Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File:                     Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier:          aZATPqpTZxeO6jkItqojOzN9ztvQbthui1KBOufSygE=
Subject key identifier:   B8:E4:C6:F1:B8:8D:F9:70:2B:20:69:C9:CD:7E:72:75:EA:29:2D:E2
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer:       /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial:       01A148055A6526C258319C47B4CDF68FD072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number:          1B0C
Signing time:             Sat 17 Oct 2026 04:01:12 +0000
Manifest this update:     Sat 17 Oct 2026 04:01:12 +0000
Manifest next update:     Sun 18 Oct 2026 04:01:12 +0000
Files and hashes:         1: 3rJ7nyF6EzyPoY2hRA0UvIcCsx4.roa (hash: fE4J44+J8hH2s14ZGpX+cCUACFAAWair1/S0jgB+xAE=)
                          2: Axy-VDMaL0TttuQWr1HwszNqc0I.roa (hash: bbZhwLgQwTeviEfEB8kT+/Hr8GEpDxbaZvVMkhGxoa8=)
                          3: EIf4_e1IxdxiLFBKRrmbYkLdBhg.roa (hash: wTMfLnzpxmyagKAjlQHgrc2pzICPnW5ADwDSG8SyfAI=)
                          4: TX_u3ri8rca4P81egD9tMMtVs-E.roa (hash: VizDbLVqd0zmsz68Is1wbARP6+9Ai1vW465jIZXJ0vw=)
                          5: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: Z6DYX9+KmKKiM6V4UYOJcVshWNsrZ+ZNbkAA/AeSyxI=)
                          6: gnfK8SBpVOdVbxYnE0YvG_aCqwQ.roa (hash: 4HCQGxp9LRlzVGgeY9uvcPRB+giBsSJBc0o5g6+TINI=)
                          7: nlpW1LdUG8ccgcMsu_bYGBcmxBE.roa (hash: WjkJjvp8/U7WObhL1QFmDulfOKAgaqrKAeSX8GWbEKY=)
                          8: wtWJEYRFSG9Qv3ctSlt-PvC9YxU.roa (hash: zMI/aBSI0MnE5srRM6wJIzfTVWrBiFahbqJC56lWnfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:05:5a:65:26:c2:58:31:9c:47:b4:cd:f6:8f:d0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
        Validity
            Not Before: Oct 17 04:01:12 2026 GMT
            Not After : Oct 18 04:01:12 2026 GMT
        Subject: CN=b8e4c6f1b88df9702b2069c9cd7e7275ea292de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:aa:69:45:b6:0a:6f:01:2c:3b:51:df:71:dc:
                    a9:42:a7:63:2e:7d:03:d4:07:58:7a:b6:a1:2b:e0:
                    fa:08:23:b2:77:63:38:e4:7d:63:0e:4f:25:3b:a0:
                    b3:2f:af:78:a8:fa:48:e1:59:88:23:37:7e:17:b6:
                    60:d2:58:af:71:d9:73:7f:dc:fc:86:64:9d:2c:69:
                    44:d4:13:42:37:3c:97:5d:2d:44:a8:bf:04:ee:1a:
                    ce:8e:31:82:f8:fa:1d:7d:74:1c:cb:06:c3:31:bd:
                    17:c8:cc:53:65:64:38:b3:e1:ae:77:10:3d:45:dc:
                    83:37:7b:2d:d3:60:b7:bf:2f:e6:63:dd:78:e2:5b:
                    ac:b7:d7:4b:5b:5f:c9:85:97:4b:6f:f2:26:ea:7f:
                    dc:e5:bf:87:c7:c8:e8:aa:63:15:d4:f4:71:6e:7d:
                    6f:ca:a6:67:fa:4b:05:68:0d:a0:0f:b8:b1:f6:55:
                    4a:8d:29:db:08:fa:c6:56:10:50:da:f3:24:ce:d3:
