Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
File:                     t2EV0TpYato9nMXfmuA-W6tPTcA.mft (raw, json)
Hash identifier:          Gienpe+EoIX0Gn6uaNAvKuK16/2yu+BVtn4X3faC4/w=
Subject key identifier:   8A:6B:04:66:49:2C:60:58:BD:41:CD:CB:97:E0:FB:2A:67:11:88:B4
Authority key identifier: B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0
Certificate issuer:       /CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
Certificate serial:       01A181F4D04398E0D02BEF45DCDB7D9BFC57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
Manifest number:          13F1
Signing time:             Wed 28 Oct 2026 10:01:07 +0000
Manifest this update:     Wed 28 Oct 2026 10:01:07 +0000
Manifest next update:     Thu 29 Oct 2026 10:01:07 +0000
Files and hashes:         1: GKE_P6fe17v1_7rBDmuRLAX5Pl4.roa (hash: F6Zd9nH7ysAbfcfkp7AJhO8pT+ksKGnjgpJe8bCeZLg=)
                          2: t2EV0TpYato9nMXfmuA-W6tPTcA.crl (hash: 6uiHTqnJmim0wxY3bISPPKhcYB3H8PAWOEXSkrttsGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:f4:d0:43:98:e0:d0:2b:ef:45:dc:db:7d:9b:fc:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76115d13a586ada3d9cc5df9ae03e5bab4f4dc0
        Validity
            Not Before: Oct 28 10:01:07 2026 GMT
            Not After : Oct 29 10:01:07 2026 GMT
        Subject: CN=8a6b0466492c6058bd41cdcb97e0fb2a671188b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e7:d4:bd:9c:e6:af:bf:3a:63:4d:a9:d6:f8:
                    31:fb:08:be:f7:c2:5d:6e:22:23:3a:22:91:2f:01:
                    61:ff:4e:00:05:fc:b6:6d:63:64:ef:76:1a:35:87:
                    48:be:2e:09:51:00:03:12:bd:88:05:d3:59:2a:a0:
                    0c:89:de:85:1e:70:5c:69:03:83:cb:49:a3:c0:b4:
                    2b:14:68:db:1e:67:db:e4:15:83:da:c7:39:6c:a5:
                    65:3a:5b:a4:bd:93:58:5e:c0:71:10:de:19:ce:26:
                    4f:8b:da:d8:25:81:be:3b:a7:7f:d1:ba:08:08:b5:
                    3e:97:12:8c:bc:0a:43:5d:e4:f3:f3:19:90:bd:67:
                    cf:df:29:b7:92:c8:ce:98:ba:a0:c2:00:44:4d:ac:
                    60:ee:78:5f:17:7c:36:5d:e1:cb:7f:3c:2d:f1:b7:
                    75:96:5b:ac:13:29:94:79:7b:42:d3:24:ab:9c:fd:
                    e7:e9:ce:ef:08:e9:a2:c4:74:e3:1a:1b:5d:c5:aa:
                    32:38:74:f6:9a:7c:1f:4a:f4:1c:a4:b7:af:63:cd:
                    5a:30:77:fc:3d:13:49:9b:14:bd:b3:9b:be:d4:18:
                    63:c8:ba:42:2f:7a:32:06:c7:98:b5:d2:af:ce:79:
                    8e:e6:99:b8:5c:8f:38:63:00:1d:f1:01:75:e0:d1:
                    d7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6B:04:66:49:2C:60:58:BD:41:CD:CB:97:E0:FB:2A:67:11:88:B4
            X509v3 Authority Key Identifier:
                keyid:B7:61:15:D1:3A:58:6A:DA:3D:9C:C5:DF:9A:E0:3E:5B:AB:4F:4D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2EV0TpYato9nMXfmuA-W6tPTcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/3a45ed-b0b8-4a16-9eec-223f5220a7d3/1/t2EV0TpYato9nMXfmuA-W6tPTcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:55:9b:19:7d:66:9f:fb:5c:7d:06:6a:68:48:6e:b8:ad:b4:
         4d:83:ae:8b:bf:5a:d6:3b:dd:a8:ae:a9:7c:79:da:fd:2b:ba:
         65:19:68:27:5b:21:d1:71:13:c0:b0:95:fa:b5:05:54:2c:82:
         89:62:99:ea:6c:99:52:6b:5f:57:64:ba:b3:9c:d9:a5:cc:24:
         93:3b:54:92:80:65:0b:f4:0d:a5:87:20:5c:2a:18:44:f6:0b:
         75:c4:00:c1:52:02:7f:04:89:4d:e0:37:ad:8f:db:86:42:fb:
         63:05:ca:d2:98:0b:a6:e1:54:1a:c1:99:fa:18:e5:57:bd:78:
         05:3d:a0:72:26:9a:1e:fb:a3:a3:85:99:33:52:9c:30:7e:cb:
         5b:50:4d:0d:ef:35:09:30:eb:e1:7a:87:21:6e:6f:95:31:2e:
         e3:59:04:57:5c:22:8f:86:44:92:75:c5:08:8c:db:9c:1d:7b:
         b0:de:20:40:4b:fb:73:4a:20:83:1f:cd:aa:7d:2b:fb:e5:f3:
         6c:c9:7f:6d:ca:2d:93:17:03:55:ee:9e:10:2c:1c:8e:86:09:
         3a:74:88:a0:89:fa:bc:0a:6b:c9:81:fb:e2:02:36:2f:b9:3d:
         53:d8:37:0d:54:a1:7e:ef:7b:52:5c:47:38:08:8c:2d:1f:0a:
         52:fb:dd:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGB9NBDmODQK+9F3Nt9m/xXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NjExNWQxM2E1ODZhZGEzZDljYzVkZjlhZTAzZTViYWI0
ZjRkYzAwHhcNMjYxMDI4MTAwMTA3WhcNMjYxMDI5MTAwMTA3WjAzMTEwLwYDVQQD
Eyg4YTZiMDQ2NjQ5MmM2MDU4YmQ0MWNkY2I5N2UwZmIyYTY3MTE4OGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+fUvZzmr786Y02p1vgx+wi+98Jd
biIjOiKRLwFh/04ABfy2bWNk73YaNYdIvi4JUQADEr2IBdNZKqAMid6FHnBcaQOD
y0mjwLQrFGjbHmfb5BWD2sc5bKVlOlukvZNYXsBxEN4ZziZPi9rYJYG+O6d/0boI
CLU+lxKMvApDXeTz8xmQvWfP3ym3ksjOmLqgwgBETaxg7nhfF3w2XeHLfzwt8bd1
llusEymUeXtC0ySrnP3n6c7vCOmixHTjGhtdxaoyOHT2mnwfSvQcpLevY81aMHf8
PRNJmxS9s5u+1BhjyLpCL3oyBseYtdKvznmO5pm4XI84YwAd8QF14NHXqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIprBGZJLGBYvUHNy5fg+ypnEYi0MB8GA1UdIwQY
MBaAFLdhFdE6WGraPZzF35rgPlurT03AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMt
MjIzZjUyMjBhN2QzLzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zYTQ1ZWQtYjBiOC00YTE2LTllZWMtMjIzZjUyMjBhN2Qz
LzEvdDJFVjBUcFlhdG85bk1YZm11QS1XNnRQVGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlWbGX1m
n/tcfQZqaEhuuK20TYOui79a1jvdqK6pfHna/Su6ZRloJ1sh0XETwLCV+rUFVCyC
iWKZ6myZUmtfV2S6s5zZpcwkkztUkoBlC/QNpYcgXCoYRPYLdcQAwVICfwSJTeA3
rY/bhkL7YwXK0pgLpuFUGsGZ+hjlV714BT2gciaaHvujo4WZM1KcMH7LW1BNDe81
CTDr4XqHIW5vlTEu41kEV1wij4ZEknXFCIzbnB17sN4gQEv7c0oggx/Nqn0r++Xz
bMl/bcotkxcDVe6eECwcjoYJOnSIoIn6vApryYH74gI2L7k9U9g3DVShfu97UlxH
OAiMLR8KUvvdwA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:13:00 2026 by rpki-client