Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
File:                     5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json)
Hash identifier:          iVGYBzFZIAyTOav/bSFosrBBo3rbZYNGrV8qtDn/Qpw=
Subject key identifier:   FB:36:06:16:0D:73:7D:E5:79:05:1B:11:80:C7:84:B1:A9:D5:99:08
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Certificate issuer:       /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial:       01A18C0A9A70170198DE08A6950159751DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
Manifest number:          1AFC
Signing time:             Fri 30 Oct 2026 09:01:07 +0000
Manifest this update:     Fri 30 Oct 2026 09:01:07 +0000
Manifest next update:     Sat 31 Oct 2026 09:01:07 +0000
Files and hashes:         1: 1MlSIVekR7nJOhytdlMR4jKtR-0.roa (hash: Fp4zpsgtHGLmZbR0hKTXyDrZzEqlceg8ruA+2JYmVfM=)
                          2: 1Xv1ZT3Ka3Pl-sig-kxHu9QPm4A.roa (hash: yCVw68UmAC47CHqpmFupYHC9ZxaKhStlflix7eTg3Ug=)
                          3: 1utoEShH5AmTt79y1zx-Gta_IU4.roa (hash: ORpna8ZAvXV8ys2iYurxCqgk2LCtS/yxIeHlBJ5A+tA=)
                          4: 1y7xTrL6Zi63EaoYq9pgRa2ZmlQ.roa (hash: x6v+XwxnZ+9V385BiBIu0MPWBYFFND0ofcUwqGHURxo=)
                          5: 3ASjA1q8ARIV2ZYv3dMNfit6u3I.roa (hash: 7NA9a/ZKJFAsJurJjGE4qQlN7WKcef8AvmYKofmxtdA=)
                          6: 3wThh6CKhn_ncQErP2xOaMw46vM.roa (hash: U/vQzD8zfdM0QCfGbqv0YkKIdI6EBacCC74VpNhb6LI=)
                          7: 4krczbw6OIfHLsE4rx_N8Co4yOw.roa (hash: zxKlKv1GZqpmDDrZvXoufwn7GqO5TPnVqQ8ZVbSEX/k=)
                          8: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: xkI67o2TcAhOTICz1CqXIRxZhWQwIQFpMOp8kstiqdQ=)
                          9: ADSCFOnjMJLAi_8BKddA7FSJKFo.roa (hash: YTUiHXsQfmeuHGdgWhbD4DOLIxz6/HL1IPSKvOV9r04=)
                          10: CI_IbIiOr7bX2nxFp9oik4WuQKw.roa (hash: LoeO3X2rVxLRDsyO+eMBMVv3AZSWcHWTpYLzyG6GgFI=)
                          11: EZHW40mMXzLh-R95XQXWSQ1xGew.roa (hash: jXC+C5PX+oNmQCB4dM1aptKPPNjJmtw5ieXSimbQjw4=)
                          12: F1wz9gMaUrDGSj5_Bql1AKzFVxU.roa (hash: q6zbBfs586JaMimNp5Bcw/8qOnIIxp8Jrco5OLAUgAE=)
                          13: GnjgrlX5ldq-8V0xMtEgsEXb8K0.roa (hash: 7TO2wIfe9IgC+RH76SDWjU1AztJO8iq77EyqtjbsQmw=)
                          14: GzMKu8jXjKBUVxDX-5sQgFMQgJs.roa (hash: 0LE/1Wb9HCROg7521ihQ2bGsxl+ElnIJTcDjDH1Uxqs=)
                          15: H_ZbE32xD4Jhfd7d_Lm5fnPovzM.roa (hash: aZ9uNmSOhcQkLqZFW9owTasfsuaMVCH5Cmg+PDELd3k=)
