Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
File:                     dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json)
Hash identifier:          eMuOX4Mpl+07gtLcd1ZfNCxF2g7k5I4feYruHHduio4=
Subject key identifier:   36:01:91:16:7D:CC:6D:A3:35:BF:DC:1F:12:B5:B8:BA:CE:44:44:65
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Certificate issuer:       /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial:       01A11AF5C3702BE197AD83FFF62489494304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
Manifest number:          156E
Signing time:             Thu 08 Oct 2026 10:01:16 +0000
Manifest this update:     Thu 08 Oct 2026 10:01:16 +0000
Manifest next update:     Fri 09 Oct 2026 10:01:16 +0000
Files and hashes:         1: B7aCk0b-K5XgdvEjGdk5wXSAkDc.roa (hash: nyiUF3Zt9sMp6+mzeEZ8PMtjO/iACI+KfmNy9BotXDk=)
                          2: D9aUpKX2PTU1wmWHLRRqPaZtLBI.roa (hash: dH6am4VhkjdQhWRQqbXQ4D/HbErjXar5HVgXeANi9W0=)
                          3: Lp0vHH3sV5CmRox_CW0AyUEO49A.roa (hash: HnRMr5r2HkpjEYviPbeXFZfwzUunRvvI+wgZvCnFlCc=)
                          4: c6nKpma73pYWxvMGKppaadDfEFw.roa (hash: vhO0PPLdQXMMpfgBSaG37tdr8r6MbA4mP7J/LJzhZao=)
                          5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: Vdl/6hAVNGyNX+xBE+7GZuMz5lR2q5qa+YvVZJP7teQ=)
                          6: jGSNHMpFNbQkO_PxgFvC_4Gf8QE.roa (hash: K41n6g6IzXx6vx3vFplymreUJX4uIZoX2K6TNqcNUyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:f5:c3:70:2b:e1:97:ad:83:ff:f6:24:89:49:43:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764928a97be955377013d382c62940e950dd212b
        Validity
            Not Before: Oct  8 10:01:16 2026 GMT
            Not After : Oct  9 10:01:16 2026 GMT
        Subject: CN=360191167dcc6da335bfdc1f12b5b8bace444465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:12:3f:4a:8d:4c:5b:67:98:6f:6b:d1:8c:25:
                    12:04:83:05:dd:b3:4c:55:11:16:cb:70:1c:33:15:
                    fd:89:f9:db:d9:d2:c2:da:c5:d7:7b:1a:04:9f:03:
                    a7:cf:8e:05:41:4b:09:ed:02:9c:e2:a1:8d:a8:29:
                    d5:d4:af:cd:ef:ff:af:2f:63:5d:ef:87:69:88:cb:
                    3e:fb:14:5f:d8:90:84:82:5b:c8:73:b9:46:0d:a0:
                    50:50:47:a9:9b:cc:b6:2d:45:05:f2:fe:8f:8a:58:
                    fc:34:d6:13:ea:de:6e:14:1d:b8:b8:c3:8b:dc:87:
                    94:be:b2:eb:04:6d:14:a7:d5:e4:1a:9f:2d:13:9b:
                    65:6b:80:e7:f4:6e:0d:24:60:b1:7f:56:63:dc:01:
                    61:07:88:39:2f:03:43:c5:cd:81:82:4c:b6:ad:0e:
                    55:e9:71:c3:8b:40:ce:a8:ec:32:da:43:11:97:4c:
                    1d:0b:44:88:08:2c:bb:79:20:d0:23:e2:83:e3:69:
                    4f:43:34:7e:b5:62:4a:d7:33:b3:38:bd:4e:e5:45:
                    c1:66:79:89:f3:94:b6:cb:ba:a7:ff:80:95:9e:44:
                    b3:f8:39:9f:77:9a:c9:00:bf:e3:dd:da:a0:0f:8a:
                    52:94:f4:df:ad:cb:4f:ad:7e:7c:c4:7f:f0:c8:86:
                    04:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:01:91:16:7D:CC:6D:A3:35:BF:DC:1F:12:B5:B8:BA:CE:44:44:65
            X509v3 Authority Key Identifier:
                keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:30:15:a4:93:d8:e8:b8:65:33:42:c4:b7:64:07:1b:19:02:
         70:b9:dc:d9:87:65:22:e3:70:e6:9d:21:df:36:67:b6:44:73:
         b1:05:5a:a7:49:16:04:69:a3:b1:51:91:5f:c1:4c:7c:04:32:
         c7:44:07:54:83:ce:3d:c1:b3:b7:3a:f0:f6:a7:f4:56:3a:9a:
         86:94:21:6d:7f:89:49:31:ba:d2:69:a4:0a:a1:1b:92:09:9f:
         c9:68:53:fc:92:97:8b:cb:f3:72:53:02:25:ba:68:87:3e:4b:
         d6:5b:06:54:25:7c:ed:e2:6a:f9:02:90:92:c7:24:af:71:0f:
         d8:7e:23:a7:01:7d:14:7b:cc:c5:62:12:d4:c4:da:a8:c5:ab:
         cd:93:26:7a:dd:81:61:ef:3e:b9:92:8d:d9:9d:71:08:bf:9f:
         45:66:ed:ca:51:b5:51:08:15:52:38:c7:48:87:62:49:c8:c5:
         35:93:f3:72:2d:6c:90:86:15:3f:75:a7:2a:03:d0:31:d8:ae:
         8f:38:05:57:a5:f1:f1:70:fa:61:3d:fc:0b:99:6f:9e:43:dd:
         ff:bf:12:4e:ad:e3:1c:3a:a0:b3:2d:dd:97:06:59:20:a2:6c:
         cd:31:02:34:12:96:d1:1f:09:99:62:00:d1:64:44:bc:b2:04:
         2f:2b:74:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEa9cNwK+GXrYP/9iSJSUMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDkyOGE5N2JlOTU1Mzc3MDEzZDM4MmM2Mjk0MGU5NTBk
ZDIxMmIwHhcNMjYxMDA4MTAwMTE2WhcNMjYxMDA5MTAwMTE2WjAzMTEwLwYDVQQD
EygzNjAxOTExNjdkY2M2ZGEzMzViZmRjMWYxMmI1YjhiYWNlNDQ0NDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hI/So1MW2eYb2vRjCUSBIMF3bNM
VREWy3AcMxX9ifnb2dLC2sXXexoEnwOnz44FQUsJ7QKc4qGNqCnV1K/N7/+vL2Nd
74dpiMs++xRf2JCEglvIc7lGDaBQUEepm8y2LUUF8v6Pilj8NNYT6t5uFB24uMOL
3IeUvrLrBG0Up9XkGp8tE5tla4Dn9G4NJGCxf1Zj3AFhB4g5LwNDxc2Bgky2rQ5V
6XHDi0DOqOwy2kMRl0wdC0SICCy7eSDQI+KD42lPQzR+tWJK1zOzOL1O5UXBZnmJ
85S2y7qn/4CVnkSz+Dmfd5rJAL/j3dqgD4pSlPTfrctPrX58xH/wyIYEtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYBkRZ9zG2jNb/cHxK1uLrORERlMB8GA1UdIwQY
MBaAFHZJKKl76VU3cBPTgsYpQOlQ3SErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDkt
YmMxNTIyNzg5ZDNiLzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDktYmMxNTIyNzg5ZDNi
LzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDAVpJPY
6LhlM0LEt2QHGxkCcLnc2YdlIuNw5p0h3zZntkRzsQVap0kWBGmjsVGRX8FMfAQy
x0QHVIPOPcGztzrw9qf0VjqahpQhbX+JSTG60mmkCqEbkgmfyWhT/JKXi8vzclMC
Jbpohz5L1lsGVCV87eJq+QKQksckr3EP2H4jpwF9FHvMxWIS1MTaqMWrzZMmet2B
Ye8+uZKN2Z1xCL+fRWbtylG1UQgVUjjHSIdiScjFNZPzci1skIYVP3WnKgPQMdiu
jzgFV6Xx8XD6YT38C5lvnkPd/78STq3jHDqgsy3dlwZZIKJszTECNBKW0R8JmWIA
0WREvLIELyt0Og==
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:23:42 2026 by rpki-client