Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File:                     9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier:          ALmLjCE1IxJzVWdINRECWbIgBNPziDjNy1KPZPBPi/8=
Subject key identifier:   A7:F0:BC:C0:E0:54:64:E7:8C:F4:50:7C:3E:7C:E2:46:FE:DA:03:4A
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer:       /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial:       01A1483BFE6B1B4E6275E6BDDA81C6D4531A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number:          1AAA
Signing time:             Sat 17 Oct 2026 05:00:53 +0000
Manifest this update:     Sat 17 Oct 2026 05:00:53 +0000
Manifest next update:     Sun 18 Oct 2026 05:00:53 +0000
Files and hashes:         1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: Q0HYHa/pI95mRtj4DLeCO3DOYwB/5UOzarwtftmIPkE=)
                          2: mqnfQZBp8h7WvOAdc-8gqdHYqtw.roa (hash: ewJdIlVBdFix7giIGBtZRJXpQjmTUTAe4SWLnLx8JZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:3b:fe:6b:1b:4e:62:75:e6:bd:da:81:c6:d4:53:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
        Validity
            Not Before: Oct 17 05:00:53 2026 GMT
            Not After : Oct 18 05:00:53 2026 GMT
        Subject: CN=a7f0bcc0e05464e78cf4507c3e7ce246feda034a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:13:07:21:c7:86:2d:73:66:f0:0c:89:e4:a0:
                    93:c2:87:f4:ff:10:7f:51:b2:65:82:6d:27:ca:e0:
                    f8:1d:48:65:1b:3a:db:d1:43:40:7d:be:65:bd:ac:
                    88:93:42:a7:b5:52:ee:37:a2:54:92:b4:e1:24:f1:
                    62:45:1b:2d:31:51:93:7b:c7:71:1e:8e:f9:17:df:
                    93:f0:29:34:63:49:70:1b:50:01:9a:d3:e1:93:d2:
                    4f:88:4e:5e:67:b6:89:25:b4:4a:f5:7b:03:f3:96:
                    d3:79:45:a3:28:ff:d3:29:3f:a6:a8:ff:1a:6e:2e:
                    59:19:c0:0c:5e:ae:5f:ce:8c:d9:d1:49:42:cd:48:
                    c7:5a:8d:96:90:c6:d9:12:ca:38:0b:7a:e4:dc:e4:
                    2f:eb:71:dc:a5:48:35:ae:b2:31:40:d6:3b:d2:39:
                    84:14:a6:5c:a8:5a:b8:fe:44:f9:e6:35:41:19:24:
                    bf:0e:5d:8e:fe:9c:01:64:72:68:ea:95:23:82:fa:
                    e5:a1:30:fb:a4:e6:41:e4:6e:ce:df:e2:eb:41:a8:
                    eb:cf:21:60:69:9f:81:23:35:68:16:26:ed:dc:c2:
                    3b:a9:53:a3:e1:b6:20:e0:e1:dd:e7:21:d3:88:2d:
                    35:f5:8c:04:51:c9:e6:a0:22:98:41:0b:f2:12:10:
                    90:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F0:BC:C0:E0:54:64:E7:8C:F4:50:7C:3E:7C:E2:46:FE:DA:03:4A
            X509v3 Authority Key Identifier:
                keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f2:c1:e2:b6:87:5f:87:e7:c9:74:af:99:77:fa:6e:d9:30:
         35:fd:65:38:d5:c3:53:9c:a5:ae:e2:11:82:87:5e:8c:40:c5:
         b4:9a:95:c8:79:3f:11:66:bd:c1:1a:00:d4:97:8f:20:0c:42:
         4d:af:cc:0e:79:77:4e:6f:3e:fb:1e:6a:3d:33:9b:36:14:33:
         7c:f9:29:e7:18:f9:6c:66:aa:ae:3e:98:7d:fd:f0:df:35:82:
         03:ca:50:4c:93:57:6a:03:72:4f:28:d3:d4:b3:0a:d3:ff:19:
         d0:ab:9e:c6:a2:89:21:b2:84:7d:45:da:96:09:df:f1:61:89:
         1c:e7:83:21:59:0a:72:40:78:a3:af:63:51:a4:37:61:5e:65:
         60:87:bd:5c:f6:5c:8c:41:0e:68:2f:a3:b8:11:01:b0:a9:01:
         72:20:44:e3:7c:0a:f4:8e:f2:24:dc:0a:a6:89:6c:8e:74:28:
         c6:db:c6:eb:ff:3a:4d:ef:2a:3c:93:1c:5b:28:7e:e4:5f:6c:
         1a:14:aa:29:b1:18:07:b8:3d:a5:f3:59:ca:93:8d:ba:cd:f3:
         31:3f:da:15:8d:42:ce:41:81:3e:12:5a:d5:98:c9:83:c9:14:
         51:12:80:71:f6:63:54:e0:65:01:68:31:72:13:5f:9e:8f:a3:
         3d:85:50:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFIO/5rG05idea92oHG1FMaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OTU0ZDAxMDNhN2EzZTY1MjM1NGE3NDQ4OWY4NmRhZjlh
MWE1OWQwHhcNMjYxMDE3MDUwMDUzWhcNMjYxMDE4MDUwMDUzWjAzMTEwLwYDVQQD
EyhhN2YwYmNjMGUwNTQ2NGU3OGNmNDUwN2MzZTdjZTI0NmZlZGEwMzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RMHIceGLXNm8AyJ5KCTwof0/xB/
UbJlgm0nyuD4HUhlGzrb0UNAfb5lvayIk0KntVLuN6JUkrThJPFiRRstMVGTe8dx
Ho75F9+T8Ck0Y0lwG1ABmtPhk9JPiE5eZ7aJJbRK9XsD85bTeUWjKP/TKT+mqP8a
bi5ZGcAMXq5fzozZ0UlCzUjHWo2WkMbZEso4C3rk3OQv63HcpUg1rrIxQNY70jmE
FKZcqFq4/kT55jVBGSS/Dl2O/pwBZHJo6pUjgvrloTD7pOZB5G7O3+LrQajrzyFg
aZ+BIzVoFibt3MI7qVOj4bYg4OHd5yHTiC019YwEUcnmoCKYQQvyEhCQowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfwvMDgVGTnjPRQfD584kb+2gNKMB8GA1UdIwQY
MBaAFPaVTQEDp6PmUjVKdEifhtr5oaWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAt
ZjhjOWUwOTYyMzU0LzEvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAtZjhjOWUwOTYyMzU0
LzEvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPLB4raH
X4fnyXSvmXf6btkwNf1lONXDU5ylruIRgodejEDFtJqVyHk/EWa9wRoA1JePIAxC
Ta/MDnl3Tm8++x5qPTObNhQzfPkp5xj5bGaqrj6Yff3w3zWCA8pQTJNXagNyTyjT
1LMK0/8Z0KuexqKJIbKEfUXalgnf8WGJHOeDIVkKckB4o69jUaQ3YV5lYIe9XPZc
jEEOaC+juBEBsKkBciBE43wK9I7yJNwKpolsjnQoxtvG6/86Te8qPJMcWyh+5F9s
GhSqKbEYB7g9pfNZypONus3zMT/aFY1CzkGBPhJa1ZjJg8kUURKAcfZjVOBlAWgx
chNfno+jPYVQhA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:14:01 2026 by rpki-client