                          16: Ho6mNf_9Z2hzoXQrFFuu_J0WfRM.roa (hash: Oprieq0BOhCbckP7sqbHtzOf/Mysy62W8N4pVZm/UiU=)
                          17: JkmCJQaQoD31a9G80M07RYcqWDc.roa (hash: X8PYnSV1Z/bxPAeWp4ISqBsTtAcgEKcf3dQRI9yc2BI=)
                          18: K6IhTrUZclyMeBVpYLNDvb8TUbg.roa (hash: 72NmOOFBeGJuzIR1SE1cUuWu7D88rU3xoreFGRYXduw=)
                          19: KS0FVLSMGfWzQdYtQuL8y-oJdD0.roa (hash: bFjxw1lHEJZaqaMp+L6ugQRb5WaLfdFW4jxueW8cRcA=)
                          20: PMREMuAIkutRBjiqDqASxjeYw9A.roa (hash: DQwEv2T49rS4AdXgNlBrZxtMU/AO7NKgBezim3eUTbA=)
                          21: Qfk4KZDN_NVec0Fh5jidYk7fEsM.roa (hash: WIiLwWhQcJYVRWRpVwBUqqxiCRvroZi4xvJ2AYsOSJo=)
                          22: QqOV1t_rvWgp7d8XnXyjaPwjar8.roa (hash: tOqX3TdeefdEULHlf/6xKuTSxXbTQGcNvDfPoledb9E=)
                          23: UESPvkGn40lC_qnNZUih916lSYA.roa (hash: wn/Z//Pr0RHYOOOY6bI6NqL/aVXg8hzJxv1NUOW+0pY=)
                          24: WQgnD-JktijZnRhzkWWmxreQGms.roa (hash: bt7fHkMyPJ2bu7raN/9QpGM2Pefyuc7nqym8N0GRFqM=)
                          25: XnhnoeUHsuoR4mhcctsEjt9lvMg.roa (hash: /V0gM4qnoLR414oEzXK8LbL+H5gHt5BmuPHE3nwesY8=)
                          26: a6YPy8t2smPnddF-vAybhOouYkI.roa (hash: 2VTnHbp49NXPzMqgsIFYWCQ+9Ms6/ReLgmJTyeo9QTM=)
                          27: bBMC-Jl9ZMdEMbHiKoX6e8xbdGQ.roa (hash: FZlvu/V5G6Rj6/p4659ddbcuZLsyU/qT6XCVQg1Pc8U=)
                          28: bv5xG98RESJXrwU1xeck7PUBsio.roa (hash: 8309DITknQ+X1sMxvcKqt7keYSOvkVj+qcP2H19wns8=)
                          29: cWC-89CZxEOg7JihRqIYLNl3BdM.roa (hash: RhOP1Hck0E/C3tHN4Cpm5lDskts0RUG2y3go+ErpaZY=)
                          30: gC3rqU1DQllcWWxpBdLFhPfJBRY.roa (hash: GquGRvoP/5ANJWdn0l9uPSHphibPvx3UXVQbIIbaOLU=)
                          31: gzIiWHGRR93M4EeKSxyFElEnzfQ.roa (hash: P6od455G5jZ5lUgI4sqFMNPmAnYBu1OSIcRyPwUOGuY=)
                          32: lc0dVVVdgP6dbN1j-pjMe8nv0pM.roa (hash: gEI4FyTD9TDkg7+cDFUctYOLiTWfZ9Ph9u6WJ4ZseHE=)
                          33: pJSN_0UYP55mnYa8i9az-116_xU.roa (hash: ooW2IQf7TB4yeIzuJ+xNye0+a25s9T8MsooWPksXqB0=)
                          34: r_8AqLDA0TKw-_hS4D2cAROProQ.roa (hash: em2qIv+1gRgI1PfQzZQhQrikSZsQfh7/5J5HzcXSfpU=)
                          35: sPKozshk0dw84yWnLecAcY4Jsz0.roa (hash: CVBUXh81vA8yv2uJ0Pq3RtuahHuKnl7ugAr2hYXTx7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8c:0a:9a:70:17:01:98:de:08:a6:95:01:59:75:1d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
        Validity
            Not Before: Oct 30 09:01:07 2026 GMT
