Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
File:                     b1GlChfEHhkEHD-xCwqDkielyQU.mft (raw, json)
Hash identifier:          3kZAceNgHwp6AsrDWjWV1PI7xhhRuvf88NoZLNM5KdA=
Subject key identifier:   E8:18:22:C1:A1:EF:18:2A:14:7B:EE:88:9F:E7:BD:7B:ED:2D:EB:33
Authority key identifier: 6F:51:A5:0A:17:C4:1E:19:04:1C:3F:B1:0B:0A:83:92:27:A5:C9:05
Certificate issuer:       /CN=6f51a50a17c41e19041c3fb10b0a839227a5c905
Certificate serial:       01A1747013D15254E19C6DEEDB6F0B58BFC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
Manifest number:          0240
Signing time:             Sun 25 Oct 2026 19:01:04 +0000
Manifest this update:     Sun 25 Oct 2026 19:01:04 +0000
Manifest next update:     Mon 26 Oct 2026 19:01:04 +0000
Files and hashes:         1: PZMuJ8QpgBXhv1xbGqZzJ29BgDQ.roa (hash: jrIRAMtDwbYUDnGzpj0BHU287oxSgfwbWoyH7EMZ7jI=)
                          2: b1GlChfEHhkEHD-xCwqDkielyQU.crl (hash: d73LPmFgoW/ZhiVFbbzpPPo0v35YXt4HbZKjq5FrGAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:70:13:d1:52:54:e1:9c:6d:ee:db:6f:0b:58:bf:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f51a50a17c41e19041c3fb10b0a839227a5c905
        Validity
            Not Before: Oct 25 19:01:04 2026 GMT
            Not After : Oct 26 19:01:04 2026 GMT
        Subject: CN=e81822c1a1ef182a147bee889fe7bd7bed2deb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3d:49:ed:04:40:c7:fe:c9:e5:24:04:37:4d:
                    88:37:b0:bf:c3:0e:ce:dc:39:45:b2:ad:9e:51:0e:
                    cc:6c:c4:31:ea:7b:86:1a:e4:05:98:06:5d:3f:77:
                    e5:03:30:a6:08:30:4e:d8:6c:ab:c2:9c:5e:18:59:
                    01:53:e3:cf:5b:c0:e1:1e:10:be:a5:1d:b4:96:4d:
                    70:c7:9a:30:03:86:76:d9:d0:fa:9f:03:29:d8:30:
                    bb:39:b9:43:28:9e:28:0e:b8:ef:35:55:d2:b4:d3:
                    ab:14:07:db:95:6b:c1:75:40:00:74:8e:19:14:54:
                    94:bf:d5:d5:28:27:48:63:3e:76:7c:8b:0c:18:26:
                    75:88:d0:93:52:22:fa:ba:97:80:be:e2:d6:f8:e4:
                    b8:f8:9e:4b:b3:b9:db:b1:e0:c1:4a:2b:64:89:54:
                    d3:ce:4c:59:e4:35:3d:ea:7f:ca:56:56:b0:83:f4:
                    eb:86:7f:f8:47:da:70:66:86:e6:35:be:9e:fb:58:
                    50:82:bf:14:40:3c:00:13:75:9d:0d:21:1f:d1:db:
                    88:21:c2:79:99:1b:ed:52:7c:5e:4c:c7:8d:61:d4:
                    49:80:6e:52:25:52:48:33:41:ad:5f:8a:ef:3c:05:
                    21:83:5f:77:73:89:cd:42:2e:31:b9:56:f1:7d:59:
                    cf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:18:22:C1:A1:EF:18:2A:14:7B:EE:88:9F:E7:BD:7B:ED:2D:EB:33
            X509v3 Authority Key Identifier:
                keyid:6F:51:A5:0A:17:C4:1E:19:04:1C:3F:B1:0B:0A:83:92:27:A5:C9:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ad:a4:36:55:d1:92:c8:9e:03:1a:81:d9:57:4c:2c:17:d0:
         63:23:c1:17:b6:d9:1c:da:f2:b9:c5:9c:3c:58:2c:66:d1:4b:
         6c:f1:5c:52:b8:0a:da:68:0a:d9:8f:e6:81:df:c6:55:44:f5:
         2f:66:7e:d7:17:2e:86:b8:fb:e0:6c:a8:ee:26:84:97:6f:5a:
         f0:dc:3c:33:c5:fa:88:28:13:22:3e:4d:52:99:86:5d:36:83:
         ac:fd:32:18:c6:b3:3f:c5:98:fa:e3:47:31:03:84:d6:91:5d:
         20:08:30:6f:dd:56:33:8f:10:d6:8e:3a:b2:84:79:14:cd:d3:
         37:c4:ec:83:fe:90:be:13:45:a7:6d:0a:cc:a1:f5:8d:fe:bc:
         83:44:34:fa:ef:0c:80:c1:9c:1b:b0:48:f1:ce:88:1c:6d:14:
         ff:9a:c1:e6:79:9c:9e:4c:53:43:5b:9b:79:44:79:23:55:92:
         c9:02:f3:77:1f:e6:e2:07:9a:6e:e2:cd:cc:62:91:04:71:21:
         56:2c:0f:a2:4e:4b:e9:22:38:b7:75:e9:3b:be:84:64:f9:5a:
         36:4b:b3:01:6c:10:21:3f:bb:ef:b2:c3:1a:0a:7b:40:48:67:
         d6:1b:57:1b:ac:11:57:94:09:95:6a:30:6b:3a:85:a9:e5:e0:
         22:ef:f5:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF0cBPRUlThnG3u228LWL/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNTFhNTBhMTdjNDFlMTkwNDFjM2ZiMTBiMGE4MzkyMjdh
NWM5MDUwHhcNMjYxMDI1MTkwMTA0WhcNMjYxMDI2MTkwMTA0WjAzMTEwLwYDVQQD
EyhlODE4MjJjMWExZWYxODJhMTQ3YmVlODg5ZmU3YmQ3YmVkMmRlYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT1J7QRAx/7J5SQEN02IN7C/ww7O
3DlFsq2eUQ7MbMQx6nuGGuQFmAZdP3flAzCmCDBO2GyrwpxeGFkBU+PPW8DhHhC+
pR20lk1wx5owA4Z22dD6nwMp2DC7OblDKJ4oDrjvNVXStNOrFAfblWvBdUAAdI4Z
FFSUv9XVKCdIYz52fIsMGCZ1iNCTUiL6upeAvuLW+OS4+J5Ls7nbseDBSitkiVTT
zkxZ5DU96n/KVlawg/Trhn/4R9pwZobmNb6e+1hQgr8UQDwAE3WdDSEf0duIIcJ5
mRvtUnxeTMeNYdRJgG5SJVJIM0GtX4rvPAUhg193c4nNQi4xuVbxfVnPzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgYIsGh7xgqFHvuiJ/nvXvtLeszMB8GA1UdIwQY
MBaAFG9RpQoXxB4ZBBw/sQsKg5InpckFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjFHbENoZkVIaGtFSEQteEN3cURraWVseVFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xNjE1M2QtZmU1OC00NjI1LWJhNmUt
MDkyYjlmYjZhNTQxLzEvYjFHbENoZkVIaGtFSEQteEN3cURraWVseVFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xNjE1M2QtZmU1OC00NjI1LWJhNmUtMDkyYjlmYjZhNTQx
LzEvYjFHbENoZkVIaGtFSEQteEN3cURraWVseVFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIa2kNlXR
ksieAxqB2VdMLBfQYyPBF7bZHNryucWcPFgsZtFLbPFcUrgK2mgK2Y/mgd/GVUT1
L2Z+1xcuhrj74Gyo7iaEl29a8Nw8M8X6iCgTIj5NUpmGXTaDrP0yGMazP8WY+uNH
MQOE1pFdIAgwb91WM48Q1o46soR5FM3TN8Tsg/6QvhNFp20KzKH1jf68g0Q0+u8M
gMGcG7BI8c6IHG0U/5rB5nmcnkxTQ1ubeUR5I1WSyQLzdx/m4geabuLNzGKRBHEh
ViwPok5L6SI4t3XpO76EZPlaNkuzAWwQIT+777LDGgp7QEhn1htXG6wRV5QJlWow
azqFqeXgIu/1WQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:44 2026 by rpki-client