Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File:                     fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier:          gDPHpFvYM2uXOZ8NSKReQjrGBZHoVFed7IGcyRJNQ4I=
Subject key identifier:   27:50:D8:54:CF:28:64:BD:52:F2:3C:85:53:3D:1E:72:5F:DE:38:23
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer:       /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial:       01A11BD09E7D45F5A1085FAF5409A7BBDDCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number:          1A94
Signing time:             Thu 08 Oct 2026 14:00:19 +0000
Manifest this update:     Thu 08 Oct 2026 14:00:19 +0000
Manifest next update:     Fri 09 Oct 2026 14:00:19 +0000
Files and hashes:         1: 5ruGjzi72EzHeNevEE3JGyLtXgQ.roa (hash: F631VpzOVt6zeqgnyepT7OlQYefuALhIBPjhvOj+SbM=)
                          2: MLTMNf6RdXQHgobliz7oe72JkjQ.roa (hash: vynBVcDFPo0FhDEU/VJwzCvxOSeIG5MJSs1ntfusClo=)
                          3: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: Y2bjvkiA0dMC+GurWlsC3kD9vU+RbysUsAWfe1gRJGs=)
                          4: fXZclwjMmJuKFUf7Q9P-NHbNEpQ.roa (hash: anvE7nbyIQqcqcLLGmm77d4AcDLATJhTxcyjOxhWcfo=)
                          5: qq9jEWnUkq7RixjGSRxp41ikMoQ.roa (hash: YTairbAOKk2TzoyqKR+ve0ERswXp2cOBJyd3vALW04Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:d0:9e:7d:45:f5:a1:08:5f:af:54:09:a7:bb:dd:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
        Validity
            Not Before: Oct  8 14:00:19 2026 GMT
            Not After : Oct  9 14:00:19 2026 GMT
        Subject: CN=2750d854cf2864bd52f23c85533d1e725fde3823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:19:9c:c3:0a:a6:ff:81:0d:43:60:d1:5f:d1:
                    b8:e8:39:ea:f2:c6:2c:31:5b:8b:b5:f4:83:18:18:
                    42:f8:4e:68:e2:83:41:07:74:db:ab:ac:50:e7:33:
                    8e:9c:8a:37:45:0b:ca:fc:a0:84:60:25:2a:cc:43:
                    06:d3:17:82:a5:27:cf:b2:39:9d:41:53:ce:7a:59:
                    1c:4b:09:c2:a4:f0:58:dc:e7:7c:6b:97:95:fb:bd:
                    a5:8f:de:6d:61:ed:70:87:27:fc:f9:55:73:c7:53:
                    f1:cf:83:e0:ca:3c:67:16:fb:09:8e:f7:77:0d:ff:
                    98:b9:e4:17:2c:40:f0:21:b8:55:56:06:ff:0f:ac:
                    4a:16:e1:e3:7a:c4:77:b6:ad:cf:30:89:a7:d2:75:
                    48:9c:d2:98:4f:71:94:4a:01:52:44:a0:9d:0a:0a:
                    3d:99:43:d4:fb:82:3e:66:07:1f:cc:67:2f:d2:6f:
                    00:47:e5:7d:23:e8:73:66:5a:bd:e0:fb:cc:11:0a:
                    ae:1e:b2:bf:6c:0d:f2:01:3b:02:57:ba:79:4a:f7:
                    b4:cc:f3:72:79:c5:73:fb:d7:c7:7b:bd:b9:ac:79:
                    dd:18:16:6a:0a:4d:ef:e4:4b:94:40:e9:03:a9:f7:
                    61:c7:45:fa:97:fe:c8:07:15:72:17:40:c3:6e:b3:
                    9c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:50:D8:54:CF:28:64:BD:52:F2:3C:85:53:3D:1E:72:5F:DE:38:23
            X509v3 Authority Key Identifier:
                keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:14:ee:05:4f:00:1c:4f:2f:a3:b7:bc:ab:ae:ca:9e:1d:ac:
         7e:b6:4f:9e:f5:12:cb:50:53:2a:ba:c9:b1:b6:6f:06:ae:3f:
         f8:49:8c:1a:b7:ab:b9:a9:39:8a:a1:bc:22:e3:8a:9e:8f:89:
         c4:9d:5e:96:bd:e4:0e:6d:5d:ab:62:ee:e8:2b:c0:13:e7:14:
         f6:38:16:f0:ee:aa:58:9d:30:d4:c8:84:bb:3b:cc:d3:0e:19:
         c6:77:4c:f5:96:6f:1a:83:04:c8:3f:bb:7d:08:80:23:31:0d:
         f8:c1:41:5a:72:d0:90:3c:b4:d2:7e:8f:23:3e:64:d0:11:52:
         c6:dc:90:9e:6c:bc:7a:8d:9e:67:fc:d6:88:a7:bb:ba:3e:3a:
         1e:80:da:62:dc:e0:49:0b:18:b3:e5:c9:72:f0:e9:20:b8:05:
         8b:41:70:b9:a4:50:bf:57:c5:ce:15:0d:59:99:b4:6f:03:d7:
         4c:80:f0:50:01:6c:bf:ba:1f:f0:7b:53:16:8d:1c:60:00:da:
         e2:17:c5:0a:b4:ab:2d:78:ec:4e:c0:fb:df:df:c4:6a:d4:17:
         3c:2b:b8:07:c9:2d:6a:7e:67:38:4c:21:d0:e8:60:1a:80:6b:
         68:d6:75:98:c7:69:31:61:65:fa:7a:bd:db:15:84:e3:fe:06:
         43:27:f2:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEb0J59RfWhCF+vVAmnu93KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNGQxYzg3OTBhOTEzZTgzMmM3MzNkZmY3NzhkZWU3OTEy
OTcwMGEwHhcNMjYxMDA4MTQwMDE5WhcNMjYxMDA5MTQwMDE5WjAzMTEwLwYDVQQD
EygyNzUwZDg1NGNmMjg2NGJkNTJmMjNjODU1MzNkMWU3MjVmZGUzODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRmcwwqm/4ENQ2DRX9G46Dnq8sYs
MVuLtfSDGBhC+E5o4oNBB3Tbq6xQ5zOOnIo3RQvK/KCEYCUqzEMG0xeCpSfPsjmd
QVPOelkcSwnCpPBY3Od8a5eV+72lj95tYe1whyf8+VVzx1Pxz4PgyjxnFvsJjvd3
Df+YueQXLEDwIbhVVgb/D6xKFuHjesR3tq3PMImn0nVInNKYT3GUSgFSRKCdCgo9
mUPU+4I+ZgcfzGcv0m8AR+V9I+hzZlq94PvMEQquHrK/bA3yATsCV7p5Sve0zPNy
ecVz+9fHe725rHndGBZqCk3v5EuUQOkDqfdhx0X6l/7IBxVyF0DDbrOcXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdQ2FTPKGS9UvI8hVM9HnJf3jgjMB8GA1UdIwQY
MBaAFH1NHIeQqRPoMscz3/d43ueRKXAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xYzYxODAtOTk1MC00Y2U4LTgxMWUt
ZjhkNjYyYjk2ZGFiLzEvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8xYzYxODAtOTk1MC00Y2U4LTgxMWUtZjhkNjYyYjk2ZGFi
LzEvZlUwY2g1Q3BFLWd5eHpQZjkzamU1NUVwY0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixTuBU8A
HE8vo7e8q67Knh2sfrZPnvUSy1BTKrrJsbZvBq4/+EmMGreruak5iqG8IuOKno+J
xJ1elr3kDm1dq2Lu6CvAE+cU9jgW8O6qWJ0w1MiEuzvM0w4ZxndM9ZZvGoMEyD+7
fQiAIzEN+MFBWnLQkDy00n6PIz5k0BFSxtyQnmy8eo2eZ/zWiKe7uj46HoDaYtzg
SQsYs+XJcvDpILgFi0FwuaRQv1fFzhUNWZm0bwPXTIDwUAFsv7of8HtTFo0cYADa
4hfFCrSrLXjsTsD739/EatQXPCu4B8ktan5nOEwh0OhgGoBraNZ1mMdpMWFl+nq9
2xWE4/4GQyfygw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 00:54:51 2026 by rpki-client