Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft
File:                     15eF3mLc-eeTC6vXsdOcWFPRlE8.mft (raw, json)
Hash identifier:          RI5zBlp4hVAeHci4yFE18v7W3X0u6BtbNryPwW/5opA=
Subject key identifier:   31:73:11:9D:80:AD:6B:87:DB:5D:39:EA:C6:FE:65:E1:2A:4F:06:D6
Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
Certificate issuer:       /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Certificate serial:       01A13FA7155D3E2D8897028DCE3B76AEA036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft
Manifest number:          1AB6
Signing time:             Thu 15 Oct 2026 13:01:16 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:16 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:16 +0000
Files and hashes:         1: 15eF3mLc-eeTC6vXsdOcWFPRlE8.crl (hash: 5d2/des74QnnKhI5DH809EL39f2cHXnGEVvaNBgxQOE=)
                          2: 5S25SMI8E9JaR6e1K9PJzYPwzq0.roa (hash: NJujagGkJiaBOJNgPviLVr7Rb2pzjvY77Oqt5qKgVjY=)
                          3: PHmeAWFFkKXBgymR37GK6QvhrCY.roa (hash: /Zgxh895ZAIwexVdKt7yfvsXzhRHS6wWMCxO8hY8aNA=)
                          4: QrcFbOR4DAAMYD0DDghoqF2GSfM.roa (hash: QGtHb51hChbBqYUnbm9bBQhfbbGCgb2yzMdOBCNMB48=)
                          5: k9s4R_RCGnHtZOrjWKzCzH64VJE.roa (hash: SxnRh57fnfNIfp40e+jDqO9RBa+XdPWJgmj+azEX9xQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:15:5d:3e:2d:88:97:02:8d:ce:3b:76:ae:a0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
        Validity
            Not Before: Oct 15 13:01:16 2026 GMT
            Not After : Oct 16 13:01:16 2026 GMT
        Subject: CN=3173119d80ad6b87db5d39eac6fe65e12a4f06d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:d9:ee:a0:d8:3d:9c:68:20:67:b0:63:fa:
                    97:74:5c:73:f1:b4:8d:7c:17:1f:09:c0:7d:b9:74:
                    f3:17:9a:55:a9:89:f2:a2:23:33:24:a7:5f:3a:fe:
                    66:a8:1f:ff:bd:66:5b:d6:a2:01:e6:c6:5b:ab:1a:
                    6b:95:d3:12:ce:8d:31:ca:a2:fe:3d:bc:b8:67:88:
                    ab:cd:4d:08:f7:43:de:cc:c2:6c:65:6c:e6:62:07:
                    de:3f:3b:f5:44:0e:7b:5b:5f:00:3c:b1:1c:43:80:
                    d6:3e:0d:60:2d:0c:8b:b1:74:8b:44:3b:d9:23:aa:
                    04:9f:61:5f:25:60:e8:0b:ed:af:ff:12:a4:52:3c:
                    0e:d8:89:76:26:94:62:14:4c:69:48:16:d8:a4:0f:
                    6f:f1:41:74:d3:40:04:5e:9c:9e:d4:89:28:29:da:
                    19:3d:5e:b8:ec:97:9f:f0:66:ce:21:70:9f:a2:80:
                    37:9d:9d:14:f2:f4:25:92:4c:e4:c3:56:3b:4f:bf:
                    35:0c:6c:b6:24:fc:a3:2f:58:d2:5e:a4:cc:df:72:
                    1e:7b:35:a8:f8:63:60:38:fe:56:c4:d5:72:3c:55:
                    67:ee:6d:5c:6b:b2:db:a0:ab:73:6b:4a:39:34:f2:
                    4c:8a:f7:8f:f0:50:c1:b8:42:88:74:0a:31:bf:5e:
                    5c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:73:11:9D:80:AD:6B:87:DB:5D:39:EA:C6:FE:65:E1:2A:4F:06:D6
            X509v3 Authority Key Identifier:
                keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:37:2c:9f:18:cf:b6:e5:41:59:e8:f1:93:d4:83:38:fd:ed:
         73:26:8c:05:31:08:eb:74:34:cc:8e:c1:81:08:e2:58:a6:2b:
         37:f2:3a:0f:d4:12:33:3f:a7:55:0f:d3:63:1f:86:aa:18:9e:
         db:ac:29:18:32:4a:a0:dc:36:91:f7:28:ba:4f:ad:1c:c7:d6:
         77:af:a7:dc:31:29:a1:9f:38:b5:ee:ec:9a:db:17:83:50:ef:
         59:74:99:1d:d0:c5:56:0d:f0:15:06:95:8f:12:a2:21:8d:ed:
         2f:83:a1:46:98:97:d5:b5:63:2a:08:9e:6d:38:48:7f:e2:7c:
         f2:d2:35:27:ea:ef:0a:0f:4f:57:df:d2:b3:4f:ae:06:0c:29:
         7f:96:4f:3b:5a:97:44:26:59:9a:e8:ae:bc:db:95:8b:a3:a3:
         57:dc:13:4b:d6:02:a5:54:d5:7a:c9:de:6e:0a:82:55:77:99:
         f9:d6:dd:82:59:10:17:96:cc:95:33:78:e1:06:2e:c4:94:2b:
         79:f6:b1:53:41:ba:65:28:93:e3:4e:12:57:ca:89:ce:42:79:
         2e:bc:38:77:14:38:59:1c:01:46:5a:ce:9e:f4:61:bf:16:95:
         4a:30:14:86:59:64:5a:45:fd:e4:b0:07:1a:42:82:97:e7:42:
         e5:5f:eb:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/pxVdPi2IlwKNzjt2rqA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTc4NWRlNjJkY2Y5ZTc5MzBiYWJkN2IxZDM5YzU4NTNk
MTk0NGYwHhcNMjYxMDE1MTMwMTE2WhcNMjYxMDE2MTMwMTE2WjAzMTEwLwYDVQQD
EygzMTczMTE5ZDgwYWQ2Yjg3ZGI1ZDM5ZWFjNmZlNjVlMTJhNGYwNmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQbZ7qDYPZxoIGewY/qXdFxz8bSN
fBcfCcB9uXTzF5pVqYnyoiMzJKdfOv5mqB//vWZb1qIB5sZbqxprldMSzo0xyqL+
Pby4Z4irzU0I90PezMJsZWzmYgfePzv1RA57W18APLEcQ4DWPg1gLQyLsXSLRDvZ
I6oEn2FfJWDoC+2v/xKkUjwO2Il2JpRiFExpSBbYpA9v8UF000AEXpye1IkoKdoZ
PV647Jef8GbOIXCfooA3nZ0U8vQlkkzkw1Y7T781DGy2JPyjL1jSXqTM33IeezWo
+GNgOP5WxNVyPFVn7m1ca7LboKtza0o5NPJMiveP8FDBuEKIdAoxv15c0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFzEZ2ArWuH21056sb+ZeEqTwbWMB8GA1UdIwQY
MBaAFNeXhd5i3Pnnkwur17HTnFhT0ZRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVlRjNtTGMtZWVUQzZ2WHNkT2NXRlBSbEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83Zjk3MjgtOTU1OS00MjYzLWJjZmEt
NzU4NTVkYjcxNTFmLzEvMTVlRjNtTGMtZWVUQzZ2WHNkT2NXRlBSbEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83Zjk3MjgtOTU1OS00MjYzLWJjZmEtNzU4NTVkYjcxNTFm
LzEvMTVlRjNtTGMtZWVUQzZ2WHNkT2NXRlBSbEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzcsnxjP
tuVBWejxk9SDOP3tcyaMBTEI63Q0zI7BgQjiWKYrN/I6D9QSMz+nVQ/TYx+Gqhie
26wpGDJKoNw2kfcouk+tHMfWd6+n3DEpoZ84te7smtsXg1DvWXSZHdDFVg3wFQaV
jxKiIY3tL4OhRpiX1bVjKgiebThIf+J88tI1J+rvCg9PV9/Ss0+uBgwpf5ZPO1qX
RCZZmuiuvNuVi6OjV9wTS9YCpVTVesnebgqCVXeZ+dbdglkQF5bMlTN44QYuxJQr
efaxU0G6ZSiT404SV8qJzkJ5Lrw4dxQ4WRwBRlrOnvRhvxaVSjAUhllkWkX95LAH
GkKCl+dC5V/rDQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:56:19 2026 by rpki-client