Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
File:                     1PhqmjxCnBvCbsBqOuTkF8p0394.mft (raw, json)
Hash identifier:          NNJBq9XmNwDUkHliLNHwEVCZpnXmu186tD4VEdOsWHU=
Subject key identifier:   ED:0F:C8:E1:A9:E0:90:D6:4E:DF:81:2D:90:FE:A7:07:FF:31:6B:06
Authority key identifier: D4:F8:6A:9A:3C:42:9C:1B:C2:6E:C0:6A:3A:E4:E4:17:CA:74:DF:DE
Certificate issuer:       /CN=d4f86a9a3c429c1bc26ec06a3ae4e417ca74dfde
Certificate serial:       01A130D8DEF1F54E8AF82E9EDD3F58D207D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
Manifest number:          0D28
Signing time:             Mon 12 Oct 2026 16:01:21 +0000
Manifest this update:     Mon 12 Oct 2026 16:01:21 +0000
Manifest next update:     Tue 13 Oct 2026 16:01:21 +0000
Files and hashes:         1: 1PhqmjxCnBvCbsBqOuTkF8p0394.crl (hash: 8CcnKzS25PwcYI9RmOkx7B6RtnzavLr12VJgcgROoQc=)
                          2: EIZvs3LlyOATA74fkfrX-SPXX8s.asa (hash: Bo3VyldvJrbwB3Q3/d9GSyN+MI2yMpO4vcDWG8UZ6iM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:d8:de:f1:f5:4e:8a:f8:2e:9e:dd:3f:58:d2:07:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4f86a9a3c429c1bc26ec06a3ae4e417ca74dfde
        Validity
            Not Before: Oct 12 16:01:21 2026 GMT
            Not After : Oct 13 16:01:21 2026 GMT
        Subject: CN=ed0fc8e1a9e090d64edf812d90fea707ff316b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:18:4e:d6:56:1a:a6:88:e7:06:f7:7d:33:
                    ba:9f:53:d1:b0:ad:4b:d1:fb:41:3b:22:18:d8:d3:
                    dd:3f:63:74:12:c1:64:f5:b0:71:e5:b2:34:b6:6a:
                    37:b1:3e:eb:ac:8f:16:81:fb:8e:bf:9f:fc:74:52:
                    4a:7b:8f:c3:f0:34:53:26:ee:96:13:8e:c5:2c:a9:
                    92:ea:e1:52:a3:0b:49:e5:cb:e2:fc:32:8a:23:76:
                    d3:5f:a0:d7:ae:1e:6d:51:14:34:c6:f7:4e:aa:b8:
                    ba:ad:28:6e:4b:a7:89:7e:60:a8:13:02:bf:ce:cb:
                    a3:b2:bf:83:0f:74:ed:20:5b:a9:6d:81:ac:61:01:
                    4f:0b:de:61:af:42:32:12:64:43:5c:1b:80:85:49:
                    32:51:4e:51:73:52:73:95:07:c7:59:e5:ba:fe:15:
                    35:60:51:e5:2b:65:5c:35:80:b4:dc:8b:08:32:ec:
                    c3:d7:d7:37:ad:bb:0c:49:54:70:05:f2:79:99:b3:
                    ae:60:f6:8a:c7:39:1c:ad:79:c9:fb:ac:05:77:02:
                    3e:57:6b:50:ae:6d:d5:70:0d:79:c9:ca:c9:08:6d:
                    38:00:2a:47:30:ab:54:64:ce:06:fc:85:51:f5:4e:
                    82:6b:df:d9:36:d2:93:89:e8:70:e3:0b:2e:08:12:
                    05:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0F:C8:E1:A9:E0:90:D6:4E:DF:81:2D:90:FE:A7:07:FF:31:6B:06
            X509v3 Authority Key Identifier:
