Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
File:                     t1OsA5RSieGGvylzeyVhjTzNRDA.mft (raw, json)
Hash identifier:          aILDUOeiJ3ZN2iPcFbwcSA2ufiUfiJNYwr29x7LlQp4=
Subject key identifier:   9A:E3:56:E4:81:89:18:AD:78:58:45:08:6D:74:DD:E6:0C:7B:9F:1B
Authority key identifier: B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30
Certificate issuer:       /CN=b753ac03945289e186bf29737b25618d3ccd4430
Certificate serial:       01A168A2324A5208B1D91EA5D253B8F8A747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
Manifest number:          0134
Signing time:             Fri 23 Oct 2026 12:00:22 +0000
Manifest this update:     Fri 23 Oct 2026 12:00:22 +0000
Manifest next update:     Sat 24 Oct 2026 12:00:22 +0000
Files and hashes:         1: 1-5yL_Q-nYPf2CLV3tjpWzClJnPw.roa (hash: k8H40R+fMFH7wBdsLB91Y9l2eozFqsIfXqragAiM93E=)
                          2: ea_Ab_KVnKlMEbYPrAJZWmJhhsc.roa (hash: 6cSn8uzwyUxMJNcnfAeGMw+pCS/UoUALDhF7qixnWRg=)
                          3: fPtQuFsuVeGkMlwHU_sA5LSJu_E.roa (hash: WDhKtqp/PbP0mGK261CVF4VxFxH7CTo0soaxOvLBySA=)
                          4: t1OsA5RSieGGvylzeyVhjTzNRDA.crl (hash: Pv7R2+3kPyT0q+V6gIFneeyx8NVeLTaYk18iIROa7JU=)
                          5: tr8FATLSUssLeZoYd6_aJnbXdq8.roa (hash: 7GIhmLkuSFB1irvbk3E504lE/D2UrFS2bjn5VxfkzOQ=)
                          6: wrNDqIGL46GbPFlLV3ftdAx_UK4.roa (hash: 5QK1F45BImfUqKNV131htGF5A+1+6XK2Skgx/nv8vZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 11:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:68:a2:32:4a:52:08:b1:d9:1e:a5:d2:53:b8:f8:a7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b753ac03945289e186bf29737b25618d3ccd4430
        Validity
            Not Before: Oct 23 12:00:22 2026 GMT
            Not After : Oct 24 12:00:22 2026 GMT
        Subject: CN=9ae356e4818918ad785845086d74dde60c7b9f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:b5:7a:06:28:00:28:71:17:87:81:cc:33:
                    70:6c:af:55:91:ec:33:9a:42:05:93:be:31:e9:e2:
                    4d:e6:1a:ad:37:4c:8c:b6:cc:39:9d:05:77:c4:12:
                    22:82:ef:7c:38:89:d1:70:90:cb:79:86:3d:b3:6c:
                    ee:26:57:51:c0:38:a5:96:ee:30:c2:4c:16:ac:fb:
                    df:a5:69:94:7b:10:2b:5a:80:5f:9c:0b:af:0c:97:
                    52:41:d5:a8:b8:e3:66:be:bf:7d:17:b3:e7:a6:9d:
                    68:1c:0c:72:b1:c2:2c:ee:61:df:22:74:2b:1f:14:
                    f4:9a:10:35:f9:ff:89:35:32:11:8f:80:03:10:f2:
                    3b:dd:86:dd:fe:b2:ba:5b:8f:c0:8c:2e:a0:74:71:
                    7b:20:01:14:61:3a:d7:15:81:78:38:4c:74:0a:c7:
                    13:a4:9a:f9:f5:81:ca:01:06:68:7f:a1:ec:60:d9:
                    54:54:7d:2a:db:d2:d0:0d:25:9a:1c:c5:c7:ec:d5:
                    c8:0f:fd:6f:aa:6e:00:e2:82:91:e4:f3:3f:e2:50:
                    01:98:0e:08:cd:87:44:ce:b9:5f:33:16:22:14:cb:
                    e8:5f:ab:50:77:fd:29:53:09:6b:a2:83:80:e1:08:
                    e6:54:42:b2:97:34:f7:1f:7a:cf:bd:19:fc:68:b3:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E3:56:E4:81:89:18:AD:78:58:45:08:6D:74:DD:E6:0C:7B:9F:1B
            X509v3 Authority Key Identifier:
                keyid:B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:85:1b:05:a5:13:2f:c9:03:30:92:4f:92:a5:86:e4:75:d9:
         a5:ca:9a:8f:5d:32:de:40:bd:d2:53:5e:33:11:df:0d:41:c6:
         34:7b:ad:18:f3:dc:85:e1:ba:0d:46:5d:41:16:5b:de:22:03:
         14:13:6a:65:87:43:9b:68:41:09:47:4e:ce:02:e6:61:04:a1:
         c1:0b:f0:f4:1c:9a:8c:d9:79:ee:9b:05:34:7f:fb:33:02:e8:
         c2:93:5a:43:74:bc:a6:10:37:49:bc:94:cc:40:7a:da:f5:14:
         f5:6e:cd:f1:a8:e8:43:dc:7f:1d:5e:7e:45:da:bf:f1:33:05:
         a9:8f:18:22:33:3a:62:9c:87:87:83:77:37:7d:d4:06:72:1f:
         0c:f5:a7:1f:6f:e5:0f:1b:0a:4a:b5:73:45:47:1a:a6:c7:42:
         44:5d:b6:ff:d1:ff:9a:0e:71:b3:bb:a6:6a:89:0f:d8:71:5e:
         91:13:80:bd:09:7e:2f:68:07:99:96:de:fa:b9:6c:53:8f:61:
         7a:52:8a:8d:ac:c2:02:23:68:56:cc:bd:f5:2e:e3:3c:bc:61:
         ac:10:e2:a6:f8:d4:bf:e6:cf:5e:ed:e7:4e:3e:43:3b:20:c6:
         68:9a:2b:83:0c:c7:cd:72:a5:25:0a:f2:2d:04:5a:5b:fa:87:
         0e:7c:a7:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFoojJKUgix2R6l0lO4+KdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NTNhYzAzOTQ1Mjg5ZTE4NmJmMjk3MzdiMjU2MThkM2Nj
ZDQ0MzAwHhcNMjYxMDIzMTIwMDIyWhcNMjYxMDI0MTIwMDIyWjAzMTEwLwYDVQQD
Eyg5YWUzNTZlNDgxODkxOGFkNzg1ODQ1MDg2ZDc0ZGRlNjBjN2I5ZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOG1egYoAChxF4eBzDNwbK9Vkewz
mkIFk74x6eJN5hqtN0yMtsw5nQV3xBIigu98OInRcJDLeYY9s2zuJldRwDillu4w
wkwWrPvfpWmUexArWoBfnAuvDJdSQdWouONmvr99F7Pnpp1oHAxyscIs7mHfInQr
HxT0mhA1+f+JNTIRj4ADEPI73Ybd/rK6W4/AjC6gdHF7IAEUYTrXFYF4OEx0CscT
pJr59YHKAQZof6HsYNlUVH0q29LQDSWaHMXH7NXID/1vqm4A4oKR5PM/4lABmA4I
zYdEzrlfMxYiFMvoX6tQd/0pUwlrooOA4QjmVEKylzT3H3rPvRn8aLN11wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrjVuSBiRiteFhFCG103eYMe58bMB8GA1UdIwQY
MBaAFLdTrAOUUonhhr8pc3slYY08zUQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFPc0E1UlNpZUdHdnlsemV5VmhqVHpOUkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEvdDFPc0E1UlNpZUdHdnlsemV5VmhqVHpOUkRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvdDFPc0E1UlNpZUdHdnlsemV5VmhqVHpOUkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYUbBaUT
L8kDMJJPkqWG5HXZpcqaj10y3kC90lNeMxHfDUHGNHutGPPcheG6DUZdQRZb3iID
FBNqZYdDm2hBCUdOzgLmYQShwQvw9ByajNl57psFNH/7MwLowpNaQ3S8phA3SbyU
zEB62vUU9W7N8ajoQ9x/HV5+Rdq/8TMFqY8YIjM6YpyHh4N3N33UBnIfDPWnH2/l
DxsKSrVzRUcapsdCRF22/9H/mg5xs7umaokP2HFekROAvQl+L2gHmZbe+rlsU49h
elKKjazCAiNoVsy99S7jPLxhrBDipvjUv+bPXu3nTj5DOyDGaJorgwzHzXKlJQry
LQRaW/qHDnynAA==
-----END CERTIFICATE-----
Generated at Fri Oct 23 18:32:06 2026 by rpki-client