Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft
File:                     5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft (raw, json)
Hash identifier:          BRX3EIgH0G0O+3K76pMHeB8wBW7Au+Y971ACJEiZDRA=
Subject key identifier:   9E:85:0C:39:D1:02:7B:D2:4E:C8:38:1D:A2:7D:32:AD:63:D7:9B:69
Authority key identifier: E6:DD:54:60:83:BF:65:23:DA:CD:75:B0:DE:6A:92:5E:25:8E:7D:7C
Certificate issuer:       /CN=e6dd546083bf6523dacd75b0de6a925e258e7d7c
Certificate serial:       01A1408332E28C839E69785D919DF29E4A07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5t1UYIO_ZSPazXWw3mqSXiWOfXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft
Manifest number:          FD
Signing time:             Thu 15 Oct 2026 17:01:42 +0000
Manifest this update:     Thu 15 Oct 2026 17:01:42 +0000
Manifest next update:     Fri 16 Oct 2026 17:01:42 +0000
Files and hashes:         1: 0DosBvc1nYTBnk-k7-9MkqoJuso.roa (hash: HpDjKyJ1RrZFlilOHlA6dkNWt1QM+OdtMilpqKGSWkQ=)
                          2: 5t1UYIO_ZSPazXWw3mqSXiWOfXw.crl (hash: ca616hW0E1yOs0dbE4j7pydTLPVLQ9P7EBfh8z3o5d4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5t1UYIO_ZSPazXWw3mqSXiWOfXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:83:32:e2:8c:83:9e:69:78:5d:91:9d:f2:9e:4a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6dd546083bf6523dacd75b0de6a925e258e7d7c
        Validity
            Not Before: Oct 15 17:01:42 2026 GMT
            Not After : Oct 16 17:01:42 2026 GMT
        Subject: CN=9e850c39d1027bd24ec8381da27d32ad63d79b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:10:90:7b:05:ab:1a:e6:8d:ad:cc:51:cb:60:
                    3e:b1:c5:44:6e:c2:61:28:40:e8:7b:a3:43:93:6f:
                    78:26:6f:2b:f3:ec:d8:ac:88:31:f8:7f:10:ca:57:
                    b1:64:83:16:27:17:9d:be:b0:4f:67:f4:ab:e4:fd:
                    0e:dc:94:f0:3c:59:3c:0a:1b:44:ce:a7:83:3d:31:
                    fe:27:1e:38:bc:8d:9a:3d:fe:b4:e9:60:92:92:da:
                    2c:e3:d2:7e:23:ba:35:58:30:91:4e:9e:d4:55:ca:
                    ee:50:d0:b3:f0:16:22:15:1a:f5:0c:23:3f:27:c1:
                    f9:fd:8a:6d:e4:98:94:84:2f:dc:d1:1a:8b:85:62:
                    9a:04:c1:8f:40:68:1b:4c:b1:8f:90:24:e9:28:c4:
                    51:49:b2:46:3c:5a:af:1d:48:a3:26:a2:da:1a:3f:
                    0c:a4:0e:29:36:97:cb:36:02:f4:3f:4e:f5:d5:82:
                    b6:92:4c:e8:95:da:6c:d7:80:44:1f:16:d4:9b:61:
                    92:a7:03:68:71:09:85:b7:dc:36:7f:dc:76:2d:a9:
                    19:66:5d:db:88:40:ef:5c:16:d1:fb:b6:ca:c9:ba:
                    02:58:25:61:d3:a3:7f:77:87:b4:33:f2:e7:ca:87:
                    c3:f5:62:ed:d6:20:98:2b:b6:c1:26:a6:98:5a:93:
                    6a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:85:0C:39:D1:02:7B:D2:4E:C8:38:1D:A2:7D:32:AD:63:D7:9B:69
            X509v3 Authority Key Identifier:
