Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
File:                     ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json)
Hash identifier:          /sSKYbzZtgCRZkHqAwh4EqePrAIU209O6hKcknxmZ+M=
Subject key identifier:   7E:A7:15:FB:81:E3:EC:93:07:3B:C6:9C:66:CA:F8:0D:42:D6:39:AF
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Certificate issuer:       /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial:       01A17770C214320CF30DBF36F6C6D6335F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
Manifest number:          139A
Signing time:             Mon 26 Oct 2026 09:00:40 +0000
Manifest this update:     Mon 26 Oct 2026 09:00:40 +0000
Manifest next update:     Tue 27 Oct 2026 09:00:40 +0000
Files and hashes:         1: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: JEtq373i2d78GZlG35WLRooWmjrmFjzGzJzDphG1ptk=)
                          2: ZcMDnxFKg86WG985x8gSYpkiw0w.roa (hash: NWzoV3X+tjCKZ4ahSvdzMzLxfudtWlBZs1TQLyd53h4=)
                          3: lIVhHM1g1TW5ddfPvkY5_fzGoKU.roa (hash: DS6+mQyyS1WgqS8CIrjWgik6/BiJxSFGFw65yEtb7os=)
                          4: sADfRLRIwEm-KVdFT8jWlHL8oSg.roa (hash: EZEYubhTSXGqlxWAm0J4OXdKM/7Z+1zdS/2lIIhyTjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 09:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:77:70:c2:14:32:0c:f3:0d:bf:36:f6:c6:d6:33:5f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
        Validity
            Not Before: Oct 26 09:00:40 2026 GMT
            Not After : Oct 27 09:00:40 2026 GMT
        Subject: CN=7ea715fb81e3ec93073bc69c66caf80d42d639af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b5:1f:af:89:be:ce:50:a4:b3:e8:85:fe:5a:
                    b5:76:5c:9b:53:01:61:60:da:e5:c8:67:44:f1:a7:
                    fe:f7:39:bc:ec:13:d3:93:3a:53:e5:ae:08:39:97:
                    d3:78:b5:a2:15:0f:50:fc:89:40:2c:22:e6:02:bd:
                    23:7a:1a:b7:69:d7:cf:c4:81:91:d3:cf:db:fd:f9:
                    c2:a7:95:d4:d8:e1:4f:1a:82:6d:22:62:1a:1d:20:
                    1e:9f:53:21:bb:5e:ee:2f:27:d0:86:75:0e:d1:19:
                    d1:20:7d:c7:a0:97:ed:d0:0d:13:e6:6b:41:e7:9c:
                    ae:b4:e6:b8:5d:87:51:77:cd:3a:73:6b:7d:4e:80:
                    9b:d9:70:f1:bc:48:31:97:e3:44:63:a9:ed:29:ed:
                    1e:d5:31:8f:84:9f:6f:df:75:ad:b1:39:44:d5:74:
                    ab:1a:d3:de:1c:8c:7e:68:e0:da:66:ab:fa:13:c0:
                    de:f0:03:ad:7e:d1:05:89:72:05:dd:9a:7b:4f:a5:
                    09:2f:73:37:fa:61:20:38:db:17:87:fb:3e:00:d8:
                    38:02:db:6e:e6:a5:bd:c2:88:0b:17:63:6b:92:36:
                    17:6f:c7:7d:f9:ab:6d:76:76:4e:6a:3c:3e:5b:03:
