Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
File:                     tK_MhnJK4o7jZE0b6ehSCj7zia0.mft (raw, json)
Hash identifier:          xh1rxfAtAopy3p4PLFYPf+5Fyh4zEauH84UfhF0LSVs=
Subject key identifier:   A8:DE:EA:4B:22:73:7A:AC:4F:61:2A:D9:E4:66:AC:41:48:13:B8:87
Authority key identifier: B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
Certificate issuer:       /CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Certificate serial:       01A0E5511928D5564D651B5C6CDEA342AFB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
Manifest number:          F0
Signing time:             Mon 28 Sep 2026 00:01:32 +0000
Manifest this update:     Mon 28 Sep 2026 00:01:32 +0000
Manifest next update:     Tue 29 Sep 2026 00:01:32 +0000
Files and hashes:         1: tK_MhnJK4o7jZE0b6ehSCj7zia0.crl (hash: I5bKqvRxhhKPAw/8Mva/Be3ibpSYBI138OHV04e9wGE=)
                          2: xknKtTv3aOJfGX6wPs3f3yNuujM.roa (hash: UAJG/h4ZBqmm+2hMDaAp1u3zKvAAvYZrIBtFkvMHGHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:51:19:28:d5:56:4d:65:1b:5c:6c:de:a3:42:af:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
        Validity
            Not Before: Sep 28 00:01:32 2026 GMT
            Not After : Sep 29 00:01:32 2026 GMT
        Subject: CN=a8deea4b22737aac4f612ad9e466ac414813b887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:99:86:32:12:19:56:59:cb:27:73:fb:cd:d8:
                    78:8c:3d:c7:a4:78:47:b5:8a:a9:e2:09:27:7e:ce:
                    25:9c:9f:01:bf:71:38:49:d7:50:67:b5:e0:64:aa:
                    70:9f:08:71:c2:08:dc:66:96:87:2e:89:41:ed:f8:
                    4c:e8:d9:7a:a8:92:5c:90:d8:99:92:28:72:26:d3:
                    2c:c8:69:54:dd:c0:a0:d0:ff:37:ff:7d:13:6e:1b:
                    2c:42:4c:c5:fa:c4:1a:d6:cd:6d:45:c1:5b:6d:db:
                    44:b1:15:d0:5a:25:7c:ef:59:bf:bf:b8:19:28:91:
                    11:fa:69:d3:65:65:0f:d6:10:8c:91:3a:00:61:c6:
                    2f:33:33:fa:21:34:a7:bc:c1:4d:2f:2c:cd:7a:33:
                    e8:40:82:34:a1:a2:76:96:0b:47:ab:9c:26:e6:c2:
                    fd:05:da:38:e4:21:1d:a5:b0:bd:93:3b:8e:80:ec:
                    b5:77:0f:10:07:64:3d:50:93:8a:b2:91:74:2e:4a:
                    70:a3:f7:13:25:ba:57:50:bb:69:1a:9d:60:3b:63:
                    2b:65:eb:54:6f:16:46:f9:f3:fe:f4:a4:aa:f9:d4:
                    3a:cf:e8:93:e4:1a:ef:b9:9f:70:ad:30:03:08:e3:
                    84:d5:fc:1a:87:60:ab:0c:eb:1d:bc:33:60:3a:e5:
                    64:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DE:EA:4B:22:73:7A:AC:4F:61:2A:D9:E4:66:AC:41:48:13:B8:87
            X509v3 Authority Key Identifier:
                keyid:B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:17:11:01:cc:d3:07:0d:03:0d:c5:85:78:c8:d6:30:63:92:
         9f:47:35:51:42:33:26:cc:ed:7b:ad:51:8a:91:83:f5:be:84:
         fc:22:ff:b3:24:3d:50:61:1d:46:7e:9e:ee:d8:81:65:22:8b:
         fc:09:9c:ef:a6:7f:5a:d5:79:e3:0e:26:67:5d:04:e7:0f:35:
         33:2d:ff:3c:be:81:c0:42:b7:59:b9:ec:e0:80:83:58:da:32:
         10:36:65:d2:a7:63:83:1c:4a:31:c7:57:90:5f:1d:73:db:65:
         fe:37:96:38:95:0e:91:d9:ac:4a:dc:b8:79:26:e3:4b:0b:2e:
         6b:1b:be:71:fc:87:c1:a5:f4:56:fd:f4:04:f9:0e:37:2b:7a:
         26:d8:9c:5e:78:90:c4:dc:56:d9:b2:e0:a3:a6:09:b3:b3:39:
         d0:10:75:2c:20:55:7c:14:b9:55:29:66:50:27:71:09:ea:a8:
         5c:6a:c3:8b:f3:97:db:a0:db:5b:f1:59:8a:4c:22:e8:0b:35:
         7c:82:c5:99:60:35:7c:64:af:86:80:8d:99:5d:dc:2a:60:50:
         02:98:7e:dc:68:51:e0:23:29:f1:ef:3e:a9:fb:08:6a:f8:e9:
         2b:49:79:cf:5d:11:bb:c4:ea:ee:2a:62:91:f9:94:25:5c:b7:
         4d:c9:33:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDlURko1VZNZRtcbN6jQq+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YWZjYzg2NzI0YWUyOGVlMzY0NGQxYmU5ZTg1MjBhM2Vm
Mzg5YWQwHhcNMjYwOTI4MDAwMTMyWhcNMjYwOTI5MDAwMTMyWjAzMTEwLwYDVQQD
EyhhOGRlZWE0YjIyNzM3YWFjNGY2MTJhZDllNDY2YWM0MTQ4MTNiODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5mGMhIZVlnLJ3P7zdh4jD3HpHhH
tYqp4gknfs4lnJ8Bv3E4SddQZ7XgZKpwnwhxwgjcZpaHLolB7fhM6Nl6qJJckNiZ
kihyJtMsyGlU3cCg0P83/30TbhssQkzF+sQa1s1tRcFbbdtEsRXQWiV871m/v7gZ
KJER+mnTZWUP1hCMkToAYcYvMzP6ITSnvMFNLyzNejPoQII0oaJ2lgtHq5wm5sL9
Bdo45CEdpbC9kzuOgOy1dw8QB2Q9UJOKspF0Lkpwo/cTJbpXULtpGp1gO2MrZetU
bxZG+fP+9KSq+dQ6z+iT5BrvuZ9wrTADCOOE1fwah2CrDOsdvDNgOuVkNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKje6ksic3qsT2Eq2eRmrEFIE7iHMB8GA1UdIwQY
MBaAFLSvzIZySuKO42RNG+noUgo+84mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtfTWhuSks0bzdqWkUwYjZlaFNDajd6aWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83ZTRiYTctZjU5Mi00ZWVjLWJjYWUt
MDk1ZDBiZDI1NTVmLzEvdEtfTWhuSks0bzdqWkUwYjZlaFNDajd6aWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83ZTRiYTctZjU5Mi00ZWVjLWJjYWUtMDk1ZDBiZDI1NTVm
LzEvdEtfTWhuSks0bzdqWkUwYjZlaFNDajd6aWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshcRAczT
Bw0DDcWFeMjWMGOSn0c1UUIzJszte61RipGD9b6E/CL/syQ9UGEdRn6e7tiBZSKL
/Amc76Z/WtV54w4mZ10E5w81My3/PL6BwEK3Wbns4ICDWNoyEDZl0qdjgxxKMcdX
kF8dc9tl/jeWOJUOkdmsSty4eSbjSwsuaxu+cfyHwaX0Vv30BPkONyt6JticXniQ
xNxW2bLgo6YJs7M50BB1LCBVfBS5VSlmUCdxCeqoXGrDi/OX26DbW/FZikwi6As1
fILFmWA1fGSvhoCNmV3cKmBQAph+3GhR4CMp8e8+qfsIavjpK0l5z10Ru8Tq7ipi
kfmUJVy3TckzUw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 03:37:27 2026 by rpki-client