                keyid:E6:DD:54:60:83:BF:65:23:DA:CD:75:B0:DE:6A:92:5E:25:8E:7D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5t1UYIO_ZSPazXWw3mqSXiWOfXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f77002-6bf7-413a-a779-38a4bf17dbb1/1/5t1UYIO_ZSPazXWw3mqSXiWOfXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d6:be:00:a3:54:85:dd:f9:ae:1f:75:e4:d2:e3:51:93:5c:
         9c:58:dd:0f:8e:68:3a:15:27:66:b8:23:4d:92:0c:7a:38:ed:
         d0:31:b8:6a:63:a2:77:6d:5d:5d:80:f5:f6:10:4f:5e:5e:34:
         b6:d2:4e:3e:34:09:52:ee:e9:e1:31:49:e2:72:f2:72:7a:1e:
         6b:9f:bd:dc:c7:8d:6a:13:94:a8:7a:cb:3d:53:5f:82:99:46:
         a2:a9:f1:d6:67:2a:64:3f:8e:d5:bf:03:dd:77:d6:84:4f:9f:
         47:4f:44:dc:62:4e:10:13:8c:21:33:06:3f:f1:5a:5a:3f:f0:
         8c:2b:55:b1:02:ec:76:25:9d:31:6b:4e:d6:c6:ec:f5:2c:da:
         f1:c2:39:b0:e5:fd:d9:9a:4d:dc:ff:0b:0a:97:71:4c:e3:56:
         13:fa:8c:13:1c:ce:61:24:2f:cd:0b:e5:bc:5d:3f:fc:23:b7:
         e3:fe:4a:63:6a:78:15:a3:51:07:be:71:b2:f6:a1:46:ee:0e:
         78:c7:20:25:52:7d:c5:ea:07:4e:b9:0a:f4:c8:78:a7:73:fb:
         84:4d:78:1f:89:14:a9:72:d8:48:8a:f0:0e:d5:2e:b3:d8:c0:
         a0:6c:98:64:bb:62:c5:33:a4:a2:21:80:5a:84:55:e9:52:68:
         e9:4c:23:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAgzLijIOeaXhdkZ3ynkoHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZGQ1NDYwODNiZjY1MjNkYWNkNzViMGRlNmE5MjVlMjU4
ZTdkN2MwHhcNMjYxMDE1MTcwMTQyWhcNMjYxMDE2MTcwMTQyWjAzMTEwLwYDVQQD
Eyg5ZTg1MGMzOWQxMDI3YmQyNGVjODM4MWRhMjdkMzJhZDYzZDc5YjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhCQewWrGuaNrcxRy2A+scVEbsJh
KEDoe6NDk294Jm8r8+zYrIgx+H8QylexZIMWJxedvrBPZ/Sr5P0O3JTwPFk8ChtE
zqeDPTH+Jx44vI2aPf606WCSktos49J+I7o1WDCRTp7UVcruUNCz8BYiFRr1DCM/
J8H5/Ypt5JiUhC/c0RqLhWKaBMGPQGgbTLGPkCTpKMRRSbJGPFqvHUijJqLaGj8M
pA4pNpfLNgL0P0711YK2kkzoldps14BEHxbUm2GSpwNocQmFt9w2f9x2LakZZl3b
iEDvXBbR+7bKyboCWCVh06N/d4e0M/LnyofD9WLt1iCYK7bBJqaYWpNqNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6FDDnRAnvSTsg4HaJ9Mq1j15tpMB8GA1UdIwQY
MBaAFObdVGCDv2Uj2s11sN5qkl4ljn18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXQxVVlJT19aU1BhelhXdzNtcVNYaVdPZlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mNzcwMDItNmJmNy00MTNhLWE3Nzkt
MzhhNGJmMTdkYmIxLzEvNXQxVVlJT19aU1BhelhXdzNtcVNYaVdPZlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mNzcwMDItNmJmNy00MTNhLWE3NzktMzhhNGJmMTdkYmIx
LzEvNXQxVVlJT19aU1BhelhXdzNtcVNYaVdPZlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArta+AKNU
hd35rh915NLjUZNcnFjdD45oOhUnZrgjTZIMejjt0DG4amOid21dXYD19hBPXl40
ttJOPjQJUu7p4TFJ4nLycnoea5+93MeNahOUqHrLPVNfgplGoqnx1mcqZD+O1b8D
3XfWhE+fR09E3GJOEBOMITMGP/FaWj/wjCtVsQLsdiWdMWtO1sbs9Sza8cI5sOX9
2ZpN3P8LCpdxTONWE/qMExzOYSQvzQvlvF0//CO34/5KY2p4FaNRB75xsvahRu4O
eMcgJVJ9xeoHTrkK9Mh4p3P7hE14H4kUqXLYSIrwDtUus9jAoGyYZLtixTOkoiGA
WoRV6VJo6Uwj7A==
-----END CERTIFICATE-----
Generated at Fri Oct 16 00:19:37 2026 by rpki-client