Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
File:                     1-WoJAryYU7de0tsZaD7i86ImFUA.mft (raw, json)
Hash identifier:          hczqFAYJgVjgyTBGEFKdpfsVMkYCvGwES0Q1J1n2oPw=
Subject key identifier:   88:7C:2A:08:AA:15:CB:1E:FA:D2:CD:47:8B:B5:D6:A0:01:23:E6:E0
Authority key identifier: F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40
Certificate issuer:       /CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
Certificate serial:       01A1539BCBB6F98A99197D5CD1B401256E71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
Manifest number:          0B2A
Signing time:             Mon 19 Oct 2026 10:01:21 +0000
Manifest this update:     Mon 19 Oct 2026 10:01:21 +0000
Manifest next update:     Tue 20 Oct 2026 10:01:21 +0000
Files and hashes:         1: 1-WoJAryYU7de0tsZaD7i86ImFUA.crl (hash: O+mGUAJTrwKAqyhZ9UVAwR+ymkmSVNLxivt/MvaHqZE=)
                          2: lbIe2qyRrYfjB41x_s_oC0HIMV8.roa (hash: IbB04MSM8ZFCnQ8XX8Yub4xMYWMjSxvhyr9xWMdyxEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:53:9b:cb:b6:f9:8a:99:19:7d:5c:d1:b4:01:25:6e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
        Validity
            Not Before: Oct 19 10:01:21 2026 GMT
            Not After : Oct 20 10:01:21 2026 GMT
        Subject: CN=887c2a08aa15cb1efad2cd478bb5d6a00123e6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:cc:e4:1f:68:6f:15:26:a7:c6:a8:ed:1d:
                    08:9e:de:5f:a2:be:b2:03:e9:ac:05:c8:51:b5:eb:
                    b3:7b:6f:92:87:21:d1:15:da:cc:9b:35:3b:91:de:
                    2a:c5:74:e4:12:c5:8a:29:50:73:62:0b:75:9e:32:
                    cf:31:23:8c:d0:ae:cb:ab:f0:c5:c7:b6:b6:9f:10:
                    39:12:f8:4e:79:80:e6:4a:62:43:a6:b0:5d:39:5f:
                    2f:05:bc:e4:ce:bf:c9:31:e3:aa:d3:92:2f:ab:21:
                    c5:11:4f:c7:84:5d:6e:1e:16:b7:87:b0:48:5e:79:
                    a4:35:47:db:14:a4:80:e7:f0:72:1e:6a:b9:f7:37:
                    51:2d:69:d5:76:e0:85:2f:70:ce:c8:a3:b3:9e:f3:
                    36:f2:f6:42:5b:f2:52:9f:12:95:0b:74:ab:84:df:
                    76:7d:f9:3f:ca:2f:ed:49:1d:1b:ac:0e:76:c5:67:
                    79:10:1f:ba:1e:f1:c3:db:d4:57:80:28:71:11:91:
                    9e:a1:dc:78:82:ef:ff:f8:62:9a:dc:1e:f7:fb:9e:
                    8a:a7:61:78:48:88:1d:04:4c:24:6f:2a:74:65:c7:
                    4e:45:b9:e3:bc:c5:62:07:6d:87:c0:a4:fe:af:90:
                    4a:d1:56:0f:6c:ce:eb:3d:2b:bf:3c:25:6e:45:bf:
                    13:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7C:2A:08:AA:15:CB:1E:FA:D2:CD:47:8B:B5:D6:A0:01:23:E6:E0
            X509v3 Authority Key Identifier:
