Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File:                     KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier:          D1gUhVhPisp0mfp1BQfLk32w/sv1c67E71Mf/CYBrnU=
Subject key identifier:   15:FA:13:AA:C1:31:B0:AC:BE:CB:F4:ED:2A:9F:9E:A8:16:D2:1E:F7
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer:       /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial:       01A12C57747785784D4CD21E196FAD0A7DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number:          11C4
Signing time:             Sun 11 Oct 2026 19:01:31 +0000
Manifest this update:     Sun 11 Oct 2026 19:01:31 +0000
Manifest next update:     Mon 12 Oct 2026 19:01:31 +0000
Files and hashes:         1: 15UE9HDgWyp_cAsmKQd04BSa6H4.roa (hash: pIxWzOfjFzWdadGYH0vQMpRvkDryxRhDbvZeh4lLEUw=)
                          2: GcuCBFhhPLtm6AWump2_50RkipM.roa (hash: AN10LtfSDckqwD3VaI/98tkLVo8/t79z+my+6bUMJos=)
                          3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: azpROd4p6PGYDTqs0VajzdWU900kqfweljnyc5S0jQQ=)
                          4: bs5yH2megPEoLiq-1Ee8Z68_g6s.roa (hash: bWsVIEeX18Zj1B9Yp3oHbkNqexSpprAqTGKtlbcwk7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 19:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2c:57:74:77:85:78:4d:4c:d2:1e:19:6f:ad:0a:7d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
        Validity
            Not Before: Oct 11 19:01:31 2026 GMT
            Not After : Oct 12 19:01:31 2026 GMT
        Subject: CN=15fa13aac131b0acbecbf4ed2a9f9ea816d21ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:75:ce:6b:79:25:44:28:ed:fe:fb:60:48:17:
                    fc:49:0a:58:fa:26:d3:0a:e6:d7:92:aa:fd:c6:61:
                    0b:96:e9:9e:3f:7b:ed:5d:34:7f:68:45:b4:90:55:
                    30:fa:a8:9f:03:2b:69:8a:98:5d:d6:0b:c1:16:de:
                    3a:64:ba:fa:ce:ed:99:7d:d7:1a:b9:b4:2f:c3:3b:
                    d4:d1:d7:14:bd:03:14:8e:98:2a:88:ef:91:05:e4:
                    6b:d5:cc:cf:ba:0c:38:93:09:a1:29:2e:73:bc:0e:
                    73:07:ef:e5:d8:1d:8f:27:8c:94:f4:45:2d:da:0c:
                    78:65:9d:65:20:01:e2:b6:cb:e4:d0:4a:26:95:24:
                    aa:fc:46:d2:a8:a4:49:29:88:68:82:05:9c:40:bc:
                    87:b1:76:ad:9e:c2:ad:c1:bc:ca:48:9b:4c:67:e9:
                    ff:03:71:a7:d0:a6:e8:b9:6b:ad:b3:28:45:93:47:
                    68:24:1b:d9:64:7e:cf:14:ba:c6:6a:e3:97:4a:fc:
                    1f:00:d1:e7:ad:5e:ec:18:66:db:cd:1c:39:61:01:
                    a1:84:77:57:7e:b5:a6:03:a2:2b:d3:3c:71:c9:99:
                    f3:da:15:7f:55:91:52:03:5d:74:fb:45:ff:33:0d:
                    04:90:91:b8:96:33:1a:e7:e4:e0:86:27:19:c3:2f:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FA:13:AA:C1:31:B0:AC:BE:CB:F4:ED:2A:9F:9E:A8:16:D2:1E:F7
            X509v3 Authority Key Identifier:
                keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3b:81:2b:17:dd:a0:b3:79:d4:f3:98:43:a7:1e:55:7d:b8:
         ee:32:05:d9:76:ee:14:ee:68:2e:e3:ed:44:b2:89:0a:85:f8:
         e4:65:44:75:8b:2b:8e:d4:b7:d0:c3:26:e7:9a:6f:d5:8a:24:
         42:6d:41:ab:97:39:aa:cc:c2:53:66:1c:f2:48:1f:17:37:f1:
         86:ce:43:6f:b4:81:01:50:cd:1c:0a:57:15:72:53:a6:64:84:
         3f:a3:77:e7:c7:be:b6:82:66:4f:04:86:50:bc:0c:d4:6c:9d:
         82:b7:77:25:12:91:d8:c5:0d:8b:32:47:9b:7d:54:82:6d:85:
         0b:f0:c8:8d:46:39:93:31:b0:94:21:30:7b:e2:fe:69:b1:bf:
         51:e4:82:f1:04:e7:69:40:ff:49:14:84:03:c2:b4:9c:a3:5f:
         70:76:7e:86:55:22:64:f8:a2:a3:4c:03:b4:0a:a7:fb:a1:a2:
         76:e0:ba:70:f2:d3:2a:ac:ef:23:24:c0:34:7a:2c:aa:d8:3a:
         bc:ba:71:a4:5e:10:26:94:c5:15:66:09:97:5c:18:63:a3:4c:
         4d:d5:72:56:42:eb:fc:9d:5c:77:90:ef:c7:5e:f9:0d:07:79:
         6a:5a:ce:7a:57:df:a0:90:15:66:1c:25:c8:66:47:c3:9b:0e:
         39:93:b7:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEsV3R3hXhNTNIeGW+tCn3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTBkYTc2NWE5OTlmNzE5ODc1YzUxZWVjZjRjN2Q2MTQ4
YTFiZDkwHhcNMjYxMDExMTkwMTMxWhcNMjYxMDEyMTkwMTMxWjAzMTEwLwYDVQQD
EygxNWZhMTNhYWMxMzFiMGFjYmVjYmY0ZWQyYTlmOWVhODE2ZDIxZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13XOa3klRCjt/vtgSBf8SQpY+ibT
CubXkqr9xmELlumeP3vtXTR/aEW0kFUw+qifAytpiphd1gvBFt46ZLr6zu2Zfdca
ubQvwzvU0dcUvQMUjpgqiO+RBeRr1czPugw4kwmhKS5zvA5zB+/l2B2PJ4yU9EUt
2gx4ZZ1lIAHitsvk0EomlSSq/EbSqKRJKYhoggWcQLyHsXatnsKtwbzKSJtMZ+n/
A3Gn0KbouWutsyhFk0doJBvZZH7PFLrGauOXSvwfANHnrV7sGGbbzRw5YQGhhHdX
frWmA6Ir0zxxyZnz2hV/VZFSA110+0X/Mw0EkJG4ljMa5+TghicZwy9mpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBX6E6rBMbCsvsv07SqfnqgW0h73MB8GA1UdIwQY
MBaAFCiQ2nZamZ9xmHXFHuz0x9YUihvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEt
MjhmYzcwNjNkOTUyLzEvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEtMjhmYzcwNjNkOTUy
LzEvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITuBKxfd
oLN51POYQ6ceVX247jIF2XbuFO5oLuPtRLKJCoX45GVEdYsrjtS30MMm55pv1Yok
Qm1Bq5c5qszCU2Yc8kgfFzfxhs5Db7SBAVDNHApXFXJTpmSEP6N358e+toJmTwSG
ULwM1Gydgrd3JRKR2MUNizJHm31Ugm2FC/DIjUY5kzGwlCEwe+L+abG/UeSC8QTn
aUD/SRSEA8K0nKNfcHZ+hlUiZPiio0wDtAqn+6GiduC6cPLTKqzvIyTANHosqtg6
vLpxpF4QJpTFFWYJl1wYY6NMTdVyVkLr/J1cd5Dvx175DQd5alrOelffoJAVZhwl
yGZHw5sOOZO3qg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 06:20:08 2026 by rpki-client