Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
File:                     iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft (raw, json)
Hash identifier:          BzE3oxSNSr4n9CQWVoIW6+X33Xt0dPilOAIsfAsQGiM=
Subject key identifier:   C2:F2:1A:30:EA:DB:F5:8C:95:3F:A7:CC:B3:2C:6E:96:1A:BD:CA:99
Authority key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
Certificate issuer:       /CN=897378126f55d96519553daa48e02e3282121644
Certificate serial:       01A127D5A103A199790E65D8E2C66C457A96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
Manifest number:          12F4
Signing time:             Sat 10 Oct 2026 22:01:14 +0000
Manifest this update:     Sat 10 Oct 2026 22:01:14 +0000
Manifest next update:     Sun 11 Oct 2026 22:01:14 +0000
Files and hashes:         1: ea_FcR8oSzWDCeMxrNhO2E40pkI.roa (hash: 5Y4/kc8eZcdfX1i5OXOAX6HvK4BEfWtdSIjWkgc/rvI=)
                          2: iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl (hash: 181bZtYAnbXar6h0wZN8N48gJWZ5dHfxNYzmz28B2ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:27:d5:a1:03:a1:99:79:0e:65:d8:e2:c6:6c:45:7a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=897378126f55d96519553daa48e02e3282121644
        Validity
            Not Before: Oct 10 22:01:14 2026 GMT
            Not After : Oct 11 22:01:14 2026 GMT
        Subject: CN=c2f21a30eadbf58c953fa7ccb32c6e961abdca99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:01:a6:0f:01:3e:0b:a2:de:da:4a:93:49:
                    bf:6d:7b:52:1c:a4:e2:f9:f7:31:f4:ee:47:02:0c:
                    64:4e:84:a5:2a:60:6f:0e:63:65:37:a6:01:6f:f5:
                    9d:65:76:fc:97:50:ba:75:8e:4e:18:f1:cd:b6:ed:
                    98:1f:1f:64:87:43:92:41:86:97:20:bb:d2:2f:ac:
                    f5:4f:93:93:f5:8d:4b:53:f9:bf:24:a6:9a:fb:f2:
                    57:03:e7:64:e7:d4:34:17:22:66:4a:66:73:92:e2:
                    12:66:47:f9:6d:c6:6b:d0:18:a9:ad:b9:72:8b:cb:
                    6b:a5:0e:83:ea:90:05:68:b9:99:75:ef:e3:6f:5d:
                    b4:4d:88:c5:7c:36:e6:f3:5d:d2:64:00:c0:6f:85:
                    0a:5e:9c:1e:a0:11:5a:19:b4:b3:c3:f8:47:c7:66:
                    2f:d0:0a:c6:e3:c4:53:4e:bc:b1:69:4b:35:9a:a5:
                    88:4a:42:68:6a:f6:3b:21:cc:af:99:40:26:04:7a:
                    bd:cd:3c:94:7b:b7:fb:c7:51:c7:69:a2:78:f1:2c:
                    da:5f:42:29:a9:25:8a:11:15:c1:ae:96:74:89:57:
                    de:b2:e1:cd:74:c2:b2:00:18:c3:31:69:66:c5:c3:
                    a7:11:04:37:63:1d:65:aa:81:11:39:2a:f6:d1:b4:
                    84:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F2:1A:30:EA:DB:F5:8C:95:3F:A7:CC:B3:2C:6E:96:1A:BD:CA:99
