Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
File:                     seUmQF1FF0JHmU_u2y1-XdQHk90.mft (raw, json)
Hash identifier:          fnY9wSSkWk4yefiwg8h6X0m8dbDGUcIdI5YLwJw4l4I=
Subject key identifier:   EE:87:50:AB:9E:11:C4:D3:BE:7D:37:54:F6:44:96:61:19:BB:82:78
Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
Certificate issuer:       /CN=b1e526405d45174247994feedb2d7e5dd40793dd
Certificate serial:       01A129C3C43BEBA42B95FE7F9BA36B343CDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
Manifest number:          18E8
Signing time:             Sun 11 Oct 2026 07:00:57 +0000
Manifest this update:     Sun 11 Oct 2026 07:00:57 +0000
Manifest next update:     Mon 12 Oct 2026 07:00:57 +0000
Files and hashes:         1: FR5mDqbGIKqjwVgFy82Hy4k-jQA.roa (hash: xCDxKjtGAFZwt/JvcP8eufx5NKzwBYPZJM1T0oTN85o=)
                          2: seUmQF1FF0JHmU_u2y1-XdQHk90.crl (hash: 2Xfrxa1otjCICLAARsr9WMoDXgeuYWJV4txo+DisWmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:c3:c4:3b:eb:a4:2b:95:fe:7f:9b:a3:6b:34:3c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd
        Validity
            Not Before: Oct 11 07:00:57 2026 GMT
            Not After : Oct 12 07:00:57 2026 GMT
        Subject: CN=ee8750ab9e11c4d3be7d3754f644966119bb8278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:19:96:c7:53:97:ac:f7:97:e6:d2:33:32:
                    f8:c2:65:7a:59:b9:21:f0:4e:5d:17:67:b9:9a:61:
                    fe:45:03:49:b2:9a:5d:70:e0:1e:0a:93:a8:9b:94:
                    55:dc:4d:2f:1e:f8:04:16:03:ee:94:e8:71:94:c5:
                    bf:2f:c5:13:14:74:27:0a:6d:93:81:ed:34:c8:54:
                    16:4a:5b:91:02:63:fa:02:d0:f0:25:7d:94:4f:0b:
                    ea:97:da:40:d5:36:8f:4a:2f:fa:44:c5:82:82:76:
                    7c:8f:02:22:55:21:8d:bf:59:cf:a3:65:84:da:c9:
                    86:ef:0d:26:12:01:7d:79:c8:bf:74:77:48:08:44:
                    18:ef:8c:c2:e0:a2:76:a0:96:93:fe:c7:23:3e:10:
                    cd:40:98:8b:54:ec:ba:26:97:95:f9:d2:f4:ea:d9:
                    fb:d2:9d:5a:38:ba:32:86:da:da:78:32:51:e4:3f:
                    62:b3:06:77:3d:2c:70:94:eb:e3:05:e4:98:80:ce:
                    1f:91:0c:85:dc:d4:14:20:41:9d:aa:02:2a:2f:9b:
                    b9:75:82:f2:9f:61:cb:c6:3a:25:13:61:c0:ed:c2:
                    f4:5a:b2:42:e6:44:77:23:d0:96:24:dc:a9:01:38:
                    0c:b1:8f:18:94:b8:13:33:fa:65:4f:b9:04:d2:98:
                    fc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:87:50:AB:9E:11:C4:D3:BE:7D:37:54:F6:44:96:61:19:BB:82:78
