Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File:                     oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier:          IJJ17hjolMla0UJs/p5zhI7hrXCtLV3zsK/3Ti5Rybg=
Subject key identifier:   53:4F:4A:A7:13:71:D2:55:9E:6E:2F:12:AF:4E:EB:65:F1:A7:CB:D1
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer:       /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial:       01A15E8CF007103268C97D25A3A803DDDD14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number:          0CD0
Signing time:             Wed 21 Oct 2026 13:00:57 +0000
Manifest this update:     Wed 21 Oct 2026 13:00:57 +0000
Manifest next update:     Thu 22 Oct 2026 13:00:57 +0000
Files and hashes:         1: 8Xy3JsOZp8agZio6JEl9loRjlFY.asa (hash: TlktL9oV1UI2Vlhdx1LCfEJgVLcoU4hMjN/LcKxuLUg=)
                          2: GrPbowD1xhzEQt0mGonYCE0CqTQ.asa (hash: DOZHKT4cbMp9ZejcaCrBqRpFGvg17kAFTmcg90xNqwM=)
                          3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: yfwFF4xRS3/veicnRXh+2NPdgoRhW0Emzbs/4xxP7AA=)
                          4: t98OBQe0WNUYSBCzWPOvMNNdCCU.roa (hash: T3bx2AzYlPYawd2JV44/SVYg6RGUmJnlWF/n7EwddAA=)
                          5: us1GSIhm55Kw0WlTx_Qmja-c9Vg.roa (hash: 2udVHZgWrsMsX5HZqlWRXTTnXgRNJReWWU+1z/MPcVA=)
                          6: vbW9HDnSvJmxsqC-cV5z-907X4o.roa (hash: RVRq1+9gitJwQNotHLkJdZpm6YORt32/tbHB/qnAsaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5e:8c:f0:07:10:32:68:c9:7d:25:a3:a8:03:dd:dd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
        Validity
            Not Before: Oct 21 13:00:57 2026 GMT
            Not After : Oct 22 13:00:57 2026 GMT
        Subject: CN=534f4aa71371d2559e6e2f12af4eeb65f1a7cbd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e5:da:25:91:ca:95:d5:89:58:51:68:e2:02:
                    91:b5:56:17:32:82:55:c4:a7:d4:a4:04:c0:0a:a9:
                    b3:0e:cd:2b:05:4e:61:8f:f1:c9:73:6a:42:71:5f:
                    86:6a:bd:f2:33:bd:9f:d5:54:1a:cf:cb:af:f0:19:
                    70:e0:49:dd:11:19:41:4a:4a:1f:ce:00:81:9e:5a:
                    91:b9:7e:af:d3:6e:02:f1:ac:d0:b3:a1:5f:71:34:
                    be:a0:a2:ad:b5:e0:93:e2:1e:64:06:8a:27:da:d5:
                    be:aa:c6:63:a9:4f:2c:ef:b7:90:4b:9a:6f:71:9e:
                    3a:77:b6:26:db:5a:84:8a:9a:9f:57:cb:0b:90:f5:
                    fc:24:e3:b4:09:9a:43:67:75:68:b0:e2:71:bb:d5:
                    74:f8:d3:1b:a5:ae:df:24:22:b6:9d:f8:1c:75:2a:
                    d9:ed:5c:45:8a:db:7c:b7:08:04:e6:04:49:50:cb:
                    0b:da:7b:0a:01:85:5c:08:87:c2:83:cf:42:eb:f5:
                    d6:1f:ff:23:dc:26:ba:ef:74:de:ec:45:86:6d:47:
                    f5:77:df:29:83:ae:2f:a2:02:10:f9:e1:da:fc:68:
                    c8:d4:3f:2e:51:36:32:8f:e4:f2:26:78:10:60:bc:
                    43:77:93:91:6d:dc:b7:e3:52:2f:ae:e7:84:3c:31:
                    9d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4F:4A:A7:13:71:D2:55:9E:6E:2F:12:AF:4E:EB:65:F1:A7:CB:D1
            X509v3 Authority Key Identifier:
                keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:18:d3:61:bf:10:78:2f:93:75:34:00:d6:9a:5a:0e:62:2d:
         27:30:7c:11:bd:ba:8d:c0:a8:13:8a:39:80:8d:24:df:2f:a0:
         00:bf:b5:4f:16:16:e1:9a:04:c8:3d:f7:b0:a6:66:ff:da:8c:
         a2:bb:6e:5b:8e:da:3d:ad:69:e2:21:ab:e6:05:76:90:b9:00:
         82:a5:4b:69:f0:37:49:1b:f3:b9:96:30:7e:63:a7:5b:0d:26:
         7f:8e:09:e8:15:46:e1:5e:65:8a:db:18:eb:04:cd:9b:f8:d0:
         ed:2e:d8:57:fb:50:d8:f9:a0:ed:10:be:2e:78:bf:6c:23:b9:
         cb:8b:26:0a:15:31:0f:95:20:42:b7:fc:32:5c:55:6e:d2:ac:
         4a:b0:51:8b:f7:d0:d7:8f:a3:d8:d4:53:51:b9:8d:8a:5f:26:
         4c:95:2e:00:82:37:7a:9b:e8:f8:0c:0a:57:f6:6e:bc:1a:d8:
         39:1e:50:f0:1b:07:76:a1:7e:b1:c4:53:0d:b9:6a:13:7d:ec:
         db:1b:67:39:bc:f5:e6:c8:81:01:5d:07:6a:77:a3:02:76:bf:
         49:1e:b5:b6:d2:46:8e:2d:b7:28:c2:e3:ec:eb:9e:9f:c2:e6:
         6f:86:e3:80:31:ea:28:1c:71:ca:ec:33:f4:17:18:70:7e:77:
         f0:3e:3e:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFejPAHEDJoyX0lo6gD3d0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODE2NGQ5OTYxYTE2ZDJlZmY3NzNmNTAyNzgyMWU5ZDJi
ZDM3NDAwHhcNMjYxMDIxMTMwMDU3WhcNMjYxMDIyMTMwMDU3WjAzMTEwLwYDVQQD
Eyg1MzRmNGFhNzEzNzFkMjU1OWU2ZTJmMTJhZjRlZWI2NWYxYTdjYmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uXaJZHKldWJWFFo4gKRtVYXMoJV
xKfUpATACqmzDs0rBU5hj/HJc2pCcV+Gar3yM72f1VQaz8uv8Blw4EndERlBSkof
zgCBnlqRuX6v024C8azQs6FfcTS+oKKtteCT4h5kBoon2tW+qsZjqU8s77eQS5pv
cZ46d7Ym21qEipqfV8sLkPX8JOO0CZpDZ3VosOJxu9V0+NMbpa7fJCK2nfgcdSrZ
7VxFitt8twgE5gRJUMsL2nsKAYVcCIfCg89C6/XWH/8j3Ca673Te7EWGbUf1d98p
g64vogIQ+eHa/GjI1D8uUTYyj+TyJngQYLxDd5ORbdy341IvrueEPDGdPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNPSqcTcdJVnm4vEq9O62Xxp8vRMB8GA1UdIwQY
MBaAFKGBZNmWGhbS7/dz9QJ4IenSvTdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUt
MTUyMzgwM2ZhZGFmLzEvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUtMTUyMzgwM2ZhZGFm
LzEvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhjTYb8Q
eC+TdTQA1ppaDmItJzB8Eb26jcCoE4o5gI0k3y+gAL+1TxYW4ZoEyD33sKZm/9qM
ortuW47aPa1p4iGr5gV2kLkAgqVLafA3SRvzuZYwfmOnWw0mf44J6BVG4V5litsY
6wTNm/jQ7S7YV/tQ2Pmg7RC+Lni/bCO5y4smChUxD5UgQrf8MlxVbtKsSrBRi/fQ
14+j2NRTUbmNil8mTJUuAII3epvo+AwKV/ZuvBrYOR5Q8BsHdqF+scRTDblqE33s
2xtnObz15siBAV0HanejAna/SR61ttJGji23KMLj7Ouen8Lmb4bjgDHqKBxxyuwz
9BcYcH538D4+pA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:50:51 2026 by rpki-client