Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
File:                     sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json)
Hash identifier:          ezknYFntOSNrS6bkh4Byn+VUx8+Vb6mRWyldYwvmYUo=
Subject key identifier:   1B:70:BA:80:00:4A:DD:E1:C2:80:79:CA:E3:1D:6E:2C:45:AF:62:43
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Certificate issuer:       /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial:       01A129C416EF85D32036B7440B4A97D541D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
Manifest number:          15DB
Signing time:             Sun 11 Oct 2026 07:01:19 +0000
Manifest this update:     Sun 11 Oct 2026 07:01:19 +0000
Manifest next update:     Mon 12 Oct 2026 07:01:19 +0000
Files and hashes:         1: ob4RLJ_y_7wEvkHKUSSog54LQNw.roa (hash: Jads8EK5VWX+m/AfmuiROvWcFDNzh7waaTO1j/WWRvo=)
                          2: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: uFokEa2cr4Z0k9c8vZBzyut92pN/FFqygvICfeo1aMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 07:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:c4:16:ef:85:d3:20:36:b7:44:0b:4a:97:d5:41:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
        Validity
            Not Before: Oct 11 07:01:19 2026 GMT
            Not After : Oct 12 07:01:19 2026 GMT
        Subject: CN=1b70ba80004adde1c28079cae31d6e2c45af6243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:38:b7:87:03:40:fe:8c:74:ba:3c:6b:a6:02:
                    da:76:b3:2a:27:1c:46:05:cd:24:ff:13:cc:e7:1e:
                    0f:ed:5b:f9:25:e2:ca:df:14:dc:7f:da:d6:38:ee:
                    4f:39:5d:9a:60:a2:3d:29:45:b6:dd:c7:ab:3f:1d:
                    fb:07:3e:7f:91:69:0e:c4:b8:df:2a:50:26:fc:53:
                    00:39:42:31:c2:ba:d0:2c:02:12:b5:81:26:ac:b7:
                    59:6c:4f:42:99:93:32:b7:42:ea:d2:58:71:f7:49:
                    17:c8:af:25:15:c7:11:77:3a:ed:86:a0:70:43:d9:
                    53:ca:da:df:b0:b7:22:18:76:17:18:e4:c3:7b:e9:
                    a9:db:62:41:6b:a3:12:d2:a6:59:3c:7e:38:21:12:
                    21:8c:54:3c:4e:96:5e:7b:1d:22:36:e1:8e:69:37:
                    81:3f:44:e6:f7:a3:53:e2:b6:59:d4:51:42:88:ae:
                    9c:52:1d:2a:c5:d6:6d:3b:ac:81:7c:42:b5:72:3d:
                    e6:ff:b2:fe:8f:4a:74:ce:fe:c6:0c:88:75:e3:c9:
                    ae:73:28:15:02:6d:de:31:f3:42:a2:36:e6:40:8c:
                    e0:ab:56:bd:2e:ad:98:97:1c:e4:4d:d0:37:20:72:
                    14:fc:5f:c6:d5:4b:e3:8d:ad:d2:05:2b:70:89:58:
                    b4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:70:BA:80:00:4A:DD:E1:C2:80:79:CA:E3:1D:6E:2C:45:AF:62:43
            X509v3 Authority Key Identifier:
                keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:05:36:e5:03:45:62:76:bb:65:2f:a4:c8:db:59:57:99:9f:
         b9:f3:c8:95:57:73:af:12:4a:7e:b7:d2:44:ca:65:7e:9b:7b:
         da:75:88:25:03:de:c7:99:6c:2a:0b:18:da:56:2f:3b:56:55:
         22:c3:11:7c:5a:88:db:fc:d5:c7:6a:65:60:0d:92:42:12:80:
         88:8c:7c:0b:20:75:f4:98:c4:11:c6:0a:9e:2d:d2:07:87:65:
         db:e4:e9:fc:03:da:fe:78:53:6b:06:3d:e1:2f:b7:fa:8f:63:
         0b:1a:4f:d1:29:da:11:ec:03:e6:c4:eb:17:0e:d4:96:3b:b7:
         bd:ea:52:cc:e9:ad:8a:8f:39:16:11:98:23:f9:73:a0:23:ca:
         85:0f:dd:ad:e4:1c:8e:9e:6e:9a:f3:ee:4e:6c:5f:89:29:68:
         30:23:ce:90:dc:e8:1a:53:4b:6c:8f:9a:3d:81:af:90:8a:23:
         d2:7a:80:e0:e1:e6:1a:55:c1:ff:4f:a7:0b:00:38:b5:33:b7:
         9a:ea:a3:ec:ff:d6:e3:4a:c4:5d:cd:a1:d8:21:0b:e3:58:a2:
         06:3e:ce:a1:68:55:42:17:01:70:a0:c0:17:a5:be:45:c0:0a:
         64:d6:0f:c4:75:df:58:e5:df:3e:76:21:26:c6:6c:63:ec:ff:
         f9:99:5e:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpxBbvhdMgNrdEC0qX1UHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOTI0MjVhYjdkNjZiYWI3MTFmYmFhMjI3NTczNzc4MDc4
MzQxNTkwHhcNMjYxMDExMDcwMTE5WhcNMjYxMDEyMDcwMTE5WjAzMTEwLwYDVQQD
EygxYjcwYmE4MDAwNGFkZGUxYzI4MDc5Y2FlMzFkNmUyYzQ1YWY2MjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zi3hwNA/ox0ujxrpgLadrMqJxxG
Bc0k/xPM5x4P7Vv5JeLK3xTcf9rWOO5POV2aYKI9KUW23cerPx37Bz5/kWkOxLjf
KlAm/FMAOUIxwrrQLAIStYEmrLdZbE9CmZMyt0Lq0lhx90kXyK8lFccRdzrthqBw
Q9lTytrfsLciGHYXGOTDe+mp22JBa6MS0qZZPH44IRIhjFQ8TpZeex0iNuGOaTeB
P0Tm96NT4rZZ1FFCiK6cUh0qxdZtO6yBfEK1cj3m/7L+j0p0zv7GDIh148mucygV
Am3eMfNCojbmQIzgq1a9Lq2YlxzkTdA3IHIU/F/G1Uvjja3SBStwiVi0eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtwuoAASt3hwoB5yuMdbixFr2JDMB8GA1UdIwQY
MBaAFLCSQlq31murcR+6oidXN3gHg0FZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYt
MDc1ZTgzZGQzMzU2LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYtMDc1ZTgzZGQzMzU2
LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAU25QNF
Yna7ZS+kyNtZV5mfufPIlVdzrxJKfrfSRMplfpt72nWIJQPex5lsKgsY2lYvO1ZV
IsMRfFqI2/zVx2plYA2SQhKAiIx8CyB19JjEEcYKni3SB4dl2+Tp/APa/nhTawY9
4S+3+o9jCxpP0SnaEewD5sTrFw7Ulju3vepSzOmtio85FhGYI/lzoCPKhQ/dreQc
jp5umvPuTmxfiSloMCPOkNzoGlNLbI+aPYGvkIoj0nqA4OHmGlXB/0+nCwA4tTO3
muqj7P/W40rEXc2h2CEL41iiBj7OoWhVQhcBcKDAF6W+RcAKZNYPxHXfWOXfPnYh
JsZsY+z/+ZlenA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 16:52:18 2026 by rpki-client