Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
File:                     2yOWhUCfZLocOlSo7xQckk5x2JI.mft (raw, json)
Hash identifier:          Fy6tMmd/QVDNUVx5UnfxfNCalCb0gSD1wgb67/bxXsk=
Subject key identifier:   13:97:86:6A:CC:14:1D:9C:1C:B3:6A:B8:63:4C:8C:83:AE:79:8C:84
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Certificate issuer:       /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial:       01A1219C4517C2DCC4BE3D89BD853C72CC58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
Manifest number:          1AA8
Signing time:             Fri 09 Oct 2026 17:00:51 +0000
Manifest this update:     Fri 09 Oct 2026 17:00:51 +0000
Manifest next update:     Sat 10 Oct 2026 17:00:51 +0000
Files and hashes:         1: 2yOWhUCfZLocOlSo7xQckk5x2JI.crl (hash: oL4NX+JTN4UKVmyKlejwRwiTBoixOEtIeGo1807Mw1E=)
                          2: NCNcQSJc0TGzJY4u8AfMXCbg0RE.roa (hash: olrbYNRVZ37d5DGlOqhZmdOWpkC0qMK5uUX2T/dHnwk=)
                          3: NWPNhzQpbb1pWfOR8Do4Rk33ISE.roa (hash: zQ014lIcxxnh0W92J1yApdSlVAvsQefsim3FPRGCxsw=)
                          4: S-F0eq4A_ozaGKmyidwMC5Jy5Ro.roa (hash: x3y+oF+ZdUAZ9Uf6wr7xaiGLxbD/kDc2LpvrGJEYeAM=)
                          5: tvjO7d2OruGUM05e3v_9VK0Tnvg.roa (hash: av53I/iTLdQRU3qkC6MQBoQi4smDbLlIv8oPMv9ZXBY=)
                          6: wet2iRU-DIcI7ecq9nOLNfx3URM.roa (hash: ukbv/ID6Q3IjhclCaom/PoiMdbvmxstujbtE/kfKRtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:21:9c:45:17:c2:dc:c4:be:3d:89:bd:85:3c:72:cc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
        Validity
            Not Before: Oct  9 17:00:51 2026 GMT
            Not After : Oct 10 17:00:51 2026 GMT
        Subject: CN=1397866acc141d9c1cb36ab8634c8c83ae798c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:b0:fd:9c:a3:88:7d:3d:20:fa:36:75:40:
                    4a:49:a8:6d:9c:ed:2d:5a:09:7c:bf:53:8f:63:15:
                    91:8d:62:b1:d6:e7:df:56:d6:91:ef:27:ae:7d:f4:
                    5b:af:2a:f6:73:a2:f4:55:77:40:32:c4:4e:01:72:
                    63:bd:9e:70:ca:3a:0c:67:47:06:25:15:15:a3:c8:
                    4a:e5:92:9c:fc:5c:8b:97:60:f7:99:09:ea:a6:50:
                    cc:cb:a1:dd:85:1e:9e:7e:f3:93:3e:bc:8e:83:ca:
                    23:c5:92:d1:7d:10:e5:6f:e4:19:c0:42:b8:a3:c7:
                    9b:b2:df:6c:4a:1c:58:5a:30:79:9b:8d:48:39:ca:
                    da:97:0d:f4:52:38:e5:14:8c:f6:c9:77:49:51:0e:
                    e7:58:f3:fc:ed:1e:6a:75:3c:e6:9a:93:c3:8d:84:
                    a7:e5:6b:db:d5:66:04:02:7c:60:01:38:35:9b:36:
                    08:26:e4:ad:53:f8:61:03:c6:85:9e:5f:65:6d:ae:
                    62:11:ab:43:37:19:c2:78:c1:a8:de:62:64:3a:5f:
                    47:da:bf:89:06:bc:06:19:94:9d:cd:ce:da:16:ab:
                    bd:69:14:f6:1e:5b:c7:d9:83:b3:8a:30:f4:80:45:
                    c1:9f:9c:74:18:56:3b:2b:fd:46:70:c4:78:44:c9:
                    fb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:97:86:6A:CC:14:1D:9C:1C:B3:6A:B8:63:4C:8C:83:AE:79:8C:84
            X509v3 Authority Key Identifier:
                keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:46:ef:4e:d8:24:07:64:79:6b:25:74:07:e0:9f:a5:2e:c1:
         11:cf:bd:c2:fd:d0:49:94:2d:c6:a0:b0:28:6f:1e:ee:5c:d7:
         2e:ac:b4:49:43:12:26:51:03:0f:5b:87:60:fc:ab:dd:cd:b1:
         ab:56:12:7f:5c:70:57:b2:1a:2d:b1:f3:0b:f0:cd:0d:e1:e0:
         e4:be:4c:d9:3d:2b:a9:7e:d4:e9:f5:ea:de:3b:ed:0c:36:57:
         40:ca:b7:6e:85:83:4f:a9:ab:1f:3a:56:8a:39:05:7a:09:73:
         f1:09:13:f1:3e:16:ff:f5:1b:33:93:82:22:9a:59:6e:e2:a4:
         59:b5:fc:84:f2:b9:70:21:82:21:df:11:96:37:91:0f:de:e4:
         0f:6a:c1:58:9e:ab:e1:2a:c6:0f:7c:f8:90:ee:2d:a3:22:e4:
         70:9a:66:d0:ca:f3:ff:23:52:95:e9:a8:17:f3:e4:c3:1a:ea:
         ae:f3:00:ae:ba:25:4d:34:0e:68:4d:93:fa:07:3f:0c:0d:74:
         cd:ad:12:27:fb:82:23:0c:b4:b3:75:b1:32:bc:fd:03:01:f6:
         35:e1:a3:c7:da:fc:b8:af:c2:82:94:eb:a0:a6:22:b7:47:5e:
         b0:95:54:9b:81:59:c6:42:c3:2a:ae:b0:1c:c0:67:81:5c:f1:
         42:d3:d6:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEhnEUXwtzEvj2JvYU8csxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMjM5Njg1NDA5ZjY0YmExYzNhNTRhOGVmMTQxYzkyNGU3
MWQ4OTIwHhcNMjYxMDA5MTcwMDUxWhcNMjYxMDEwMTcwMDUxWjAzMTEwLwYDVQQD
EygxMzk3ODY2YWNjMTQxZDljMWNiMzZhYjg2MzRjOGM4M2FlNzk4Yzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGOw/ZyjiH09IPo2dUBKSahtnO0t
Wgl8v1OPYxWRjWKx1uffVtaR7yeuffRbryr2c6L0VXdAMsROAXJjvZ5wyjoMZ0cG
JRUVo8hK5ZKc/FyLl2D3mQnqplDMy6HdhR6efvOTPryOg8ojxZLRfRDlb+QZwEK4
o8ebst9sShxYWjB5m41IOcralw30UjjlFIz2yXdJUQ7nWPP87R5qdTzmmpPDjYSn
5Wvb1WYEAnxgATg1mzYIJuStU/hhA8aFnl9lba5iEatDNxnCeMGo3mJkOl9H2r+J
BrwGGZSdzc7aFqu9aRT2HlvH2YOzijD0gEXBn5x0GFY7K/1GcMR4RMn7hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOXhmrMFB2cHLNquGNMjIOueYyEMB8GA1UdIwQY
MBaAFNsjloVAn2S6HDpUqO8UHJJOcdiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmIt
MmVmNDQ3ZTFiMDhjLzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmItMmVmNDQ3ZTFiMDhj
LzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUbvTtgk
B2R5ayV0B+CfpS7BEc+9wv3QSZQtxqCwKG8e7lzXLqy0SUMSJlEDD1uHYPyr3c2x
q1YSf1xwV7IaLbHzC/DNDeHg5L5M2T0rqX7U6fXq3jvtDDZXQMq3boWDT6mrHzpW
ijkFeglz8QkT8T4W//UbM5OCIppZbuKkWbX8hPK5cCGCId8RljeRD97kD2rBWJ6r
4SrGD3z4kO4toyLkcJpm0Mrz/yNSlemoF/PkwxrqrvMArrolTTQOaE2T+gc/DA10
za0SJ/uCIwy0s3WxMrz9AwH2NeGjx9r8uK/CgpTroKYit0desJVUm4FZxkLDKq6w
HMBngVzxQtPWXA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 23:16:19 2026 by rpki-client