Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File:                     w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier:          ShvKLbr40zNmuZxKHUlceOfi+H/2G1z9/XUX50uCjEY=
Subject key identifier:   1F:E1:26:AD:CF:B1:31:D5:EB:CB:04:24:A5:F9:8D:51:3E:FB:64:CB
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer:       /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial:       01A129566AD944069DB16AB22C4C8C08B1CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number:          1A9C
Signing time:             Sun 11 Oct 2026 05:01:31 +0000
Manifest this update:     Sun 11 Oct 2026 05:01:31 +0000
Manifest next update:     Mon 12 Oct 2026 05:01:31 +0000
Files and hashes:         1: TYwN3t32Z7xKSSbdeezcjvxtZPw.roa (hash: vACqWvZBDZtntkC9z+JDWdjz/Gh+6JNnrhSbEy009gw=)
                          2: ZJWhX_sHEjs97qyEWeCy7JLXnqw.roa (hash: bAXAo9VS32osXOlNSknnXOi501Vm+Z7vmbwaL73CoDc=)
                          3: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: UlClDu2GoRQmIx5sE/gGQcooYxpMoEpUA8ddigXTxVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:56:6a:d9:44:06:9d:b1:6a:b2:2c:4c:8c:08:b1:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
        Validity
            Not Before: Oct 11 05:01:31 2026 GMT
            Not After : Oct 12 05:01:31 2026 GMT
        Subject: CN=1fe126adcfb131d5ebcb0424a5f98d513efb64cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:b9:65:9e:3b:5f:07:b5:c4:3c:fb:d9:06:
                    a9:c1:11:da:26:d2:36:ba:54:78:4d:63:86:bb:f3:
                    63:83:db:b8:30:71:25:22:d1:e3:47:42:89:b6:32:
                    f4:2e:6a:c3:c0:8c:9d:d8:4b:9f:52:9c:d7:fc:ad:
                    f8:f5:38:56:1f:b6:d5:23:9c:31:84:36:38:b0:24:
                    92:46:20:4e:df:d7:be:1d:17:27:d1:4e:8f:b5:33:
                    31:2b:e7:25:77:5e:d9:a2:29:2c:3d:1a:89:36:67:
                    14:6b:02:23:ae:fc:a2:73:ae:c3:a5:dc:84:59:83:
                    36:1c:2a:c2:09:39:af:2b:3d:1c:94:bf:08:c0:5d:
                    cb:5b:b7:ed:c7:58:a1:22:63:bf:74:30:7c:a3:34:
                    31:6a:d2:e7:a8:cf:16:e7:0c:ee:b7:05:c9:96:c4:
                    0f:83:b9:cc:55:0e:17:d0:2c:f4:be:5b:8a:7b:d0:
                    0a:33:8d:fb:cf:ce:5b:df:d3:52:6f:87:53:dc:92:
                    b1:97:1e:0e:e5:e4:5d:b2:a7:29:f5:54:10:1d:43:
                    4f:18:30:53:8b:c4:fd:a1:c4:95:8c:9c:5e:de:4c:
                    5d:9e:d1:8a:04:2a:71:36:df:1b:32:6c:27:f9:63:
                    aa:53:b4:0f:eb:ac:7b:93:a7:39:d2:28:3f:77:a3:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E1:26:AD:CF:B1:31:D5:EB:CB:04:24:A5:F9:8D:51:3E:FB:64:CB
            X509v3 Authority Key Identifier:
                keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d5:da:7b:1a:50:38:c5:18:d2:e6:4d:c6:86:5b:fe:18:25:
         8d:99:99:be:2e:09:6d:39:1c:99:66:c7:48:3f:78:66:46:75:
         d7:39:e3:2c:b1:71:9d:70:e5:1e:f9:42:2e:6f:84:4c:c6:5f:
         6a:cf:ce:24:2c:e1:2b:30:45:a5:e8:22:86:da:b2:55:b5:b9:
         5a:f7:80:76:db:10:be:fc:1f:94:6e:c7:35:a4:ad:60:1b:cb:
         29:a5:00:f0:98:bc:5d:ca:ac:64:f9:18:07:9a:9a:6b:70:93:
         ad:e9:11:03:d1:74:10:ed:0d:44:d8:a9:78:d5:b3:6a:32:c8:
         ac:3e:1e:2d:7e:5d:27:bb:01:06:06:8e:70:b4:b0:b7:54:c5:
         a8:ab:b2:3d:f7:1f:74:71:b1:ca:1d:65:f4:e6:82:a3:ee:99:
         39:df:0b:c3:e9:89:a8:f0:0f:96:ad:05:46:cb:d6:52:76:40:
         e5:bd:d5:02:80:25:ab:85:53:e6:0b:9e:f4:46:6b:2b:d7:a9:
         4a:b4:9e:cf:70:7f:2a:01:e9:c8:86:0e:8d:3c:0e:a4:be:a3:
         4a:37:d8:c7:d7:08:ee:32:27:b3:f3:40:64:00:39:4c:3d:68:
         e9:11:94:8b:41:74:06:1b:1f:58:d4:c2:43:5d:1c:d6:b8:42:
         f2:cd:8b:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpVmrZRAadsWqyLEyMCLHPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzUxMTNmZDRiZmJkMzhiMTA0Mzg0M2MzMDkyNmExMTBj
YzBmNTEwHhcNMjYxMDExMDUwMTMxWhcNMjYxMDEyMDUwMTMxWjAzMTEwLwYDVQQD
EygxZmUxMjZhZGNmYjEzMWQ1ZWJjYjA0MjRhNWY5OGQ1MTNlZmI2NGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaO5ZZ47Xwe1xDz72QapwRHaJtI2
ulR4TWOGu/Njg9u4MHElItHjR0KJtjL0LmrDwIyd2EufUpzX/K349ThWH7bVI5wx
hDY4sCSSRiBO39e+HRcn0U6PtTMxK+cld17ZoiksPRqJNmcUawIjrvyic67DpdyE
WYM2HCrCCTmvKz0clL8IwF3LW7ftx1ihImO/dDB8ozQxatLnqM8W5wzutwXJlsQP
g7nMVQ4X0Cz0vluKe9AKM437z85b39NSb4dT3JKxlx4O5eRdsqcp9VQQHUNPGDBT
i8T9ocSVjJxe3kxdntGKBCpxNt8bMmwn+WOqU7QP66x7k6c50ig/d6NHtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/hJq3PsTHV68sEJKX5jVE++2TLMB8GA1UdIwQY
MBaAFMN1ET/Uv704sQQ4Q8MJJqEQzA9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNVUlA5U192VGl4QkRoRHd3a21vUkRNRDFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjljNzgtNmVkZS00MGRmLTg5YzEt
Nzk3MjVmYTJlMTMzLzEvdzNVUlA5U192VGl4QkRoRHd3a21vUkRNRDFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZjljNzgtNmVkZS00MGRmLTg5YzEtNzk3MjVmYTJlMTMz
LzEvdzNVUlA5U192VGl4QkRoRHd3a21vUkRNRDFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNXaexpQ
OMUY0uZNxoZb/hgljZmZvi4JbTkcmWbHSD94ZkZ11znjLLFxnXDlHvlCLm+ETMZf
as/OJCzhKzBFpegihtqyVbW5WveAdtsQvvwflG7HNaStYBvLKaUA8Ji8XcqsZPkY
B5qaa3CTrekRA9F0EO0NRNipeNWzajLIrD4eLX5dJ7sBBgaOcLSwt1TFqKuyPfcf
dHGxyh1l9OaCo+6ZOd8Lw+mJqPAPlq0FRsvWUnZA5b3VAoAlq4VT5gue9EZrK9ep
SrSez3B/KgHpyIYOjTwOpL6jSjfYx9cI7jIns/NAZAA5TD1o6RGUi0F0BhsfWNTC
Q10c1rhC8s2LGw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:18:05 2026 by rpki-client