                    45:19:f3:4c:3b:fa:df:16:30:f2:59:47:f9:9a:e3:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A7:15:FB:81:E3:EC:93:07:3B:C6:9C:66:CA:F8:0D:42:D6:39:AF
            X509v3 Authority Key Identifier:
                keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:25:79:04:24:11:fb:34:61:7c:68:78:40:32:d3:62:06:8d:
         66:98:e6:b5:22:25:59:21:a3:b6:39:6a:e5:31:52:37:b5:7f:
         73:56:b6:d6:ee:40:03:d9:41:6c:6e:68:1c:a6:b6:17:dd:81:
         c7:17:2f:e9:d2:ed:89:27:c8:54:59:4a:98:c3:cd:43:ea:fd:
         7f:1f:f2:fd:a2:41:79:99:f6:b4:22:5d:8e:73:b5:7f:87:7a:
         9a:e2:40:0b:f8:36:be:1f:96:c4:46:aa:67:42:27:4f:c1:a1:
         b8:a8:e9:9e:0c:4e:c9:db:64:b6:37:c5:a1:25:6c:21:69:1d:
         9f:a4:81:02:cc:aa:76:c6:9c:89:ea:73:ee:de:49:8e:04:71:
         cd:6d:ba:c0:fd:e2:e8:91:b7:ec:b1:8a:f3:fd:6d:44:66:3b:
         73:a8:0b:eb:48:52:1c:76:56:c2:09:34:f7:91:57:d2:28:b6:
         db:94:21:16:28:2d:ad:3b:b8:8a:3a:91:b0:ff:2b:46:67:63:
         b8:82:a1:a3:cd:bd:64:b2:c1:a3:be:a5:4c:b0:09:54:c7:94:
         61:cd:8a:a5:ed:b4:a9:c4:a9:62:45:7a:f7:a7:b7:f4:1a:67:
         d1:97:34:32:92:d7:9d:de:f3:9d:89:ba:64:d0:1e:ff:46:e6:
         a0:8d:5a:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3cMIUMgzzDb829sbWM19bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjkyZTAzYTczMTc5NmUxZDdiMTQ4YjFkZDIzNWQxNDQz
NTJmNWQwHhcNMjYxMDI2MDkwMDQwWhcNMjYxMDI3MDkwMDQwWjAzMTEwLwYDVQQD
Eyg3ZWE3MTVmYjgxZTNlYzkzMDczYmM2OWM2NmNhZjgwZDQyZDYzOWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbUfr4m+zlCks+iF/lq1dlybUwFh
YNrlyGdE8af+9zm87BPTkzpT5a4IOZfTeLWiFQ9Q/IlALCLmAr0jehq3adfPxIGR
08/b/fnCp5XU2OFPGoJtImIaHSAen1Mhu17uLyfQhnUO0RnRIH3HoJft0A0T5mtB
55yutOa4XYdRd806c2t9ToCb2XDxvEgxl+NEY6ntKe0e1TGPhJ9v33WtsTlE1XSr
GtPeHIx+aODaZqv6E8De8AOtftEFiXIF3Zp7T6UJL3M3+mEgONsXh/s+ANg4Attu
5qW9wogLF2NrkjYXb8d9+attdnZOajw+WwNFGfNMO/rfFjDyWUf5muPJuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6nFfuB4+yTBzvGnGbK+A1C1jmvMB8GA1UdIwQY
MBaAFAEpLgOnMXluHXsUix3SNdFENS9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTkt
MGRmN2RmNGQ1YjAxLzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTktMGRmN2RmNGQ1YjAx
LzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSV5BCQR
+zRhfGh4QDLTYgaNZpjmtSIlWSGjtjlq5TFSN7V/c1a21u5AA9lBbG5oHKa2F92B
xxcv6dLtiSfIVFlKmMPNQ+r9fx/y/aJBeZn2tCJdjnO1f4d6muJAC/g2vh+WxEaq
Z0InT8GhuKjpngxOydtktjfFoSVsIWkdn6SBAsyqdsaciepz7t5JjgRxzW26wP3i
6JG37LGK8/1tRGY7c6gL60hSHHZWwgk095FX0ii225QhFigtrTu4ijqRsP8rRmdj
uIKho829ZLLBo76lTLAJVMeUYc2Kpe20qcSpYkV696e39Bpn0Zc0MpLXnd7znYm6
ZNAe/0bmoI1ahQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 17:51:14 2026 by rpki-client