Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
File:                     SOowwPKOAiacV2W_SgRWd8onlKU.mft (raw, json)
Hash identifier:          9xKp6K9i+RDCLfQH//pHZjw54G5y/t+clQa3y6iFspg=
Subject key identifier:   4B:6E:E8:10:B8:59:01:69:FA:09:44:D3:30:66:37:C1:79:0F:E3:B7
Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
Certificate issuer:       /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Certificate serial:       01A17DE1D79F1A860CD833085CA4ED1437C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
Manifest number:          16CD
Signing time:             Tue 27 Oct 2026 15:01:55 +0000
Manifest this update:     Tue 27 Oct 2026 15:01:55 +0000
Manifest next update:     Wed 28 Oct 2026 15:01:55 +0000
Files and hashes:         1: QUGDzQXyufF4cTbxCFKpDXDDu0Y.roa (hash: 8BFiaRg39psluNeIpVd2PWr39z5J747/91yNbr4CXuY=)
                          2: SOowwPKOAiacV2W_SgRWd8onlKU.crl (hash: zbh1IGFiWzP73mKoh1JYc1j5VFxEHYM65rlh+6kwjDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:e1:d7:9f:1a:86:0c:d8:33:08:5c:a4:ed:14:37:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
        Validity
            Not Before: Oct 27 15:01:55 2026 GMT
            Not After : Oct 28 15:01:55 2026 GMT
        Subject: CN=4b6ee810b8590169fa0944d3306637c1790fe3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:19:e1:98:55:0c:78:f6:92:b0:48:47:a6:be:
                    a9:fd:cc:ef:7d:4f:07:88:ff:24:1f:aa:88:be:31:
                    bb:b4:39:e8:48:d0:78:94:2f:27:96:b0:b1:d7:a6:
                    53:1b:f8:ae:50:eb:6b:3e:31:12:c8:02:87:47:dd:
                    88:51:b6:99:c7:15:fb:57:f3:cb:bc:4f:b2:ed:e8:
                    d7:67:4e:31:06:1e:f4:5e:28:2f:49:8e:db:6f:40:
                    95:aa:b3:f3:48:f3:26:b1:52:9b:12:e4:20:4e:5a:
                    42:75:fa:88:9c:75:34:63:61:d3:94:19:03:ad:49:
                    09:0b:ff:82:06:3d:d2:03:a3:7e:19:6b:bc:54:4a:
                    ac:94:41:11:70:1c:bf:21:ad:0d:5d:ff:a7:6b:96:
                    ef:ea:f4:25:37:65:27:a2:f7:b8:b4:91:8f:47:77:
                    4a:e0:fb:72:b2:51:71:1a:86:a3:c9:15:b0:9a:7e:
                    d1:ef:69:e2:c7:0d:2f:28:89:2c:eb:b6:51:15:88:
                    0a:6f:ba:52:90:9c:2f:b3:3d:a6:58:a2:b2:27:65:
                    0e:0e:97:c7:d3:98:c5:15:63:f9:05:1b:19:66:eb:
                    45:19:15:f9:07:74:e1:45:b5:ef:8c:16:78:af:e3:
                    3e:f5:43:1f:a7:10:62:f8:f4:5d:c2:37:f4:f6:be:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6E:E8:10:B8:59:01:69:FA:09:44:D3:30:66:37:C1:79:0F:E3:B7
            X509v3 Authority Key Identifier:
                keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:69:67:b3:0d:5b:0b:bd:95:9f:05:9a:ab:64:de:3c:96:78:
         a6:9e:ce:00:c4:ec:f3:fa:d4:1d:89:31:88:c6:c9:73:fc:68:
         2f:fc:d3:20:d0:a5:58:4f:72:ae:38:ea:1b:e0:cc:c6:95:74:
         2e:51:ee:b1:4f:e7:cd:09:70:bb:c0:f1:64:ad:33:5a:4b:3a:
         86:57:59:a4:45:a0:b7:af:6c:c2:9e:45:73:b6:aa:60:f3:83:
         86:6e:83:a3:c9:6a:51:7a:8a:0a:26:18:5c:58:d4:74:59:cb:
         38:3e:37:0e:82:04:12:d0:1f:8d:ab:27:84:93:0f:12:24:41:
         7a:e4:07:cb:ca:22:72:fd:5b:12:16:ef:c8:ef:cf:67:50:0c:
         c7:81:c2:67:9d:83:93:ac:8f:3e:f6:dd:09:c6:c9:70:6e:84:
         55:28:a8:38:b9:25:65:4f:32:6f:7f:d9:78:1e:f6:2b:d1:cc:
         1d:89:84:7c:3d:b3:4b:e4:46:ad:4c:21:9e:a9:48:f2:b2:dd:
         2e:14:4f:55:bf:0d:94:82:94:f7:73:e7:c5:f7:71:49:28:6b:
         20:17:1e:21:20:69:89:ee:13:75:ff:18:b8:44:16:e8:32:4f:
         79:ec:b2:70:5f:f8:13:9e:e5:be:4c:8e:0c:03:48:d7:d5:b8:
         78:13:d1:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94defGoYM2DMIXKTtFDfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZWEzMGMwZjI4ZTAyMjY5YzU3NjViZjRhMDQ1Njc3Y2Ey
Nzk0YTUwHhcNMjYxMDI3MTUwMTU1WhcNMjYxMDI4MTUwMTU1WjAzMTEwLwYDVQQD
Eyg0YjZlZTgxMGI4NTkwMTY5ZmEwOTQ0ZDMzMDY2MzdjMTc5MGZlM2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RnhmFUMePaSsEhHpr6p/czvfU8H
iP8kH6qIvjG7tDnoSNB4lC8nlrCx16ZTG/iuUOtrPjESyAKHR92IUbaZxxX7V/PL
vE+y7ejXZ04xBh70XigvSY7bb0CVqrPzSPMmsVKbEuQgTlpCdfqInHU0Y2HTlBkD
rUkJC/+CBj3SA6N+GWu8VEqslEERcBy/Ia0NXf+na5bv6vQlN2Unove4tJGPR3dK
4PtyslFxGoajyRWwmn7R72nixw0vKIks67ZRFYgKb7pSkJwvsz2mWKKyJ2UODpfH
05jFFWP5BRsZZutFGRX5B3ThRbXvjBZ4r+M+9UMfpxBi+PRdwjf09r5eGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtu6BC4WQFp+glE0zBmN8F5D+O3MB8GA1UdIwQY
MBaAFEjqMMDyjgImnFdlv0oEVnfKJ5SlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMTUzZjgtMTk5NC00YjJkLTk2NDUt
ZjI4YjRkNjQwYTQ5LzEvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMTUzZjgtMTk5NC00YjJkLTk2NDUtZjI4YjRkNjQwYTQ5
LzEvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2lnsw1b
C72VnwWaq2TePJZ4pp7OAMTs8/rUHYkxiMbJc/xoL/zTINClWE9yrjjqG+DMxpV0
LlHusU/nzQlwu8DxZK0zWks6hldZpEWgt69swp5Fc7aqYPODhm6Do8lqUXqKCiYY
XFjUdFnLOD43DoIEEtAfjasnhJMPEiRBeuQHy8oicv1bEhbvyO/PZ1AMx4HCZ52D
k6yPPvbdCcbJcG6EVSioOLklZU8yb3/ZeB72K9HMHYmEfD2zS+RGrUwhnqlI8rLd
LhRPVb8NlIKU93PnxfdxSShrIBceISBpie4Tdf8YuEQW6DJPeeyycF/4E57lvkyO
DANI19W4eBPRJA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:18 2026 by rpki-client