Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File:                     tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier:          e6ldq+bxSDTtAOZ3CcC//MDxZJ3ouqxJfeVOwQ8WHPk=
Subject key identifier:   E3:EC:18:19:E8:C4:9F:FE:3D:5F:45:E5:14:B2:23:44:A0:CB:EE:60
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer:       /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial:       01A14A98D69547F4924429E9B11791FA7462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number:          0850
Signing time:             Sat 17 Oct 2026 16:01:32 +0000
Manifest this update:     Sat 17 Oct 2026 16:01:32 +0000
Manifest next update:     Sun 18 Oct 2026 16:01:32 +0000
Files and hashes:         1: JgdyZSLi_X3qU3ZvyP9GWKpdO74.roa (hash: vGubJxspvp/eaW13ArIa5sIF6BGxA2eNPeBTEfU9qPQ=)
                          2: f7CpyN6sW0ZcgvCuLUdNYJVfmi4.roa (hash: BUr3/0WmGIaDdHN6nw+UqfT6IUf3UU/+UGTcpdHXJwI=)
                          3: hYVqkrvIsjb2mA84Thi0hIWdE_I.roa (hash: bIGRKUxgZlKcay6HazV4E5FCIEHkxDiDElQJfP8xDRs=)
                          4: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: qHj2VpfX3wDm3yvP4VGQr/kunFWteCTxNUISV+jNTew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4a:98:d6:95:47:f4:92:44:29:e9:b1:17:91:fa:74:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
        Validity
            Not Before: Oct 17 16:01:32 2026 GMT
            Not After : Oct 18 16:01:32 2026 GMT
        Subject: CN=e3ec1819e8c49ffe3d5f45e514b22344a0cbee60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c3:83:7a:26:cf:01:cf:1a:12:a7:98:a7:ed:
                    0c:6a:bc:4d:04:24:64:42:42:7c:23:80:3a:bb:3b:
                    47:7f:c5:58:6f:52:0d:2c:fa:06:f7:92:57:84:13:
                    fe:94:7c:dc:02:2a:55:a4:ac:28:81:ee:6d:a8:c5:
                    29:eb:02:1c:3b:93:e1:74:e9:d0:d3:e4:6a:6e:89:
                    b0:4f:2f:1e:97:98:12:d6:f2:49:0a:45:83:5a:e9:
                    ae:b9:c3:ff:d7:a7:0b:92:32:70:d9:8e:59:81:75:
                    db:e2:8f:be:b1:83:e0:f6:00:04:90:15:68:d2:d4:
                    e3:9b:df:4f:1f:9f:13:0e:1d:b3:7c:22:62:b5:f3:
                    d6:e9:eb:1d:29:00:cf:e1:5b:63:c4:95:b4:e9:28:
                    75:5d:3f:c2:b9:c4:2e:a4:99:52:1a:d7:27:26:9f:
                    7e:ed:20:a9:a4:f9:49:77:c9:4a:95:56:29:d4:c9:
                    ee:f4:3f:11:69:41:76:86:a3:bf:7c:4f:77:e1:87:
                    ed:8f:dc:a3:79:74:af:76:62:e6:96:2f:ef:9c:a7:
                    67:c4:a6:45:60:01:6c:6f:00:00:b3:b1:77:67:e8:
                    8d:49:ef:df:96:ad:b1:db:b4:37:f2:60:f7:37:84:
                    ea:81:8a:9e:1c:7d:ac:1d:d6:27:64:46:71:d6:60:
                    9d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EC:18:19:E8:C4:9F:FE:3D:5F:45:E5:14:B2:23:44:A0:CB:EE:60
            X509v3 Authority Key Identifier:
                keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:8b:fc:f0:e2:0a:41:d1:1a:60:75:fb:87:dd:75:fa:5c:de:
         88:c7:e7:f2:25:f0:07:0c:9f:fa:f9:fd:b5:01:2b:6f:a3:df:
         ef:f6:39:06:2c:e5:d7:59:13:7b:43:dd:c0:cb:60:49:da:7e:
         86:f5:60:d6:49:bd:03:5a:76:31:a6:6c:c7:b3:bf:56:00:98:
         43:14:dd:8b:82:ae:19:ec:36:fa:cd:57:8e:c0:73:0f:aa:4f:
         53:d6:50:33:f1:4d:f0:4a:53:40:bd:fa:5d:4b:42:75:b7:69:
         f4:17:06:b9:f3:77:b2:a6:b3:30:7c:bb:d2:d3:8c:fd:36:e9:
         e6:12:e7:01:61:96:90:b2:5b:94:b1:4a:4d:24:3e:84:b8:fa:
         e2:62:5c:40:64:84:dc:9f:b3:39:bd:55:6a:08:06:c1:38:3d:
         82:5c:e6:ea:8f:36:f6:40:84:d2:4c:5a:0c:88:1c:08:af:5e:
         e4:9c:13:a2:83:5b:04:b9:53:6d:a1:fe:61:ff:47:0d:e4:13:
         0c:35:1a:8d:30:c2:73:45:02:dd:46:0e:12:91:93:f5:c8:6b:
         a5:0f:0d:71:1f:9a:10:9f:33:bb:e7:8f:d9:44:63:8d:d1:8f:
         0d:92:88:c1:19:af:05:11:42:02:a3:14:38:45:b2:2f:91:22:
         a0:49:48:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFKmNaVR/SSRCnpsReR+nRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2M2EzMDk0NDM5Y2FjMGY1NTU3MDEyODZjZDU0MzczYmNl
NmNiNTAwHhcNMjYxMDE3MTYwMTMyWhcNMjYxMDE4MTYwMTMyWjAzMTEwLwYDVQQD
EyhlM2VjMTgxOWU4YzQ5ZmZlM2Q1ZjQ1ZTUxNGIyMjM0NGEwY2JlZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMODeibPAc8aEqeYp+0MarxNBCRk
QkJ8I4A6uztHf8VYb1INLPoG95JXhBP+lHzcAipVpKwoge5tqMUp6wIcO5PhdOnQ
0+RqbomwTy8el5gS1vJJCkWDWumuucP/16cLkjJw2Y5ZgXXb4o++sYPg9gAEkBVo
0tTjm99PH58TDh2zfCJitfPW6esdKQDP4VtjxJW06Sh1XT/CucQupJlSGtcnJp9+
7SCppPlJd8lKlVYp1Mnu9D8RaUF2hqO/fE934Yftj9yjeXSvdmLmli/vnKdnxKZF
YAFsbwAAs7F3Z+iNSe/flq2x27Q38mD3N4TqgYqeHH2sHdYnZEZx1mCd3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPsGBnoxJ/+PV9F5RSyI0Sgy+5gMB8GA1UdIwQY
MBaAFLY6MJRDnKwPVVcBKGzVQ3O85stQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYt
OWRkZGQ2ODAyMDg4LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYtOWRkZGQ2ODAyMDg4
LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHov88OIK
QdEaYHX7h911+lzeiMfn8iXwBwyf+vn9tQErb6Pf7/Y5Bizl11kTe0PdwMtgSdp+
hvVg1km9A1p2MaZsx7O/VgCYQxTdi4KuGew2+s1XjsBzD6pPU9ZQM/FN8EpTQL36
XUtCdbdp9BcGufN3sqazMHy70tOM/Tbp5hLnAWGWkLJblLFKTSQ+hLj64mJcQGSE
3J+zOb1VaggGwTg9glzm6o829kCE0kxaDIgcCK9e5JwTooNbBLlTbaH+Yf9HDeQT
DDUajTDCc0UC3UYOEpGT9chrpQ8NcR+aEJ8zu+eP2URjjdGPDZKIwRmvBRFCAqMU
OEWyL5EioElIKQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 23:51:36 2026 by rpki-client