                keyid:F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:12:82:20:2e:f4:ce:6a:a3:c9:36:3e:46:92:7b:1a:03:8a:
         5d:41:c3:21:6e:7b:e0:9a:83:bf:17:5b:ba:be:59:8d:3c:64:
         2d:b9:0f:2d:d4:85:5a:87:6f:68:f3:46:e2:68:92:8f:ab:bf:
         2e:ed:58:ad:81:fe:1d:65:0e:ac:83:5a:a5:db:97:43:06:f2:
         f5:89:0e:de:f8:ec:c2:cd:26:9b:83:a8:09:d4:93:93:7b:c4:
         4b:05:6e:1d:b5:84:4d:6e:2a:b1:61:bb:6f:87:c0:6c:e1:64:
         23:5a:7b:98:6b:12:cb:37:e9:d4:97:63:70:80:ee:4c:c7:03:
         6e:a5:4a:44:58:76:e6:0d:3c:ec:60:06:7f:55:4f:72:a0:6f:
         4a:02:1c:e2:a4:7d:23:cc:69:5a:ac:d2:32:d9:ac:66:a6:6d:
         13:ae:45:3a:f4:0d:38:b5:f5:47:b7:fa:15:43:09:97:8f:25:
         c4:c9:51:a3:91:39:8d:f3:86:77:80:a1:16:fa:de:b7:0d:08:
         f0:7d:f1:6a:b1:9a:5d:9e:31:3d:d2:d7:ba:d0:95:36:2d:a4:
         e6:b7:2c:00:ee:a1:b3:dc:43:c9:4e:f7:b9:96:23:83:66:3a:
         93:db:cc:bf:42:7e:bd:fa:72:f8:94:3b:82:b2:06:41:71:37:
         6b:8c:48:f5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaFTm8u2+YqZGX1c0bQBJW5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NmEwOTAyYmM5ODUzYjc1ZWQyZGIxOTY4M2VlMmYzYTIy
NjE1NDAwHhcNMjYxMDE5MTAwMTIxWhcNMjYxMDIwMTAwMTIxWjAzMTEwLwYDVQQD
Eyg4ODdjMmEwOGFhMTVjYjFlZmFkMmNkNDc4YmI1ZDZhMDAxMjNlNmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYPM5B9obxUmp8ao7R0Int5for6y
A+msBchRteuze2+ShyHRFdrMmzU7kd4qxXTkEsWKKVBzYgt1njLPMSOM0K7Lq/DF
x7a2nxA5EvhOeYDmSmJDprBdOV8vBbzkzr/JMeOq05IvqyHFEU/HhF1uHha3h7BI
XnmkNUfbFKSA5/ByHmq59zdRLWnVduCFL3DOyKOznvM28vZCW/JSnxKVC3SrhN92
ffk/yi/tSR0brA52xWd5EB+6HvHD29RXgChxEZGeodx4gu//+GKa3B73+56Kp2F4
SIgdBEwkbyp0ZcdORbnjvMViB22HwKT+r5BK0VYPbM7rPSu/PCVuRb8T4QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIh8KgiqFcse+tLNR4u11qABI+bgMB8GA1UdIwQY
MBaAFPlqCQK8mFO3XtLbGWg+4vOiJhVAMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Xb0pBcnlZVTdkZTB0c1phRDdpODZJbUZVQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvZWI2ODY2LWJiNjAtNGM2Zi1hMDBk
LWM0YTc3YzE5MmFmMC8xLzEtV29KQXJ5WVU3ZGUwdHNaYUQ3aTg2SW1GVUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2ZlL2ViNjg2Ni1iYjYwLTRjNmYtYTAwZC1jNGE3N2MxOTJh
ZjAvMS8xLVdvSkFyeVlVN2RlMHRzWmFEN2k4NkltRlVBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhKC
IC70zmqjyTY+RpJ7GgOKXUHDIW574JqDvxdbur5ZjTxkLbkPLdSFWodvaPNG4miS
j6u/Lu1YrYH+HWUOrINapduXQwby9YkO3vjsws0mm4OoCdSTk3vESwVuHbWETW4q
sWG7b4fAbOFkI1p7mGsSyzfp1JdjcIDuTMcDbqVKRFh25g087GAGf1VPcqBvSgIc
4qR9I8xpWqzSMtmsZqZtE65FOvQNOLX1R7f6FUMJl48lxMlRo5E5jfOGd4ChFvre
tw0I8H3xarGaXZ4xPdLXutCVNi2k5rcsAO6hs9xDyU73uZYjg2Y6k9vMv0J+vfpy
+JQ7grIGQXE3a4xI9Q==
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:43:17 2026 by rpki-client