Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
File:                     Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft (raw, json)
Hash identifier:          RaQ7Q/i2s0ok966KbssF+7vcK6t2q49fpnOtXgR1psE=
Subject key identifier:   7F:B2:05:E8:54:84:87:7C:44:A2:14:59:33:12:93:95:97:34:38:DB
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Certificate issuer:       /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial:       01A0F7FBC5EEE81F760DDEDA8DC606383D11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
Manifest number:          191D
Signing time:             Thu 01 Oct 2026 15:01:07 +0000
Manifest this update:     Thu 01 Oct 2026 15:01:07 +0000
Manifest next update:     Fri 02 Oct 2026 15:01:07 +0000
Files and hashes:         1: 1H9YHalQ74Abbv3sXsUKQSDoMVE.roa (hash: f2UqrTu+rTVQYyRTJRyRotq9l86Y4aGXMKz+QTY2ILk=)
                          2: 2S7uFkbSO-czpY7zbwj6z2QbI9I.roa (hash: SH3jErffYx2mXExMTCZzsNaB8q9HLfNDIPRMlxgvCYw=)
                          3: L3204t5xqv_RGAUaDjepK8F4Hqw.roa (hash: vbMIqhNdM6+SVCu/75ex+GgHrK58xyd+mi2MfbKpNh0=)
                          4: PyBjXQZrLm_XoSes6Qp8-TYErJE.roa (hash: JNNn9PiNuypGKN/ipfjnvlB7BQDoZPs1ToLY5JVlOUM=)
                          5: Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl (hash: 6FQEt8ARgpihvYXUOLF8H5AWt+qvAoEz2Y9mhK01DHY=)
                          6: S7WXL-Nx9MlA3zg4adYRLPxrpBo.roa (hash: mX6+SayjpKMIocVqlVrM4qpi0n+3CKCDO1ooCblBO5Y=)
                          7: VeExbCBM04z_5eeOS8006EH3K5w.roa (hash: i0/J43ADWGsJraeM1oQhbEis6mYiwMnFDpLvwBsheV4=)
                          8: gItssa-B0b0X--YWiS_dUYtbwpY.roa (hash: iVUV0DWttepgFWqqg65SaE3OlJIh4Ep6A/pLvMT4l8I=)
                          9: qc_dQh5RKoHE-mlJq9abZyl5JUI.roa (hash: B95dhYhAYCE48Hv3JKdbp0E5RF/uMFx9nFUHRc4ClXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f7:fb:c5:ee:e8:1f:76:0d:de:da:8d:c6:06:38:3d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
        Validity
            Not Before: Oct  1 15:01:07 2026 GMT
            Not After : Oct  2 15:01:07 2026 GMT
        Subject: CN=7fb205e85484877c44a2145933129395973438db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:36:5c:69:f9:97:fc:ef:bb:9b:22:ee:88:
                    fb:b7:95:1f:81:49:21:49:c0:23:cf:14:37:ce:a3:
                    3a:6f:65:78:c7:30:86:eb:31:4f:71:86:6a:91:cb:
                    dc:de:52:8d:2a:f1:20:d3:4f:5e:f6:85:a0:ea:9a:
                    98:5c:43:80:73:94:3d:81:66:8d:3a:50:bf:70:09:
                    b6:14:a5:b8:8a:57:f1:49:ae:07:66:42:d4:41:bc:
                    4a:49:a1:b0:c9:3b:1a:0b:c6:ad:61:78:a3:51:6e:
                    fa:b1:c3:6b:73:c8:8e:b9:1c:ca:61:f4:9a:ee:1a:
                    7a:aa:47:cb:03:42:5e:36:8d:99:b6:96:69:e5:c9:
                    f9:64:a9:43:81:9c:09:88:f1:ad:1e:30:a0:79:e2:
                    fd:e5:8e:c9:9f:49:85:51:77:6a:c2:70:e7:75:8d:
                    9d:a7:1e:f4:20:41:04:69:3a:49:cc:8b:ff:14:6e:
                    c9:d1:c4:9b:1b:80:94:33:df:7c:af:db:a7:5e:50:
                    a2:50:7e:5a:18:31:31:d6:b6:6a:06:c4:ec:c6:9f:
                    59:bc:70:2d:77:12:83:92:2c:24:fc:62:b9:b9:cd:
                    e6:79:b2:30:ba:e3:9e:05:11:1f:58:2c:a4:a7:09:
                    6c:25:9b:0f:87:fc:55:c7:58:4f:9e:23:13:b5:d5:
                    38:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B2:05:E8:54:84:87:7C:44:A2:14:59:33:12:93:95:97:34:38:DB
            X509v3 Authority Key Identifier:
                keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:94:7d:f1:ab:97:4d:aa:e6:de:59:4b:a2:ee:7a:f7:2c:77:
         5a:b0:d1:2a:e5:d0:40:2a:74:8a:8c:dd:fa:b1:c1:89:b6:59:
         27:dc:1d:72:ed:54:58:b5:5b:6c:d7:8c:5f:4d:52:04:83:94:
         d6:cb:6e:19:a9:19:90:8e:80:36:0b:28:e7:24:97:7e:1d:49:
         ee:8e:65:24:c3:09:73:04:a3:c1:4f:5a:8c:75:00:45:fb:53:
         2c:e3:ee:50:0f:54:fb:45:d2:53:3a:05:c2:a2:c3:16:dd:d5:
         bc:e6:d1:95:5f:14:eb:ee:90:cc:da:e1:04:f7:41:4b:bc:0f:
         30:ac:ca:63:c7:6d:00:50:82:17:fb:4d:e0:f0:b6:0d:75:30:
         49:59:5b:51:c2:f2:ab:c5:8f:a2:56:4d:da:42:28:e4:9b:07:
         85:e0:89:7f:a7:62:7e:7b:f2:68:7c:af:f3:aa:95:01:82:20:
         b2:ff:30:83:8d:f2:2a:ac:e3:8f:e5:4e:b4:fb:57:e4:0b:11:
         2f:17:98:e3:13:18:bd:89:da:71:c3:1f:5e:7a:b6:5c:9b:51:
         28:55:da:b7:f5:4a:68:d9:cf:a8:0c:c4:4d:09:54:a9:28:84:
         ed:38:06:62:10:c1:3b:a3:63:7a:76:3d:9e:09:06:9e:5a:43:
         5d:e4:0c:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD3+8Xu6B92Dd7ajcYGOD0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NGRjZmE5NjM5OTcxNjY5MmQyNDVhODA0ODg3YzA5ZGE0
NTFmOGYwHhcNMjYxMDAxMTUwMTA3WhcNMjYxMDAyMTUwMTA3WjAzMTEwLwYDVQQD
Eyg3ZmIyMDVlODU0ODQ4NzdjNDRhMjE0NTkzMzEyOTM5NTk3MzQzOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdk2XGn5l/zvu5si7oj7t5UfgUkh
ScAjzxQ3zqM6b2V4xzCG6zFPcYZqkcvc3lKNKvEg009e9oWg6pqYXEOAc5Q9gWaN
OlC/cAm2FKW4ilfxSa4HZkLUQbxKSaGwyTsaC8atYXijUW76scNrc8iOuRzKYfSa
7hp6qkfLA0JeNo2ZtpZp5cn5ZKlDgZwJiPGtHjCgeeL95Y7Jn0mFUXdqwnDndY2d
px70IEEEaTpJzIv/FG7J0cSbG4CUM998r9unXlCiUH5aGDEx1rZqBsTsxp9ZvHAt
dxKDkiwk/GK5uc3mebIwuuOeBREfWCykpwlsJZsPh/xVx1hPniMTtdU4iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+yBehUhId8RKIUWTMSk5WXNDjbMB8GA1UdIwQY
MBaAFEZNz6ljmXFmktJFqASIfAnaRR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTct
YWYxZjM2ODExMDk4LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTctYWYxZjM2ODExMDk4
LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJR98auX
Tarm3llLou569yx3WrDRKuXQQCp0iozd+rHBibZZJ9wdcu1UWLVbbNeMX01SBIOU
1stuGakZkI6ANgso5ySXfh1J7o5lJMMJcwSjwU9ajHUARftTLOPuUA9U+0XSUzoF
wqLDFt3VvObRlV8U6+6QzNrhBPdBS7wPMKzKY8dtAFCCF/tN4PC2DXUwSVlbUcLy
q8WPolZN2kIo5JsHheCJf6difnvyaHyv86qVAYIgsv8wg43yKqzjj+VOtPtX5AsR
LxeY4xMYvYnaccMfXnq2XJtRKFXat/VKaNnPqAzETQlUqSiE7TgGYhDBO6NjenY9
ngkGnlpDXeQMEA==
-----END CERTIFICATE-----
Generated at Thu Oct 1 23:24:22 2026 by rpki-client