Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/ptc0G6arFLJchEeo7SYd7x8NLzc.mft
File:                     ptc0G6arFLJchEeo7SYd7x8NLzc.mft (raw, json)
Hash identifier:          ViMm6+Vru81nyIXpVLwOY5JMDAQpXigAd+Gzrx1xJDQ=
Subject key identifier:   0D:01:DB:5B:05:33:AC:80:7B:37:CF:4F:32:9B:20:2F:3A:B5:18:1A
Authority key identifier: A6:D7:34:1B:A6:AB:14:B2:5C:84:47:A8:ED:26:1D:EF:1F:0D:2F:37
Certificate issuer:       /CN=a6d7341ba6ab14b25c8447a8ed261def1f0d2f37
Certificate serial:       01A12CC524C70A7B776E843AD0125CCBE861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ptc0G6arFLJchEeo7SYd7x8NLzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/ptc0G6arFLJchEeo7SYd7x8NLzc.mft
Manifest number:          0115
Signing time:             Sun 11 Oct 2026 21:01:19 +0000
Manifest this update:     Sun 11 Oct 2026 21:01:19 +0000
Manifest next update:     Mon 12 Oct 2026 21:01:19 +0000
Files and hashes:         1: NsNcJKwraZtwMSEz_TUgSceIE8U.roa (hash: DUS5cdKTRr1YlPMQatFq6XwfO0uPHkerNfO9NxoRktc=)
                          2: ptc0G6arFLJchEeo7SYd7x8NLzc.crl (hash: 7l+qWHIGuWxYNeeMiAVZzfCAx+J98gN6ZYoo5jmfJag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/ptc0G6arFLJchEeo7SYd7x8NLzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/ptc0G6arFLJchEeo7SYd7x8NLzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ptc0G6arFLJchEeo7SYd7x8NLzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 21:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2c:c5:24:c7:0a:7b:77:6e:84:3a:d0:12:5c:cb:e8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6d7341ba6ab14b25c8447a8ed261def1f0d2f37
        Validity
            Not Before: Oct 11 21:01:19 2026 GMT
            Not After : Oct 12 21:01:19 2026 GMT
        Subject: CN=0d01db5b0533ac807b37cf4f329b202f3ab5181a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7c:42:3d:66:c3:ac:98:f8:f1:c7:02:ab:09:
                    fb:7e:d5:c5:87:c7:5c:f6:a3:4b:2d:cc:51:fb:28:
                    a8:dd:a7:1a:c1:5d:b3:1e:15:19:59:3b:50:6d:50:
                    42:cf:cd:1e:2e:52:4c:39:91:f9:af:d2:30:e7:2f:
                    a3:db:e2:75:2a:6c:2d:62:c2:33:cd:13:cf:d1:b6:
                    9b:9d:4d:27:71:70:e7:d5:61:b6:08:d6:7a:59:ba:
                    61:4d:74:62:e9:e1:cb:b0:86:7e:7e:e6:26:fb:dd:
                    94:be:e4:f1:ff:a4:81:39:a2:ff:f5:68:02:3d:27:
                    fc:44:6e:e9:e6:2b:0d:41:fb:a4:b5:a1:93:92:c6:
                    8b:28:d3:ea:fe:05:c9:83:3a:19:10:a0:7f:e0:3e:
                    d7:56:20:16:5b:dc:7b:ab:ec:4b:9b:1b:f0:3f:71:
                    4b:71:2c:f6:c4:77:a4:01:1c:59:92:dc:4f:32:4a:
                    6f:eb:cf:7b:e1:85:c2:88:b6:2d:5a:d4:14:8c:5b:
                    c5:95:3b:02:73:f2:9a:e2:fb:f2:bf:c4:31:10:dc:
                    d3:a1:a7:8f:ee:55:98:db:6b:23:fc:84:4d:43:54:
                    9e:05:1c:15:2f:9d:42:7d:cb:ff:cb:f7:2b:12:ef:
                    d9:fb:0c:71:d2:ab:4f:f6:db:3d:8d:f1:b8:a1:a5:
                    c3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:01:DB:5B:05:33:AC:80:7B:37:CF:4F:32:9B:20:2F:3A:B5:18:1A
            X509v3 Authority Key Identifier:
                keyid:A6:D7:34:1B:A6:AB:14:B2:5C:84:47:A8:ED:26:1D:EF:1F:0D:2F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ptc0G6arFLJchEeo7SYd7x8NLzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/ptc0G6arFLJchEeo7SYd7x8NLzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/ptc0G6arFLJchEeo7SYd7x8NLzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:46:f3:a7:97:55:5c:17:4c:0e:c8:fc:92:f2:c8:02:fd:68:
         29:f5:14:c9:ce:d9:6f:35:8b:de:4c:55:88:7b:ad:40:ac:9d:
         a8:65:8a:a5:58:b6:17:f8:88:e3:d4:14:05:07:03:82:87:9a:
         38:56:12:aa:3a:a4:b1:01:d1:c5:80:13:b8:ff:88:ac:43:78:
         2e:a6:70:03:77:3d:e4:e7:9a:2f:07:64:f5:ab:e5:0e:19:d5:
         5d:c1:fc:4f:25:38:88:ec:f4:32:8f:6f:a6:7f:28:e7:a2:2b:
         d6:98:9d:45:e0:5f:47:c8:38:e9:c1:f3:51:07:b1:83:76:0b:
         0a:a5:75:74:eb:23:70:4f:2e:00:c5:02:c3:4e:48:6a:23:56:
         03:93:e9:de:6c:86:01:f9:53:e3:3d:6f:25:25:7f:3c:1e:1f:
         c0:6d:70:01:c7:dd:0d:15:9c:51:78:93:4c:2a:00:e5:20:44:
         6c:ba:41:b9:c9:51:e4:4a:c5:d3:17:cf:81:ca:15:c9:0a:07:
         bd:fb:eb:73:3a:44:93:66:52:bf:35:9a:b7:70:c2:ad:2c:a8:
         a8:c3:4a:7b:96:fb:95:be:99:93:f7:14:2a:23:89:11:f9:a4:
         95:37:d6:25:ae:6a:10:c8:91:8f:8e:e9:66:c4:6a:a5:60:4a:
         a2:c5:ad:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEsxSTHCnt3boQ60BJcy+hhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ZDczNDFiYTZhYjE0YjI1Yzg0NDdhOGVkMjYxZGVmMWYw
ZDJmMzcwHhcNMjYxMDExMjEwMTE5WhcNMjYxMDEyMjEwMTE5WjAzMTEwLwYDVQQD
EygwZDAxZGI1YjA1MzNhYzgwN2IzN2NmNGYzMjliMjAyZjNhYjUxODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13xCPWbDrJj48ccCqwn7ftXFh8dc
9qNLLcxR+yio3acawV2zHhUZWTtQbVBCz80eLlJMOZH5r9Iw5y+j2+J1KmwtYsIz
zRPP0babnU0ncXDn1WG2CNZ6WbphTXRi6eHLsIZ+fuYm+92UvuTx/6SBOaL/9WgC
PSf8RG7p5isNQfuktaGTksaLKNPq/gXJgzoZEKB/4D7XViAWW9x7q+xLmxvwP3FL
cSz2xHekARxZktxPMkpv68974YXCiLYtWtQUjFvFlTsCc/Ka4vvyv8QxENzToaeP
7lWY22sj/IRNQ1SeBRwVL51Cfcv/y/crEu/Z+wxx0qtP9ts9jfG4oaXDUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0B21sFM6yAezfPTzKbIC86tRgaMB8GA1UdIwQY
MBaAFKbXNBumqxSyXIRHqO0mHe8fDS83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHRjMEc2YXJGTEpjaEVlbzdTWWQ3eDhOTHpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgt
OTM5YWMzZmU0Yjg5LzEvcHRjMEc2YXJGTEpjaEVlbzdTWWQ3eDhOTHpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgtOTM5YWMzZmU0Yjg5
LzEvcHRjMEc2YXJGTEpjaEVlbzdTWWQ3eDhOTHpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEbzp5dV
XBdMDsj8kvLIAv1oKfUUyc7ZbzWL3kxViHutQKydqGWKpVi2F/iI49QUBQcDgoea
OFYSqjqksQHRxYATuP+IrEN4LqZwA3c95OeaLwdk9avlDhnVXcH8TyU4iOz0Mo9v
pn8o56Ir1pidReBfR8g46cHzUQexg3YLCqV1dOsjcE8uAMUCw05IaiNWA5Pp3myG
AflT4z1vJSV/PB4fwG1wAcfdDRWcUXiTTCoA5SBEbLpBuclR5ErF0xfPgcoVyQoH
vfvrczpEk2ZSvzWat3DCrSyoqMNKe5b7lb6Zk/cUKiOJEfmklTfWJa5qEMiRj47p
ZsRqpWBKosWtwA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:24:14 2026 by rpki-client