Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
File:                     TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft (raw, json)
Hash identifier:          tFWmNwkOhvMYrGLjI0sOCwrSnh3Ko38cRJ/zlogOHQU=
Subject key identifier:   DC:9E:26:9E:C7:93:94:31:58:3C:C2:7C:A6:F1:B6:E1:75:0F:99:9C
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Certificate issuer:       /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial:       01A17BBB163A8EE57E6734261FF307493E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
Manifest number:          1ACC
Signing time:             Tue 27 Oct 2026 05:00:20 +0000
Manifest this update:     Tue 27 Oct 2026 05:00:20 +0000
Manifest next update:     Wed 28 Oct 2026 05:00:20 +0000
Files and hashes:         1: 228dGzsK5lDedCf7RamqB_6IyIo.asa (hash: dJG/hV50SEVqgYfa1k8cEjUQsQlpOKnDwSMyCIuDcyg=)
                          2: 8ylDXEbtNRJWpCuUbrEo41XQ7e0.asa (hash: oxDxBpYBL1NObvH3zvkh1LpUL4tger83enZTowDmVUw=)
                          3: Kvof5bdVycABppbkMjES1pQM4_0.roa (hash: x/BrMTXOQ3yF17NLgQnBsxXByoEWdBzmDdMTFK4cs9E=)
                          4: TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl (hash: dNzVxGLpb/W292y6Klml/TsS3A45jG1q98WGt0VXAWI=)
                          5: h9cJ8djqQtBviihaq4ao526E_0o.roa (hash: QQqAfzwPyXDoi3NQWDhEhtDBcPOcV5HPPvE/lan3w+c=)
                          6: uYcmPBoPe0dy5jc0jk1_pwkMfEo.roa (hash: 0SmAw2whgX+CEp/lCzfQR+CIod0NWK+0ehDPmmqX/7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:bb:16:3a:8e:e5:7e:67:34:26:1f:f3:07:49:3e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
        Validity
            Not Before: Oct 27 05:00:20 2026 GMT
            Not After : Oct 28 05:00:20 2026 GMT
        Subject: CN=dc9e269ec7939431583cc27ca6f1b6e1750f999c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:ff:ae:51:7e:b0:fa:e9:b7:7a:38:b0:ac:
                    b3:9e:6b:2f:b7:d6:b4:1b:e7:19:df:bf:41:c9:e9:
                    47:f2:70:9c:9d:62:19:ef:07:50:71:1b:37:09:09:
                    c3:88:6c:5e:16:ba:08:82:63:52:76:fb:28:c1:69:
                    d7:ea:82:dd:11:5c:12:67:6c:03:ec:55:2a:b0:03:
                    58:bd:fb:7c:aa:56:e4:42:f5:28:dd:6a:4d:e9:f8:
                    05:88:01:86:cf:b5:19:10:48:bb:92:d5:b2:0e:96:
                    a5:d1:d2:eb:e9:5e:a3:49:7a:94:19:74:0f:5d:57:
                    df:be:95:82:97:ac:51:88:44:84:56:fe:c7:c1:4b:
                    32:5a:f5:3a:07:46:57:a6:b0:ab:2b:80:a9:41:78:
                    52:ca:59:3d:42:c4:f9:ab:84:d4:8d:29:57:a1:b1:
                    e6:f0:fc:37:b0:8d:aa:f0:d9:97:9d:f1:34:9a:84:
                    95:0f:bc:12:66:ee:8a:b1:5f:84:22:16:99:0a:b8:
                    06:9e:e4:48:fc:8f:c4:e3:5c:ce:81:04:59:13:58:
                    f5:ee:61:51:0e:37:07:c9:7e:33:f8:b0:62:8a:48:
                    ef:6b:79:47:1d:3e:63:ea:12:f9:26:a8:97:76:cc:
                    89:01:a6:e4:6e:4e:19:d1:cb:93:fe:f8:70:e0:61:
                    8a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9E:26:9E:C7:93:94:31:58:3C:C2:7C:A6:F1:B6:E1:75:0F:99:9C
            X509v3 Authority Key Identifier:
                keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:58:42:02:7b:c8:70:30:81:29:8a:04:37:a1:79:b6:56:e4:
         dd:b9:35:05:1d:c5:3f:00:84:2d:be:4a:3f:31:3b:f2:f4:4a:
         c4:96:69:f1:1a:ff:8a:bc:0b:07:a5:b6:62:89:43:82:b3:a2:
         53:fc:46:c0:85:e7:a4:ee:5e:f3:38:94:d9:8d:05:9f:d8:58:
         6b:74:36:ec:2d:89:83:24:ac:17:d6:fc:de:cb:ad:f3:96:4e:
         cc:b4:6a:b4:da:3b:1f:44:e5:b9:a7:d7:e9:e2:fa:60:41:a6:
         7a:67:5b:2a:06:78:bd:ca:6f:df:aa:e9:11:1b:6f:8e:02:a8:
         6f:d5:fc:55:d9:94:e3:2a:29:d9:70:8f:2b:63:42:b5:0d:fb:
         98:69:8e:17:51:98:97:ae:a2:c2:de:8d:d9:8f:4a:c0:77:11:
         0c:95:9b:20:42:e3:49:c9:5d:d4:d1:72:23:20:b3:5d:93:ea:
         ce:38:e4:60:2b:4f:b8:36:71:40:8b:88:5a:95:24:14:7a:75:
         99:00:19:95:a5:bc:22:0e:97:59:de:bc:9f:f9:9b:9a:12:8f:
         1c:72:d2:13:8e:1a:19:aa:63:6f:da:39:e8:8e:ae:a7:87:4d:
         2c:61:a6:03:b4:25:70:35:a2:03:0c:cc:90:85:cb:b4:1a:50:
         a5:f5:41:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7uxY6juV+ZzQmH/MHST5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYWQwMzk3NDg3Nzk5ZTIxMThmZjRjYmNmOGYxNTk3NDdm
MzU4OTEwHhcNMjYxMDI3MDUwMDIwWhcNMjYxMDI4MDUwMDIwWjAzMTEwLwYDVQQD
EyhkYzllMjY5ZWM3OTM5NDMxNTgzY2MyN2NhNmYxYjZlMTc1MGY5OTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxX/rlF+sPrpt3o4sKyznmsvt9a0
G+cZ379ByelH8nCcnWIZ7wdQcRs3CQnDiGxeFroIgmNSdvsowWnX6oLdEVwSZ2wD
7FUqsANYvft8qlbkQvUo3WpN6fgFiAGGz7UZEEi7ktWyDpal0dLr6V6jSXqUGXQP
XVffvpWCl6xRiESEVv7HwUsyWvU6B0ZXprCrK4CpQXhSylk9QsT5q4TUjSlXobHm
8Pw3sI2q8NmXnfE0moSVD7wSZu6KsV+EIhaZCrgGnuRI/I/E41zOgQRZE1j17mFR
DjcHyX4z+LBiikjva3lHHT5j6hL5JqiXdsyJAabkbk4Z0cuT/vhw4GGKTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyeJp7Hk5QxWDzCfKbxtuF1D5mcMB8GA1UdIwQY
MBaAFEytA5dId5niEY/0y8+PFZdH81iRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lYTAxOTYtYWI3OS00MmNmLWFiMmIt
ZmM0YjAzNzEwYWUwLzEvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lYTAxOTYtYWI3OS00MmNmLWFiMmItZmM0YjAzNzEwYWUw
LzEvVEswRGwwaDNtZUlSal9UTHo0OFZsMGZ6V0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVhCAnvI
cDCBKYoEN6F5tlbk3bk1BR3FPwCELb5KPzE78vRKxJZp8Rr/irwLB6W2YolDgrOi
U/xGwIXnpO5e8ziU2Y0Fn9hYa3Q27C2JgySsF9b83sut85ZOzLRqtNo7H0TluafX
6eL6YEGmemdbKgZ4vcpv36rpERtvjgKob9X8VdmU4yop2XCPK2NCtQ37mGmOF1GY
l66iwt6N2Y9KwHcRDJWbIELjScld1NFyIyCzXZPqzjjkYCtPuDZxQIuIWpUkFHp1
mQAZlaW8Ig6XWd68n/mbmhKPHHLSE44aGapjb9o56I6up4dNLGGmA7QlcDWiAwzM
kIXLtBpQpfVB1Q==
-----END CERTIFICATE-----
Generated at Tue Oct 27 11:06:41 2026 by rpki-client