            X509v3 Authority Key Identifier:
                keyid:89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:4a:6b:96:55:b1:02:de:71:e8:90:ea:2a:24:80:9c:00:
         4f:76:cb:bc:01:97:4c:ce:ba:64:43:91:4f:33:a2:37:b4:bc:
         22:bf:95:6b:44:37:7a:de:78:48:55:65:4c:8b:53:aa:ec:b7:
         7a:7d:8a:ff:d0:90:c1:a5:a0:47:1d:bb:41:56:cb:05:35:d4:
         b2:b1:07:36:a7:ae:7c:3f:e5:3b:85:31:49:9b:67:dc:10:03:
         bb:fb:3c:11:b8:9e:72:5d:34:c5:02:2f:ad:73:42:79:db:c5:
         2a:55:0e:00:1e:98:2b:20:8e:bc:90:1b:f7:50:04:e6:79:1d:
         b3:d9:d5:de:a0:36:c9:5f:01:07:1d:2f:f7:46:e0:3f:4b:a1:
         b2:97:0a:a1:b4:97:71:da:86:80:49:ac:f2:eb:66:4d:5e:11:
         6f:ea:21:de:37:c6:a1:8b:9e:7d:c8:82:62:33:22:d3:b1:e6:
         e9:0c:5b:59:22:4d:0d:7d:b5:2a:c1:5d:ff:63:49:24:ec:41:
         ab:c8:9a:8f:92:da:dd:6e:c4:99:a5:41:08:5d:9c:22:d1:29:
         e5:32:c1:50:73:cc:1f:22:38:77:24:44:39:6b:7c:f6:2b:04:
         2f:e3:6a:3d:05:fd:bd:63:a2:0c:9c:15:a9:e3:5a:ad:78:bb:
         90:2f:f8:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEn1aEDoZl5DmXY4sZsRXqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NzM3ODEyNmY1NWQ5NjUxOTU1M2RhYTQ4ZTAyZTMyODIx
MjE2NDQwHhcNMjYxMDEwMjIwMTE0WhcNMjYxMDExMjIwMTE0WjAzMTEwLwYDVQQD
EyhjMmYyMWEzMGVhZGJmNThjOTUzZmE3Y2NiMzJjNmU5NjFhYmRjYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRYBpg8BPgui3tpKk0m/bXtSHKTi
+fcx9O5HAgxkToSlKmBvDmNlN6YBb/WdZXb8l1C6dY5OGPHNtu2YHx9kh0OSQYaX
ILvSL6z1T5OT9Y1LU/m/JKaa+/JXA+dk59Q0FyJmSmZzkuISZkf5bcZr0Biprbly
i8trpQ6D6pAFaLmZde/jb120TYjFfDbm813SZADAb4UKXpweoBFaGbSzw/hHx2Yv
0ArG48RTTryxaUs1mqWISkJoavY7IcyvmUAmBHq9zTyUe7f7x1HHaaJ48SzaX0Ip
qSWKERXBrpZ0iVfesuHNdMKyABjDMWlmxcOnEQQ3Yx1lqoEROSr20bSE5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLyGjDq2/WMlT+nzLMsbpYavcqZMB8GA1UdIwQY
MBaAFIlzeBJvVdllGVU9qkjgLjKCEhZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMmQwY2ItYzNkNC00OWJlLWIwZjIt
MzA1ZmIwOTU1NmM5LzEvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mMmQwY2ItYzNkNC00OWJlLWIwZjItMzA1ZmIwOTU1NmM5
LzEvaVhONEVtOVYyV1VaVlQycVNPQXVNb0lTRmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6RKa5ZV
sQLeceiQ6iokgJwAT3bLvAGXTM66ZEORTzOiN7S8Ir+Va0Q3et54SFVlTItTquy3
en2K/9CQwaWgRx27QVbLBTXUsrEHNqeufD/lO4UxSZtn3BADu/s8Ebiecl00xQIv
rXNCedvFKlUOAB6YKyCOvJAb91AE5nkds9nV3qA2yV8BBx0v90bgP0uhspcKobSX
cdqGgEms8utmTV4Rb+oh3jfGoYuefciCYjMi07Hm6QxbWSJNDX21KsFd/2NJJOxB
q8iaj5La3W7EmaVBCF2cItEp5TLBUHPMHyI4dyREOWt89isEL+NqPQX9vWOiDJwV
qeNarXi7kC/42Q==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:31:53 2026 by rpki-client