Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
File:                     00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json)
Hash identifier:          ffR/l6wdUrlRR6ETVIxMoyR1Bb2uJyFmxQvk8nay2es=
Subject key identifier:   89:D5:A1:97:2D:07:33:9D:E4:A1:5E:07:AD:6F:0B:C2:3D:FC:27:39
Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
Certificate issuer:       /CN=d346e5d46291f6bc53b965865051ba399749eb2d
Certificate serial:       01A1420432F759D9CED4075F1F0C68E91C48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
Manifest number:          064F
Signing time:             Fri 16 Oct 2026 00:02:13 +0000
Manifest this update:     Fri 16 Oct 2026 00:02:13 +0000
Manifest next update:     Sat 17 Oct 2026 00:02:13 +0000
Files and hashes:         1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: F4iWbWYo1pkP9wN7wa5vBHWtR1cZ66ptamO/LnGgBPw=)
                          2: Fb3aBBcJ_RU5gPWUY71udWZuQ_o.roa (hash: VnpK440llW/db9ofXXkT+hMi7FL519qaQ5nOCrY4q+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:42:04:32:f7:59:d9:ce:d4:07:5f:1f:0c:68:e9:1c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d
        Validity
            Not Before: Oct 16 00:02:13 2026 GMT
            Not After : Oct 17 00:02:13 2026 GMT
        Subject: CN=89d5a1972d07339de4a15e07ad6f0bc23dfc2739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:6a:07:70:58:2c:dd:6d:cc:de:07:89:86:
                    db:0f:4e:3f:59:44:13:06:42:dc:fa:af:5b:6d:30:
                    a9:3d:1b:5b:12:6c:ee:c3:e8:51:db:c9:2a:fb:64:
                    49:e4:16:7b:93:53:fa:5f:80:a1:c6:cd:34:1c:fb:
                    a2:ab:9c:11:c8:cb:3d:ff:a3:fd:87:7c:d7:68:99:
                    b8:b0:11:98:b6:b6:72:71:2e:ab:5c:c8:27:a7:4b:
                    7f:7e:92:5c:be:0f:e2:5f:6f:80:a5:18:db:6d:b3:
                    62:f4:b7:13:c5:75:07:fc:ce:ef:f5:70:77:59:51:
                    5b:37:08:e7:72:0d:d3:76:58:93:c0:1d:52:47:5f:
                    96:56:67:87:5e:f7:dc:ff:b4:42:f6:25:16:85:c0:
                    f4:c5:c5:54:f8:d5:74:02:25:02:96:36:5f:c6:ff:
                    8f:25:d5:7a:d1:fa:c9:11:5b:e9:e1:bb:36:06:cc:
                    d0:85:22:92:dc:a7:f7:38:fe:0a:f0:ee:c1:50:7f:
                    5b:1e:d5:0a:b8:09:09:c6:19:a7:f7:4f:06:3f:04:
                    02:8d:85:c9:f9:82:21:bf:a6:38:9b:bd:b8:23:ed:
                    37:54:f2:75:3a:63:d9:f9:4c:34:29:19:34:8b:db:
                    6b:ab:b4:3d:c7:43:98:46:5f:c8:66:1e:e1:4b:51:
                    3c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D5:A1:97:2D:07:33:9D:E4:A1:5E:07:AD:6F:0B:C2:3D:FC:27:39
