Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
File:                     tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json)
Hash identifier:          jSCsbmCMqSf+tHnRPBfwWAXGy4RO66+oqKhkjH56wOc=
Subject key identifier:   AD:88:43:20:B3:5B:FB:E5:0C:83:64:FB:FA:D1:73:A9:70:42:4B:4A
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Certificate issuer:       /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial:       01A10C94D9FD43C23C9238D698B12A678FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
Manifest number:          128B
Signing time:             Mon 05 Oct 2026 15:00:44 +0000
Manifest this update:     Mon 05 Oct 2026 15:00:44 +0000
Manifest next update:     Tue 06 Oct 2026 15:00:44 +0000
Files and hashes:         1: 1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa (hash: p4IRMRrJZgnKi2WdlcOaJkOpKGoVzi49HMW6WN0NrJ8=)
                          2: 7YLSJcQGBA653iyy1fHxIGb92P0.roa (hash: h4RVKl8L8VOgh9a6P3PTZvMiWUsau7R0BpqtJhT+8/Y=)
                          3: 8lzOqg36QfNkeg8Q6Az_2mhb-pY.roa (hash: W0oPaRSAv7Mlqt/bxzWLXb0GBYOFj3ar/XeEXfhCbx8=)
                          4: LgR3McOgyTpzCVXi0apdiSU4UhY.roa (hash: O6hm7PXUeVsbsroLDw55f/gk3SNtDWgRnBz2fnXsCuw=)
                          5: QViCpxHL7TeWgNCiZk4rKUO-8KU.roa (hash: lHQxRnJhPCjs1WHfqXj6jxi3Fa+6Jf53oEHyU2j2aik=)
                          6: iy1Tvz9vWB_OyKw6kX0SPKuwaMg.roa (hash: f91SOkfNEhx8xn/tAVUdyzoJrhGRQTUbnnTsdxKuQ64=)
                          7: qI_-6h3iudeXwj_KCEW7jVNBeSs.roa (hash: VCf8NA7/YCd9pNMoP3NeZ5lHDYrKSJzJ143pwqaxHAQ=)
                          8: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: yfrY40K8NwVUOkhLdWR/NQLqq+b4fsID2SFWonzdgyQ=)
                          9: ws_lvviOWiUn6-n1_mvWXNHp31I.roa (hash: 3Nbd+pvEno+PaE0bZIzANyUWQU5DEYEW5i11jMtE2XI=)
                          10: x8JpwXfRjntSd4pmuLKwDDhw_i4.roa (hash: OFNInH/Vi9/sinG5vzHXVvidAVrgK9tFLxn9nt+UYfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0c:94:d9:fd:43:c2:3c:92:38:d6:98:b1:2a:67:8f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
        Validity
            Not Before: Oct  5 15:00:44 2026 GMT
            Not After : Oct  6 15:00:44 2026 GMT
        Subject: CN=ad884320b35bfbe50c8364fbfad173a970424b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:87:4e:3e:f2:dc:b2:53:ce:0e:3f:f3:b4:
                    88:19:fb:03:b8:e1:5e:3e:c8:e4:b5:ff:cc:81:0a:
                    b6:d9:57:54:c5:78:2c:00:5e:fc:08:b6:ee:9b:90:
                    26:74:73:54:c5:7f:b4:e3:f9:f5:27:aa:d3:02:bf:
                    40:91:5c:0f:24:95:d2:b5:47:0a:ed:be:57:38:c4:
                    5f:ad:a8:79:aa:77:68:3f:f4:cf:9b:0a:7d:b3:3c:
                    ba:45:44:72:5a:01:61:e7:7f:25:41:fe:0e:39:da:
                    b3:bb:ae:bb:d4:f3:28:5d:b8:12:57:35:c7:81:d4:
                    9f:a4:a1:1c:c8:a5:36:de:86:fa:fd:8d:0b:95:5f:
                    1d:d1:ac:0d:ed:6e:6a:26:0c:83:8a:c0:c9:c7:0c:
                    e2:c0:d1:82:16:c0:ba:40:36:26:c5:ab:9d:9a:8c:
                    65:1b:e7:78:48:77:9b:ca:e2:4e:c9:c4:8b:09:7a:
                    40:8b:ed:bd:76:8e:91:32:aa:03:6d:45:31:48:75:
                    5f:87:0d:3b:af:67:7f:6b:3a:ca:93:82:d4:41:0b:
                    7b:11:96:59:89:e9:be:8b:29:5c:b3:4e:9a:81:1e:
                    30:bf:d5:a2:f1:ed:3b:67:2a:2d:8e:ff:fe:30:cb:
                    17:fb:42:ca:1a:31:90:11:c3:c7:44:05:2a:9c:3d:
                    10:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:88:43:20:B3:5B:FB:E5:0C:83:64:FB:FA:D1:73:A9:70:42:4B:4A
            X509v3 Authority Key Identifier:
                keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:cd:5d:6d:38:ae:00:b0:20:5f:d6:c6:1b:71:68:41:c0:98:
         8e:6c:de:18:6f:26:f8:22:70:64:b2:e2:0f:93:d1:fa:ce:fc:
         f0:2f:90:be:d6:fa:e5:93:23:0e:28:1a:6f:92:19:55:16:22:
         65:fd:dd:42:81:eb:c7:61:86:43:c8:bb:f7:6d:7a:25:ad:db:
         d8:45:5e:39:48:5b:16:93:f8:e9:9a:81:d2:91:df:4b:cf:93:
         04:fe:6f:a1:08:ea:d1:82:6f:cc:fa:da:09:29:be:eb:30:73:
         e7:54:bd:00:f2:b0:e4:60:cb:63:66:5c:6b:7a:41:de:15:9d:
         2a:74:ea:93:10:83:c7:6c:a8:d5:17:c3:60:8b:5f:e4:3e:b0:
         5d:9f:6a:ec:a1:d6:3d:91:71:32:93:99:e2:4c:05:a7:e2:d0:
         8c:05:9b:bd:b0:db:1c:ee:47:51:9b:6e:2e:d1:09:62:d2:a0:
         f9:e9:e3:23:7f:60:49:a4:93:38:eb:33:c0:86:1d:87:8f:27:
         7f:e3:34:b2:39:64:6b:4c:0a:f8:7f:6a:14:bc:5c:0b:9f:96:
         ad:02:19:f4:62:7a:47:46:04:c6:6f:4c:09:73:8d:c2:0d:f3:
         16:53:37:4f:17:56:aa:89:e2:a2:94:cd:54:6a:34:04:4d:d5:
         f6:fa:4c:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEMlNn9Q8I8kjjWmLEqZ4/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3
MzVkN2QwHhcNMjYxMDA1MTUwMDQ0WhcNMjYxMDA2MTUwMDQ0WjAzMTEwLwYDVQQD
EyhhZDg4NDMyMGIzNWJmYmU1MGM4MzY0ZmJmYWQxNzNhOTcwNDI0YjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHyHTj7y3LJTzg4/87SIGfsDuOFe
Psjktf/MgQq22VdUxXgsAF78CLbum5AmdHNUxX+04/n1J6rTAr9AkVwPJJXStUcK
7b5XOMRfrah5qndoP/TPmwp9szy6RURyWgFh538lQf4OOdqzu6671PMoXbgSVzXH
gdSfpKEcyKU23ob6/Y0LlV8d0awN7W5qJgyDisDJxwziwNGCFsC6QDYmxaudmoxl
G+d4SHebyuJOycSLCXpAi+29do6RMqoDbUUxSHVfhw07r2d/azrKk4LUQQt7EZZZ
iem+iylcs06agR4wv9Wi8e07Zyotjv/+MMsX+0LKGjGQEcPHRAUqnD0QZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2IQyCzW/vlDINk+/rRc6lwQktKMB8GA1UdIwQY
MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt
YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk
LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF81dbTiu
ALAgX9bGG3FoQcCYjmzeGG8m+CJwZLLiD5PR+s788C+Qvtb65ZMjDigab5IZVRYi
Zf3dQoHrx2GGQ8i79216Ja3b2EVeOUhbFpP46ZqB0pHfS8+TBP5voQjq0YJvzPra
CSm+6zBz51S9APKw5GDLY2Zca3pB3hWdKnTqkxCDx2yo1RfDYItf5D6wXZ9q7KHW
PZFxMpOZ4kwFp+LQjAWbvbDbHO5HUZtuLtEJYtKg+enjI39gSaSTOOszwIYdh48n
f+M0sjlka0wK+H9qFLxcC5+WrQIZ9GJ6R0YExm9MCXONwg3zFlM3TxdWqoniopTN
VGo0BE3V9vpMGg==
-----END CERTIFICATE-----
Generated at Mon Oct 5 18:55:50 2026 by rpki-client