Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
File:                     0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft (raw, json)
Hash identifier:          VAdIFMdM6oPX3g5efQ0vY4o2xITwRLHPc0kVi+e1ulo=
Subject key identifier:   29:EF:1C:BD:FB:78:19:49:05:05:E9:AA:D3:BC:F9:6D:D8:B1:30:A1
Authority key identifier: D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
Certificate issuer:       /CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Certificate serial:       01A13FDE29C50DFBE33FD9E5D88CBA440AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
Manifest number:          1A36
Signing time:             Thu 15 Oct 2026 14:01:26 +0000
Manifest this update:     Thu 15 Oct 2026 14:01:26 +0000
Manifest next update:     Fri 16 Oct 2026 14:01:26 +0000
Files and hashes:         1: 0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl (hash: Bs2+oYNqo67LNqjuwsZfzEptkLsvncg+Pc/bmsg9dyQ=)
                          2: F1ia1Weaubn8eKzVn8s3JrMAdx4.roa (hash: N+hr1h8NlI+FxivU5QhlJspaJlXj+zDKR5ugxOa3HpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:de:29:c5:0d:fb:e3:3f:d9:e5:d8:8c:ba:44:0a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
        Validity
            Not Before: Oct 15 14:01:26 2026 GMT
            Not After : Oct 16 14:01:26 2026 GMT
        Subject: CN=29ef1cbdfb7819490505e9aad3bcf96dd8b130a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:dc:26:c8:ad:9e:aa:7c:e5:0c:8c:a2:16:
                    74:8e:86:59:49:1e:8d:ac:ee:f2:f9:f9:16:c8:89:
                    ff:66:c5:04:93:7e:db:60:0d:4a:73:d0:63:d4:19:
                    5f:57:ba:ca:30:9f:de:8f:5b:7f:e5:9a:f8:4a:c7:
                    d8:f5:f0:d1:fe:50:49:d8:c4:ca:51:e7:5f:0a:84:
                    90:a2:2d:11:69:63:7d:c4:ae:40:a5:aa:90:c9:31:
                    95:9c:b2:4a:96:fa:a1:a7:3a:f4:ce:1f:7a:98:e7:
                    2e:d5:37:9f:5c:8f:bc:91:1c:5a:ed:4d:40:af:48:
                    69:5f:9b:8e:b7:da:15:29:3d:80:80:d3:7e:e4:3f:
                    1f:26:a9:90:24:4c:d2:57:f8:e7:4a:c9:54:09:94:
                    21:96:e9:0b:47:db:1c:ef:29:46:f4:c2:58:0e:31:
                    5a:f7:9b:09:38:2c:c9:c2:ab:e2:5b:f5:38:91:64:
                    27:87:e0:91:9a:2c:33:28:ae:dd:20:6a:8e:92:3e:
                    f9:e6:e3:1f:f5:2f:6e:ee:fa:80:61:28:c4:ca:f4:
                    16:a1:ec:bc:5b:dc:5c:97:91:1b:bb:34:02:49:4b:
                    90:08:25:7f:a8:55:0b:bf:7e:fc:ac:83:56:4d:0a:
                    f2:40:69:7c:47:39:d7:56:e8:e9:97:c4:70:9c:e9:
                    6e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EF:1C:BD:FB:78:19:49:05:05:E9:AA:D3:BC:F9:6D:D8:B1:30:A1
