Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
File:                     94ItRZflST0VF4v7EOaEHdF-WJc.mft (raw, json)
Hash identifier:          X2boIbLKUEucScdlunjm5WVbuQlJlxIVLJK9XXQbxJA=
Subject key identifier:   BE:0B:19:53:F2:DD:4F:09:58:76:0E:46:20:00:A2:4B:ED:69:05:01
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Certificate issuer:       /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial:       01A14E07C97D57D39ECFAF0943CAC64F9DFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
Manifest number:          1AB2
Signing time:             Sun 18 Oct 2026 08:01:35 +0000
Manifest this update:     Sun 18 Oct 2026 08:01:35 +0000
Manifest next update:     Mon 19 Oct 2026 08:01:35 +0000
Files and hashes:         1: 94ItRZflST0VF4v7EOaEHdF-WJc.crl (hash: HAW2zclSjASWMsgK/CrwM44bwoVeRqJUYl28AJUc/hg=)
                          2: Ooaqx-AaUuIu05bcvjpYwUT3gg0.roa (hash: WYWgX4Kkm4uSctkElEdv5T7C0cdbRdRsvjVMLWI0Es0=)
                          3: ccNKaJaHrf3w7WRgXmlLGSGlh3g.roa (hash: GNXHKw8JOl4x62WkohXxkLR6V3oFi4zgRDQxr+0jQ1k=)
                          4: eM23ZnD8jpZVPByDqpueUzr7VuM.roa (hash: XpFVafOc5evuKnLSP6z1Ow2v+VF3PM8B+n8NEsUA1rw=)
                          5: tcsP5brAEAunOOZmw7uzUCdknZY.roa (hash: 2QWWwqVUcIdmiuZeMh2Xyt6tD8Eiy3oPwgkIaE2T/X0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 05:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4e:07:c9:7d:57:d3:9e:cf:af:09:43:ca:c6:4f:9d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
        Validity
            Not Before: Oct 18 08:01:35 2026 GMT
            Not After : Oct 19 08:01:35 2026 GMT
        Subject: CN=be0b1953f2dd4f0958760e462000a24bed690501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:c0:fc:6c:ad:c2:78:af:93:b9:ee:58:88:
                    15:26:8d:a6:3a:73:71:4f:a8:2e:89:81:05:9e:09:
                    19:c9:2f:c6:82:63:3d:65:65:d5:ec:20:57:e9:98:
                    3f:bd:03:4c:cc:eb:a9:f7:63:29:29:53:62:09:19:
                    07:27:c3:13:5e:15:37:10:d6:d3:f7:9a:0f:cf:98:
                    eb:cb:e0:87:37:4c:c4:35:ec:7e:fb:22:b1:1b:98:
                    e0:5d:7a:35:29:75:6d:1f:34:75:47:09:0f:fa:89:
                    0c:e9:33:ed:87:32:24:89:b4:4b:7d:41:a4:b7:e7:
                    45:6c:79:4a:7e:86:d0:83:62:57:ee:c7:63:2f:69:
                    65:17:af:73:36:5a:c8:cb:69:27:67:d0:02:3d:f1:
                    63:ea:fe:7f:38:f5:aa:78:d7:d0:48:e3:ac:29:aa:
                    1a:77:c1:ba:15:6e:46:d2:ce:3e:a0:17:36:69:bd:
                    33:72:a2:0e:94:1c:ca:84:65:8e:1d:97:e3:fa:81:
                    1c:d7:56:7f:51:7b:f9:00:0d:8a:64:82:f7:11:bc:
                    39:08:0a:e1:25:6b:9c:2d:90:f6:2f:6f:ee:8c:c5:
                    1b:ef:33:f6:30:b6:e3:da:e6:91:b4:23:84:b2:74:
                    66:4e:e3:e5:59:47:aa:27:e3:63:b4:2b:61:7c:e7:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0B:19:53:F2:DD:4F:09:58:76:0E:46:20:00:A2:4B:ED:69:05:01
            X509v3 Authority Key Identifier:
                keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3a:92:ec:0a:7b:d5:5a:a4:fe:a0:64:f2:ef:14:e8:e1:03:
         1a:35:d3:ba:d6:0d:e4:e7:f5:cb:e2:14:cc:2a:a2:0e:15:17:
         aa:73:b3:9e:93:6b:e7:18:19:a6:8e:2f:d1:0a:dd:4a:6c:72:
         ef:d2:b5:9b:f6:40:b8:6c:7b:60:01:47:36:f3:06:f4:84:ae:
         85:de:2c:3c:30:af:7f:ca:63:c6:56:65:b8:27:83:61:f0:0e:
         e0:cb:b6:d0:72:e8:99:aa:23:c3:bd:56:17:7e:ce:31:3b:82:
         09:fe:17:68:7b:23:fa:b8:70:2a:5d:cb:d8:f2:f4:40:8f:87:
         98:9a:9e:81:81:12:4e:a3:f4:50:1a:9f:80:94:22:0b:28:b2:
         cd:88:62:a3:35:da:8d:bd:d8:a2:88:ed:fa:98:a1:ed:3f:b7:
         b5:2f:e1:83:e3:22:22:35:1e:40:ff:ae:ae:c0:f2:b7:43:96:
         2c:a1:a3:16:66:ee:a7:73:9e:a7:40:47:ff:94:83:8f:f8:78:
         23:52:43:af:b3:18:c2:b6:e8:60:9d:a5:a1:16:47:ab:36:51:
         88:91:64:d0:cb:b2:ad:4a:6d:75:e8:d2:28:68:29:c4:9d:af:
         74:ee:38:50:44:5c:f1:44:1f:b8:8f:a4:af:48:19:52:52:05:
         4a:d5:16:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFOB8l9V9Oez68JQ8rGT537MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODIyZDQ1OTdlNTQ5M2QxNTE3OGJmYjEwZTY4NDFkZDE3
ZTU4OTcwHhcNMjYxMDE4MDgwMTM1WhcNMjYxMDE5MDgwMTM1WjAzMTEwLwYDVQQD
EyhiZTBiMTk1M2YyZGQ0ZjA5NTg3NjBlNDYyMDAwYTI0YmVkNjkwNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYTA/Gytwnivk7nuWIgVJo2mOnNx
T6guiYEFngkZyS/GgmM9ZWXV7CBX6Zg/vQNMzOup92MpKVNiCRkHJ8MTXhU3ENbT
95oPz5jry+CHN0zENex++yKxG5jgXXo1KXVtHzR1RwkP+okM6TPthzIkibRLfUGk
t+dFbHlKfobQg2JX7sdjL2llF69zNlrIy2knZ9ACPfFj6v5/OPWqeNfQSOOsKaoa
d8G6FW5G0s4+oBc2ab0zcqIOlBzKhGWOHZfj+oEc11Z/UXv5AA2KZIL3Ebw5CArh
JWucLZD2L2/ujMUb7zP2MLbj2uaRtCOEsnRmTuPlWUeqJ+NjtCthfOcvqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4LGVPy3U8JWHYORiAAokvtaQUBMB8GA1UdIwQY
MBaAFPeCLUWX5Uk9FReL+xDmhB3RfliXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zMTA4MWEtOGI1YS00OWVjLTkwMzYt
ODYyZTk5OTczZmMzLzEvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zMTA4MWEtOGI1YS00OWVjLTkwMzYtODYyZTk5OTczZmMz
LzEvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDqS7Ap7
1Vqk/qBk8u8U6OEDGjXTutYN5Of1y+IUzCqiDhUXqnOznpNr5xgZpo4v0QrdSmxy
79K1m/ZAuGx7YAFHNvMG9ISuhd4sPDCvf8pjxlZluCeDYfAO4Mu20HLomaojw71W
F37OMTuCCf4XaHsj+rhwKl3L2PL0QI+HmJqegYESTqP0UBqfgJQiCyiyzYhiozXa
jb3Yoojt+pih7T+3tS/hg+MiIjUeQP+ursDyt0OWLKGjFmbup3Oep0BH/5SDj/h4
I1JDr7MYwrboYJ2loRZHqzZRiJFk0MuyrUptdejSKGgpxJ2vdO44UERc8UQfuI+k
r0gZUlIFStUWGA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 13:17:25 2026 by rpki-client