Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File:                     4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier:          Wqmz/fDoeys8pUP90gT0WPY7zjX7Hu8oIO5uU5EiIXQ=
Subject key identifier:   EC:A9:F6:68:6F:5C:03:34:95:75:2C:B7:61:9B:A4:69:9C:40:41:62
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer:       /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial:       01A13F3993BB93CF89209BE069C391166706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number:          0890
Signing time:             Thu 15 Oct 2026 11:01:40 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:40 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:40 +0000
Files and hashes:         1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: O9/cs9f4EeFtkGybB03xKfAOCEndKqZcNjmGEmpF8Bw=)
                          2: jm7CLkDkWjLyx0drk5u0jmFrhNY.roa (hash: ammB/HZj8/N3/UAaLNlwGxNZkAQiwMa1PgzKQkDpB6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:93:bb:93:cf:89:20:9b:e0:69:c3:91:16:67:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
        Validity
            Not Before: Oct 15 11:01:40 2026 GMT
            Not After : Oct 16 11:01:40 2026 GMT
        Subject: CN=eca9f6686f5c033495752cb7619ba4699c404162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:36:e8:a4:e0:e2:1c:a6:4a:13:31:48:a4:
                    45:99:2e:9e:c7:64:07:49:b0:5e:43:3f:37:54:72:
                    67:a6:85:c7:18:7a:79:e4:cc:db:40:57:21:45:32:
                    8f:49:77:d8:7b:8a:7b:98:a8:e6:25:a0:c0:22:30:
                    f7:b6:72:78:60:f0:23:30:77:11:21:ef:7a:1d:45:
                    3c:7f:23:80:3c:9c:23:ca:e7:cd:9c:c4:dc:35:7d:
                    e2:88:09:64:2c:e6:9e:42:e6:41:2b:00:f5:a7:f5:
                    92:29:8f:40:f4:33:6d:42:23:bd:a9:3f:27:12:e7:
                    3f:3b:4d:4d:30:f2:eb:77:fd:bb:0c:a3:48:19:a8:
                    93:57:62:d8:e8:6a:86:b2:a1:4c:53:c7:73:bc:81:
                    3d:e2:99:dc:c4:0f:17:71:26:e5:21:1e:83:39:d2:
                    5e:50:f7:f4:e9:10:f9:d6:c6:35:d2:c0:de:73:1b:
                    e1:d8:e5:b6:22:da:fd:42:5c:ae:29:37:a6:ef:04:
                    7d:5a:c4:d7:d5:bd:c4:4f:ba:80:15:26:a0:a5:5b:
                    9c:dd:e4:70:2e:42:8a:b7:ea:c2:31:75:bd:2b:99:
                    6b:56:78:e8:a4:b3:cf:0c:a6:2d:c5:a7:23:0f:b9:
                    07:d0:e4:1b:48:25:dc:0f:39:e1:a0:c2:1a:ed:0d:
                    a0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A9:F6:68:6F:5C:03:34:95:75:2C:B7:61:9B:A4:69:9C:40:41:62
            X509v3 Authority Key Identifier:
                keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:7a:84:30:2c:2b:06:ac:30:88:d6:27:79:1d:dd:42:ae:b8:
         19:21:cd:aa:03:d8:2f:a0:8c:a5:50:2b:9b:c8:bb:99:b4:a5:
         b8:6d:16:13:09:a0:27:56:aa:bf:1f:a4:c0:56:2c:48:7d:8c:
         dc:26:43:be:60:5c:c3:40:35:b8:80:d7:0d:12:15:b8:5c:ce:
         bb:65:9c:58:67:18:b2:d8:a7:96:c0:2c:cb:ea:4f:02:d9:ae:
         39:9b:fd:1a:58:ce:13:bd:52:58:85:9e:04:6f:70:4b:7f:45:
         a9:87:90:de:86:ff:b8:ed:31:60:f6:a7:6e:71:ec:ad:6f:13:
         50:5f:d3:51:67:e2:00:8d:8c:0e:c1:16:7b:e7:43:ea:b4:47:
         24:e8:3f:f1:6e:5b:75:e7:04:23:f1:dc:e5:a5:a9:f0:1b:57:
         71:77:4f:60:69:9e:a2:32:f7:eb:f1:e0:5d:14:41:bf:2e:f5:
         ef:53:7e:ba:75:ec:f2:db:80:af:ec:1d:f8:e5:d6:73:4e:1e:
         a3:b4:54:89:d4:1e:3e:fb:dc:d4:52:4b:76:9b:50:65:de:1f:
         43:2d:e1:79:e3:5d:04:2a:2f:59:22:2c:c9:87:c2:b4:29:02:
         27:c0:e3:48:a7:90:8d:05:dc:00:1a:22:ff:7e:2f:3c:0e:e3:
         34:bc:c0:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/OZO7k8+JIJvgacORFmcGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODE0MmI0MmUzOTQ4MDA0OGQxZmNlYTU4N2EzNjkzZGE0
YzBiOGEwHhcNMjYxMDE1MTEwMTQwWhcNMjYxMDE2MTEwMTQwWjAzMTEwLwYDVQQD
EyhlY2E5ZjY2ODZmNWMwMzM0OTU3NTJjYjc2MTliYTQ2OTljNDA0MTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWg26KTg4hymShMxSKRFmS6ex2QH
SbBeQz83VHJnpoXHGHp55MzbQFchRTKPSXfYe4p7mKjmJaDAIjD3tnJ4YPAjMHcR
Ie96HUU8fyOAPJwjyufNnMTcNX3iiAlkLOaeQuZBKwD1p/WSKY9A9DNtQiO9qT8n
Euc/O01NMPLrd/27DKNIGaiTV2LY6GqGsqFMU8dzvIE94pncxA8XcSblIR6DOdJe
UPf06RD51sY10sDecxvh2OW2Itr9QlyuKTem7wR9WsTX1b3ET7qAFSagpVuc3eRw
LkKKt+rCMXW9K5lrVnjopLPPDKYtxacjD7kH0OQbSCXcDznhoMIa7Q2gVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyp9mhvXAM0lXUst2GbpGmcQEFiMB8GA1UdIwQY
MBaAFOCBQrQuOUgASNH86lh6NpPaTAuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjkt
OGYxZjJjOTE0ZjA0LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yODJhYzYtNzJjNi00YjJjLTlkZjktOGYxZjJjOTE0ZjA0
LzEvNElGQ3RDNDVTQUJJMGZ6cVdIbzJrOXBNQzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3qEMCwr
BqwwiNYneR3dQq64GSHNqgPYL6CMpVArm8i7mbSluG0WEwmgJ1aqvx+kwFYsSH2M
3CZDvmBcw0A1uIDXDRIVuFzOu2WcWGcYstinlsAsy+pPAtmuOZv9GljOE71SWIWe
BG9wS39FqYeQ3ob/uO0xYPanbnHsrW8TUF/TUWfiAI2MDsEWe+dD6rRHJOg/8W5b
decEI/Hc5aWp8BtXcXdPYGmeojL36/HgXRRBvy7171N+unXs8tuAr+wd+OXWc04e
o7RUidQePvvc1FJLdptQZd4fQy3heeNdBCovWSIsyYfCtCkCJ8DjSKeQjQXcABoi
/34vPA7jNLzAZQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:15:36 2026 by rpki-client