Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
File:                     hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft (raw, json)
Hash identifier:          mJzb+WTTJIqS2DJp2Kjn/LqddyrhtJ7aMGhuNg9PF1I=
Subject key identifier:   8C:FB:46:A8:CE:B0:00:16:25:4E:0B:87:93:93:BF:45:B6:63:16:9B
Authority key identifier: 85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
Certificate issuer:       /CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Certificate serial:       01A12FFD29FDCCB2B22D8E8C57EC59700149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
Manifest number:          05A6
Signing time:             Mon 12 Oct 2026 12:01:22 +0000
Manifest this update:     Mon 12 Oct 2026 12:01:22 +0000
Manifest next update:     Tue 13 Oct 2026 12:01:22 +0000
Files and hashes:         1: HcMClhCRmKE60lpZDx5-BSB1cFo.asa (hash: RaiOYBO+NLhX7PmnS7SoVK0FIJWQ+F4Nt0bFD9R8aRc=)
                          2: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl (hash: BLULe86EHkVJ1skLUVpN+LHVKmrFi8154/+0Y2iTerM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2f:fd:29:fd:cc:b2:b2:2d:8e:8c:57:ec:59:70:01:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
        Validity
            Not Before: Oct 12 12:01:22 2026 GMT
            Not After : Oct 13 12:01:22 2026 GMT
        Subject: CN=8cfb46a8ceb00016254e0b879393bf45b663169b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:a7:1b:8f:8d:38:0b:a1:b5:7c:fe:1e:04:
                    5b:58:da:80:de:b3:2e:e7:c6:98:06:76:41:6d:cc:
                    69:c5:82:0e:9a:9e:fc:19:50:69:67:ac:4e:6a:ff:
                    c6:ed:13:a7:e0:bc:7a:94:23:4c:a4:ad:8e:4e:10:
                    6b:69:93:7a:57:16:13:ed:2e:fe:ff:26:d8:37:3f:
                    52:3e:43:54:38:ea:a2:61:ee:da:25:b9:1e:6d:87:
                    dc:f0:39:4f:c6:45:24:86:0f:87:d5:52:66:35:a9:
                    86:bf:09:5a:5f:76:e2:3d:88:0c:49:a0:42:d9:a2:
                    ab:d8:ae:66:d9:7c:14:6f:c1:d7:10:0a:3b:59:bb:
                    54:8f:b9:bf:d8:0c:d7:7a:e2:1c:ec:db:54:22:7e:
                    b0:12:b8:52:b7:49:62:9f:9e:1d:23:c8:2e:00:5f:
                    a1:37:40:13:cd:91:47:e6:39:70:f5:b4:0f:bf:00:
                    e8:0d:cd:a6:e8:4c:5b:e1:3a:85:c4:6d:40:ab:30:
                    b8:a9:27:6e:91:60:c6:d7:cd:f6:2f:e3:e4:49:ba:
                    18:ae:84:f8:ce:9c:25:68:8d:5a:88:6e:08:5a:46:
                    b7:0f:3c:7e:bf:28:c9:af:d6:37:d0:d8:46:9c:ae:
                    e4:af:93:48:5b:b4:25:24:ac:7c:df:f7:77:5b:99:
                    ff:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FB:46:A8:CE:B0:00:16:25:4E:0B:87:93:93:BF:45:B6:63:16:9B
            X509v3 Authority Key Identifier:
                keyid:85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ba:62:56:10:49:ac:26:f7:b3:f0:04:de:96:5e:f3:fb:c6:
         ac:f3:4e:84:15:7b:23:c4:dc:56:76:c2:66:c4:df:44:ef:f9:
         fc:15:1f:68:1a:e7:81:1c:3d:7f:66:53:e3:67:ab:45:ce:ea:
         4a:70:b3:19:6d:2e:1f:c6:31:aa:83:cc:ec:fb:fc:cd:6d:ef:
         2e:97:76:a2:a1:53:24:81:d7:f1:8b:ec:f6:aa:b5:72:a0:cd:
         27:6e:bb:f5:ce:4c:2a:0c:99:df:f0:6a:c6:ef:c3:be:70:98:
         f9:08:0d:f9:21:39:e1:d6:42:d0:cb:62:64:b5:f7:41:0f:ec:
         9b:b1:6d:9c:07:6b:53:49:d5:9a:66:e2:38:52:36:ce:28:cb:
         5b:9d:ad:92:4f:02:3a:0c:38:f1:b8:83:83:1e:c4:bd:a3:b5:
         57:13:d2:fc:02:27:f3:7e:4e:25:ef:60:7f:0b:da:75:26:30:
         af:47:eb:05:37:d7:92:43:1a:9d:af:a4:0a:86:56:9d:c9:ce:
         d6:44:93:a3:86:d9:b8:be:cf:d2:2e:40:48:e3:df:3d:89:24:
         36:77:41:f8:0c:b7:76:97:ce:99:09:2c:d3:31:a8:6f:c9:be:
         68:e7:19:5d:ab:4d:8d:5c:44:ea:95:3b:d8:f4:5c:b6:cf:55:
         cd:dd:ae:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEv/Sn9zLKyLY6MV+xZcAFJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1Mjk2ZWQwNjY1NWI3ZTI2ZDY1OWU5NmJjMmVjNmZlMGYy
ZWQzM2UwHhcNMjYxMDEyMTIwMTIyWhcNMjYxMDEzMTIwMTIyWjAzMTEwLwYDVQQD
Eyg4Y2ZiNDZhOGNlYjAwMDE2MjU0ZTBiODc5MzkzYmY0NWI2NjMxNjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy6nG4+NOAuhtXz+HgRbWNqA3rMu
58aYBnZBbcxpxYIOmp78GVBpZ6xOav/G7ROn4Lx6lCNMpK2OThBraZN6VxYT7S7+
/ybYNz9SPkNUOOqiYe7aJbkebYfc8DlPxkUkhg+H1VJmNamGvwlaX3biPYgMSaBC
2aKr2K5m2XwUb8HXEAo7WbtUj7m/2AzXeuIc7NtUIn6wErhSt0lin54dI8guAF+h
N0ATzZFH5jlw9bQPvwDoDc2m6Exb4TqFxG1AqzC4qSdukWDG1832L+PkSboYroT4
zpwlaI1aiG4IWka3Dzx+vyjJr9Y30NhGnK7kr5NIW7QlJKx83/d3W5n/OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIz7RqjOsAAWJU4Lh5OTv0W2YxabMB8GA1UdIwQY
MBaAFIUpbtBmVbfibWWelrwuxv4PLtM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2Yt
MDFmZjA0YjBhMWE0LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2YtMDFmZjA0YjBhMWE0
LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLpiVhBJ
rCb3s/AE3pZe8/vGrPNOhBV7I8TcVnbCZsTfRO/5/BUfaBrngRw9f2ZT42erRc7q
SnCzGW0uH8YxqoPM7Pv8zW3vLpd2oqFTJIHX8Yvs9qq1cqDNJ2679c5MKgyZ3/Bq
xu/DvnCY+QgN+SE54dZC0MtiZLX3QQ/sm7FtnAdrU0nVmmbiOFI2zijLW52tkk8C
Ogw48biDgx7EvaO1VxPS/AIn835OJe9gfwvadSYwr0frBTfXkkMana+kCoZWncnO
1kSTo4bZuL7P0i5ASOPfPYkkNndB+Ay3dpfOmQks0zGob8m+aOcZXatNjVxE6pU7
2PRcts9Vzd2ueg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 15:33:42 2026 by rpki-client