            X509v3 Authority Key Identifier:
                keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:91:67:2e:3e:0a:a4:f5:dc:b3:6e:5f:5f:19:e8:d8:e7:04:
         0f:90:47:6d:a9:02:17:45:79:c2:00:de:21:c3:fa:5b:d9:89:
         a9:5e:06:af:21:59:d4:4e:56:0a:12:64:7a:f0:8e:ec:d6:7c:
         52:72:3a:be:df:cf:05:10:48:3f:d1:3b:85:7b:05:9a:62:6c:
         16:c6:72:4c:2a:3c:f9:38:01:69:83:da:54:fa:11:d8:4d:cf:
         26:ed:fd:14:4b:48:54:37:16:ac:f3:fb:2c:14:d7:ac:96:ec:
         89:97:e3:aa:33:35:ae:e8:31:52:3c:f2:ee:bb:0a:62:fb:aa:
         5f:73:ea:04:27:f4:56:8b:e4:7e:ab:3c:60:df:5a:c9:46:1c:
         c3:85:45:61:89:4d:41:d4:0a:56:e8:d7:8e:80:9b:17:a6:ae:
         c6:71:72:ce:9c:b0:d6:df:a8:5e:a9:10:57:ec:ef:9e:68:fe:
         5b:37:bd:f6:a5:b6:db:0e:da:9a:4e:92:f3:ea:a8:53:e8:65:
         39:59:1a:cd:93:c6:aa:2f:19:7d:30:83:d8:f2:26:d6:c4:54:
         76:f1:73:3e:d1:31:6e:9a:71:49:66:e5:9a:6c:4b:8f:0c:00:
         73:be:be:91:98:37:4b:89:d7:75:2f:e1:a3:30:9c:af:03:f1:
         44:1a:b9:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpw8Q766Qrlf5/m6NrNDzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZTUyNjQwNWQ0NTE3NDI0Nzk5NGZlZWRiMmQ3ZTVkZDQw
NzkzZGQwHhcNMjYxMDExMDcwMDU3WhcNMjYxMDEyMDcwMDU3WjAzMTEwLwYDVQQD
EyhlZTg3NTBhYjllMTFjNGQzYmU3ZDM3NTRmNjQ0OTY2MTE5YmI4Mjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9sZlsdTl6z3l+bSMzL4wmV6Wbkh
8E5dF2e5mmH+RQNJsppdcOAeCpOom5RV3E0vHvgEFgPulOhxlMW/L8UTFHQnCm2T
ge00yFQWSluRAmP6AtDwJX2UTwvql9pA1TaPSi/6RMWCgnZ8jwIiVSGNv1nPo2WE
2smG7w0mEgF9eci/dHdICEQY74zC4KJ2oJaT/scjPhDNQJiLVOy6JpeV+dL06tn7
0p1aOLoyhtraeDJR5D9iswZ3PSxwlOvjBeSYgM4fkQyF3NQUIEGdqgIqL5u5dYLy
n2HLxjolE2HA7cL0WrJC5kR3I9CWJNypATgMsY8YlLgTM/plT7kE0pj83wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6HUKueEcTTvn03VPZElmEZu4J4MB8GA1UdIwQY
MBaAFLHlJkBdRRdCR5lP7tstfl3UB5PdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zOGI0ZGUtNjhjNC00ZGY4LTllMGMt
NDBlZTU2NDZjNzQ3LzEvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8zOGI0ZGUtNjhjNC00ZGY4LTllMGMtNDBlZTU2NDZjNzQ3
LzEvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwJFnLj4K
pPXcs25fXxno2OcED5BHbakCF0V5wgDeIcP6W9mJqV4GryFZ1E5WChJkevCO7NZ8
UnI6vt/PBRBIP9E7hXsFmmJsFsZyTCo8+TgBaYPaVPoR2E3PJu39FEtIVDcWrPP7
LBTXrJbsiZfjqjM1rugxUjzy7rsKYvuqX3PqBCf0Vovkfqs8YN9ayUYcw4VFYYlN
QdQKVujXjoCbF6auxnFyzpyw1t+oXqkQV+zvnmj+Wze99qW22w7amk6S8+qoU+hl
OVkazZPGqi8ZfTCD2PIm1sRUdvFzPtExbppxSWblmmxLjwwAc76+kZg3S4nXdS/h
ozCcrwPxRBq5gA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 11:19:57 2026 by rpki-client