Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
File:                     A_P-YHUIK-jliDKbQ9dhv257AdA.mft (raw, json)
Hash identifier:          RttNGyoXHTt04UgyURSsJ1uVWJG5ntSLwKL6W5gUuw4=
Subject key identifier:   79:6C:81:B0:8C:E5:B8:C9:C5:95:8D:F1:A0:E3:5C:FA:53:46:CA:59
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Certificate issuer:       /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial:       01A13C6E90F1DFF34658DD917A8205D6BEC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
Manifest number:          0CD7
Signing time:             Wed 14 Oct 2026 22:00:41 +0000
Manifest this update:     Wed 14 Oct 2026 22:00:41 +0000
Manifest next update:     Thu 15 Oct 2026 22:00:41 +0000
Files and hashes:         1: A_P-YHUIK-jliDKbQ9dhv257AdA.crl (hash: y48nv/FLFQgZjzdHTQ+mHMd9KHHcZvpi6ej0DPvUSpE=)
                          2: y8-TomRf2SfXgjAfIqDbASYx4Kw.roa (hash: uG779XP+SowZScRgyybF2Yr7PqJO6NR4pXnq6h4jggk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:6e:90:f1:df:f3:46:58:dd:91:7a:82:05:d6:be:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
        Validity
            Not Before: Oct 14 22:00:41 2026 GMT
            Not After : Oct 15 22:00:41 2026 GMT
        Subject: CN=796c81b08ce5b8c9c5958df1a0e35cfa5346ca59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:95:39:71:7b:bf:03:c1:40:c2:9f:33:f1:
                    f3:1c:99:30:c6:53:98:b2:9c:21:bb:88:a4:fd:01:
                    3e:c5:60:ba:b4:f4:4e:9f:54:aa:27:72:1b:64:8b:
                    f1:68:3f:cf:8c:2a:1b:60:e1:ce:10:7f:40:cc:4e:
                    bc:d3:e4:77:99:f5:78:3c:77:25:ed:bd:1c:9a:0a:
                    8d:6c:e7:53:b7:b4:7f:a7:21:76:56:8d:f0:fe:e7:
                    95:ba:4c:97:14:81:05:e0:c9:6a:45:c5:00:3a:40:
                    9e:fc:4e:6d:50:d5:8f:03:dd:e0:2c:07:f2:de:1a:
                    e4:83:14:41:fb:75:18:77:39:23:d9:18:b7:8c:60:
                    f9:3f:4a:2d:6d:86:b4:7a:12:68:e1:54:26:cb:9b:
                    0e:65:6f:d9:17:69:8c:88:dd:31:f0:77:3c:24:a1:
                    9c:c2:f7:7f:d5:86:2b:7e:d6:9d:93:65:1e:f0:6a:
                    f2:23:68:84:3e:8d:c1:46:af:ca:b4:52:80:6d:42:
                    e9:65:a5:74:cc:e6:69:b9:12:ea:2b:ab:3d:b2:f7:
                    35:5a:f1:4f:e9:ed:34:dd:9c:46:0a:37:56:74:e9:
                    8a:b9:e8:fb:5c:fe:79:55:86:50:ef:c3:d1:39:32:
                    b2:a9:7e:ae:bb:c1:34:36:e2:9a:01:c1:a9:dc:f3:
                    40:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6C:81:B0:8C:E5:B8:C9:C5:95:8D:F1:A0:E3:5C:FA:53:46:CA:59
            X509v3 Authority Key Identifier:
                keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:13:51:5e:dd:27:a5:48:7a:73:ca:1b:86:f4:15:d9:38:62:
         52:c4:f3:d5:43:9c:f0:52:2f:b9:af:b3:2a:7a:f3:6a:ac:9f:
         7f:0d:8c:f9:2d:1c:a7:9a:cc:18:b4:b6:c5:0c:9f:f6:f4:87:
         d5:e8:d2:8c:e1:32:26:77:2b:a2:48:c1:ba:b1:08:c7:9d:23:
         a3:df:f9:c1:65:32:e4:0f:54:a8:44:ef:06:d9:28:38:00:c6:
         71:a1:44:10:5a:a8:bf:85:da:7e:0c:35:09:b8:b3:c7:6b:95:
         2a:8d:bd:b5:a8:fd:c2:1f:dc:5a:e7:2d:fc:4c:95:0f:5f:bd:
         f2:dc:46:5d:07:94:7d:32:f9:7e:28:63:fe:ea:2b:6b:e6:15:
         9e:8b:af:f5:d9:7a:89:25:2a:95:7e:18:a0:b4:f7:df:3b:c0:
         90:43:1b:c9:49:88:1f:8c:58:37:68:aa:52:9b:7d:5a:63:39:
         f0:1a:be:9c:c5:30:5a:89:b2:57:24:88:6d:aa:09:04:c9:04:
         6a:73:cc:52:68:22:17:30:62:9c:aa:02:f1:c7:f0:92:57:cb:
         f7:d8:1d:da:f3:ac:7b:af:d8:91:96:54:f9:f0:c8:db:d0:fb:
         8c:c3:b8:ab:46:b5:e3:07:85:85:8c:f1:50:61:b5:74:ae:90:
         f4:d3:6b:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8bpDx3/NGWN2ReoIF1r7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjNmZTYwNzUwODJiZThlNTg4MzI5YjQzZDc2MWJmNmU3
YjAxZDAwHhcNMjYxMDE0MjIwMDQxWhcNMjYxMDE1MjIwMDQxWjAzMTEwLwYDVQQD
Eyg3OTZjODFiMDhjZTViOGM5YzU5NThkZjFhMGUzNWNmYTUzNDZjYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl+VOXF7vwPBQMKfM/HzHJkwxlOY
spwhu4ik/QE+xWC6tPROn1SqJ3IbZIvxaD/PjCobYOHOEH9AzE680+R3mfV4PHcl
7b0cmgqNbOdTt7R/pyF2Vo3w/ueVukyXFIEF4MlqRcUAOkCe/E5tUNWPA93gLAfy
3hrkgxRB+3UYdzkj2Ri3jGD5P0otbYa0ehJo4VQmy5sOZW/ZF2mMiN0x8Hc8JKGc
wvd/1YYrftadk2Ue8GryI2iEPo3BRq/KtFKAbULpZaV0zOZpuRLqK6s9svc1WvFP
6e003ZxGCjdWdOmKuej7XP55VYZQ78PROTKyqX6uu8E0NuKaAcGp3PNAVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlsgbCM5bjJxZWN8aDjXPpTRspZMB8GA1UdIwQY
MBaAFAPz/mB1CCvo5Ygym0PXYb9uewHQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9QLVlIVUlLLWpsaURLYlE5ZGh2MjU3QWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84YmY3ZWEtODgzYS00YzQzLTk0NmMt
ODJkYWZlMTA0YmM1LzEvQV9QLVlIVUlLLWpsaURLYlE5ZGh2MjU3QWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy84YmY3ZWEtODgzYS00YzQzLTk0NmMtODJkYWZlMTA0YmM1
LzEvQV9QLVlIVUlLLWpsaURLYlE5ZGh2MjU3QWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBNRXt0n
pUh6c8obhvQV2ThiUsTz1UOc8FIvua+zKnrzaqyffw2M+S0cp5rMGLS2xQyf9vSH
1ejSjOEyJncrokjBurEIx50jo9/5wWUy5A9UqETvBtkoOADGcaFEEFqov4Xafgw1
Cbizx2uVKo29taj9wh/cWuct/EyVD1+98txGXQeUfTL5fihj/uora+YVnouv9dl6
iSUqlX4YoLT33zvAkEMbyUmIH4xYN2iqUpt9WmM58Bq+nMUwWomyVySIbaoJBMkE
anPMUmgiFzBinKoC8cfwklfL99gd2vOse6/YkZZU+fDI29D7jMO4q0a14weFhYzx
UGG1dK6Q9NNrlw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:09 2026 by rpki-client