Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File:                     h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier:          CIk9WxtaAewfIfZzyWJzQaS/pxOf0mFrTseVpWN8e9s=
Subject key identifier:   D7:FC:1B:1F:42:0B:F5:B7:C4:C9:52:0A:9F:C7:72:1E:F1:84:49:34
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer:       /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial:       01A118624ACBE9E44DD7C987D91B79CA27A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number:          1A93
Signing time:             Wed 07 Oct 2026 22:00:57 +0000
Manifest this update:     Wed 07 Oct 2026 22:00:57 +0000
Manifest next update:     Thu 08 Oct 2026 22:00:57 +0000
Files and hashes:         1: 5_doYFv7yc7pk0TQwTiDRsnYDyk.roa (hash: roZ57WpPuuxZ3dcx0tH7+LdHwoSOY302cY6k9E5x4os=)
                          2: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: akTin1La9TCozAt0fiNNe+5kPDdJcTT7PN7AKuNRwIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:18:62:4a:cb:e9:e4:4d:d7:c9:87:d9:1b:79:ca:27:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
        Validity
            Not Before: Oct  7 22:00:57 2026 GMT
            Not After : Oct  8 22:00:57 2026 GMT
        Subject: CN=d7fc1b1f420bf5b7c4c9520a9fc7721ef1844934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:09:c7:dc:80:3c:cb:93:88:dc:20:6b:74:
                    b8:5a:06:dc:91:4c:9a:18:1d:dd:37:54:57:42:62:
                    65:03:8d:d2:ea:7f:ce:e7:75:65:ab:36:8c:62:dc:
                    3c:8e:de:9e:de:59:87:7b:48:97:da:00:77:93:1e:
                    3d:ac:28:20:77:31:71:47:28:ec:0a:8e:1c:e5:df:
                    e8:3e:58:e4:ca:ea:b6:f8:8b:67:9e:4f:26:9d:d9:
                    31:4f:16:96:f8:0e:4b:3d:21:fb:cf:8d:d0:44:80:
                    a7:e2:c9:b0:7e:d4:8b:71:91:72:11:6e:49:89:3e:
                    14:d0:1c:e4:3c:52:ff:0c:a8:b7:ac:4a:8e:1f:35:
                    c5:15:77:e1:bb:af:65:63:99:84:7d:65:dc:a1:72:
                    7e:3d:3d:8a:ea:70:17:5a:fd:f0:65:f3:6c:ec:7d:
                    6a:0f:81:3b:bd:93:12:c8:2d:ac:6d:e4:35:c1:71:
                    78:e8:01:6b:8d:7d:72:3d:8a:34:f4:8a:49:57:af:
                    b2:c5:db:b2:2d:25:fd:3b:17:46:50:28:1c:93:57:
                    b9:12:32:7f:08:4e:66:13:13:4b:29:2b:bb:18:c9:
                    4a:0d:bb:82:72:e0:34:59:71:8d:67:cd:e0:94:bf:
                    9a:32:cf:bf:ef:d3:d5:59:10:ff:27:4b:0d:1e:f0:
                    6f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FC:1B:1F:42:0B:F5:B7:C4:C9:52:0A:9F:C7:72:1E:F1:84:49:34
            X509v3 Authority Key Identifier:
                keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:df:24:45:9e:95:41:aa:8f:35:ce:8a:a4:38:d5:4e:15:97:
         58:16:03:22:cf:87:3c:8b:20:48:c7:02:a3:44:31:5b:dc:55:
         17:b6:c2:5a:ee:76:bd:21:50:e5:0a:59:ac:80:f4:29:dc:6b:
         16:0e:27:86:47:41:7a:fd:6c:00:6f:41:42:01:eb:0b:61:89:
         e2:14:dc:fb:09:b3:74:e9:65:25:b2:8f:47:05:3a:39:c7:45:
         2d:2f:c1:bc:9f:88:3a:3a:13:ef:ab:10:ce:e3:1c:a0:a6:6c:
         98:03:91:42:87:c2:b2:08:6a:e5:94:98:28:a3:7f:c7:a5:3e:
         91:31:b2:5e:86:07:13:c1:6f:2a:79:8c:c9:5f:37:69:3f:cc:
         39:4b:bc:55:98:63:c8:1b:a9:29:6e:80:63:88:9e:a3:3a:b3:
         8d:c8:4f:72:78:c7:0a:e1:10:24:23:9e:78:8b:ba:db:e5:8c:
         fe:ea:0d:a8:7b:33:1c:08:05:8e:e5:7a:84:51:b2:89:06:72:
         4c:b1:1b:b9:21:b2:2a:03:1d:98:5c:53:b9:c8:63:79:14:28:
         d6:29:2e:23:d8:f4:eb:f4:64:81:e3:b0:2c:9e:da:96:13:05:
         1e:00:7a:25:e4:b4:26:56:bc:d7:2b:db:1a:eb:3c:d1:5d:58:
         1e:7f:10:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEYYkrL6eRN18mH2Rt5yielMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OGVjYTNiY2NkNGU1YzJlZmIzNjA4ZWU4M2E1N2Y5YWU4
MjFiZTYwHhcNMjYxMDA3MjIwMDU3WhcNMjYxMDA4MjIwMDU3WjAzMTEwLwYDVQQD
EyhkN2ZjMWIxZjQyMGJmNWI3YzRjOTUyMGE5ZmM3NzIxZWYxODQ0OTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1sJx9yAPMuTiNwga3S4WgbckUya
GB3dN1RXQmJlA43S6n/O53VlqzaMYtw8jt6e3lmHe0iX2gB3kx49rCggdzFxRyjs
Co4c5d/oPljkyuq2+Itnnk8mndkxTxaW+A5LPSH7z43QRICn4smwftSLcZFyEW5J
iT4U0BzkPFL/DKi3rEqOHzXFFXfhu69lY5mEfWXcoXJ+PT2K6nAXWv3wZfNs7H1q
D4E7vZMSyC2sbeQ1wXF46AFrjX1yPYo09IpJV6+yxduyLSX9OxdGUCgck1e5EjJ/
CE5mExNLKSu7GMlKDbuCcuA0WXGNZ83glL+aMs+/79PVWRD/J0sNHvBvNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNf8Gx9CC/W3xMlSCp/Hch7xhEk0MB8GA1UdIwQY
MBaAFIeOyjvM1OXC77Ngjug6V/mughvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hYjJiMTAtNWU4Ny00NjI0LTk3NzYt
NTlhMGM1ZmY2NTA1LzEvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9hYjJiMTAtNWU4Ny00NjI0LTk3NzYtNTlhMGM1ZmY2NTA1
LzEvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG98kRZ6V
QaqPNc6KpDjVThWXWBYDIs+HPIsgSMcCo0QxW9xVF7bCWu52vSFQ5QpZrID0Kdxr
Fg4nhkdBev1sAG9BQgHrC2GJ4hTc+wmzdOllJbKPRwU6OcdFLS/BvJ+IOjoT76sQ
zuMcoKZsmAORQofCsghq5ZSYKKN/x6U+kTGyXoYHE8FvKnmMyV83aT/MOUu8VZhj
yBupKW6AY4ieozqzjchPcnjHCuEQJCOeeIu62+WM/uoNqHszHAgFjuV6hFGyiQZy
TLEbuSGyKgMdmFxTuchjeRQo1ikuI9j06/RkgeOwLJ7alhMFHgB6JeS0Jla81yvb
Gus80V1YHn8Qqw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:36:32 2026 by rpki-client