Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File:                     hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier:          ivZ+NO0F9ga+g+OYe4JAU0CAZutwrmFgaewE7xWMkus=
Subject key identifier:   9C:87:B0:93:FC:D9:3D:2B:59:CA:2D:EE:DD:4C:99:49:B1:8B:C6:8D
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer:       /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial:       01A15252091CCEB8CF3CE0B33B8E84B3D56D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number:          0FF6
Signing time:             Mon 19 Oct 2026 04:01:10 +0000
Manifest this update:     Mon 19 Oct 2026 04:01:10 +0000
Manifest next update:     Tue 20 Oct 2026 04:01:10 +0000
Files and hashes:         1: Co8NoEEwyeuIwPmymA_HcaTKTPE.roa (hash: ALdpDTVjmvNde4CJTmFwYVhe7PvyZvoiVseaJIdwmh0=)
                          2: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: 6Du0Ep2fYkxJb2sjOEhA9RBLf7KgARNN9iOAe0S0uU4=)
                          3: yk-DGGnoKxjDOyVJDYCP2Dq6RkY.roa (hash: vb19X8WJPy7+RYVMmtMqPzkvfdcm+Fk9dFoJfJFBMp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:52:52:09:1c:ce:b8:cf:3c:e0:b3:3b:8e:84:b3:d5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
        Validity
            Not Before: Oct 19 04:01:10 2026 GMT
            Not After : Oct 20 04:01:10 2026 GMT
        Subject: CN=9c87b093fcd93d2b59ca2deedd4c9949b18bc68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:2e:0a:9e:06:ae:4b:46:ca:5d:c0:1d:08:
                    a2:a5:96:2c:f8:c5:87:ed:3d:3d:e7:0b:1e:6e:a6:
                    42:e8:21:2a:1b:4f:2e:4e:18:f0:76:ff:54:c7:d4:
                    66:6d:36:ed:0c:87:8d:1c:97:22:3a:cb:95:ff:88:
                    a3:42:0e:a4:24:c5:52:d4:46:03:82:2e:8c:d9:df:
                    2a:67:0b:41:5c:b6:2b:d6:43:97:c3:8a:76:b9:25:
                    b2:2e:5b:cd:e7:6a:f8:4a:45:0c:af:8b:b3:98:1f:
                    09:f1:29:08:01:62:55:a8:3d:ac:c1:72:01:ee:df:
                    5a:30:7c:2c:18:8f:b0:56:51:b1:bd:bf:49:25:79:
                    a5:2a:55:e2:70:02:b0:b3:4f:41:b2:ce:4e:04:19:
                    0b:89:c4:72:de:d4:a1:6a:e2:65:fe:3e:f9:58:ff:
                    07:95:2f:b7:6e:2e:69:4d:bd:35:98:e2:46:b7:5e:
                    ce:77:92:d3:d1:c8:ac:d7:22:a3:6c:0c:20:45:28:
                    97:06:88:06:33:87:dc:7d:8f:fd:34:c9:4a:71:9d:
                    64:46:28:0f:33:1e:50:e5:90:8d:00:13:cb:0d:79:
                    f2:90:ae:3f:c2:1f:da:45:b7:6f:dc:27:1a:17:d6:
                    f7:ef:b0:50:90:70:e0:92:3f:8e:2c:ac:fe:ac:98:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:87:B0:93:FC:D9:3D:2B:59:CA:2D:EE:DD:4C:99:49:B1:8B:C6:8D
            X509v3 Authority Key Identifier:
                keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a4:74:1d:4c:5c:c3:ad:8d:fa:8d:08:92:6d:94:a8:65:3f:
         50:b6:28:ff:7e:47:ff:ec:ba:12:0b:2c:d3:98:cb:fe:33:25:
         61:ce:d5:d3:89:b9:ea:c3:ca:0c:90:33:ba:06:a5:ed:cb:b8:
         ad:42:78:70:c9:07:3a:48:49:a4:6b:44:58:27:e0:a1:e4:20:
         6b:c1:14:1c:b3:b9:2d:ef:84:fd:41:92:27:c6:8e:bb:d8:31:
         a2:6e:38:cd:8a:0d:ff:e8:dd:bb:f0:14:15:42:79:bf:f3:36:
         96:0c:fe:67:7d:32:26:56:fe:97:17:e8:10:da:48:7e:d5:34:
         9a:0e:3a:37:d5:ad:24:91:63:42:ed:86:e8:b7:2a:83:db:33:
         ba:8e:27:f5:f9:2d:0e:5a:57:2d:f0:6d:ab:ba:b6:80:f8:ce:
         f2:92:4c:db:df:45:37:f1:54:5d:db:e0:32:f9:fd:68:cc:d1:
         3b:49:3b:65:4e:24:66:27:48:f0:c5:19:05:48:a6:42:4a:22:
         be:9c:a8:d8:68:84:c0:4d:d8:1b:e4:66:48:85:fa:9e:66:7d:
         77:46:92:4f:b8:93:aa:6b:83:6e:f8:b9:5a:d2:ec:0e:bd:37:
         08:88:eb:a0:a2:56:17:43:f5:0e:0d:ae:5d:8e:4c:d5:bd:de:
         52:13:87:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFSUgkczrjPPOCzO46Es9VtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZmE1NjRjZjk3NTc3YzA3NjMzYmE0ZTY0MGVhNzhjNzZm
YzE3ZGQwHhcNMjYxMDE5MDQwMTEwWhcNMjYxMDIwMDQwMTEwWjAzMTEwLwYDVQQD
Eyg5Yzg3YjA5M2ZjZDkzZDJiNTljYTJkZWVkZDRjOTk0OWIxOGJjNjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdEuCp4GrktGyl3AHQiipZYs+MWH
7T095wsebqZC6CEqG08uThjwdv9Ux9RmbTbtDIeNHJciOsuV/4ijQg6kJMVS1EYD
gi6M2d8qZwtBXLYr1kOXw4p2uSWyLlvN52r4SkUMr4uzmB8J8SkIAWJVqD2swXIB
7t9aMHwsGI+wVlGxvb9JJXmlKlXicAKws09Bss5OBBkLicRy3tShauJl/j75WP8H
lS+3bi5pTb01mOJGt17Od5LT0cis1yKjbAwgRSiXBogGM4fcfY/9NMlKcZ1kRigP
Mx5Q5ZCNABPLDXnykK4/wh/aRbdv3CcaF9b377BQkHDgkj+OLKz+rJgqBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyHsJP82T0rWcot7t1MmUmxi8aNMB8GA1UdIwQY
MBaAFIb6Vkz5dXfAdjO6TmQOp4x2/BfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDkt
MDczZDBkMTRkZGRlLzEvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDktMDczZDBkMTRkZGRl
LzEvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaR0HUxc
w62N+o0Ikm2UqGU/ULYo/35H/+y6Egss05jL/jMlYc7V04m56sPKDJAzugal7cu4
rUJ4cMkHOkhJpGtEWCfgoeQga8EUHLO5Le+E/UGSJ8aOu9gxom44zYoN/+jdu/AU
FUJ5v/M2lgz+Z30yJlb+lxfoENpIftU0mg46N9WtJJFjQu2G6Lcqg9szuo4n9fkt
DlpXLfBtq7q2gPjO8pJM299FN/FUXdvgMvn9aMzRO0k7ZU4kZidI8MUZBUimQkoi
vpyo2GiEwE3YG+RmSIX6nmZ9d0aST7iTqmuDbvi5WtLsDr03CIjroKJWF0P1Dg2u
XY5M1b3eUhOHQQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 09:17:25 2026 by rpki-client