Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File:                     24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier:          ypvRrVbtam2bv4oCu37Baob1CAFdQfyZynejAuKcUIA=
Subject key identifier:   22:4E:3E:C8:FE:9B:1B:1A:3F:09:B4:EE:9D:D6:8B:C0:CB:99:FD:47
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer:       /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial:       01A16F49726CFAC07DB549652E7C1D2D7ECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number:          11B8
Signing time:             Sat 24 Oct 2026 19:00:46 +0000
Manifest this update:     Sat 24 Oct 2026 19:00:46 +0000
Manifest next update:     Sun 25 Oct 2026 19:00:46 +0000
Files and hashes:         1: 0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa (hash: K4clzCUFSq6IN3lmLQlxqL/RcAzKs5Apy7zTYqaaAwc=)
                          2: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: AE0mrBePLC/N2hWVzAa+sxZaoK00zKyNOfHrmBkzfqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6f:49:72:6c:fa:c0:7d:b5:49:65:2e:7c:1d:2d:7e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
        Validity
            Not Before: Oct 24 19:00:46 2026 GMT
            Not After : Oct 25 19:00:46 2026 GMT
        Subject: CN=224e3ec8fe9b1b1a3f09b4ee9dd68bc0cb99fd47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c0:22:91:3d:09:d1:13:24:6f:d2:18:ca:97:
                    19:93:c0:ce:d9:1e:c0:8f:c0:99:9a:9d:67:63:26:
                    16:7d:63:f3:0d:64:40:4e:00:92:2b:07:d4:18:a1:
                    44:2f:58:b0:06:78:53:31:89:47:68:da:6f:67:2a:
                    8c:da:db:de:56:5b:37:0b:04:16:67:7d:e9:5c:a4:
                    5d:bd:0f:e9:5f:e2:84:e7:6e:15:c9:e0:4b:39:88:
                    33:71:06:2e:90:52:91:77:fc:11:10:93:50:e4:5a:
                    0a:9a:95:9e:d7:03:9a:47:56:ca:93:7c:55:81:92:
                    4f:c3:a1:9b:81:05:2c:a6:98:70:98:3b:ad:4f:3f:
                    a3:b3:80:3a:d4:fd:03:85:1f:35:b7:fe:4e:b9:8a:
                    ff:bb:b2:46:1f:8c:b1:a4:03:7b:54:0e:6a:19:86:
                    a4:3c:da:d1:33:ec:1d:c4:64:76:24:a7:a0:c0:ab:
                    3b:b1:08:b2:c2:40:76:c8:c7:50:04:01:22:1f:5e:
                    db:ee:b8:01:3a:ab:d3:cd:b6:00:77:08:50:86:ea:
                    d0:b9:a6:a9:e1:ef:d7:ea:4c:4c:ec:ee:7e:da:58:
                    a1:0a:e2:94:d3:8d:35:ee:3d:1d:95:00:55:2a:c1:
                    56:85:6f:fd:43:51:00:73:c2:a7:08:e2:38:98:0c:
                    bd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4E:3E:C8:FE:9B:1B:1A:3F:09:B4:EE:9D:D6:8B:C0:CB:99:FD:47
            X509v3 Authority Key Identifier:
                keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:93:38:eb:53:4e:b9:f8:43:22:52:0a:51:55:e6:99:e2:bc:
         fa:bb:96:7e:8f:32:95:9d:6d:39:23:43:93:76:13:0a:5a:3f:
         ed:1b:79:a3:9b:c9:0d:89:b4:b3:ba:ad:a1:8c:3a:e7:e5:a8:
         3c:82:b4:7c:fa:e2:39:0a:db:14:f6:1d:8b:fb:66:a4:ae:29:
         0c:17:82:6f:7b:6d:49:9c:a5:1b:bc:4a:0f:dd:6d:d2:24:87:
         70:60:38:1e:fe:58:cc:d7:2d:d0:9c:97:8c:33:8f:6f:23:20:
         d8:db:d3:aa:d7:01:ac:70:8b:61:93:b7:fd:05:b4:73:24:16:
         73:b4:40:bf:af:1e:a3:58:4f:15:71:fb:a4:3c:96:1d:9f:0f:
         04:07:a7:a7:e7:ae:94:02:a0:20:9d:07:76:44:dc:27:0b:ee:
         c6:dc:a3:3d:51:85:2f:88:f1:7e:68:e6:aa:bf:49:06:a3:de:
         bc:01:08:90:df:34:fb:c4:37:5d:ba:90:c5:a6:89:c1:d3:b5:
         23:50:32:f3:d5:0e:fa:06:87:89:03:22:dd:4f:38:a9:eb:c3:
         07:34:e1:a4:7e:28:bc:2a:5f:dd:fc:d5:78:40:b1:ec:17:45:
         b9:f1:e7:1b:ee:09:a8:f3:2f:50:bf:a1:10:e3:08:81:05:04:
         3c:7b:d2:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFvSXJs+sB9tUllLnwdLX7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiODNmNTRmNDUxMzFkOTIwN2MyMTVhMDk4YTJhNmJjZDZm
ZjA1MGIwHhcNMjYxMDI0MTkwMDQ2WhcNMjYxMDI1MTkwMDQ2WjAzMTEwLwYDVQQD
EygyMjRlM2VjOGZlOWIxYjFhM2YwOWI0ZWU5ZGQ2OGJjMGNiOTlmZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cAikT0J0RMkb9IYypcZk8DO2R7A
j8CZmp1nYyYWfWPzDWRATgCSKwfUGKFEL1iwBnhTMYlHaNpvZyqM2tveVls3CwQW
Z33pXKRdvQ/pX+KE524VyeBLOYgzcQYukFKRd/wREJNQ5FoKmpWe1wOaR1bKk3xV
gZJPw6GbgQUspphwmDutTz+js4A61P0DhR81t/5OuYr/u7JGH4yxpAN7VA5qGYak
PNrRM+wdxGR2JKegwKs7sQiywkB2yMdQBAEiH17b7rgBOqvTzbYAdwhQhurQuaap
4e/X6kxM7O5+2lihCuKU04017j0dlQBVKsFWhW/9Q1EAc8KnCOI4mAy9BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJOPsj+mxsaPwm07p3Wi8DLmf1HMB8GA1UdIwQY
MBaAFNuD9U9FEx2SB8IVoJiiprzW/wULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNTBjNzAtMGE3MC00NWFjLTlhZDQt
MzI2NzY0YTY4Y2ZiLzEvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lNTBjNzAtMGE3MC00NWFjLTlhZDQtMzI2NzY0YTY4Y2Zi
LzEvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJM461NO
ufhDIlIKUVXmmeK8+ruWfo8ylZ1tOSNDk3YTClo/7Rt5o5vJDYm0s7qtoYw65+Wo
PIK0fPriOQrbFPYdi/tmpK4pDBeCb3ttSZylG7xKD91t0iSHcGA4Hv5YzNct0JyX
jDOPbyMg2NvTqtcBrHCLYZO3/QW0cyQWc7RAv68eo1hPFXH7pDyWHZ8PBAenp+eu
lAKgIJ0HdkTcJwvuxtyjPVGFL4jxfmjmqr9JBqPevAEIkN80+8Q3XbqQxaaJwdO1
I1Ay89UO+gaHiQMi3U84qevDBzThpH4ovCpf3fzVeECx7BdFufHnG+4JqPMvUL+h
EOMIgQUEPHvSDQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 03:52:12 2026 by rpki-client