Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File:                     jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier:          GYzUrOIOebkUqefz3KcW7M5mrxLYTQtaVYIpf027SKs=
Subject key identifier:   F3:E1:5A:9E:82:CF:55:05:11:3F:B2:7E:B9:42:B1:6A:E9:55:CB:9B
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer:       /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial:       01A181191E68ED32E4A13620888A78258782
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number:          1AC6
Signing time:             Wed 28 Oct 2026 06:01:09 +0000
Manifest this update:     Wed 28 Oct 2026 06:01:09 +0000
Manifest next update:     Thu 29 Oct 2026 06:01:09 +0000
Files and hashes:         1: Qx0ddBKlSvnACpzjugQJrfWkEs4.roa (hash: aJD4jYhJCqk7+8Q4F//sAqddVJklJ5JHNsKetWjBmH4=)
                          2: dElS2LHmvzOJL3jvJ8t1FWNOXRQ.roa (hash: pKoUZvmEW4liSwgxySiejWpEorumEVEvbMzgYr8Wr84=)
                          3: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: moSdEZhWy3KQTawVwFGivhTkcF2PZ5ME7u5yjmlFA5g=)
                          4: lKM1gHFyylwdRUKMaY5fLo9cQo4.roa (hash: s0i27z26ycWaj2Sw/lN75r12wdUfV6zW3S6uMy4zqRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:19:1e:68:ed:32:e4:a1:36:20:88:8a:78:25:87:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
        Validity
            Not Before: Oct 28 06:01:09 2026 GMT
            Not After : Oct 29 06:01:09 2026 GMT
        Subject: CN=f3e15a9e82cf5505113fb27eb942b16ae955cb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:72:7f:11:b1:23:a8:1e:7f:55:5e:42:65:
                    b6:50:ce:5f:4e:5c:ce:2b:91:22:1c:33:e7:65:da:
                    63:c4:2b:51:c3:db:9e:f0:56:1d:f6:8a:bc:c8:66:
                    82:f9:c0:05:3e:d9:1e:ec:c9:a2:b2:dc:30:cb:d8:
                    92:8e:10:8b:cf:b7:59:f0:70:9d:60:f8:34:ef:a0:
                    34:a7:d6:12:af:83:e4:7a:3b:4e:7c:16:12:63:11:
                    9c:c3:bf:42:b1:14:45:73:1d:31:aa:5e:31:a3:64:
                    cf:52:10:19:c0:45:0a:25:ca:bc:16:3e:e9:3c:f5:
                    b8:68:3b:49:d1:59:3a:07:e4:0d:d9:40:ca:65:5c:
                    ab:9e:e2:95:45:ef:f6:3a:5d:f0:1c:0f:62:12:d3:
                    15:1a:f7:92:20:cd:9a:9c:d1:9e:02:48:19:e9:fd:
                    f6:01:7c:9e:17:cf:b2:25:61:84:1b:bd:f7:6e:2e:
                    fa:da:74:70:86:52:49:95:83:4e:92:70:36:0b:b4:
                    11:1e:b3:aa:9a:d8:6f:4b:82:8e:5f:2b:c1:b8:bf:
                    29:80:97:30:f7:6e:c9:95:9a:ba:bc:fd:34:14:e5:
                    3b:f9:e5:37:2f:2b:75:62:e1:52:ff:01:a7:f4:9d:
                    11:23:83:69:fe:4d:4c:e4:1a:8d:e5:b1:db:71:74:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E1:5A:9E:82:CF:55:05:11:3F:B2:7E:B9:42:B1:6A:E9:55:CB:9B
            X509v3 Authority Key Identifier:
                keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:0c:81:f0:ff:78:c0:4c:cc:cc:fb:89:d2:1f:10:a1:46:dc:
         5e:7f:1f:0c:f9:2b:b9:75:c6:4c:da:cb:87:44:1d:1f:f4:e3:
         01:32:09:97:c1:5e:80:26:ce:65:47:de:66:a7:61:5e:63:b2:
         c6:f7:74:9f:08:94:10:e6:aa:7b:ab:11:14:3f:97:ca:76:f4:
         6d:34:55:17:fe:be:70:71:ff:b7:32:95:e8:35:84:76:2b:a7:
         00:2d:eb:cf:5c:7e:0c:67:a9:36:e7:3a:c4:09:f0:79:26:6f:
         5d:1d:b2:e2:13:c9:a7:86:93:b0:e2:5c:ab:13:3d:37:15:1f:
         b9:34:91:7e:ec:c0:6c:44:db:1e:56:d8:3c:a2:2b:56:6a:b6:
         6d:f4:c7:59:1a:96:35:3f:61:c5:65:32:51:d2:7e:f9:c6:2e:
         9d:16:de:44:9e:2b:01:84:a7:03:35:1d:ab:26:8c:4c:99:d0:
         d0:c7:0c:21:f5:e2:c7:9a:95:cd:fa:ca:55:51:b6:ad:b2:3b:
         ea:01:0b:bf:fe:aa:29:c4:00:ab:8f:40:90:a8:16:b9:6d:bb:
         2d:b1:cb:73:03:e1:a2:8b:03:e3:b3:a3:a4:99:24:80:38:cf:
         6c:9a:af:38:63:06:4e:a5:ac:8e:bd:99:6a:31:b8:7f:e0:16:
         6e:89:bf:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBGR5o7TLkoTYgiIp4JYeCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODc0MDc5OWM5MWMyNjMwYTgwOTIxNzhkYjgyNGYzYTg4
OWE3NWYwHhcNMjYxMDI4MDYwMTA5WhcNMjYxMDI5MDYwMTA5WjAzMTEwLwYDVQQD
EyhmM2UxNWE5ZTgyY2Y1NTA1MTEzZmIyN2ViOTQyYjE2YWU5NTVjYjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB1yfxGxI6gef1VeQmW2UM5fTlzO
K5EiHDPnZdpjxCtRw9ue8FYd9oq8yGaC+cAFPtke7Mmistwwy9iSjhCLz7dZ8HCd
YPg076A0p9YSr4PkejtOfBYSYxGcw79CsRRFcx0xql4xo2TPUhAZwEUKJcq8Fj7p
PPW4aDtJ0Vk6B+QN2UDKZVyrnuKVRe/2Ol3wHA9iEtMVGveSIM2anNGeAkgZ6f32
AXyeF8+yJWGEG733bi762nRwhlJJlYNOknA2C7QRHrOqmthvS4KOXyvBuL8pgJcw
927JlZq6vP00FOU7+eU3Lyt1YuFS/wGn9J0RI4Np/k1M5BqN5bHbcXSBwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPhWp6Cz1UFET+yfrlCsWrpVcubMB8GA1UdIwQY
MBaAFI2HQHmckcJjCoCSF424JPOoiadfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4Mjkt
NTJiODE2NjgyOWQ3LzEvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4MjktNTJiODE2NjgyOWQ3
LzEvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAyB8P94
wEzMzPuJ0h8QoUbcXn8fDPkruXXGTNrLh0QdH/TjATIJl8FegCbOZUfeZqdhXmOy
xvd0nwiUEOaqe6sRFD+Xynb0bTRVF/6+cHH/tzKV6DWEdiunAC3rz1x+DGepNuc6
xAnweSZvXR2y4hPJp4aTsOJcqxM9NxUfuTSRfuzAbETbHlbYPKIrVmq2bfTHWRqW
NT9hxWUyUdJ++cYunRbeRJ4rAYSnAzUdqyaMTJnQ0McMIfXix5qVzfrKVVG2rbI7
6gELv/6qKcQAq49AkKgWuW27LbHLcwPhoosD47OjpJkkgDjPbJqvOGMGTqWsjr2Z
ajG4f+AWbom/1w==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:37:29 2026 by rpki-client