Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
File:                     cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json)
Hash identifier:          l6sByzpwKRw7udXWFez114dsIUhfmm8IrLvL3rMp8HY=
Subject key identifier:   94:BA:0F:9E:AA:C5:D7:03:E2:D2:58:75:86:7C:AE:D0:49:F8:09:47
Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
Certificate issuer:       /CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Certificate serial:       01A1803DD9427CAEE683FECA3652DE8D9CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
Manifest number:          07C0
Signing time:             Wed 28 Oct 2026 02:01:39 +0000
Manifest this update:     Wed 28 Oct 2026 02:01:39 +0000
Manifest next update:     Thu 29 Oct 2026 02:01:39 +0000
Files and hashes:         1: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: Tw4skc0B0FX+HqW4kdGkBZ/o+Cf0WhBtJyTuzgcaZ6M=)
                          2: eUWfxWghJ9MEZ7tCGolfI7KpscU.roa (hash: NcF9IeGtFM+4GMOYjdME6cxPWgCCMAdO701188d5CSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:3d:d9:42:7c:ae:e6:83:fe:ca:36:52:de:8d:9c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef
        Validity
            Not Before: Oct 28 02:01:39 2026 GMT
            Not After : Oct 29 02:01:39 2026 GMT
        Subject: CN=94ba0f9eaac5d703e2d25875867caed049f80947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d5:ad:6a:13:80:ce:e2:fd:9c:87:ea:73:06:
                    9e:2a:b3:10:5e:47:85:3d:42:8c:38:b3:c9:03:d8:
                    71:70:59:25:0d:98:5d:5a:14:21:a3:02:5c:e4:57:
                    4a:80:25:3d:e7:87:97:d1:45:b0:df:96:ff:29:28:
                    58:5a:23:b8:d8:50:84:82:a8:ca:67:20:5f:a6:a5:
                    70:03:c7:ce:b4:38:a3:76:4c:a3:d2:62:41:b3:fb:
                    49:5c:a0:59:a6:0f:69:bd:92:0b:38:47:d1:de:b9:
                    5f:44:c0:3d:2f:4d:b6:91:d2:a6:42:ca:1b:41:88:
                    a2:4e:dd:29:e6:86:d4:b2:67:ab:04:a3:1f:d3:fb:
                    f7:42:fd:43:12:e3:e9:07:1b:67:1e:eb:ea:4f:e2:
                    fd:11:ed:a4:23:75:98:8b:1a:a3:fd:66:04:2c:45:
                    c1:46:4b:1e:1c:1c:a0:11:be:97:b5:f9:c6:48:ca:
                    0f:ea:da:3e:50:5a:36:3f:22:b3:27:98:16:ab:73:
                    15:60:d6:6b:e2:7b:1e:00:83:96:81:52:36:8f:aa:
                    e5:34:20:6e:4f:05:17:bc:b6:2d:26:08:55:de:b1:
                    5e:a8:f6:b5:27:81:dd:62:92:9e:2a:6e:f4:f2:4e:
                    d4:72:16:c0:2c:72:c0:69:84:0c:10:51:ba:72:1f:
                    a0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BA:0F:9E:AA:C5:D7:03:E2:D2:58:75:86:7C:AE:D0:49:F8:09:47
            X509v3 Authority Key Identifier:
                keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e5:52:90:2a:0c:bf:f8:38:29:b4:84:4c:04:6c:b4:6f:aa:
         89:6e:be:03:05:d0:1e:28:89:90:ee:f0:6e:eb:08:b1:b3:77:
         fe:c8:05:dd:6d:d6:b3:df:90:15:ce:e5:e1:9d:5d:90:3a:02:
         b8:35:19:0c:e6:e3:c8:7c:64:77:2f:19:c9:19:eb:42:2c:c5:
         86:a3:c9:dd:52:6d:48:d5:0e:41:e8:a0:0c:fb:bc:7a:67:53:
         ba:a5:63:a6:56:05:06:27:0c:17:e1:20:a2:19:ae:26:20:92:
         73:42:6d:d3:ce:d6:4a:69:73:ac:4a:12:be:ec:d2:05:0d:91:
         21:0d:3b:1d:e1:d9:67:2d:36:a1:b4:ca:e7:f4:45:21:7e:a7:
         2a:d2:54:37:84:19:27:01:3c:b7:d2:04:e3:ed:95:e2:d0:96:
         52:9d:c4:9a:10:ee:1d:c7:ed:d6:14:5d:14:b0:e8:49:9e:f4:
         d1:53:c3:7e:82:28:82:3b:cd:ce:a5:fd:27:d7:18:05:72:40:
         cc:0a:fe:66:ce:8c:39:b5:89:16:96:52:d8:23:83:1a:34:69:
         45:9e:b3:19:90:13:f1:57:9b:12:94:da:b7:58:21:be:22:f9:
         ee:3b:25:af:d3:22:07:b9:d2:2d:5c:c9:55:47:5b:8e:18:4e:
         ba:14:2b:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAPdlCfK7mg/7KNlLejZzfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjRkNjA2ZTFkMTc5MDgwNjM5NzdiNjk4Nzc2ODJlZDdl
MmQxZWYwHhcNMjYxMDI4MDIwMTM5WhcNMjYxMDI5MDIwMTM5WjAzMTEwLwYDVQQD
Eyg5NGJhMGY5ZWFhYzVkNzAzZTJkMjU4NzU4NjdjYWVkMDQ5ZjgwOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNWtahOAzuL9nIfqcwaeKrMQXkeF
PUKMOLPJA9hxcFklDZhdWhQhowJc5FdKgCU954eX0UWw35b/KShYWiO42FCEgqjK
ZyBfpqVwA8fOtDijdkyj0mJBs/tJXKBZpg9pvZILOEfR3rlfRMA9L022kdKmQsob
QYiiTt0p5obUsmerBKMf0/v3Qv1DEuPpBxtnHuvqT+L9Ee2kI3WYixqj/WYELEXB
RkseHBygEb6XtfnGSMoP6to+UFo2PyKzJ5gWq3MVYNZr4nseAIOWgVI2j6rlNCBu
TwUXvLYtJghV3rFeqPa1J4HdYpKeKm708k7UchbALHLAaYQMEFG6ch+gJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJS6D56qxdcD4tJYdYZ8rtBJ+AlHMB8GA1UdIwQY
MBaAFHD01gbh0XkIBjl3tph3aC7X4tHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQt
NTc2MzM3ZTUwZGM0LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iMTA4M2QtYzA3OC00MTVlLThkOWQtNTc2MzM3ZTUwZGM0
LzEvY1BUV0J1SFJlUWdHT1hlMm1IZG9MdGZpMGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOVSkCoM
v/g4KbSETARstG+qiW6+AwXQHiiJkO7wbusIsbN3/sgF3W3Ws9+QFc7l4Z1dkDoC
uDUZDObjyHxkdy8ZyRnrQizFhqPJ3VJtSNUOQeigDPu8emdTuqVjplYFBicMF+Eg
ohmuJiCSc0Jt087WSmlzrEoSvuzSBQ2RIQ07HeHZZy02obTK5/RFIX6nKtJUN4QZ
JwE8t9IE4+2V4tCWUp3EmhDuHcft1hRdFLDoSZ700VPDfoIogjvNzqX9J9cYBXJA
zAr+Zs6MObWJFpZS2CODGjRpRZ6zGZAT8VebEpTat1ghviL57jslr9MiB7nSLVzJ
VUdbjhhOuhQrkQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:15:11 2026 by rpki-client