Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File:                     h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier:          kU3SopywCFnhCARHq8HfNd8TJL8W2HrZzr67YrgASnQ=
Subject key identifier:   C0:CA:EB:13:03:25:F9:97:AD:55:D3:2A:CB:45:27:FC:50:E0:57:E0
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer:       /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial:       01A10B829BA0ED8CC1DBD27E9481E3CA10B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number:          1846
Signing time:             Mon 05 Oct 2026 10:01:11 +0000
Manifest this update:     Mon 05 Oct 2026 10:01:11 +0000
Manifest next update:     Tue 06 Oct 2026 10:01:11 +0000
Files and hashes:         1: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: LTWWlwV1MurK9/as9VnX6t8E4W1Mew8PP4hU2EZER+c=)
                          2: pf2F8jqDhpJAuisFDDVK53DtP1c.roa (hash: gUPm9iAsnfZdwPMydWDH2B8Ki6HOxvfT2gKOapzDjp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 10:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0b:82:9b:a0:ed:8c:c1:db:d2:7e:94:81:e3:ca:10:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
        Validity
            Not Before: Oct  5 10:01:11 2026 GMT
            Not After : Oct  6 10:01:11 2026 GMT
        Subject: CN=c0caeb130325f997ad55d32acb4527fc50e057e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:81:fb:30:d4:da:d2:ba:f5:a9:c7:64:dd:02:
                    8a:0a:0f:f1:27:40:d7:e0:ff:15:9e:9d:97:20:c3:
                    0b:0d:ac:c3:a1:ce:75:66:90:c7:10:3e:f7:f8:20:
                    bd:c5:16:20:dd:21:86:be:a6:d5:cb:13:98:23:dd:
                    18:44:e1:ca:5e:7b:19:53:c6:87:59:7b:3e:cb:d7:
                    db:8e:50:eb:51:75:c2:bc:9f:35:2f:74:2a:2d:2e:
                    ee:72:00:76:ea:cb:ea:a0:7b:2a:4c:c4:e8:8c:40:
                    23:ef:12:7e:28:ea:0d:d4:7b:e1:a0:60:d3:24:03:
                    6f:10:99:7e:23:c6:d4:0c:4b:9b:36:54:a2:ec:f9:
                    f3:c5:eb:4b:cd:91:68:fa:61:f8:2d:97:2b:ba:69:
                    37:98:a5:12:7d:c3:6b:e7:20:99:a1:f2:09:a1:40:
                    e2:f2:b2:59:e7:a7:8b:42:42:46:a4:df:7d:3b:a7:
                    ba:f0:68:c3:22:13:c5:78:9f:e3:1b:30:6f:d9:23:
                    a2:3a:30:a6:a8:99:01:7e:4c:89:2b:57:d9:e9:2d:
                    4d:70:d1:e2:5d:8b:6d:13:fc:08:1f:2f:49:60:b0:
                    45:13:a7:17:56:c7:85:db:68:c3:50:79:b5:ea:b9:
                    a9:25:b6:9b:f4:50:20:89:e6:c1:cc:e0:4e:6a:bb:
                    96:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CA:EB:13:03:25:F9:97:AD:55:D3:2A:CB:45:27:FC:50:E0:57:E0
            X509v3 Authority Key Identifier:
                keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:64:b4:92:84:15:f3:d3:67:8e:ac:a4:17:e2:1a:93:81:33:
         4f:c7:bd:2f:62:d7:66:a8:01:a1:f8:1e:30:b5:15:37:79:0f:
         39:4f:8b:69:ac:a0:e2:79:b4:e7:a7:4b:69:d7:e8:24:d3:a9:
         6b:4b:71:4f:82:ec:22:0d:59:f1:65:86:ee:80:c1:5d:ea:bd:
         25:c6:be:64:69:8a:60:2d:6f:21:26:ad:95:a5:b3:66:90:a6:
         9f:82:d9:89:84:7d:18:7e:25:db:61:cf:71:c8:72:f5:42:65:
         d1:a3:61:99:7c:22:ff:84:5e:7a:c3:24:64:6d:cf:da:39:eb:
         44:38:d5:1b:f7:d0:07:f9:d7:f0:17:73:6a:6a:6d:5a:46:3d:
         1e:5b:c0:62:80:21:a8:b5:e1:4d:4b:1f:e0:cd:ed:70:19:b5:
         ea:61:c1:fb:70:b1:eb:8e:c7:6a:77:39:16:17:a6:fb:c2:82:
         0a:64:4f:80:09:25:af:b3:b6:1e:e7:57:ec:57:1f:fb:a3:f9:
         8a:24:e1:ae:36:40:51:d4:e8:37:d5:44:4a:6f:a3:b1:5c:d4:
         ea:1d:95:1b:76:1f:bb:29:9e:37:33:3b:ab:a5:4d:aa:44:fb:
         72:d2:fb:bc:ef:5f:16:49:b7:58:5d:c0:3f:f5:d8:d2:69:37:
         03:31:0d:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaELgpug7YzB29J+lIHjyhC2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ODUxNTQ0YTY0MjdkMmM4ZTI3OWU0Yjk0YjkyYWFmMDAw
OWVkMjcwHhcNMjYxMDA1MTAwMTExWhcNMjYxMDA2MTAwMTExWjAzMTEwLwYDVQQD
EyhjMGNhZWIxMzAzMjVmOTk3YWQ1NWQzMmFjYjQ1MjdmYzUwZTA1N2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4H7MNTa0rr1qcdk3QKKCg/xJ0DX
4P8Vnp2XIMMLDazDoc51ZpDHED73+CC9xRYg3SGGvqbVyxOYI90YROHKXnsZU8aH
WXs+y9fbjlDrUXXCvJ81L3QqLS7ucgB26svqoHsqTMTojEAj7xJ+KOoN1HvhoGDT
JANvEJl+I8bUDEubNlSi7PnzxetLzZFo+mH4LZcrumk3mKUSfcNr5yCZofIJoUDi
8rJZ56eLQkJGpN99O6e68GjDIhPFeJ/jGzBv2SOiOjCmqJkBfkyJK1fZ6S1NcNHi
XYttE/wIHy9JYLBFE6cXVseF22jDUHm16rmpJbab9FAgiebBzOBOaruWDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDK6xMDJfmXrVXTKstFJ/xQ4FfgMB8GA1UdIwQY
MBaAFIeFFUSmQn0sjieeS5S5Kq8ACe0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYt
ODU0MzRmNjE2OWYxLzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYtODU0MzRmNjE2OWYx
LzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWS0koQV
89NnjqykF+Iak4EzT8e9L2LXZqgBofgeMLUVN3kPOU+Laayg4nm056dLadfoJNOp
a0txT4LsIg1Z8WWG7oDBXeq9Jca+ZGmKYC1vISatlaWzZpCmn4LZiYR9GH4l22HP
cchy9UJl0aNhmXwi/4ReesMkZG3P2jnrRDjVG/fQB/nX8BdzamptWkY9HlvAYoAh
qLXhTUsf4M3tcBm16mHB+3Cx647Hanc5Fhem+8KCCmRPgAklr7O2HudX7Fcf+6P5
iiThrjZAUdToN9VESm+jsVzU6h2VG3YfuymeNzM7q6VNqkT7ctL7vO9fFkm3WF3A
P/XY0mk3AzENPw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 20:52:54 2026 by rpki-client