Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File:                     tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier:          AC7BLhmHPg+ZaQT582DyZli1cRHRSte25VVLW0QM5D0=
Subject key identifier:   F5:28:A2:08:55:0B:BC:05:3F:4B:C2:F3:0C:9F:81:54:96:11:DC:3F
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer:       /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial:       01A11B62F3CBAE96B027D01F9F00AC3C8836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number:          15F4
Signing time:             Thu 08 Oct 2026 12:00:32 +0000
Manifest this update:     Thu 08 Oct 2026 12:00:32 +0000
Manifest next update:     Fri 09 Oct 2026 12:00:32 +0000
Files and hashes:         1: CLr2MXWe1_bT6kZgkrjIjMbd7B0.roa (hash: gQEYUEzKFyH2/cM28ksUHG3hbitgcosJBEkltHf/gqA=)
                          2: PTqqtT4_tP0RAOhqpaeaV7qFsoM.roa (hash: gS+7X+RhiaD/Wpkqye3btlKeUsU6cdg4vX6kC9nPKmY=)
                          3: Zx8NV8g2SZTn17r6ny-ihGOw0zg.roa (hash: oDKvuRyprpCre1JRHHQFdko0hYMR6EjsyiF9Shy7Ous=)
                          4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: djSHGqqHGtR+IHJ+DC5QJzcpTPImh5+RyZ2mlqnWH3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:62:f3:cb:ae:96:b0:27:d0:1f:9f:00:ac:3c:88:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
        Validity
            Not Before: Oct  8 12:00:32 2026 GMT
            Not After : Oct  9 12:00:32 2026 GMT
        Subject: CN=f528a208550bbc053f4bc2f30c9f81549611dc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ec:f6:99:ad:4a:b7:ea:4f:32:c5:ae:45:38:
                    bb:46:96:ca:ec:2a:43:95:26:af:07:62:78:6d:c6:
                    35:1f:f4:f7:aa:a1:c1:9a:f5:e7:4f:95:ff:1e:2a:
                    db:3f:04:81:6d:46:68:c2:31:2a:9e:bc:22:af:78:
                    a4:fb:64:d1:2f:ab:5f:f0:a9:37:40:28:d2:c6:86:
                    fd:f5:b1:ee:0e:f4:16:83:54:c5:25:a3:5d:e8:4b:
                    79:de:0c:38:c5:f9:80:59:d2:fa:36:42:33:d3:b3:
                    79:5e:04:3f:78:c2:66:1c:71:11:3f:58:c0:20:11:
                    3c:2e:45:65:37:ff:2f:cb:5a:40:76:30:e4:39:95:
                    ea:a5:56:00:92:0c:67:4c:d0:26:1a:f5:a2:a5:f5:
                    da:d6:83:ef:3d:31:77:b1:ab:69:22:60:48:ab:d2:
                    ec:2f:8f:e9:80:9d:97:1f:b9:1c:b0:f3:ff:49:6b:
                    ea:03:14:15:81:69:af:7b:2a:09:7c:e4:27:3c:c6:
                    c8:da:44:9e:41:e1:6f:b7:46:89:b0:ef:1f:cb:00:
                    ae:ff:66:8b:9a:c1:40:1a:34:e8:b5:6e:39:f3:a7:
                    9b:25:17:d6:34:89:67:fd:a7:08:5e:a0:a2:6b:f9:
                    ce:6a:fd:0c:e6:e8:84:71:75:ca:3a:13:3f:3a:10:
                    52:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:28:A2:08:55:0B:BC:05:3F:4B:C2:F3:0C:9F:81:54:96:11:DC:3F
            X509v3 Authority Key Identifier:
                keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:96:5d:81:fc:ab:fa:11:5a:22:ff:da:d4:e5:87:1c:e3:1c:
         4c:a4:f8:a1:c2:6b:c9:c4:25:c9:70:54:1c:ff:52:64:1e:d6:
         7d:f8:ae:36:23:f9:3c:c8:14:d3:a2:2a:c0:c3:15:7f:d1:89:
         86:f8:ed:5f:92:88:da:1d:5b:08:84:54:c9:d4:6a:1f:c7:2d:
         91:d2:84:9b:78:61:3a:19:f0:48:7e:74:2b:f1:da:41:ee:df:
         d0:2b:25:20:ea:9d:b5:21:63:c4:14:0a:08:d6:df:62:17:8b:
         56:20:98:ac:56:f5:b5:72:d8:64:30:44:14:63:7f:4f:6a:09:
         af:4f:e6:58:9f:56:7b:d7:35:29:a0:f1:98:1b:4e:8a:65:91:
         c0:98:d8:43:a0:a9:b1:0b:e7:7a:04:07:7d:91:20:63:5a:72:
         13:ee:9c:87:f4:75:cc:8f:b2:03:42:be:70:f4:06:51:4e:14:
         98:2f:fb:c0:78:6b:ae:e1:1d:d2:79:e6:aa:35:d4:66:6d:81:
         ec:c6:8f:a9:94:8d:4a:43:7c:97:b6:33:97:e8:88:ec:9c:e6:
         94:b8:3c:b9:00:35:8e:8c:d8:07:b6:d3:de:37:34:c8:db:b7:
         cf:fa:ae:c6:14:b2:78:ac:cc:d0:ed:bd:ec:9a:dd:dc:54:13:
         a2:31:50:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEbYvPLrpawJ9AfnwCsPIg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OWJkODRkYTE3OTk3Y2JiMjg2YWY5MDIyYWIyZTA1YmEw
OGI0NDIwHhcNMjYxMDA4MTIwMDMyWhcNMjYxMDA5MTIwMDMyWjAzMTEwLwYDVQQD
EyhmNTI4YTIwODU1MGJiYzA1M2Y0YmMyZjMwYzlmODE1NDk2MTFkYzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uz2ma1Kt+pPMsWuRTi7RpbK7CpD
lSavB2J4bcY1H/T3qqHBmvXnT5X/HirbPwSBbUZowjEqnrwir3ik+2TRL6tf8Kk3
QCjSxob99bHuDvQWg1TFJaNd6Et53gw4xfmAWdL6NkIz07N5XgQ/eMJmHHERP1jA
IBE8LkVlN/8vy1pAdjDkOZXqpVYAkgxnTNAmGvWipfXa1oPvPTF3satpImBIq9Ls
L4/pgJ2XH7kcsPP/SWvqAxQVgWmveyoJfOQnPMbI2kSeQeFvt0aJsO8fywCu/2aL
msFAGjTotW4586ebJRfWNIln/acIXqCia/nOav0M5uiEcXXKOhM/OhBSYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUooghVC7wFP0vC8wyfgVSWEdw/MB8GA1UdIwQY
MBaAFLSb2E2heZfLsoavkCKrLgW6CLRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2It
MGM5MDliZjViZTRkLzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2ItMGM5MDliZjViZTRk
LzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5Zdgfyr
+hFaIv/a1OWHHOMcTKT4ocJrycQlyXBUHP9SZB7WffiuNiP5PMgU06IqwMMVf9GJ
hvjtX5KI2h1bCIRUydRqH8ctkdKEm3hhOhnwSH50K/HaQe7f0CslIOqdtSFjxBQK
CNbfYheLViCYrFb1tXLYZDBEFGN/T2oJr0/mWJ9We9c1KaDxmBtOimWRwJjYQ6Cp
sQvnegQHfZEgY1pyE+6ch/R1zI+yA0K+cPQGUU4UmC/7wHhrruEd0nnmqjXUZm2B
7MaPqZSNSkN8l7Yzl+iI7JzmlLg8uQA1jozYB7bT3jc0yNu3z/quxhSyeKzM0O29
7Jrd3FQTojFQag==
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:38:50 2026 by rpki-client