O8ZgduUxT2c4Pco0VKmHZZP25LBA8i+GeR30ILrO3q7RNm
lPnchSH3HLxBxrom58UO1VEGuUnEFZnTo5jYan2apuwIF/CzksjHnYFrUcQ2L4Ck
crk6Pqdr4ltudkQlUkjkUFHk56/C5/GEsbIKvjQ0+XCDYHwBVPq08PoCFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFGIAhtvIOgtyXHocfm8ZBZWG0GMB8GA1UdIwQY
MBaAFHdVzYvnHinnLZaQx81Ah7XyYRbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83YzBjNTctMTVhOC00MzA3LTg1MGQt
ZTAyMWY4Y2U2YzUxLzEvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My83YzBjNTctMTVhOC00MzA3LTg1MGQtZTAyMWY4Y2U2YzUx
LzEvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWVYiZXa
o3f7u26kO6vx1smqjhT93ugyy2ywqTx8gnjw9zcf/8iGh+VgLddV+SXsOGKn0XNN
7qhMnvupGnkaWWOGzuHBiIFsMP9ybKbcmfeUeDX9PRmG6eBH/16ZwX2MsR2leHNN
62GEUqZdTcmXxDugRyZM3gZfR86Yd7DP8Ggeph9LPqXQNgdf/OJ1GB0Y0yd3v5x7
2vAVABoItEzs8XzsswR6ZLYJEsdtMIJDloZV+3EEqvzwgcYVxLLxP1wd1xa9QDt+
UBVDXXPwhXLm338GDosCH0oTMFRVA5NEEhJCGdSXXes33TtXchghkzvpivC7L9Cz
hLZtR/xm5q5wKA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 16:17:32 2026 by rpki-client