                    f7:c3:af:77:eb:81:7e:19:c6:de:76:5f:86:18:f8:
                    47:a2:09:47:02:e2:a6:a2:16:4c:94:50:01:35:a0:
                    55:83:15:1d:7e:ca:0b:55:a8:f4:5f:6f:e7:b1:3e:
                    4b:b8:fb:f6:a6:36:72:3f:b5:4e:b5:8a:5d:6d:97:
                    9f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E4:C6:F1:B8:8D:F9:70:2B:20:69:C9:CD:7E:72:75:EA:29:2D:E2
            X509v3 Authority Key Identifier:
                keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ec:cd:fd:43:ec:30:78:f3:66:02:5c:ab:99:31:0a:77:bc:
         c5:3f:c9:5b:a8:c3:a4:fc:a3:d0:69:26:dc:82:25:2c:4b:6d:
         48:01:9a:56:70:94:7c:f1:cf:07:d2:43:25:bf:39:e0:bd:a7:
         a6:65:82:70:fd:43:93:2c:e3:97:1d:b1:1d:fe:7c:38:1f:0b:
         33:19:ed:11:a7:7f:5e:a9:ab:52:1b:9a:d7:f1:c7:90:42:41:
         92:b5:f8:e6:84:2a:0e:c9:53:be:fd:b0:6d:3d:b3:63:6f:c8:
         46:44:2d:ee:51:48:e5:d0:95:e1:c5:78:fe:50:f6:37:22:a9:
         1d:b7:23:fd:d0:ef:fa:01:ef:1e:85:bb:9e:e2:d5:56:dd:17:
         8e:25:ab:a0:47:00:79:cf:92:f6:8a:ef:95:e0:95:af:4c:06:
         0a:9b:b8:80:e6:7e:60:a9:38:89:13:3a:04:f1:48:b8:eb:31:
         e5:12:8b:34:20:f6:0d:6e:aa:10:b5:65:2b:79:11:3d:e8:14:
         07:ba:b3:18:61:6c:0c:0b:40:af:12:88:4f:38:eb:35:ca:0c:
         8a:1a:9d:27:29:9c:91:e4:0b:3b:3e:c5:79:c3:93:18:1e:c1:
         31:82:d5:ac:2b:2a:df:fd:06:97:10:dd:d8:3a:f8:56:81:d3:
         1e:a8:c3:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFIBVplJsJYMZxHtM32j9ByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2Y1MzAwN2M3OWNjNWUyZjJkNzM1NmJhOTEyMWE3OGMw
Yzc3MTQwHhcNMjYxMDE3MDQwMTEyWhcNMjYxMDE4MDQwMTEyWjAzMTEwLwYDVQQD
EyhiOGU0YzZmMWI4OGRmOTcwMmIyMDY5YzljZDdlNzI3NWVhMjkyZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKppRbYKbwEsO1HfcdypQqdjLn0D
1AdYerahK+D6CCOyd2M45H1jDk8lO6CzL694qPpI4VmIIzd+F7Zg0livcdlzf9z8
hmSdLGlE1BNCNzyXXS1EqL8E7hrOjjGC+PodfXQcywbDMb0XyMxTZWQ4s+GudxA9
RdyDN3st02C3vy/mY9144lust9dLW1/JhZdLb/Im6n/c5b+Hx8joqmMV1PRxbn1v
yqZn+ksFaA2gD7ix9lVKjSnbCPrGVhBQ2vMkztP3w69364F+Gcbedl+GGPhHoglH
AuKmohZMlFABNaBVgxUdfsoLVaj0X2/nsT5LuPv2pjZyP7VOtYpdbZefiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjkxvG4jflwKyBpyc1+cnXqKS3iMB8GA1UdIwQY
MBaAFE7PUwB8ecxeLy1zVrqRIaeMDHcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEt
Y2I4YjNhMDk0MjA5LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEtY2I4YjNhMDk0MjA5
LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuzN/UPs
MHjzZgJcq5kxCne8xT/JW6jDpPyj0Gkm3IIlLEttSAGaVnCUfPHPB9JDJb854L2n
pmWCcP1Dkyzjlx2xHf58OB8LMxntEad/XqmrUhua1/HHkEJBkrX45oQqDslTvv2w
bT2zY2/IRkQt7lFI5dCV4cV4/lD2NyKpHbcj/dDv+gHvHoW7nuLVVt0XjiWroEcA
ec+S9orvleCVr0wGCpu4gOZ+YKk4iRM6BPFIuOsx5RKLNCD2DW6qELVlK3kRPegU
B7qzGGFsDAtArxKITzjrNcoMihqdJymckeQLOz7FecOTGB7BMYLVrCsq3/0GlxDd
2Dr4VoHTHqjDYA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:01:28 2026 by rpki-client