Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
File:                     TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json)
Hash identifier:          Ou6oXi0eCFMYbqAq0xnuJ6l8qHiWT2UOshFAOIMJPAg=
Subject key identifier:   85:47:D9:89:72:B9:49:0C:F7:E8:E6:EC:BA:D1:97:90:66:26:CC:92
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Certificate issuer:       /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial:       01A180AB8240037BAD81FD8AFE60CCD65783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
Manifest number:          0B87
Signing time:             Wed 28 Oct 2026 04:01:25 +0000
Manifest this update:     Wed 28 Oct 2026 04:01:25 +0000
Manifest next update:     Thu 29 Oct 2026 04:01:25 +0000
Files and hashes:         1: 5cyx45wBsDWUW4HLBveZ_qT2fcI.roa (hash: 8zrBvmy9ZVUIH/JDFlTLI0bEMjkf56i51k/bt1Lb1pQ=)
                          2: BGnZrxh766n-RwiVyZM8GwNTqh0.roa (hash: /zWDyCDhQQVXOZUHRipaDLFDgbYWX/UYPO8XJtBp0uE=)
                          3: JI6F6sKwmFDB-S9XODKhAA660AM.roa (hash: /b/qNAizl4V5sFYHPlaPbBReehGSPPstai3HlyE9iGo=)
                          4: OB0voxOvgqvD6w4CwDmCo19dJlY.roa (hash: 9mhFY39YjN1Cc/funyTGbxD0WJvEdMakoR8u2Fsujz0=)
                          5: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: tY+qRiE9VDC0aLsrJTUigvXKGyS9UICUSfi6nosCsp4=)
                          6: X14l7kvlYYBF3EHNWSg-svsFuOQ.roa (hash: Y9BNprLjsgal1cKXYYlZbO0fiea/j/rMdHY3dC/wqFY=)
                          7: sGobVjVtmpTG3eIQoRngSBlxcMU.roa (hash: UMoTBGpuj0hrOh47PvNUlOhwfEbv/t4MSoG5XZ2RuSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:ab:82:40:03:7b:ad:81:fd:8a:fe:60:cc:d6:57:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
        Validity
            Not Before: Oct 28 04:01:25 2026 GMT
            Not After : Oct 29 04:01:25 2026 GMT
        Subject: CN=8547d98972b9490cf7e8e6ecbad197906626cc92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:9d:f9:9c:d3:4a:88:26:d5:d3:ac:f1:8f:
                    c6:6d:ba:fe:eb:cc:ef:c1:25:12:46:eb:81:20:23:
                    c8:93:c8:fc:3f:88:cd:8e:5e:cb:2d:6f:0e:83:f8:
                    f7:13:ec:2f:71:29:11:ae:8c:02:3a:1f:d3:d4:79:
                    64:af:6c:86:22:f4:7b:89:43:cd:18:3d:84:8e:10:
                    74:0d:45:25:7f:7f:44:79:79:5f:6b:8e:2c:b3:01:
                    c9:66:24:f3:9b:3d:42:f6:47:c1:fb:17:e8:0e:26:
                    c8:32:ca:70:0d:02:4e:49:0e:d8:16:a1:ec:73:63:
                    52:86:47:5f:c5:be:b7:3e:49:80:36:62:f0:31:12:
                    f7:21:44:13:f8:10:8f:24:52:61:b8:4b:db:33:81:
                    30:7a:c2:ec:a6:4f:a8:3e:8a:fa:28:d6:03:7a:df:
                    99:1e:5a:1d:15:2b:61:f1:01:99:ee:de:76:3c:9b:
                    8c:21:8f:60:db:a3:3d:96:df:a9:17:4e:4e:73:44:
                    a0:8d:a4:c3:63:99:7d:93:1d:75:4e:7f:8c:ec:d2:
                    8d:8c:b5:19:4b:bc:0b:01:7f:d9:b2:12:6c:c6:88:
                    e3:67:59:74:0e:f9:99:6c:82:a7:8e:1b:e1:36:a7:
                    93:d0:d8:0a:97:32:36:7e:02:9b:9f:90:d5:37:d8:
                    02:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:47:D9:89:72:B9:49:0C:F7:E8:E6:EC:BA:D1:97:90:66:26:CC:92
            X509v3 Authority Key Identifier:
                keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c2:18:50:89:a1:93:42:59:cc:ee:c8:20:e0:a7:11:c4:98:
         28:b6:ee:6c:51:fc:56:16:31:48:fc:e0:7f:85:6a:a0:3b:e7:
         c6:66:b2:72:ea:4d:95:08:43:bb:fd:7d:02:83:61:3c:0f:7d:
         b5:f7:af:ae:e4:6b:10:0a:ae:61:d6:db:07:1b:c6:a2:3f:6e:
         7f:d5:7f:94:d8:f6:19:02:66:8d:43:ab:5f:87:9d:ec:96:7a:
         25:64:b8:ed:d7:90:94:2a:f6:57:5c:1e:5f:82:89:06:b0:bf:
         35:b0:66:42:72:1a:56:48:e2:02:4a:61:37:8c:cc:bf:ce:2f:
         4e:94:c8:cf:78:13:5b:c3:c9:b7:fd:f8:e4:90:37:04:fc:5e:
         be:8b:b7:39:86:98:91:75:4f:0d:8f:51:14:ae:a5:d5:b7:7a:
         7f:d7:db:83:c3:66:b3:91:7c:5c:78:f6:7a:8b:92:31:ae:26:
         93:ec:10:f8:d3:61:1b:52:b0:a6:b8:e9:fd:87:cc:91:db:44:
         e6:cb:12:9e:dc:8b:e7:56:b7:c4:4b:05:f0:b0:bb:61:21:65:
         c2:39:bc:4b:51:d2:25:bf:b0:02:47:e0:63:8e:dc:e1:bf:70:
         62:95:cc:8d:fc:aa:0c:a7:68:b7:4b:ba:90:0e:bd:a7:79:10:
         c1:a8:a8:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAq4JAA3utgf2K/mDM1leDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzc4OWVjZjY3ZTA0Mjk4YzVlZTQ0YzY3ZDhmYjdmNWQ2
ZDk1YTEwHhcNMjYxMDI4MDQwMTI1WhcNMjYxMDI5MDQwMTI1WjAzMTEwLwYDVQQD
Eyg4NTQ3ZDk4OTcyYjk0OTBjZjdlOGU2ZWNiYWQxOTc5MDY2MjZjYzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8md+ZzTSogm1dOs8Y/Gbbr+68zv
wSUSRuuBICPIk8j8P4jNjl7LLW8Og/j3E+wvcSkRrowCOh/T1Hlkr2yGIvR7iUPN
GD2EjhB0DUUlf39EeXlfa44sswHJZiTzmz1C9kfB+xfoDibIMspwDQJOSQ7YFqHs
c2NShkdfxb63PkmANmLwMRL3IUQT+BCPJFJhuEvbM4EwesLspk+oPor6KNYDet+Z
HlodFSth8QGZ7t52PJuMIY9g26M9lt+pF05Oc0SgjaTDY5l9kx11Tn+M7NKNjLUZ
S7wLAX/ZshJsxojjZ1l0DvmZbIKnjhvhNqeT0NgKlzI2fgKbn5DVN9gCUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVH2YlyuUkM9+jm7LrRl5BmJsySMB8GA1UdIwQY
MBaAFEw3iez2fgQpjF7kTGfY+39dbZWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMt
MWRjNTRkMWMwM2EzLzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMtMWRjNTRkMWMwM2Ez
LzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvsIYUImh
k0JZzO7IIOCnEcSYKLbubFH8VhYxSPzgf4VqoDvnxmaycupNlQhDu/19AoNhPA99
tfevruRrEAquYdbbBxvGoj9uf9V/lNj2GQJmjUOrX4ed7JZ6JWS47deQlCr2V1we
X4KJBrC/NbBmQnIaVkjiAkphN4zMv84vTpTIz3gTW8PJt/345JA3BPxevou3OYaY
kXVPDY9RFK6l1bd6f9fbg8Nms5F8XHj2eouSMa4mk+wQ+NNhG1Kwprjp/YfMkdtE
5ssSntyL51a3xEsF8LC7YSFlwjm8S1HSJb+wAkfgY47c4b9wYpXMjfyqDKdot0u6
kA69p3kQwaioaQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:25:52 2026 by rpki-client