Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File:                     1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier:          rgoOYlG5ZV+y27cyYJU1hg8dHAF/JdwOYHmCyvhzpQg=
Subject key identifier:   79:33:DA:25:DF:BA:7C:E5:45:AF:EA:13:43:78:B0:88:70:5B:43:05
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer:       /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial:       01A17DE0DC9CE57F8B2988770143AC71B8EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number:          1B06
Signing time:             Tue 27 Oct 2026 15:00:50 +0000
Manifest this update:     Tue 27 Oct 2026 15:00:50 +0000
Manifest next update:     Wed 28 Oct 2026 15:00:50 +0000
Files and hashes:         1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: 3Wx2dkmDW084PNJxWnPZCk+0bTjcC+v9jIu0xhzwQ0E=)
                          2: 78k7N29pgqqBt_7SArx8W7gvbtY.roa (hash: HchXuuENBfMJOEemaKoErz+AVozHGh2qeMU61xXBJBo=)
                          3: 9DQTs2wKqScndspLuFL690S9C10.roa (hash: srpl4qi7sPv0BZnzMRCi4rqUA6OuywpyeD8PiEQVVPo=)
                          4: nQgCkrjx2Vuyv6XU6Z1X_xyDR2c.roa (hash: KrRY9bn7xQ6+HYYd/c9njJzJQr8DpPXzGZe5ZanhC8s=)
                          5: r3EiLYHevbO0Th1WEvhzW1gW05s.roa (hash: 003jzFHjDPB1TeNPUDTQBfy40dYt4zSE44vlLncCqQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:e0:dc:9c:e5:7f:8b:29:88:77:01:43:ac:71:b8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
        Validity
            Not Before: Oct 27 15:00:50 2026 GMT
            Not After : Oct 28 15:00:50 2026 GMT
        Subject: CN=7933da25dfba7ce545afea134378b088705b4305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:d4:f8:bd:64:eb:78:da:55:12:f5:2f:47:
                    fd:c2:d3:d6:ad:9c:63:41:47:d4:39:79:90:3e:69:
                    c5:02:29:4c:87:ed:29:11:57:6e:be:a9:1b:b0:94:
                    4c:ce:2b:ee:dd:bd:6f:d2:f2:9b:9b:92:eb:10:76:
                    ea:c5:a8:d7:1e:7a:e8:ae:4a:c1:25:12:69:60:45:
                    19:c0:f8:90:6e:d7:7e:fa:c7:74:61:f0:02:bb:21:
                    91:be:de:e8:7c:9f:dc:00:6b:9a:46:e9:f4:3e:8c:
                    97:2c:64:2b:c0:00:00:42:2a:82:ea:06:96:73:82:
                    21:bf:73:3c:ad:67:97:bf:1f:dd:85:fc:d2:45:3b:
                    ca:d7:c8:c8:dc:31:4f:ab:b4:70:f2:3a:cd:2e:8c:
                    45:f4:ac:21:0b:4b:2c:ea:7f:ca:97:f5:54:8a:49:
                    db:95:a5:7a:e5:7a:0e:4a:5b:24:3d:19:7d:fa:64:
                    d0:15:dc:bc:cd:3e:7c:6b:d7:9c:c8:6c:4c:50:26:
                    06:02:5f:6e:72:a0:09:e3:b4:94:d4:c7:1c:e3:e2:
                    85:b0:f2:e9:75:ba:ea:9f:f4:4d:d9:21:5a:1d:35:
                    7c:7c:81:24:a3:ca:57:43:42:37:90:9b:67:23:3b:
                    d6:00:20:66:10:df:69:9f:8f:23:71:92:a4:22:c3:
                    b2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:33:DA:25:DF:BA:7C:E5:45:AF:EA:13:43:78:B0:88:70:5B:43:05
            X509v3 Authority Key Identifier:
                keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a5:a4:57:1d:4d:e5:8a:3e:f6:02:9d:8c:6d:fc:78:ea:77:
         3c:fe:52:a0:63:62:80:69:75:f2:dc:ab:14:1e:3d:35:a9:72:
         29:50:ed:7c:fa:9f:3b:d1:c7:c1:ab:58:c4:70:d3:29:ef:d9:
         65:b5:23:b9:c5:e2:b8:af:b3:75:06:ce:01:7d:1a:5f:be:37:
         6f:bb:d3:9a:14:d5:7c:ea:44:3f:07:2f:bd:6f:b0:c6:33:d8:
         91:46:1d:cf:13:07:01:b3:be:e4:8e:1a:e0:76:75:9b:c2:3f:
         60:91:e8:4d:e0:d3:10:f8:6e:88:5a:9f:fd:b3:0a:e0:b0:31:
         95:aa:cb:43:78:30:4f:3d:60:77:e5:8b:b1:99:fd:11:da:ae:
         2f:c4:a2:6e:ef:3f:c0:8d:d2:8f:2b:51:48:fa:3c:7d:9e:09:
         76:cf:2d:1f:9d:a4:98:13:5f:91:8b:da:91:96:a2:de:92:62:
         5d:66:2d:1d:c1:41:e8:2e:e8:ba:28:b1:84:6a:a5:6b:21:6a:
         d9:36:0e:e8:23:93:3d:4c:a3:9c:72:23:df:23:ff:bb:c9:c9:
         5f:d8:43:3e:f9:e7:45:14:20:98:38:e5:1b:b9:b6:50:94:99:
         ef:02:6a:be:30:dd:b3:66:91:d4:3d:23:d5:4f:26:01:9d:72:
         1c:9f:d7:49
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaF94Nyc5X+LKYh3AUOscbjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw
MTljMjQwHhcNMjYxMDI3MTUwMDUwWhcNMjYxMDI4MTUwMDUwWjAzMTEwLwYDVQQD
Eyg3OTMzZGEyNWRmYmE3Y2U1NDVhZmVhMTM0Mzc4YjA4ODcwNWI0MzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmnU+L1k63jaVRL1L0f9wtPWrZxj
QUfUOXmQPmnFAilMh+0pEVduvqkbsJRMzivu3b1v0vKbm5LrEHbqxajXHnrorkrB
JRJpYEUZwPiQbtd++sd0YfACuyGRvt7ofJ/cAGuaRun0PoyXLGQrwAAAQiqC6gaW
c4Ihv3M8rWeXvx/dhfzSRTvK18jI3DFPq7Rw8jrNLoxF9KwhC0ss6n/Kl/VUiknb
laV65XoOSlskPRl9+mTQFdy8zT58a9ecyGxMUCYGAl9ucqAJ47SU1Mcc4+KFsPLp
dbrqn/RN2SFaHTV8fIEko8pXQ0I3kJtnIzvWACBmEN9pn48jcZKkIsOygQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHkz2iXfunzlRa/qE0N4sIhwW0MFMB8GA1UdIwQY
MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1
LWQyMTA3MWVmNzM1Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2MzL2FhNjYyOS1kMTQ5LTQxOTctYTMxNS1kMjEwNzFlZjcz
NWIvMS8xLWowTHdSc3Aya1N0VnpCTVA0Vm9od29CbkNRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqWk
Vx1N5Yo+9gKdjG38eOp3PP5SoGNigGl18tyrFB49NalyKVDtfPqfO9HHwatYxHDT
Ke/ZZbUjucXiuK+zdQbOAX0aX743b7vTmhTVfOpEPwcvvW+wxjPYkUYdzxMHAbO+
5I4a4HZ1m8I/YJHoTeDTEPhuiFqf/bMK4LAxlarLQ3gwTz1gd+WLsZn9EdquL8Si
bu8/wI3SjytRSPo8fZ4Jds8tH52kmBNfkYvakZai3pJiXWYtHcFB6C7ouiixhGql
ayFq2TYO6COTPUyjnHIj3yP/u8nJX9hDPvnnRRQgmDjlG7m2UJSZ7wJqvjDds2aR
1D0j1U8mAZ1yHJ/XSQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:38:08 2026 by rpki-client