Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
File:                     45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json)
Hash identifier:          oh0nakHATkece7vdFmt81KiRGR2a+c5Zif0U8TDlLJk=
Subject key identifier:   5A:CB:1F:C2:07:B9:79:32:36:35:04:4B:68:EB:80:B3:12:27:68:BB
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Certificate issuer:       /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial:       01A180AB7809E815776EBE4F29A0491A5BB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
Manifest number:          066A
Signing time:             Wed 28 Oct 2026 04:01:23 +0000
Manifest this update:     Wed 28 Oct 2026 04:01:23 +0000
Manifest next update:     Thu 29 Oct 2026 04:01:23 +0000
Files and hashes:         1: 2F4RMUmq0lpAOhiDCB5e-Y1vbfk.roa (hash: l3nVP84qgAebXZ45df8F6skmyfbFKhUrmvG9dZuwE7o=)
                          2: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: J0S3whJ0XsQb1e6zdFJ1qM6hOzYix2gA5sQlZxKAGis=)
                          3: Iacpz7QDqdYmpPkWqkjxU0vWlw0.roa (hash: Egal+mT8M6xP1Rl+/8TQk/EbX4bTommbuReOlbLDzcc=)
                          4: aiFineB_gxGIrcZvhU1Nu9cj4A0.roa (hash: AkbNmkpqMmin2o1u61DaHLTarr56+ivukYMQYGh0IcA=)
                          5: d9AXTVr2vRRCUzg4PpWPZA9-G3Y.roa (hash: 4Ee4Ao/K0Ut8uGSYkeeEJIsMyx7D4XFRo3U7gWI9B3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:ab:78:09:e8:15:77:6e:be:4f:29:a0:49:1a:5b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
        Validity
            Not Before: Oct 28 04:01:23 2026 GMT
            Not After : Oct 29 04:01:23 2026 GMT
        Subject: CN=5acb1fc207b979323635044b68eb80b3122768bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:61:6d:8a:1d:04:81:44:8e:e1:a4:fb:83:55:
                    19:71:7a:5a:c0:74:ef:64:ff:3d:dc:e0:a1:e3:7e:
                    cc:59:f2:0c:c3:2d:1e:30:0b:b6:c8:7d:11:56:94:
                    ef:d5:e6:65:1f:10:e4:23:b3:27:8e:d6:f5:bf:46:
                    66:23:89:c4:72:b2:40:ac:e7:f4:42:b7:bb:a2:80:
                    85:91:dd:1c:a5:61:9a:f3:4b:35:56:ad:6f:83:cb:
                    ae:70:05:58:63:17:35:ac:4f:1a:3a:40:72:b0:88:
                    9a:7d:0c:5d:a0:22:9c:df:5d:b7:2f:4a:9d:c8:e6:
                    0d:4c:dc:06:2c:fe:4f:15:04:55:40:6f:b2:57:7e:
                    d2:1f:8f:c3:a9:ba:43:a6:b9:7e:69:59:c5:9a:55:
                    23:e6:9f:2a:46:db:f5:c4:86:04:eb:e0:aa:cb:f4:
                    c9:25:64:45:54:fe:38:7f:94:15:69:40:01:88:8e:
                    76:b1:16:66:bf:65:af:66:cb:2b:53:ce:c0:fe:d9:
                    6b:f8:68:07:70:2b:98:ee:1d:9d:9c:86:68:cd:75:
                    ab:07:92:e8:c0:42:dc:1a:44:1c:07:28:51:c5:b7:
                    ac:73:a4:ab:d2:8f:67:fa:d3:b8:8a:6c:e6:e1:f3:
                    9a:e7:dc:06:fb:28:cf:f4:90:6f:c9:d5:5e:61:85:
                    6a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CB:1F:C2:07:B9:79:32:36:35:04:4B:68:EB:80:B3:12:27:68:BB
            X509v3 Authority Key Identifier:
                keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e7:d5:ba:55:ce:0f:0c:34:c1:95:c5:f1:6b:a6:02:60:78:
         2f:90:6a:19:a9:92:96:7f:11:11:04:80:22:06:27:22:16:32:
         30:82:29:f4:aa:43:a4:da:43:be:52:9d:dc:45:8c:fb:38:47:
         06:9b:73:22:ce:e9:64:e7:bd:f0:88:fa:de:76:f6:73:dc:d5:
         69:8a:c9:54:8f:31:02:4e:98:0f:8e:81:97:f8:53:5a:3e:0e:
         fc:f1:4d:7f:ab:9a:02:e3:84:d6:fd:28:0b:b8:c0:2b:97:42:
         8d:67:79:59:fc:3f:67:f9:9b:92:b6:8a:ba:0e:ff:85:d7:42:
         70:e9:45:ea:28:95:75:be:12:d6:1b:1b:f8:65:00:c7:38:c4:
         cb:34:ad:1c:ac:29:6f:47:72:09:d1:48:db:8e:25:ae:4a:c4:
         d4:85:d5:71:c4:53:90:c9:ce:d1:54:f1:8a:b0:63:e1:32:b6:
         ce:d7:ab:10:1c:e8:93:0a:93:d0:9e:a6:d0:02:10:1e:02:da:
         aa:d9:b8:f7:0e:6c:0d:b3:1c:f7:9c:e3:bd:a3:a7:8c:59:dc:
         ac:ca:ed:4f:b7:0d:63:c5:d5:c6:04:70:d4:5e:48:3d:ce:d4:
         15:2c:1f:e7:fc:41:58:17:68:eb:35:57:0d:94:c8:55:f5:38:
         89:6f:07:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAq3gJ6BV3br5PKaBJGlu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOTU1NzI1MDU0M2U0NDc2YWY4OGM0NjEyZDRhODk1MzEz
MTNiNTcwHhcNMjYxMDI4MDQwMTIzWhcNMjYxMDI5MDQwMTIzWjAzMTEwLwYDVQQD
Eyg1YWNiMWZjMjA3Yjk3OTMyMzYzNTA0NGI2OGViODBiMzEyMjc2OGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WFtih0EgUSO4aT7g1UZcXpawHTv
ZP893OCh437MWfIMwy0eMAu2yH0RVpTv1eZlHxDkI7Mnjtb1v0ZmI4nEcrJArOf0
Qre7ooCFkd0cpWGa80s1Vq1vg8uucAVYYxc1rE8aOkBysIiafQxdoCKc3123L0qd
yOYNTNwGLP5PFQRVQG+yV37SH4/DqbpDprl+aVnFmlUj5p8qRtv1xIYE6+Cqy/TJ
JWRFVP44f5QVaUABiI52sRZmv2WvZssrU87A/tlr+GgHcCuY7h2dnIZozXWrB5Lo
wELcGkQcByhRxbesc6Sr0o9n+tO4imzm4fOa59wG+yjP9JBvydVeYYVqJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrLH8IHuXkyNjUES2jrgLMSJ2i7MB8GA1UdIwQY
MBaAFOOVVyUFQ+RHaviMRhLUqJUxMTtXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUt
MjA2OTUxOTNhYzA3LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUtMjA2OTUxOTNhYzA3
LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiufVulXO
Dww0wZXF8WumAmB4L5BqGamSln8REQSAIgYnIhYyMIIp9KpDpNpDvlKd3EWM+zhH
BptzIs7pZOe98Ij63nb2c9zVaYrJVI8xAk6YD46Bl/hTWj4O/PFNf6uaAuOE1v0o
C7jAK5dCjWd5Wfw/Z/mbkraKug7/hddCcOlF6iiVdb4S1hsb+GUAxzjEyzStHKwp
b0dyCdFI244lrkrE1IXVccRTkMnO0VTxirBj4TK2zterEBzokwqT0J6m0AIQHgLa
qtm49w5sDbMc95zjvaOnjFncrMrtT7cNY8XVxgRw1F5IPc7UFSwf5/xBWBdo6zVX
DZTIVfU4iW8HHw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:24:03 2026 by rpki-client