                keyid:D4:F8:6A:9A:3C:42:9C:1B:C2:6E:C0:6A:3A:E4:E4:17:CA:74:DF:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:db:23:c4:b9:a3:64:47:c7:f8:05:33:d2:a0:7f:0d:12:8b:
         ba:e9:71:cd:9a:23:fa:68:c3:d8:72:25:90:25:1d:21:49:bf:
         95:7a:31:f3:b7:19:65:e7:53:0e:9b:12:63:e6:36:b1:b6:a7:
         21:ce:87:17:6d:ba:50:80:13:cf:d5:6b:d7:d6:40:ed:8a:a3:
         40:37:d2:2f:2e:65:48:27:f4:f7:8b:55:9d:89:8e:86:46:c6:
         34:af:22:d7:32:2a:92:f1:bf:dc:f8:ab:c0:b1:7d:7b:51:90:
         0f:31:2f:43:d7:7f:1c:0c:01:f3:f4:0c:78:fa:ec:21:3c:a0:
         32:40:6b:a3:58:6e:de:75:c1:80:d3:3b:94:0d:1f:62:75:17:
         db:78:4b:c1:af:48:cc:a0:49:03:7c:55:8f:eb:df:d5:03:c9:
         02:8c:1d:c4:74:6b:d1:84:bc:7e:38:c6:ca:2d:47:e1:ec:3f:
         e1:d2:60:a1:05:4b:82:d0:82:bd:ed:f7:93:dc:13:0a:44:45:
         f4:95:a6:be:bc:a5:d0:b8:c6:06:a6:7d:61:43:3a:4c:3d:39:
         93:75:da:98:8f:5c:ab:f9:f8:af:1f:93:42:a9:c6:31:be:e1:
         56:ef:68:21:2e:9e:77:27:f4:2c:dd:41:fb:74:05:ba:8b:44:
         26:37:81:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEw2N7x9U6K+C6e3T9Y0gfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Zjg2YTlhM2M0MjljMWJjMjZlYzA2YTNhZTRlNDE3Y2E3
NGRmZGUwHhcNMjYxMDEyMTYwMTIxWhcNMjYxMDEzMTYwMTIxWjAzMTEwLwYDVQQD
EyhlZDBmYzhlMWE5ZTA5MGQ2NGVkZjgxMmQ5MGZlYTcwN2ZmMzE2YjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktcYTtZWGqaI5wb3fTO6n1PRsK1L
0ftBOyIY2NPdP2N0EsFk9bBx5bI0tmo3sT7rrI8WgfuOv5/8dFJKe4/D8DRTJu6W
E47FLKmS6uFSowtJ5cvi/DKKI3bTX6DXrh5tURQ0xvdOqri6rShuS6eJfmCoEwK/
zsujsr+DD3TtIFupbYGsYQFPC95hr0IyEmRDXBuAhUkyUU5Rc1JzlQfHWeW6/hU1
YFHlK2VcNYC03IsIMuzD19c3rbsMSVRwBfJ5mbOuYPaKxzkcrXnJ+6wFdwI+V2tQ
rm3VcA15ycrJCG04ACpHMKtUZM4G/IVR9U6Ca9/ZNtKTiehw4wsuCBIFtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0PyOGp4JDWTt+BLZD+pwf/MWsGMB8GA1UdIwQY
MBaAFNT4apo8Qpwbwm7Aajrk5BfKdN/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVBocW1qeENuQnZDYnNCcU91VGtGOHAwMzk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hNWU1MzEtMWEwOC00MzM2LWIwZDgt
NDgzMjY1OTk5NGNiLzEvMVBocW1qeENuQnZDYnNCcU91VGtGOHAwMzk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hNWU1MzEtMWEwOC00MzM2LWIwZDgtNDgzMjY1OTk5NGNi
LzEvMVBocW1qeENuQnZDYnNCcU91VGtGOHAwMzk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNsjxLmj
ZEfH+AUz0qB/DRKLuulxzZoj+mjD2HIlkCUdIUm/lXox87cZZedTDpsSY+Y2sban
Ic6HF226UIATz9Vr19ZA7YqjQDfSLy5lSCf094tVnYmOhkbGNK8i1zIqkvG/3Pir
wLF9e1GQDzEvQ9d/HAwB8/QMePrsITygMkBro1hu3nXBgNM7lA0fYnUX23hLwa9I
zKBJA3xVj+vf1QPJAowdxHRr0YS8fjjGyi1H4ew/4dJgoQVLgtCCve33k9wTCkRF
9JWmvryl0LjGBqZ9YUM6TD05k3XamI9cq/n4rx+TQqnGMb7hVu9oIS6edyf0LN1B
+3QFuotEJjeBSA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 23:18:16 2026 by rpki-client