Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
File:                     Fi5IMpyL6O8gnplY2marAkAUXhk.mft (raw, json)
Hash identifier:          7PTgljKsxrssGEYwy+ZcSVaFkRnDejzAkicRzXCDTXQ=
Subject key identifier:   28:F5:5B:64:17:4C:45:45:BA:5F:CE:4B:DE:27:30:9E:68:D7:65:1F
Authority key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Certificate issuer:       /CN=162e48329c8be8ef209e9958da66ab0240145e19
Certificate serial:       01A14ACEEB3934F37E5EFABF91DE16A685C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
Manifest number:          0B89
Signing time:             Sat 17 Oct 2026 17:00:36 +0000
Manifest this update:     Sat 17 Oct 2026 17:00:36 +0000
Manifest next update:     Sun 18 Oct 2026 17:00:36 +0000
Files and hashes:         1: 62jZg4gngBAnPwivfw6fHLKrFR8.roa (hash: x5Xq81WhPxvz0KcW7Qb+lmuqrFvDsxsxDYK9R0dFh5A=)
                          2: Fi5IMpyL6O8gnplY2marAkAUXhk.crl (hash: 2glO2HjjP6QAeUuoJHppj0qG55jS30IC36IXHkxjnts=)
                          3: L1zbFMwgTo8k0cGpa43eL9rJSvs.roa (hash: 3nOYFWDqeUlGtXtuv/0p8OtC8pzPOMkeWtIsBYndPi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4a:ce:eb:39:34:f3:7e:5e:fa:bf:91:de:16:a6:85:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162e48329c8be8ef209e9958da66ab0240145e19
        Validity
            Not Before: Oct 17 17:00:36 2026 GMT
            Not After : Oct 18 17:00:36 2026 GMT
        Subject: CN=28f55b64174c4545ba5fce4bde27309e68d7651f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:2c:38:1c:4e:55:ff:16:7e:6f:1d:b8:ed:
                    d6:dd:cb:71:94:dd:c6:fb:af:6c:b8:cc:f3:25:ea:
                    3d:24:5c:58:74:94:dc:a1:e7:c5:a5:b6:34:8c:49:
                    c9:61:77:02:39:f2:f5:ea:2c:3b:e5:7a:5d:4b:b7:
                    e6:9d:52:f8:d5:63:a9:4e:5f:18:04:07:0e:1a:04:
                    62:74:ad:b7:f0:49:58:68:22:3d:93:31:0b:3c:24:
                    36:26:46:b9:59:3e:4a:c3:22:bd:fd:af:fd:46:23:
                    60:9e:d9:79:97:5e:2f:ca:b5:a1:41:23:a8:45:7e:
                    d2:be:d0:61:e0:15:99:45:ce:cc:ac:d9:9d:8a:80:
                    66:fe:ee:02:15:8f:02:0d:9f:0a:6e:4f:c3:76:e9:
                    29:a4:9d:6c:9c:32:17:2e:34:c0:68:7e:57:9a:b6:
                    f6:14:e7:2f:8f:5e:4f:ec:13:23:db:22:66:ba:5b:
                    45:47:53:ad:85:d2:5a:12:fc:fc:98:82:39:10:32:
                    ec:ec:17:b5:2a:03:17:09:8e:2b:3e:a3:c7:08:9b:
                    34:f0:0d:01:50:96:5e:e4:4a:52:3c:1f:9c:2e:14:
                    fa:3a:0f:bd:ca:a3:b4:7c:f3:24:d2:5b:a5:57:d9:
                    37:1f:c0:a7:2b:11:28:bf:dd:80:11:14:9a:6f:ca:
                    24:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F5:5B:64:17:4C:45:45:BA:5F:CE:4B:DE:27:30:9E:68:D7:65:1F
