Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File:                     d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier:          EjNltCfRGbEGEnKuKsJM6wNfMx7nNFSaYmFOmCgP60M=
Subject key identifier:   75:5C:17:EE:2A:51:33:EA:68:B4:B4:B7:6F:96:B3:F8:14:80:53:27
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer:       /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial:       01A17E4F87806C421EDCE980E32893703A0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number:          1AC8
Signing time:             Tue 27 Oct 2026 17:01:43 +0000
Manifest this update:     Tue 27 Oct 2026 17:01:43 +0000
Manifest next update:     Wed 28 Oct 2026 17:01:43 +0000
Files and hashes:         1: 8q11ZXlsuNY-5BnKL-DZjg8yXCc.roa (hash: ouWFvShqIiSVhc7XwLMg1RvjjhIXPIC2TEXQAFnoIdY=)
                          2: NWmG-3ib3K9ny2X2v2uTxM0DQqA.roa (hash: CGIiGH/Yy5fY3u/pl6DzCecfrnnhokhuxjI5pup6gIw=)
                          3: W0KBm5HEcFXtVXifacsZfmIqvhY.roa (hash: W8Izm3ucgflTtw/kXP/v/wyRWH1PXzlBhUPfbe4tfxo=)
                          4: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: pVAnxraZUdbt0l6Hx8/zNFwnRwqLI/Hb/7ovNk3j0pU=)
                          5: hFwOd0_YEOVcJRwShM4Rz_JX8w4.roa (hash: 2ZVK7MUTm4O+cKvEyp+XBJuaZn8IX75XJYPFZQbyyqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 17:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:4f:87:80:6c:42:1e:dc:e9:80:e3:28:93:70:3a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
        Validity
            Not Before: Oct 27 17:01:43 2026 GMT
            Not After : Oct 28 17:01:43 2026 GMT
        Subject: CN=755c17ee2a5133ea68b4b4b76f96b3f814805327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:3b:a8:44:00:29:91:50:b7:c6:6d:0b:a0:
                    aa:7a:70:91:d3:98:ce:0f:40:b6:d7:3a:10:41:ed:
                    98:64:c3:5b:97:0c:aa:69:58:cf:a0:bb:b4:32:60:
                    f0:ae:a7:52:92:27:3f:ee:ee:27:7f:e5:c3:df:0a:
                    14:7c:1c:b8:e9:e9:11:64:7f:c1:7c:b0:77:9b:05:
                    a7:e0:7f:38:d4:f2:88:71:99:f1:84:5c:03:61:d5:
                    8f:a6:0e:06:d4:c5:9d:59:70:2f:10:c4:96:8d:b2:
                    1c:74:f7:a9:de:fd:ee:fb:06:54:2c:24:1d:06:19:
                    ca:b7:08:09:8e:63:f2:bb:99:4a:7b:62:58:fa:a9:
                    cf:df:4f:aa:0a:b4:8e:ad:2a:6d:5a:cd:4a:1b:3e:
                    fb:89:91:40:87:14:e7:c1:b9:18:fa:36:a9:fb:5f:
                    d4:a4:00:6c:75:c1:21:31:ea:53:e0:de:27:86:57:
                    b2:68:00:c5:05:aa:b6:0d:23:7a:6b:71:4e:0f:bd:
                    4b:da:ad:cf:f7:cd:59:5b:40:c7:2f:32:a3:45:74:
                    b0:9c:af:cc:d3:03:9b:14:96:46:f8:25:98:b8:a9:
                    f7:35:00:36:07:41:2f:ee:45:d5:2f:78:5c:58:11:
                    39:0e:17:78:ca:04:4b:1e:97:8a:c8:80:53:33:cd:
                    7a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5C:17:EE:2A:51:33:EA:68:B4:B4:B7:6F:96:B3:F8:14:80:53:27
            X509v3 Authority Key Identifier:
                keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ae:ea:a0:d0:59:c1:37:f9:2f:0d:37:1a:69:34:ef:50:b3:
         8a:82:c7:b8:46:95:a4:0e:4a:50:f2:1c:6a:b9:19:f8:78:8f:
         d5:b0:8a:b2:1c:1b:97:01:9c:21:b2:bb:30:12:f3:01:2e:46:
         d3:29:6a:21:ab:a1:db:be:74:fe:ff:57:4c:b9:85:76:5e:6e:
         02:3c:0f:eb:c5:4e:d1:46:3e:f3:0f:f0:c5:3d:e0:84:c2:5f:
         3b:69:86:5c:b3:43:d2:01:8f:d5:2d:66:9c:52:5c:0e:87:2c:
         d1:db:75:6e:f8:92:e2:6c:19:b4:59:77:1f:d1:73:47:d7:97:
         66:e0:96:32:2f:0e:07:24:3f:09:25:d8:19:66:d2:3e:75:4c:
         34:1c:fd:f6:e1:fa:b1:4a:34:a6:c7:6b:6a:85:51:6e:49:e8:
         56:8e:ed:69:1b:b4:b9:77:3b:48:cf:2f:dd:34:c2:5d:85:61:
         65:22:cd:78:d2:05:62:0c:05:69:de:e6:00:3a:64:ec:3c:cc:
         f6:51:d3:08:40:8a:96:f0:e6:e8:3e:5b:96:ca:2d:e0:6d:7d:
         69:6e:09:48:6e:5b:3e:cd:f5:9d:b2:4b:f8:83:cd:26:fd:d7:
         11:34:2e:a4:44:ef:30:da:ce:de:1e:37:ef:d2:08:e8:61:5d:
         e9:b1:9d:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+T4eAbEIe3OmA4yiTcDoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NjQwNWUwMjgzNzQzY2Y1MjE4MGQ1YjEzODEyZGZiYTNk
ZWQ3ZmMwHhcNMjYxMDI3MTcwMTQzWhcNMjYxMDI4MTcwMTQzWjAzMTEwLwYDVQQD
Eyg3NTVjMTdlZTJhNTEzM2VhNjhiNGI0Yjc2Zjk2YjNmODE0ODA1MzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5s7qEQAKZFQt8ZtC6CqenCR05jO
D0C21zoQQe2YZMNblwyqaVjPoLu0MmDwrqdSkic/7u4nf+XD3woUfBy46ekRZH/B
fLB3mwWn4H841PKIcZnxhFwDYdWPpg4G1MWdWXAvEMSWjbIcdPep3v3u+wZULCQd
BhnKtwgJjmPyu5lKe2JY+qnP30+qCrSOrSptWs1KGz77iZFAhxTnwbkY+jap+1/U
pABsdcEhMepT4N4nhleyaADFBaq2DSN6a3FOD71L2q3P981ZW0DHLzKjRXSwnK/M
0wObFJZG+CWYuKn3NQA2B0Ev7kXVL3hcWBE5Dhd4ygRLHpeKyIBTM816ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVcF+4qUTPqaLS0t2+Ws/gUgFMnMB8GA1UdIwQY
MBaAFHdkBeAoN0PPUhgNWxOBLfuj3tf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAt
NmNhNTJlMDI5Y2JlLzEvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAtNmNhNTJlMDI5Y2Jl
LzEvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKK7qoNBZ
wTf5Lw03Gmk071CzioLHuEaVpA5KUPIcarkZ+HiP1bCKshwblwGcIbK7MBLzAS5G
0ylqIauh2750/v9XTLmFdl5uAjwP68VO0UY+8w/wxT3ghMJfO2mGXLND0gGP1S1m
nFJcDocs0dt1bviS4mwZtFl3H9FzR9eXZuCWMi8OByQ/CSXYGWbSPnVMNBz99uH6
sUo0psdraoVRbknoVo7taRu0uXc7SM8v3TTCXYVhZSLNeNIFYgwFad7mADpk7DzM
9lHTCECKlvDm6D5blsot4G19aW4JSG5bPs31nbJL+IPNJv3XETQupETvMNrO3h43
79II6GFd6bGdNQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:43:07 2026 by rpki-client