            Not After : Oct 31 09:01:07 2026 GMT
        Subject: CN=fb3606160d737de579051b1180c784b1a9d59908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:56:4b:3a:93:07:9a:c7:d8:a5:f3:23:7a:0b:
                    65:6a:57:13:53:3d:1a:20:81:96:2f:c2:95:fd:b9:
                    d6:26:c7:75:81:0d:48:57:29:32:f7:b3:c6:b6:c2:
                    2d:26:4d:60:29:17:aa:e8:ef:20:21:28:d8:83:52:
                    73:93:b6:15:4a:74:6c:aa:dc:3c:d6:75:62:1f:a9:
                    e5:36:26:d0:59:88:ce:78:2e:fe:73:07:ac:91:39:
                    bd:85:7c:a9:92:c5:8e:46:c5:54:fe:91:8f:8b:72:
                    e1:42:61:42:31:29:44:7e:50:28:3f:4e:c6:a0:1a:
                    d3:4b:bf:91:a5:5f:4f:f6:65:76:62:71:22:00:e0:
                    90:3a:36:4c:e9:31:f2:c3:60:d0:c1:fa:e5:40:21:
                    2b:e6:02:7f:44:26:f2:b4:3c:cc:9e:9d:d7:79:58:
                    79:d9:45:51:db:36:78:b4:74:9a:3f:7f:bb:f6:1c:
                    cc:48:9f:ad:42:ba:f1:95:76:02:9e:e8:92:f2:17:
                    cb:98:7c:83:36:e3:16:7a:f8:48:cd:41:ca:af:44:
                    1d:43:09:83:1d:86:4d:95:2c:a8:93:ce:ce:7d:a0:
                    35:e2:39:ce:0c:11:52:63:44:94:6c:ed:d3:e5:b7:
                    c3:0d:9a:91:4d:57:cc:7d:70:3d:d1:33:af:f2:74:
                    2b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:36:06:16:0D:73:7D:E5:79:05:1B:11:80:C7:84:B1:A9:D5:99:08
            X509v3 Authority Key Identifier:
                keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:8d:96:53:a0:1d:f8:cc:f2:73:f5:f0:21:ab:58:45:e1:3b:
         ae:36:9a:d6:94:36:96:d2:9d:7e:24:0a:a5:83:13:f4:d1:8c:
         f9:2b:41:8a:7a:fc:c9:31:4c:ee:2f:4f:a5:9e:bd:26:9d:0a:
         43:7d:3e:de:f1:c0:fd:4d:41:64:ca:04:92:6b:a7:43:28:44:
         2e:6a:54:1f:fc:39:21:31:1b:58:ef:26:c0:eb:6a:0a:e2:97:
         e1:83:56:f9:fd:e4:a3:0c:6f:0b:0b:29:bd:86:3f:a6:b9:1a:
         0a:3f:a8:87:f1:8c:39:96:e6:a7:4d:ad:99:fe:31:c8:c6:42:
         4b:96:31:d2:2e:fd:2f:c9:14:99:b0:ab:e8:b5:0d:12:6a:e6:
         19:6e:45:b3:5a:2f:f4:a0:d5:34:62:da:8c:4b:07:54:55:c9:
         9b:05:97:f7:64:f0:74:08:47:08:d1:36:c0:f5:75:8a:36:5d:
         a6:61:a9:7d:d5:92:6e:bd:01:52:ef:b0:6f:1d:43:02:74:a7:
         53:1c:7c:84:02:52:e7:4d:81:a8:02:53:ac:37:dc:92:b7:1a:
         bb:41:5d:1e:6d:d2:04:62:97:58:f0:0b:c7:11:f3:f1:9e:fd:
         e6:55:45:73:ca:62:31:c9:52:6b:72:09:99:13:07:06:a5:84:
         01:3a:2e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 13:30:40 2026 by rpki-client