Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
File:                     m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft (raw, json)
Hash identifier:          KQyEbQ96nWs1Cw+j/JKhnCppbpKbsFnoADJOypenRHY=
Subject key identifier:   39:06:91:F5:38:DD:19:FA:AF:A2:61:61:70:89:74:AC:28:55:EA:3C
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Certificate issuer:       /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial:       01A17B4DB1BCD068A8DDB9F76F258037E86F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
Manifest number:          1AC8
Signing time:             Tue 27 Oct 2026 03:00:51 +0000
Manifest this update:     Tue 27 Oct 2026 03:00:51 +0000
Manifest next update:     Wed 28 Oct 2026 03:00:51 +0000
Files and hashes:         1: V2qGOcFGArZxDVhU93OkH7I5tZU.roa (hash: Qx/eCdyI2+oie6BNIEJmjhm2r/dBvwBAeJ6b6LuahQY=)
                          2: WrF8RZjbYEiiD0wqPqyzH7bojHg.roa (hash: SASBUcOpWPVFaGgXimL1oxrkpjPpL7o7jdrVHK+m9J4=)
                          3: gdPavX0yF7T7Wyp2RjBRxSe2U1s.roa (hash: YT5SSoDomUlfm9K9ESFgm6mAwjS+3bk9K/ENIJxNzus=)
                          4: m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl (hash: RbRHhSrNZmlFsjPy06l+RgCW+rDlD7lwtQHslVTIhcc=)
                          5: m5yMYV4pBm1qpA0jit6hm99wXvM.roa (hash: 15C3Wvo3bxrDjbCmZIkVXncLYoGj5VtzpzHvZLU0GJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:4d:b1:bc:d0:68:a8:dd:b9:f7:6f:25:80:37:e8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
        Validity
            Not Before: Oct 27 03:00:51 2026 GMT
            Not After : Oct 28 03:00:51 2026 GMT
        Subject: CN=390691f538dd19faafa26161708974ac2855ea3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:5b:84:20:39:c5:54:43:61:9c:1f:db:66:
                    5f:00:7b:94:81:55:6d:2c:81:1d:67:b7:93:2f:13:
                    83:86:fd:7b:c0:f2:0f:77:68:8a:bc:58:59:79:f8:
                    64:66:86:f4:69:6b:34:65:0c:91:1e:7d:bc:e5:2c:
                    93:ba:b4:f3:7c:d2:06:98:20:f9:d9:b0:3a:5e:22:
                    9d:26:4f:ff:16:4e:1a:2c:30:44:36:eb:07:d4:22:
                    a6:a1:39:43:52:19:6a:5c:71:14:6a:22:d4:77:8b:
                    49:62:6e:0c:1f:3a:7b:ef:af:60:9a:a1:2a:9e:07:
                    d6:5a:7f:7e:22:41:18:98:8d:3b:86:96:01:e6:d5:
                    24:5e:1b:6c:59:cf:97:8b:59:d0:af:4e:4a:c7:7b:
                    9e:de:8c:59:59:ff:7f:ba:d6:62:54:34:f9:5f:c3:
                    43:93:91:d9:e2:9b:03:bc:ec:9f:3d:13:43:6b:45:
                    ca:5e:de:8a:ac:ae:44:af:e0:b7:a2:e9:37:23:88:
                    f0:0e:2f:64:4d:4e:3b:76:26:7a:3e:e7:b6:b3:90:
                    44:1b:5f:13:6f:98:07:85:c9:1f:70:e1:f2:32:6e:
                    5c:f1:96:34:60:75:b2:44:dd:fc:2f:b3:7f:dd:14:
                    49:2b:39:6b:85:48:ff:2b:be:53:e1:b5:4b:f4:42:
                    47:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:06:91:F5:38:DD:19:FA:AF:A2:61:61:70:89:74:AC:28:55:EA:3C
            X509v3 Authority Key Identifier:
                keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:8c:84:97:e0:90:dd:3c:41:4e:20:4d:44:ff:f8:8e:5b:8b:
         dc:1d:69:c9:fc:2f:07:28:e8:a8:67:0c:41:29:3f:d1:0a:5b:
         0c:52:34:1c:7e:97:14:ec:09:10:9f:b6:39:cc:85:bd:6e:ee:
         47:79:82:32:fb:15:4c:52:3d:8d:5b:3c:dd:22:91:4f:5f:78:
         9a:49:a2:b1:0c:e1:20:9c:ff:af:e5:c4:12:94:6f:ce:8b:72:
         9f:52:65:63:ed:68:0d:03:ba:48:d0:8a:ce:8d:d7:a2:e4:a9:
         62:33:92:49:94:d1:ac:0b:c8:68:58:78:00:e1:a1:c0:41:f6:
         2b:63:49:c8:a5:8d:df:40:7d:be:13:7b:1c:95:c0:ad:a2:2f:
         14:8f:89:74:40:c2:50:b7:c0:41:64:f0:b5:76:b4:be:0a:79:
         e0:5a:39:86:cd:84:9a:3f:a5:85:07:1a:5d:1c:e3:be:15:2f:
         3a:30:3e:bc:21:89:8a:ae:2b:7a:71:2d:e5:56:93:e8:e4:23:
         cd:89:43:22:60:3d:af:8b:b3:63:fb:41:77:11:ba:0d:e3:3c:
         93:28:bf:2c:86:74:2f:a5:30:3f:63:29:5d:c7:bd:3b:70:5f:
         fa:3b:ea:32:86:96:11:ca:53:24:89:86:1d:20:27:4c:91:57:
         c0:63:87:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7TbG80Gio3bn3byWAN+hvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliN2QyNDQxNmFhOGE0NzhiM2VkMzZlMmU2NTg1NWQ0MjI1
OWQ5ZWUwHhcNMjYxMDI3MDMwMDUxWhcNMjYxMDI4MDMwMDUxWjAzMTEwLwYDVQQD
EygzOTA2OTFmNTM4ZGQxOWZhYWZhMjYxNjE3MDg5NzRhYzI4NTVlYTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQpbhCA5xVRDYZwf22ZfAHuUgVVt
LIEdZ7eTLxODhv17wPIPd2iKvFhZefhkZob0aWs0ZQyRHn285SyTurTzfNIGmCD5
2bA6XiKdJk//Fk4aLDBENusH1CKmoTlDUhlqXHEUaiLUd4tJYm4MHzp7769gmqEq
ngfWWn9+IkEYmI07hpYB5tUkXhtsWc+Xi1nQr05Kx3ue3oxZWf9/utZiVDT5X8ND
k5HZ4psDvOyfPRNDa0XKXt6KrK5Er+C3ouk3I4jwDi9kTU47diZ6Pue2s5BEG18T
b5gHhckfcOHyMm5c8ZY0YHWyRN38L7N/3RRJKzlrhUj/K75T4bVL9EJHWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkGkfU43Rn6r6JhYXCJdKwoVeo8MB8GA1UdIwQY
MBaAFJt9JEFqqKR4s+024uZYVdQiWdnuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYjhmMmEtMGFiZC00ZmZiLTgyZjYt
ZWYzYmJiMDU2NTVlLzEvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYjhmMmEtMGFiZC00ZmZiLTgyZjYtZWYzYmJiMDU2NTVl
LzEvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4yEl+CQ
3TxBTiBNRP/4jluL3B1pyfwvByjoqGcMQSk/0QpbDFI0HH6XFOwJEJ+2OcyFvW7u
R3mCMvsVTFI9jVs83SKRT194mkmisQzhIJz/r+XEEpRvzotyn1JlY+1oDQO6SNCK
zo3XouSpYjOSSZTRrAvIaFh4AOGhwEH2K2NJyKWN30B9vhN7HJXAraIvFI+JdEDC
ULfAQWTwtXa0vgp54Fo5hs2Emj+lhQcaXRzjvhUvOjA+vCGJiq4renEt5VaT6OQj
zYlDImA9r4uzY/tBdxG6DeM8kyi/LIZ0L6UwP2MpXce9O3Bf+jvqMoaWEcpTJImG
HSAnTJFXwGOHbQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:14:00 2026 by rpki-client