Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File:                     McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier:          xBNtxHuKKvZQ/a4SHKvzf0NHULaf6QEc7anoZuHb6Hg=
Subject key identifier:   1C:AD:CE:D6:44:96:6A:88:14:4C:FF:28:E9:60:34:49:DF:A8:02:88
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer:       /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial:       01A135915FBE138C021B378C1941DF6929F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number:          0A26
Signing time:             Tue 13 Oct 2026 14:01:21 +0000
Manifest this update:     Tue 13 Oct 2026 14:01:21 +0000
Manifest next update:     Wed 14 Oct 2026 14:01:21 +0000
Files and hashes:         1: 1-p3HaYx4IqX4cWvi0vNEwtBCaHk.roa (hash: i3bN04ehC6KNjZ/mU1aU2Jp/6ScotgzMImvrL9el+ok=)
                          2: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: LIlu8zNoNJJv3uzf4PxUfcpK8p5IGddZEjK+KvDojBg=)
                          3: YHYbmuz_pM9wn1qc-egcCE-kAEA.roa (hash: 6Tz9Tz8OM7622P+63dPrrdM/er/OUWTKt1lvg0lixIg=)
                          4: pIxw3KC603JdsybhpGY7_5Fn_9o.roa (hash: Ci8maKrft1TBBCcPJqKFYTduIXPenh2T5qk94PPEQ08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:91:5f:be:13:8c:02:1b:37:8c:19:41:df:69:29:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
        Validity
            Not Before: Oct 13 14:01:21 2026 GMT
            Not After : Oct 14 14:01:21 2026 GMT
        Subject: CN=1cadced644966a88144cff28e9603449dfa80288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:b4:1a:e9:c0:66:6e:1c:56:cf:c4:78:32:
                    0d:0c:3b:c3:95:4e:77:ef:ac:ed:91:00:23:3f:33:
                    4a:0b:9f:3e:7e:c9:e5:20:02:63:a9:9a:62:ca:09:
                    0a:71:fc:ab:d6:0d:15:38:9f:d8:94:a0:38:c2:c0:
                    aa:5e:1a:68:ba:5f:db:2e:94:48:50:cb:02:19:03:
                    0c:d0:9d:a8:eb:0f:3b:34:f6:89:0b:52:e5:18:15:
                    34:f0:24:f2:08:f8:df:0a:22:2d:49:6d:c0:83:85:
                    e2:87:8e:94:5f:ed:97:f7:d2:be:f4:34:07:ef:52:
                    65:4d:db:cf:2b:9e:e3:10:40:f6:dd:b3:2a:6a:79:
                    0c:eb:f9:e2:f6:b7:95:d0:1c:0b:29:5c:7a:d0:5b:
                    b0:b8:ad:fe:3a:a1:6f:61:7f:bb:05:9a:4b:3c:f9:
                    10:c8:84:14:24:1f:43:ec:7e:e3:74:cf:60:2c:2b:
                    76:b7:78:09:08:b1:3f:dd:29:a9:8e:e9:30:86:fa:
                    a3:51:f9:37:80:65:5e:2b:b7:da:3e:5a:76:19:53:
                    c9:3d:94:87:23:3e:59:07:50:8d:ea:e1:6c:f8:eb:
                    4b:ac:51:54:89:c7:b8:92:b9:83:84:04:9e:2b:b3:
                    42:12:0d:4a:8f:dd:de:2b:34:08:3f:b8:ad:79:cd:
