Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
File:                     se4yDfBGSHfVF0XjFCMbVcg7aEU.mft (raw, json)
Hash identifier:          y0U4vZYeIpfLi/+oe/+SwkEfKqm3s0Z+WDnlFxIX+FI=
Subject key identifier:   5E:F7:2B:67:82:7D:DD:E7:AD:B8:EA:3E:32:FB:08:58:80:F9:D8:9F
Authority key identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
Certificate issuer:       /CN=b1ee320df0464877d51745e314231b55c83b6845
Certificate serial:       01A140B98FA0EE1ACDB374AE351731F916D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
Manifest number:          1A39
Signing time:             Thu 15 Oct 2026 18:01:05 +0000
Manifest this update:     Thu 15 Oct 2026 18:01:05 +0000
Manifest next update:     Fri 16 Oct 2026 18:01:05 +0000
Files and hashes:         1: ZJ6WRtkzwu8v_Ad_XX8o7gcNNmU.roa (hash: H8SukrLououOm9b8DOSj2scPjyGTdIoNUh4OD9s1VW4=)
                          2: se4yDfBGSHfVF0XjFCMbVcg7aEU.crl (hash: p5h3feTQwrLLdgaUzRwPLjNEKqor40TX6LJHdAWlk/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:b9:8f:a0:ee:1a:cd:b3:74:ae:35:17:31:f9:16:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ee320df0464877d51745e314231b55c83b6845
        Validity
            Not Before: Oct 15 18:01:05 2026 GMT
            Not After : Oct 16 18:01:05 2026 GMT
        Subject: CN=5ef72b67827ddde7adb8ea3e32fb085880f9d89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:e5:8e:ae:00:15:11:3f:24:70:9b:b5:05:
                    a5:d2:35:50:94:0f:64:d1:e3:f8:ac:5f:7d:9c:14:
                    d8:18:c9:a9:ec:d8:97:e3:7c:8c:2c:66:c7:9f:f9:
                    f3:1e:2c:51:20:43:8f:e4:67:97:9a:e2:81:7f:e4:
                    dc:2f:d1:a4:1a:e2:52:1b:09:89:29:70:f7:58:41:
                    8c:06:08:2b:02:a3:f2:3a:03:4b:94:5d:f9:c6:e6:
                    91:0d:fd:aa:d6:46:7a:52:a2:66:78:f2:81:d5:7a:
                    f5:20:03:a6:b3:d9:59:bc:f0:ba:38:53:0c:c5:28:
                    36:cd:7c:24:61:d8:5a:57:f3:aa:da:7a:8c:8e:99:
                    de:58:01:1e:33:7f:d7:ba:0d:cf:af:33:a4:e6:63:
                    b2:f6:9e:bc:2a:64:38:52:73:ff:cb:b1:3a:e6:9b:
                    24:08:70:66:60:03:9b:15:16:a0:1c:c8:66:d1:7e:
                    e0:6c:dc:82:27:5d:ab:ed:e8:2e:7f:bb:b3:c2:cb:
                    d7:65:26:9a:67:45:ec:32:17:7c:40:31:f9:08:e1:
                    c5:29:e5:46:44:d3:ad:f3:9e:86:12:49:a6:23:01:
                    4a:61:34:23:85:66:61:b7:8a:f0:1f:24:9a:b8:bd:
                    e5:9f:43:aa:78:7b:07:8e:50:ea:b4:7a:71:7a:cc:
                    2f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F7:2B:67:82:7D:DD:E7:AD:B8:EA:3E:32:FB:08:58:80:F9:D8:9F
            X509v3 Authority Key Identifier:
                keyid:B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:32:0b:68:0d:73:c7:40:4e:9e:8e:2c:c1:ad:db:e2:98:7c:
         e3:80:e2:bd:22:34:82:74:99:5f:dc:6a:63:ef:74:70:e5:31:
         24:21:af:67:12:16:20:03:f6:3f:f5:4f:35:ff:08:40:99:41:
         3a:60:49:90:cd:7f:13:2d:69:b6:ba:c4:74:97:02:90:f1:a6:
         ca:dc:f5:fe:5d:aa:26:b4:a0:4e:61:0d:34:1a:da:70:31:27:
         d0:fe:76:9b:03:28:ee:e0:a5:4f:a5:cd:59:fd:45:2f:7a:7e:
         88:91:59:8a:36:59:5c:17:8b:9c:b3:89:fe:22:0e:ec:a4:37:
         be:9a:7a:93:63:bb:8f:d6:af:2a:30:79:1c:5d:df:1a:d5:0f:
         40:90:7c:f7:80:5f:e0:e9:b1:40:a9:3d:65:57:d1:62:e5:0e:
         21:53:3f:64:51:2b:42:f3:43:41:95:18:a1:06:d7:41:1e:a9:
         fa:ff:83:67:f5:1f:b9:33:91:42:b6:3a:f5:f1:eb:53:57:b6:
         ce:9e:db:16:19:11:cd:eb:f3:60:bb:43:ab:c7:a2:a7:69:1b:
         9a:c6:e3:9f:05:a2:da:0d:e1:2b:9d:20:68:ca:c3:26:f8:f7:
         ef:73:8f:e1:1b:1f:5c:58:c6:63:f7:03:30:94:18:31:0f:5e:
         1d:de:5a:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAuY+g7hrNs3SuNRcx+RbSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZWUzMjBkZjA0NjQ4NzdkNTE3NDVlMzE0MjMxYjU1Yzgz
YjY4NDUwHhcNMjYxMDE1MTgwMTA1WhcNMjYxMDE2MTgwMTA1WjAzMTEwLwYDVQQD
Eyg1ZWY3MmI2NzgyN2RkZGU3YWRiOGVhM2UzMmZiMDg1ODgwZjlkODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWPljq4AFRE/JHCbtQWl0jVQlA9k
0eP4rF99nBTYGMmp7NiX43yMLGbHn/nzHixRIEOP5GeXmuKBf+TcL9GkGuJSGwmJ
KXD3WEGMBggrAqPyOgNLlF35xuaRDf2q1kZ6UqJmePKB1Xr1IAOms9lZvPC6OFMM
xSg2zXwkYdhaV/Oq2nqMjpneWAEeM3/Xug3PrzOk5mOy9p68KmQ4UnP/y7E65psk
CHBmYAObFRagHMhm0X7gbNyCJ12r7eguf7uzwsvXZSaaZ0XsMhd8QDH5COHFKeVG
RNOt856GEkmmIwFKYTQjhWZht4rwHySauL3ln0OqeHsHjlDqtHpxeswvFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF73K2eCfd3nrbjqPjL7CFiA+difMB8GA1UdIwQY
MBaAFLHuMg3wRkh31RdF4xQjG1XIO2hFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2U0eURmQkdTSGZWRjBYakZDTWJWY2c3YUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wM2I0MDQtMmY2NC00YzdjLWFjNmMt
MjZlYjBjNjI5MGJhLzEvc2U0eURmQkdTSGZWRjBYakZDTWJWY2c3YUVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wM2I0MDQtMmY2NC00YzdjLWFjNmMtMjZlYjBjNjI5MGJh
LzEvc2U0eURmQkdTSGZWRjBYakZDTWJWY2c3YUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzILaA1z
x0BOno4swa3b4ph844DivSI0gnSZX9xqY+90cOUxJCGvZxIWIAP2P/VPNf8IQJlB
OmBJkM1/Ey1ptrrEdJcCkPGmytz1/l2qJrSgTmENNBracDEn0P52mwMo7uClT6XN
Wf1FL3p+iJFZijZZXBeLnLOJ/iIO7KQ3vpp6k2O7j9avKjB5HF3fGtUPQJB894Bf
4OmxQKk9ZVfRYuUOIVM/ZFErQvNDQZUYoQbXQR6p+v+DZ/UfuTORQrY69fHrU1e2
zp7bFhkRzevzYLtDq8eip2kbmsbjnwWi2g3hK50gaMrDJvj373OP4RsfXFjGY/cD
MJQYMQ9eHd5aJA==
-----END CERTIFICATE-----
Generated at Fri Oct 16 00:20:01 2026 by rpki-client