            X509v3 Authority Key Identifier:
                keyid:16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:8c:57:33:a3:2c:c9:61:99:37:13:b8:1c:56:b7:62:0b:ee:
         c8:b2:bf:64:cf:85:f8:84:3b:53:44:17:aa:23:f2:39:a4:85:
         a4:60:50:70:a2:f7:fd:da:7c:b6:98:2c:95:a3:34:7f:8e:7c:
         6e:26:2e:03:08:9a:56:0c:db:40:8b:ba:d8:f7:fa:01:12:91:
         35:d5:b1:40:5c:f3:c0:a9:db:9e:de:f6:9d:5e:d7:e5:80:e7:
         ac:26:02:ad:92:e6:70:4a:da:ee:83:e3:be:9e:1f:b1:11:48:
         b8:b1:e0:5e:3d:f2:7e:dc:1b:93:23:ac:24:0b:a7:2a:09:81:
         20:ec:b5:da:1a:8c:6d:fc:24:7b:c0:58:92:c3:51:f8:30:c2:
         5f:ef:6f:0f:97:a6:f4:1b:64:b3:a2:28:79:b6:99:6a:9d:06:
         b7:5c:3f:a7:f3:6b:fd:9d:72:9b:88:a3:25:a4:78:a2:d0:b3:
         ce:4e:22:eb:9c:90:7e:4b:e1:79:ec:0e:d5:5b:19:87:df:94:
         74:61:71:76:87:61:0a:92:cf:72:26:07:60:ec:8b:97:fb:9f:
         72:e3:0e:e5:02:ba:80:c1:f4:09:12:c0:a3:e3:63:91:23:50:
         dc:a4:20:88:c7:6c:26:ec:c3:e7:80:7b:09:aa:ab:6e:9c:5d:
         00:1d:60:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFKzus5NPN+Xvq/kd4WpoXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MmU0ODMyOWM4YmU4ZWYyMDllOTk1OGRhNjZhYjAyNDAx
NDVlMTkwHhcNMjYxMDE3MTcwMDM2WhcNMjYxMDE4MTcwMDM2WjAzMTEwLwYDVQQD
EygyOGY1NWI2NDE3NGM0NTQ1YmE1ZmNlNGJkZTI3MzA5ZTY4ZDc2NTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhssOBxOVf8Wfm8duO3W3ctxlN3G
+69suMzzJeo9JFxYdJTcoefFpbY0jEnJYXcCOfL16iw75XpdS7fmnVL41WOpTl8Y
BAcOGgRidK238ElYaCI9kzELPCQ2Jka5WT5KwyK9/a/9RiNgntl5l14vyrWhQSOo
RX7SvtBh4BWZRc7MrNmdioBm/u4CFY8CDZ8Kbk/DdukppJ1snDIXLjTAaH5Xmrb2
FOcvj15P7BMj2yJmultFR1OthdJaEvz8mII5EDLs7Be1KgMXCY4rPqPHCJs08A0B
UJZe5EpSPB+cLhT6Og+9yqO0fPMk0lulV9k3H8CnKxEov92AERSab8okfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj1W2QXTEVFul/OS94nMJ5o12UfMB8GA1UdIwQY
MBaAFBYuSDKci+jvIJ6ZWNpmqwJAFF4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmk1SU1weUw2TzhnbnBsWTJtYXJBa0FVWGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84ZTIwNjctMjgzYi00ZTRlLWI2N2Ut
NjlmMzNmZTFiNTMwLzEvRmk1SU1weUw2TzhnbnBsWTJtYXJBa0FVWGhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84ZTIwNjctMjgzYi00ZTRlLWI2N2UtNjlmMzNmZTFiNTMw
LzEvRmk1SU1weUw2TzhnbnBsWTJtYXJBa0FVWGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwYxXM6Ms
yWGZNxO4HFa3YgvuyLK/ZM+F+IQ7U0QXqiPyOaSFpGBQcKL3/dp8tpgslaM0f458
biYuAwiaVgzbQIu62Pf6ARKRNdWxQFzzwKnbnt72nV7X5YDnrCYCrZLmcEra7oPj
vp4fsRFIuLHgXj3yftwbkyOsJAunKgmBIOy12hqMbfwke8BYksNR+DDCX+9vD5em
9Btks6IoebaZap0Gt1w/p/Nr/Z1ym4ijJaR4otCzzk4i65yQfkvheewO1VsZh9+U
dGFxdodhCpLPciYHYOyLl/ufcuMO5QK6gMH0CRLAo+NjkSNQ3KQgiMdsJuzD54B7
CaqrbpxdAB1geQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 22:28:24 2026 by rpki-client