            X509v3 Authority Key Identifier:
                keyid:D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a9:31:93:25:ac:5a:70:fb:27:cd:50:6a:8e:df:3d:93:a0:
         b7:05:e8:03:1d:6e:ab:4f:5a:63:fa:96:fe:00:7b:10:e8:54:
         81:2f:ad:e8:21:94:0b:2a:76:25:8f:97:07:fb:80:70:0c:16:
         49:1d:59:e4:58:d6:d3:f2:3e:87:c9:07:af:fd:c8:d3:69:c0:
         53:e3:b2:30:fa:8b:a3:4b:e5:2a:ea:51:0b:32:f9:e2:f0:dc:
         e5:a8:a7:2d:2b:b0:16:c7:c5:af:8b:0a:1c:e7:80:09:f2:dd:
         f5:1f:ef:28:b7:ea:67:97:aa:34:bb:e4:60:7f:3e:18:1b:b2:
         a4:2f:d1:30:00:4f:6e:b3:d7:2d:21:65:92:58:b5:33:b4:84:
         eb:74:f1:b6:5f:ba:79:66:c9:5b:3d:eb:11:2f:33:cc:4d:ca:
         d4:b2:69:13:a6:71:de:4d:25:ee:04:11:20:95:28:08:32:26:
         eb:c8:1b:c8:c8:d2:6c:b2:4e:f1:9a:64:cf:07:69:ec:d7:ab:
         0b:9e:c8:c0:4e:16:d2:d9:24:04:43:de:55:51:88:b0:4e:67:
         49:cd:b2:fe:60:c0:19:bd:9d:15:dc:93:cb:9b:9d:c8:d4:a3:
         91:0b:41:ab:40:2a:d9:d4:ac:d7:c3:ef:a5:01:80:9d:7b:00:
         9c:54:99:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/3inFDfvjP9nl2Iy6RArJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNmQ0Yzc1Y2ViZTg5NjE0Y2YyZTdlMmU2MTRjMDM2ZjZm
NTNlZTIwHhcNMjYxMDE1MTQwMTI2WhcNMjYxMDE2MTQwMTI2WjAzMTEwLwYDVQQD
EygyOWVmMWNiZGZiNzgxOTQ5MDUwNWU5YWFkM2JjZjk2ZGQ4YjEzMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MDcJsitnqp85QyMohZ0joZZSR6N
rO7y+fkWyIn/ZsUEk37bYA1Kc9Bj1BlfV7rKMJ/ej1t/5Zr4SsfY9fDR/lBJ2MTK
UedfCoSQoi0RaWN9xK5ApaqQyTGVnLJKlvqhpzr0zh96mOcu1TefXI+8kRxa7U1A
r0hpX5uOt9oVKT2AgNN+5D8fJqmQJEzSV/jnSslUCZQhlukLR9sc7ylG9MJYDjFa
95sJOCzJwqviW/U4kWQnh+CRmiwzKK7dIGqOkj755uMf9S9u7vqAYSjEyvQWoey8
W9xcl5EbuzQCSUuQCCV/qFULv378rINWTQryQGl8RznXVujpl8RwnOluYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnvHL37eBlJBQXpqtO8+W3YsTChMB8GA1UdIwQY
MBaAFNJtTHXOvolhTPLn4uYUwDb29T7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG0xTWRjNi1pV0ZNOHVmaTVoVEFOdmIxUHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xYWEwYTMtZmNhYi00ODFlLTg2ZjUt
ODg5MzhiZDUzYzE2LzEvMG0xTWRjNi1pV0ZNOHVmaTVoVEFOdmIxUHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xYWEwYTMtZmNhYi00ODFlLTg2ZjUtODg5MzhiZDUzYzE2
LzEvMG0xTWRjNi1pV0ZNOHVmaTVoVEFOdmIxUHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqkxkyWs
WnD7J81Qao7fPZOgtwXoAx1uq09aY/qW/gB7EOhUgS+t6CGUCyp2JY+XB/uAcAwW
SR1Z5FjW0/I+h8kHr/3I02nAU+OyMPqLo0vlKupRCzL54vDc5ainLSuwFsfFr4sK
HOeACfLd9R/vKLfqZ5eqNLvkYH8+GBuypC/RMABPbrPXLSFlkli1M7SE63Txtl+6
eWbJWz3rES8zzE3K1LJpE6Zx3k0l7gQRIJUoCDIm68gbyMjSbLJO8Zpkzwdp7Ner
C57IwE4W0tkkBEPeVVGIsE5nSc2y/mDAGb2dFdyTy5udyNSjkQtBq0Aq2dSs18Pv
pQGAnXsAnFSZdw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:08:42 2026 by rpki-client