            X509v3 Authority Key Identifier:
                keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d6:34:85:71:b8:5b:28:98:c0:e4:d9:51:65:91:6b:c9:ec:
         2e:12:e4:ca:8e:83:58:93:2e:4d:75:fe:f7:94:dc:c8:3f:74:
         e1:02:08:75:d5:a5:9d:ad:87:9f:4b:e6:e8:ad:ce:6e:14:fd:
         48:81:d7:a0:ac:0e:64:4b:14:5c:72:c4:4e:40:2f:4d:fc:e3:
         f9:47:d3:ba:c5:f9:06:bb:66:9d:40:a2:7d:3a:5e:eb:71:3a:
         83:9b:60:68:cd:f5:b3:5e:ca:4e:ad:04:2b:60:1b:c8:aa:37:
         25:1c:3e:6f:cb:34:ee:f9:fc:11:0b:26:db:38:73:08:3c:00:
         c0:6b:1e:e8:d3:b7:ff:b1:78:88:b1:2d:9f:9b:fd:c2:2a:ab:
         13:99:28:22:26:82:fa:a3:38:e2:2c:60:ff:d0:41:b9:53:01:
         1c:f3:e1:dc:2b:34:bf:3d:ee:84:1a:a1:71:1e:b5:e4:2f:a1:
         0c:b9:51:6e:52:e1:4d:b8:85:cf:1d:20:9b:54:c2:ed:3a:e6:
         8e:2e:66:ff:df:a9:05:a4:89:93:0f:43:ff:e7:03:26:04:9d:
         5c:b5:5e:e7:f5:c1:9b:8b:29:40:41:d7:6c:44:d2:17:5c:6a:
         72:92:57:b6:43:5a:f7:e2:39:c1:c3:11:17:d3:c3:79:62:95:
         b3:11:c5:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFCBDL3WdnO1AdfHwxo6RxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDZlNWQ0NjI5MWY2YmM1M2I5NjU4NjUwNTFiYTM5OTc0
OWViMmQwHhcNMjYxMDE2MDAwMjEzWhcNMjYxMDE3MDAwMjEzWjAzMTEwLwYDVQQD
Eyg4OWQ1YTE5NzJkMDczMzlkZTRhMTVlMDdhZDZmMGJjMjNkZmMyNzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8dqB3BYLN1tzN4HiYbbD04/WUQT
BkLc+q9bbTCpPRtbEmzuw+hR28kq+2RJ5BZ7k1P6X4Chxs00HPuiq5wRyMs9/6P9
h3zXaJm4sBGYtrZycS6rXMgnp0t/fpJcvg/iX2+ApRjbbbNi9LcTxXUH/M7v9XB3
WVFbNwjncg3TdliTwB1SR1+WVmeHXvfc/7RC9iUWhcD0xcVU+NV0AiUCljZfxv+P
JdV60frJEVvp4bs2BszQhSKS3Kf3OP4K8O7BUH9bHtUKuAkJxhmn908GPwQCjYXJ
+YIhv6Y4m724I+03VPJ1OmPZ+Uw0KRk0i9trq7Q9x0OYRl/IZh7hS1E8UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInVoZctBzOd5KFeB61vC8I9/Cc5MB8GA1UdIwQY
MBaAFNNG5dRikfa8U7llhlBRujmXSestMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83YzhlOWMtZWM0OC00YTkwLTg2ZTUt
M2U5NDNmOTdmZjMxLzEvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83YzhlOWMtZWM0OC00YTkwLTg2ZTUtM2U5NDNmOTdmZjMx
LzEvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadY0hXG4
WyiYwOTZUWWRa8nsLhLkyo6DWJMuTXX+95TcyD904QIIddWlna2Hn0vm6K3ObhT9
SIHXoKwOZEsUXHLETkAvTfzj+UfTusX5BrtmnUCifTpe63E6g5tgaM31s17KTq0E
K2AbyKo3JRw+b8s07vn8EQsm2zhzCDwAwGse6NO3/7F4iLEtn5v9wiqrE5koIiaC
+qM44ixg/9BBuVMBHPPh3Cs0vz3uhBqhcR615C+hDLlRblLhTbiFzx0gm1TC7Trm
ji5m/9+pBaSJkw9D/+cDJgSdXLVe5/XBm4spQEHXbETSF1xqcpJXtkNa9+I5wcMR
F9PDeWKVsxHFZw==
-----END CERTIFICATE-----
Generated at Fri Oct 16 02:39:32 2026 by rpki-client