Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
File:                     H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft (raw, json)
Hash identifier:          M1fSHMZdkyLHhEf1ioh0CZ503hC7ijb55QRHzqieSek=
Subject key identifier:   A6:4D:81:8F:77:AB:1B:6D:5F:C1:C9:FF:57:18:EF:BF:D1:A3:1B:AE
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Certificate issuer:       /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial:       01A1021205528BC901210DDDD20153792947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
Manifest number:          1A9D
Signing time:             Sat 03 Oct 2026 14:01:37 +0000
Manifest this update:     Sat 03 Oct 2026 14:01:37 +0000
Manifest next update:     Sun 04 Oct 2026 14:01:37 +0000
Files and hashes:         1: 1LwTV0768J6dRk8qC5hDLpAsU28.roa (hash: Tt7Jvp1n+IhGVJo847shEW7XeQAdzKOGRJPvl8SARHA=)
                          2: Bw0gbrbCVB-HoVgeJ9I8CiP3YmM.asa (hash: s5JA+uKeZsK2+gHJiM4h36vliqAxJYuG7Au1gknPnH0=)
                          3: GzoYbPuA6zt92uMBOAiHk0i8fMs.roa (hash: BhU8n2AYRLl+UcY3HBoFElDvFC16XHDPo9Q/sW3CcM0=)
                          4: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl (hash: WFyxEAV/DcN4l982MVqjw8aKQlG13L/yY3o+j0D8T88=)
                          5: PPH0urtDpS_MEda472ZwCkPCXio.asa (hash: SxpZ02tCEqwvi7zZj6qIuvomh6wN/+YCs9ddviXBtmc=)
                          6: WlWWJjt9Bx1oCkJxTpZbHaU11Q8.roa (hash: 7iCn7aA9/98SqHuf3K5vlRI49Df9JrqkSps0IfUPR0c=)
                          7: XZjEEVTSvf1uFBOdMMSBuxOceJQ.asa (hash: V9xhtdGjembvaLEHZRxR9b/kPtaNNliazSgOsSJ//6k=)
                          8: mGCci6Pw4ws1s2CSrvlwPoNX68w.roa (hash: oF16LqvH0BJX/k1mLJ1/7VpPewRXGKd0nGQ5TY/auD0=)
                          9: nrMCeYu3mMuo_fDA-GvTCBFPlWA.roa (hash: eBvmstTRO+Qzu9U4Nj16cxuQx8JdP3s1HFl/0VPOS5I=)
                          10: obRejES73sQ5wKFJZqdpH-4y-rc.asa (hash: bS84HPNJTey4N7MFx/LFScYHC6eK2K0n9randn1r5fA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:12:05:52:8b:c9:01:21:0d:dd:d2:01:53:79:29:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
        Validity
            Not Before: Oct  3 14:01:37 2026 GMT
            Not After : Oct  4 14:01:37 2026 GMT
        Subject: CN=a64d818f77ab1b6d5fc1c9ff5718efbfd1a31bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3a:21:13:aa:47:4c:6a:5f:f8:c8:c1:2f:86:
                    35:10:41:c4:bb:8d:18:11:d5:b9:a0:38:9b:6c:0a:
                    87:90:90:3c:05:24:51:37:7e:75:c7:02:66:22:77:
                    f0:2c:b3:27:ee:7a:d7:f5:64:14:3a:20:c6:ad:fa:
                    57:4e:f9:d9:5c:ad:83:27:0d:06:f0:e5:d6:eb:b9:
                    69:f4:c5:a5:7b:83:b3:e9:89:4a:09:97:36:03:ce:
                    bd:fe:f9:57:f3:b7:06:72:91:a5:88:46:05:40:a4:
                    75:3f:27:f3:83:78:72:6d:1d:d7:2a:9a:d7:d6:c0:
                    94:0f:83:f0:97:ac:6b:6c:ab:2f:5f:b0:87:32:48:
                    53:38:81:c1:b1:52:9d:9c:00:c2:f7:44:1b:f0:2e:
                    ec:ae:c7:cf:ca:1c:fe:a1:84:66:68:11:7a:18:01:
                    14:03:12:2f:ab:fe:a7:a1:75:0d:4b:47:fe:fc:f7:
                    b8:87:33:c3:75:ca:63:ea:3e:82:ef:d7:38:a3:f3:
                    88:92:83:dd:8d:7d:b3:e7:ce:ae:59:32:fe:bf:66:
                    1a:47:17:93:f2:89:cc:eb:98:60:dd:16:af:42:9f:
                    62:20:53:94:4a:30:41:87:93:26:15:d9:ca:59:45:
                    8a:bd:a2:c2:07:6c:93:07:0a:27:a5:14:5b:56:cd:
                    ed:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4D:81:8F:77:AB:1B:6D:5F:C1:C9:FF:57:18:EF:BF:D1:A3:1B:AE
            X509v3 Authority Key Identifier:
                keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f6:5e:b4:f0:65:5c:1f:90:ba:ce:12:93:59:80:f4:fd:8e:
         8d:5a:34:94:d9:88:6d:6a:24:78:d8:6b:e0:d6:d0:25:42:88:
         e4:a9:fb:b5:bd:b7:da:3b:d0:f3:0c:4f:ea:cf:50:76:b0:77:
         32:46:33:e5:d8:7d:d4:ea:a5:63:ce:ed:2d:a8:3b:48:76:83:
         25:1a:9d:af:db:a1:b9:e5:45:dd:c0:a3:cd:d8:1d:12:90:5e:
         d6:26:23:74:1d:c1:08:09:30:0f:d4:5a:84:49:41:69:73:89:
         35:1f:00:7e:7c:8b:29:25:ad:b3:0f:9b:aa:c1:78:87:6c:d5:
         28:a4:af:75:da:c9:f0:5f:2c:80:77:6a:01:d0:27:44:58:9e:
         63:83:f6:d3:1b:1a:27:10:dc:f2:49:20:3d:6d:1d:01:21:3d:
         f2:e4:0e:3e:6f:68:a7:6c:45:eb:80:0d:7f:fa:d7:77:f2:9b:
         ab:8d:6c:07:2a:5d:8a:81:8f:c4:89:87:ff:5e:15:34:e6:88:
         f1:16:9d:b1:ab:88:56:a7:08:2a:30:ed:18:ae:a3:c2:e6:83:
         89:6d:b6:23:d1:95:95:a6:01:87:f5:af:25:3d:fc:a6:25:f4:
         70:d6:42:7b:b3:45:65:56:9f:ee:75:df:d2:dd:f8:28:d8:34:
         50:68:e4:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECEgVSi8kBIQ3d0gFTeSlHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDZmNTc3MzVhNGU2M2RiZWY4NDhlZTBkOWQxOTllMjE1
ZjgzMDQwHhcNMjYxMDAzMTQwMTM3WhcNMjYxMDA0MTQwMTM3WjAzMTEwLwYDVQQD
EyhhNjRkODE4Zjc3YWIxYjZkNWZjMWM5ZmY1NzE4ZWZiZmQxYTMxYmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzohE6pHTGpf+MjBL4Y1EEHEu40Y
EdW5oDibbAqHkJA8BSRRN351xwJmInfwLLMn7nrX9WQUOiDGrfpXTvnZXK2DJw0G
8OXW67lp9MWle4Oz6YlKCZc2A869/vlX87cGcpGliEYFQKR1Pyfzg3hybR3XKprX
1sCUD4Pwl6xrbKsvX7CHMkhTOIHBsVKdnADC90Qb8C7srsfPyhz+oYRmaBF6GAEU
AxIvq/6noXUNS0f+/Pe4hzPDdcpj6j6C79c4o/OIkoPdjX2z586uWTL+v2YaRxeT
8onM65hg3RavQp9iIFOUSjBBh5MmFdnKWUWKvaLCB2yTBwonpRRbVs3tewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZNgY93qxttX8HJ/1cY77/RoxuuMB8GA1UdIwQY
MBaAFB9G9Xc1pOY9vvhI7g2dGZ4hX4MEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzIt
YTdjOTg5OGVlY2JjLzEvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzItYTdjOTg5OGVlY2Jj
LzEvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovZetPBl
XB+Qus4Sk1mA9P2OjVo0lNmIbWokeNhr4NbQJUKI5Kn7tb232jvQ8wxP6s9QdrB3
MkYz5dh91OqlY87tLag7SHaDJRqdr9uhueVF3cCjzdgdEpBe1iYjdB3BCAkwD9Ra
hElBaXOJNR8AfnyLKSWtsw+bqsF4h2zVKKSvddrJ8F8sgHdqAdAnRFieY4P20xsa
JxDc8kkgPW0dASE98uQOPm9op2xF64ANf/rXd/Kbq41sBypdioGPxImH/14VNOaI
8RadsauIVqcIKjDtGK6jwuaDiW22I9GVlaYBh/WvJT38piX0cNZCe7NFZVaf7nXf
0t34KNg0UGjkyA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 01:11:55 2026 by rpki-client