Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
File:                     eCa2BPb4wD_p32yY5h856u11VaU.mft (raw, json)
Hash identifier:          Of+/kQ8mXYnGUbsHEZg141kZFXlYD4S/yYs7Hu0IenQ=
Subject key identifier:   8A:72:F9:6F:9A:BD:9D:AC:6C:5D:A9:AB:DF:74:15:50:9E:3E:3F:E7
Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
Certificate issuer:       /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Certificate serial:       01A18FAFD268B2FB76B14C0ACE2BBFF5E9AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
Manifest number:          1AD0
Signing time:             Sat 31 Oct 2026 02:00:26 +0000
Manifest this update:     Sat 31 Oct 2026 02:00:26 +0000
Manifest next update:     Sun 01 Nov 2026 02:00:26 +0000
Files and hashes:         1: FtAH7Nm-Mz4RjQBZaiWT0xAaEAc.roa (hash: PInGgvuIsGqqB1mQYMtujlsnjDmQI8gDdHkxsOyMUeU=)
                          2: P3pv-gZEfvCnIHWDfdg0yxOLxts.roa (hash: 8lfgDiix8CJcXEjBEwv/AE7QhJ7ckMyzADEA5O86Bjg=)
                          3: eCa2BPb4wD_p32yY5h856u11VaU.crl (hash: dHMOPDfKY4FBsMvg43yEbUSC8p6kYqgMmMQKBzOoNhw=)
                          4: fdTnyPooQgysuP5rftvVBVmGZkM.roa (hash: 1Ez2zy7PUBhosjdmVB2WhVRBoqQ4qi56zfybOmR+pWs=)
                          5: jbu7YVaEChenzG9Nd_JwZvXoWTI.roa (hash: xb+DIZFFqeE3EtRAWh6vIJmLk/CrtqEEWekcTpnXn0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8f:af:d2:68:b2:fb:76:b1:4c:0a:ce:2b:bf:f5:e9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
        Validity
            Not Before: Oct 31 02:00:26 2026 GMT
            Not After : Nov  1 02:00:26 2026 GMT
        Subject: CN=8a72f96f9abd9dac6c5da9abdf7415509e3e3fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:a4:12:8e:ec:e2:2e:6b:2f:7c:44:3f:8d:
                    43:85:74:1a:16:3b:80:ea:f7:fb:41:ff:6f:76:18:
                    1f:10:fb:8c:8b:c8:5a:8f:e6:a1:e2:d1:6e:3e:43:
                    c2:eb:c2:01:db:37:23:39:21:ff:c9:46:8c:00:6a:
                    b0:8d:25:86:e5:85:8f:59:f2:bb:12:83:3e:15:0b:
                    53:d8:77:2d:36:59:32:f8:7a:ea:a9:5e:1c:c7:e4:
                    42:38:70:1a:73:91:3e:f6:86:f2:06:ca:ff:aa:f1:
                    50:80:6c:f1:0a:a8:b7:43:41:e6:5f:e1:61:d0:84:
                    3c:60:6f:56:c1:f0:f0:c8:19:e7:59:1c:d2:6a:d1:
                    88:4a:ac:da:5d:9b:25:dd:d8:52:78:f8:79:3e:f8:
                    0f:5f:96:f0:54:be:64:e6:cd:78:e4:91:0b:41:fe:
                    39:8c:cf:89:58:7b:f8:ce:f4:00:9c:cb:eb:58:dd:
                    05:6d:3d:0c:2a:49:c4:42:75:6f:f0:06:31:25:40:
                    0f:80:2e:ad:3a:ca:97:1c:20:66:c7:ec:64:bc:dd:
                    81:1f:d3:72:be:db:5e:ce:36:48:d1:c7:e9:fe:b7:
                    5a:b1:d6:1a:20:ba:be:f3:46:9d:ef:76:0e:01:de:
                    63:e2:80:15:dc:d5:76:53:e0:c6:22:a1:35:e3:03:
                    d1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:72:F9:6F:9A:BD:9D:AC:6C:5D:A9:AB:DF:74:15:50:9E:3E:3F:E7
            X509v3 Authority Key Identifier:
                keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c0:90:b6:6a:b5:9e:c1:dc:d3:81:ac:66:41:71:59:f2:e4:
         ed:c8:4a:fd:a5:b4:0e:7d:b0:78:17:4c:94:92:f4:86:53:eb:
         52:a4:c3:c4:30:8b:52:2e:94:bd:59:e2:2f:65:bb:e6:b1:f6:
         05:8b:94:3b:01:39:ac:76:54:18:c3:e5:33:2f:96:f8:72:09:
         6f:5a:d3:ba:a4:50:22:ad:d0:dd:97:3f:28:c8:21:8e:8c:c1:
         c9:1d:df:62:77:8e:a5:15:54:27:19:bf:60:5b:89:28:6c:ac:
         e2:82:52:9e:a6:ab:64:ec:4e:e9:f0:89:f5:01:dc:65:ac:d7:
         6b:06:88:ca:12:88:64:ff:59:c1:e4:5e:07:f5:ea:ef:60:f6:
         02:ff:b0:56:38:74:90:1f:24:c3:3d:9d:48:dd:4d:d4:4c:86:
         f5:ff:48:30:82:69:7d:f2:1f:e6:8f:9c:55:26:9a:25:7a:58:
         c9:2a:83:c0:19:47:49:a1:f7:8d:2a:9d:4f:f1:12:40:8f:fb:
         32:a5:3a:65:82:09:b8:19:cb:4f:d6:98:4f:30:0d:5c:79:dc:
         b8:3a:84:a6:3b:bb:64:81:47:79:32:12:30:53:ff:4a:66:15:
         7a:12:71:c5:ae:01:e2:a6:47:80:06:cd:ec:3c:e0:88:cd:f7:
         1a:84:b4:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGPr9Josvt2sUwKziu/9emsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MjZiNjA0ZjZmOGMwM2ZlOWRmNmM5OGU2MWYzOWVhZWQ3
NTU1YTUwHhcNMjYxMDMxMDIwMDI2WhcNMjYxMTAxMDIwMDI2WjAzMTEwLwYDVQQD
Eyg4YTcyZjk2ZjlhYmQ5ZGFjNmM1ZGE5YWJkZjc0MTU1MDllM2UzZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiekEo7s4i5rL3xEP41DhXQaFjuA
6vf7Qf9vdhgfEPuMi8haj+ah4tFuPkPC68IB2zcjOSH/yUaMAGqwjSWG5YWPWfK7
EoM+FQtT2HctNlky+HrqqV4cx+RCOHAac5E+9obyBsr/qvFQgGzxCqi3Q0HmX+Fh
0IQ8YG9WwfDwyBnnWRzSatGISqzaXZsl3dhSePh5PvgPX5bwVL5k5s145JELQf45
jM+JWHv4zvQAnMvrWN0FbT0MKknEQnVv8AYxJUAPgC6tOsqXHCBmx+xkvN2BH9Ny
vttezjZI0cfp/rdasdYaILq+80ad73YOAd5j4oAV3NV2U+DGIqE14wPRdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpy+W+avZ2sbF2pq990FVCePj/nMB8GA1UdIwQY
MBaAFHgmtgT2+MA/6d9smOYfOertdVWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jOTRjNjUtZWEwMi00MDVhLWJiYTct
Y2EwNDc0YWRmMzczLzEvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jOTRjNjUtZWEwMi00MDVhLWJiYTctY2EwNDc0YWRmMzcz
LzEvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMCQtmq1
nsHc04GsZkFxWfLk7chK/aW0Dn2weBdMlJL0hlPrUqTDxDCLUi6UvVniL2W75rH2
BYuUOwE5rHZUGMPlMy+W+HIJb1rTuqRQIq3Q3Zc/KMghjozByR3fYneOpRVUJxm/
YFuJKGys4oJSnqarZOxO6fCJ9QHcZazXawaIyhKIZP9ZweReB/Xq72D2Av+wVjh0
kB8kwz2dSN1N1EyG9f9IMIJpffIf5o+cVSaaJXpYySqDwBlHSaH3jSqdT/ESQI/7
MqU6ZYIJuBnLT9aYTzANXHncuDqEpju7ZIFHeTISMFP/SmYVehJxxa4B4qZHgAbN
7DzgiM33GoS0gg==
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:15:49 2026 by rpki-client