Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File:                     jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier:          0m7Ud0J/qRLp03/MLvKYWxfE77yrFu0CkFDDAtMqyVY=
Subject key identifier:   83:34:9B:91:25:05:85:00:CB:B9:FE:4F:C8:A6:89:8E:D6:31:4E:D0
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer:       /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial:       01A119E23FB8CC4E9EC615D98ADD7614D974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number:          0B7D
Signing time:             Thu 08 Oct 2026 05:00:19 +0000
Manifest this update:     Thu 08 Oct 2026 05:00:19 +0000
Manifest next update:     Fri 09 Oct 2026 05:00:19 +0000
Files and hashes:         1: 6ckN970H7cpuN5SlW3wkVE1-uM4.roa (hash: 4RC2uU6qxyV9bc9Cvszgx0ISOMF1kgJvTGxyXOpdXhI=)
                          2: 6j9AVsDIcLErIkpn3X-eJeF1GGI.roa (hash: ZsMGjImkdIZH7VCwDNjWJbDGVpBmnhjQHnLW0jKIHBo=)
                          3: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: Jk7VPrl//mlqEtmlGUgMCvfY80Bo4IZzcjTtHYWKlz0=)
                          4: yQpjhvw8i6e9KzrpvjEnSpkHzwc.roa (hash: tuojuZc92088axUvGHKz4onECSlWfJI0kA5M4lGnMdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 05:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:e2:3f:b8:cc:4e:9e:c6:15:d9:8a:dd:76:14:d9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
        Validity
            Not Before: Oct  8 05:00:19 2026 GMT
            Not After : Oct  9 05:00:19 2026 GMT
        Subject: CN=83349b9125058500cbb9fe4fc8a6898ed6314ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4e:6b:4b:64:cf:86:56:f1:e6:18:57:9e:3a:
                    dc:c0:40:9a:d7:cd:5d:15:8b:e4:ad:93:c2:25:62:
                    9d:e5:00:df:63:c5:ab:c5:dd:96:5f:7c:5e:57:2d:
                    66:46:3f:3c:3c:13:a8:06:bf:60:ca:cb:fa:92:38:
                    2d:33:67:bd:48:2c:35:ad:d1:3a:03:cf:37:a5:82:
                    a5:a3:49:af:64:db:f3:aa:42:1d:af:81:c5:d8:06:
                    a8:5d:a7:4f:2e:45:0a:2f:12:ce:85:89:81:e6:25:
                    af:dd:42:42:ce:cc:53:d1:6c:3f:12:0a:ba:36:e1:
                    f1:b9:a5:d9:18:8a:cd:69:c8:9c:bc:be:da:2d:6b:
                    19:8c:f5:74:2e:b8:75:9b:5d:45:48:9f:e6:6a:42:
                    f6:f4:29:b9:91:3d:25:85:e4:d4:05:85:34:48:a3:
                    18:f3:a3:ae:2d:e8:31:02:c8:52:af:84:76:47:db:
                    3a:35:32:66:c1:bf:33:4e:97:34:ca:76:9e:2d:0f:
                    33:0b:a0:35:a6:8a:29:40:6c:0b:f3:ec:d4:c5:08:
                    7d:44:9e:f6:b2:61:8e:db:00:ab:63:09:5f:fa:c5:
                    b1:4d:0d:50:37:52:e9:42:0e:a9:55:78:e5:25:23:
                    4b:bf:b2:14:c2:35:d9:b3:17:58:e8:84:e7:78:13:
                    56:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:34:9B:91:25:05:85:00:CB:B9:FE:4F:C8:A6:89:8E:D6:31:4E:D0
            X509v3 Authority Key Identifier:
                keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:33:d9:0f:d8:82:9f:0b:03:88:a7:7d:61:1f:9e:ef:61:03:
         2b:03:a7:fd:2a:cb:a5:21:f0:57:cc:fa:db:3d:e5:c4:e0:ba:
         c5:2e:d0:67:4e:5b:ab:3c:06:59:bd:8a:8e:d1:cc:1f:f3:89:
         f1:c6:ec:0c:71:6a:50:56:7d:bd:0a:f7:5d:38:ae:4c:c3:2e:
         96:c5:db:f6:39:f5:f3:7e:95:7f:56:43:4f:8f:c5:cc:88:d5:
         d3:90:ea:3c:eb:a1:ff:be:17:35:f3:94:66:d4:84:58:ed:c9:
         de:45:1d:66:9d:0b:12:45:d9:25:3c:4b:e5:24:b4:11:7e:d4:
         c5:dc:b4:88:7a:9d:c0:ab:31:d5:ca:40:10:53:7a:48:6c:b9:
         69:a1:74:4b:a7:65:a2:29:ab:41:12:10:40:1c:5e:d4:c7:29:
         f2:a4:d4:07:cd:f6:0b:c1:2c:0c:ca:87:ed:eb:42:1b:e4:1e:
         1f:a2:9c:72:cd:1e:c3:58:6d:83:fd:91:c0:d1:ee:b1:46:c0:
         f8:ee:0b:14:75:d9:fa:44:bf:ae:75:0e:a3:d8:1c:ac:e1:94:
         b6:a8:c9:c4:fe:0d:98:22:69:37:d4:b7:4d:46:bc:e0:46:6f:
         2d:60:d9:bc:13:e0:ea:14:0a:95:33:3e:cf:31:6a:b5:10:de:
         6d:46:09:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZ4j+4zE6exhXZit12FNl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzQ1ODczMzVjMjkwZmY4ZjJiMzc0ZGYyNGFiZTIzMzNi
Y2VkNWUwHhcNMjYxMDA4MDUwMDE5WhcNMjYxMDA5MDUwMDE5WjAzMTEwLwYDVQQD
Eyg4MzM0OWI5MTI1MDU4NTAwY2JiOWZlNGZjOGE2ODk4ZWQ2MzE0ZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk5rS2TPhlbx5hhXnjrcwECa181d
FYvkrZPCJWKd5QDfY8Wrxd2WX3xeVy1mRj88PBOoBr9gysv6kjgtM2e9SCw1rdE6
A883pYKlo0mvZNvzqkIdr4HF2AaoXadPLkUKLxLOhYmB5iWv3UJCzsxT0Ww/Egq6
NuHxuaXZGIrNacicvL7aLWsZjPV0Lrh1m11FSJ/makL29Cm5kT0lheTUBYU0SKMY
86OuLegxAshSr4R2R9s6NTJmwb8zTpc0ynaeLQ8zC6A1poopQGwL8+zUxQh9RJ72
smGO2wCrYwlf+sWxTQ1QN1LpQg6pVXjlJSNLv7IUwjXZsxdY6ITneBNWXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIM0m5ElBYUAy7n+T8imiY7WMU7QMB8GA1UdIwQY
MBaAFI3EWHM1wpD/jys3TfJKviMzvO1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYt
ZDYwNmQ5OTI1YWI3LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYtZDYwNmQ5OTI1YWI3
LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTPZD9iC
nwsDiKd9YR+e72EDKwOn/SrLpSHwV8z62z3lxOC6xS7QZ05bqzwGWb2KjtHMH/OJ
8cbsDHFqUFZ9vQr3XTiuTMMulsXb9jn1836Vf1ZDT4/FzIjV05DqPOuh/74XNfOU
ZtSEWO3J3kUdZp0LEkXZJTxL5SS0EX7Uxdy0iHqdwKsx1cpAEFN6SGy5aaF0S6dl
oimrQRIQQBxe1Mcp8qTUB832C8EsDMqH7etCG+QeH6Kccs0ew1htg/2RwNHusUbA
+O4LFHXZ+kS/rnUOo9gcrOGUtqjJxP4NmCJpN9S3TUa84EZvLWDZvBPg6hQKlTM+
zzFqtRDebUYJ3g==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:51:03 2026 by rpki-client