                    be:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AD:CE:D6:44:96:6A:88:14:4C:FF:28:E9:60:34:49:DF:A8:02:88
            X509v3 Authority Key Identifier:
                keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:8c:c5:26:3c:09:94:76:a8:72:5a:a7:f6:c2:3c:9d:c2:e3:
         7d:60:e1:d7:99:5c:f6:f0:e2:14:e0:49:ce:6d:ad:b4:53:9c:
         78:5b:0d:7b:aa:03:bc:87:9a:20:e5:b0:3d:9f:f5:77:aa:4e:
         b9:54:74:d1:07:a3:52:2d:a7:fa:47:2b:a8:e9:2f:93:ef:a5:
         cf:83:64:f1:3b:cf:01:ba:1d:ff:ce:f1:57:f4:da:f5:39:00:
         da:2e:e1:5f:94:b3:9c:2d:31:1a:2d:3e:68:1d:a1:bf:0a:de:
         d7:c4:24:1d:00:a7:d8:aa:94:51:98:d1:b7:59:68:bc:b1:3c:
         d0:d8:4a:1f:33:b8:f7:ac:42:94:2e:db:7e:ef:db:17:cc:a3:
         09:2d:9e:43:1e:37:3f:8c:47:b4:5e:78:8f:77:88:28:5a:16:
         e2:62:f6:b9:bb:8d:f2:d1:5d:67:25:84:0d:5b:06:f2:ef:81:
         f2:ec:a8:c9:6e:c6:d5:6d:a3:66:80:1b:34:f3:e9:ca:dc:ca:
         2c:39:5e:06:39:8d:98:66:77:f1:1b:2b:56:6c:be:17:1d:99:
         91:96:4f:fa:c8:b9:bc:f8:bb:35:e2:12:52:f2:9b:f8:8c:85:
         ec:e8:ce:ba:f4:ad:3f:7b:94:65:37:67:a0:0c:3f:58:73:2f:
         52:8e:50:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1kV++E4wCGzeMGUHfaSn3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxY2IwMGQyZjg0NDAxODEwYzMyMDBiNTJmYTM4OGU5MzY1
MWRkZjMwHhcNMjYxMDEzMTQwMTIxWhcNMjYxMDE0MTQwMTIxWjAzMTEwLwYDVQQD
EygxY2FkY2VkNjQ0OTY2YTg4MTQ0Y2ZmMjhlOTYwMzQ0OWRmYTgwMjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRK0GunAZm4cVs/EeDINDDvDlU53
76ztkQAjPzNKC58+fsnlIAJjqZpiygkKcfyr1g0VOJ/YlKA4wsCqXhpoul/bLpRI
UMsCGQMM0J2o6w87NPaJC1LlGBU08CTyCPjfCiItSW3Ag4Xih46UX+2X99K+9DQH
71JlTdvPK57jEED23bMqankM6/ni9reV0BwLKVx60FuwuK3+OqFvYX+7BZpLPPkQ
yIQUJB9D7H7jdM9gLCt2t3gJCLE/3SmpjukwhvqjUfk3gGVeK7faPlp2GVPJPZSH
Iz5ZB1CN6uFs+OtLrFFUice4krmDhASeK7NCEg1Kj93eKzQIP7itec2+GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBytztZElmqIFEz/KOlgNEnfqAKIMB8GA1UdIwQY
MBaAFDHLANL4RAGBDDIAtS+jiOk2Ud3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZTk1MTktZmY2MS00Njc5LTkwMTUt
ODBlNDI3NTk2YjVkLzEvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lZTk1MTktZmY2MS00Njc5LTkwMTUtODBlNDI3NTk2YjVk
LzEvTWNzQTB2aEVBWUVNTWdDMUw2T0k2VFpSM2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAozFJjwJ
lHaoclqn9sI8ncLjfWDh15lc9vDiFOBJzm2ttFOceFsNe6oDvIeaIOWwPZ/1d6pO
uVR00QejUi2n+kcrqOkvk++lz4Nk8TvPAbod/87xV/Ta9TkA2i7hX5SznC0xGi0+
aB2hvwre18QkHQCn2KqUUZjRt1lovLE80NhKHzO496xClC7bfu/bF8yjCS2eQx43
P4xHtF54j3eIKFoW4mL2ubuN8tFdZyWEDVsG8u+B8uyoyW7G1W2jZoAbNPPpytzK
LDleBjmNmGZ38RsrVmy+Fx2ZkZZP+si5vPi7NeISUvKb+IyF7OjOuvStP3uUZTdn
oAw/WHMvUo5QBw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 15:56:26 2026 by rpki-client