Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File:                     hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier:          2XVtJMkX7DZd6J8nhh+6pbmWH3kt8PczQhKb7xQ9nyk=
Subject key identifier:   C6:F0:69:10:E9:52:CF:CF:6F:74:73:EB:49:01:FC:9D:3A:D7:A3:17
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer:       /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial:       01A17F98D73FC5E3E3A8154011B14B938DB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number:          1AC5
Signing time:             Tue 27 Oct 2026 23:01:25 +0000
Manifest this update:     Tue 27 Oct 2026 23:01:25 +0000
Manifest next update:     Wed 28 Oct 2026 23:01:25 +0000
Files and hashes:         1: SHJi1Hg3BYSDVLWuUF3dUC_y5Qc.roa (hash: hbtSVIptoXiMe4xO8q5DDqQ1ZQZBnOOJmENfX4ZeP2E=)
                          2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: uoWLCvJ+DkSjX/evL7ysl9tlQzNb0xNM/Z9/bUwb2r4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:98:d7:3f:c5:e3:e3:a8:15:40:11:b1:4b:93:8d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
        Validity
            Not Before: Oct 27 23:01:25 2026 GMT
            Not After : Oct 28 23:01:25 2026 GMT
        Subject: CN=c6f06910e952cfcf6f7473eb4901fc9d3ad7a317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6e:12:47:60:dd:8f:44:c7:b0:d0:0a:73:03:
                    55:bb:ce:33:d0:35:80:b3:29:93:1b:3c:71:9b:cf:
                    27:91:fc:3b:cb:77:cb:ac:a2:c0:49:17:67:1d:22:
                    11:a8:56:91:33:a3:0d:c3:6e:5c:4d:31:2b:b5:e0:
                    d4:49:8f:da:40:9d:33:b6:9e:e3:30:82:dd:aa:22:
                    7b:0a:ba:91:4b:80:5b:77:e0:49:cc:98:09:4e:3f:
                    da:6b:71:29:50:aa:41:82:81:58:5c:ad:b5:1e:12:
                    42:ad:bf:85:21:cb:a3:b6:90:03:d6:15:e4:42:f4:
                    ab:3d:7f:0c:1f:9b:72:ba:49:50:e4:05:31:8a:12:
                    72:fd:0c:6c:06:0e:81:5a:4c:a1:e3:6a:f2:b4:35:
                    c3:aa:47:1b:ac:56:f1:63:f8:b2:31:5b:aa:ae:44:
                    3d:70:60:3f:5a:c3:a9:c1:2a:70:03:13:1e:53:01:
                    0d:80:ed:34:e3:7b:c7:f1:41:f3:3f:e8:53:35:7c:
                    08:50:9b:2f:20:14:07:e9:90:18:ad:b9:3a:9e:69:
                    62:ec:b0:ad:83:f0:b8:7b:e2:32:a1:18:fc:f7:1e:
                    cb:5a:e0:3a:4e:40:f2:1d:46:bd:6d:0a:a6:e1:39:
                    c5:6d:63:b8:66:51:71:11:fd:9f:66:63:a2:c0:9a:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F0:69:10:E9:52:CF:CF:6F:74:73:EB:49:01:FC:9D:3A:D7:A3:17
            X509v3 Authority Key Identifier:
                keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:85:b1:29:b9:e1:3c:a6:af:e7:3e:86:ad:07:30:de:b8:46:
         2a:15:7f:a1:f1:76:d5:b7:1d:7d:55:fc:95:58:49:54:11:a2:
         c0:a7:a5:bf:20:6d:6f:e8:64:bf:c7:7c:a3:3b:2e:b4:40:51:
         67:90:11:da:18:40:9b:b5:65:9c:b3:f7:c2:f6:7f:d6:b6:a9:
         4a:f9:ca:04:8b:85:57:6d:2d:0f:88:b2:83:1c:fe:9b:6b:b2:
         05:89:88:01:11:a8:7f:19:0d:74:5e:e8:78:8e:49:f7:8c:19:
         24:89:45:6e:44:0c:3f:0f:b8:48:08:57:4d:05:65:0f:7d:97:
         5a:38:93:9e:14:49:f5:7a:cc:f2:f5:f1:fd:02:34:51:b5:57:
         c4:e9:53:21:32:17:6c:19:74:aa:3c:bc:ce:6b:30:34:a9:e8:
         7f:a3:a2:82:c5:fb:78:85:27:71:60:d4:97:8b:9a:4a:b1:58:
         a0:5b:d7:73:3e:72:30:4e:42:cd:bf:0a:88:06:83:b8:f5:3d:
         71:a4:3f:95:9c:f5:8e:cd:63:4a:28:47:88:74:60:a6:d3:06:
         81:68:7b:5e:7a:06:96:41:21:7e:e8:a0:33:01:ec:38:4a:d9:
         e3:1f:8c:07:ed:31:39:bd:71:2d:45:66:4c:53:20:42:a6:d7:
         b4:7b:1d:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/mNc/xePjqBVAEbFLk423MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MzU4OWZlZWNiZTRjNGFiNDQ0ZDkzODY0NDU0ZGJjZDdj
ZDBkZTcwHhcNMjYxMDI3MjMwMTI1WhcNMjYxMDI4MjMwMTI1WjAzMTEwLwYDVQQD
EyhjNmYwNjkxMGU5NTJjZmNmNmY3NDczZWI0OTAxZmM5ZDNhZDdhMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7W4SR2Ddj0THsNAKcwNVu84z0DWA
symTGzxxm88nkfw7y3fLrKLASRdnHSIRqFaRM6MNw25cTTErteDUSY/aQJ0ztp7j
MILdqiJ7CrqRS4Bbd+BJzJgJTj/aa3EpUKpBgoFYXK21HhJCrb+FIcujtpAD1hXk
QvSrPX8MH5tyuklQ5AUxihJy/QxsBg6BWkyh42rytDXDqkcbrFbxY/iyMVuqrkQ9
cGA/WsOpwSpwAxMeUwENgO0043vH8UHzP+hTNXwIUJsvIBQH6ZAYrbk6nmli7LCt
g/C4e+IyoRj89x7LWuA6TkDyHUa9bQqm4TnFbWO4ZlFxEf2fZmOiwJp8LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbwaRDpUs/Pb3Rz60kB/J0616MXMB8GA1UdIwQY
MBaAFIY1if7svkxKtETZOGRFTbzXzQ3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGpXSl91eS1URXEwUk5rNFpFVk52TmZORGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81MTQwZmYtMDkwZS00M2RhLWI3Yzgt
NTllODE4YzZiNzFiLzEvaGpXSl91eS1URXEwUk5rNFpFVk52TmZORGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81MTQwZmYtMDkwZS00M2RhLWI3YzgtNTllODE4YzZiNzFi
LzEvaGpXSl91eS1URXEwUk5rNFpFVk52TmZORGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4WxKbnh
PKav5z6GrQcw3rhGKhV/ofF21bcdfVX8lVhJVBGiwKelvyBtb+hkv8d8ozsutEBR
Z5AR2hhAm7VlnLP3wvZ/1rapSvnKBIuFV20tD4iygxz+m2uyBYmIARGofxkNdF7o
eI5J94wZJIlFbkQMPw+4SAhXTQVlD32XWjiTnhRJ9XrM8vXx/QI0UbVXxOlTITIX
bBl0qjy8zmswNKnof6OigsX7eIUncWDUl4uaSrFYoFvXcz5yME5Czb8KiAaDuPU9
caQ/lZz1js1jSihHiHRgptMGgWh7XnoGlkEhfuigMwHsOErZ4x+MB+0xOb1xLUVm
TFMgQqbXtHsdTQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:27:36 2026 by rpki-client