Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft
File:                     _eV3-qI1cXrhNDjh1S6ktOPaVJg.mft (raw, json)
Hash identifier:          taLQVe9KBXQdL/8HDuPSTyUQmyWAfPE3F8KEAIGLGMU=
Subject key identifier:   F2:BD:67:14:CE:D4:0C:0F:87:01:85:DA:58:0E:8A:52:7E:04:85:93
Authority key identifier: FD:E5:77:FA:A2:35:71:7A:E1:34:38:E1:D5:2E:A4:B4:E3:DA:54:98
Certificate issuer:       /CN=fde577faa235717ae13438e1d52ea4b4e3da5498
Certificate serial:       01A1298D3907F0B9943A7098ACED8DD064B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft
Manifest number:          01BB
Signing time:             Sun 11 Oct 2026 06:01:23 +0000
Manifest this update:     Sun 11 Oct 2026 06:01:23 +0000
Manifest next update:     Mon 12 Oct 2026 06:01:23 +0000
Files and hashes:         1: 5AgZfb7qtshb6AxnYzgA65E3i4o.roa (hash: tuOl5ypd9y12iLvr3Zp8dfLyPEUJgNfrWjDKhrIfKlk=)
                          2: Q-B9indj73Lg6hsM9n7_RDKH62Y.roa (hash: vX34viLIqul0SZtYJw5VNRkDYaWbHGecJ2MEb+4xbng=)
                          3: _eV3-qI1cXrhNDjh1S6ktOPaVJg.crl (hash: Pra+V9RcZvynvwMj/i+rqCHimtayD/OPjLDT8gW+DFA=)
                          4: ulKvZr85E6Ggsf5I5RjFVyylS5o.asa (hash: L9bsFn5suMrLvciGh+SS1o4AgkrgIGPNo0xRVc+I4GU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:8d:39:07:f0:b9:94:3a:70:98:ac:ed:8d:d0:64:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde577faa235717ae13438e1d52ea4b4e3da5498
        Validity
            Not Before: Oct 11 06:01:23 2026 GMT
            Not After : Oct 12 06:01:23 2026 GMT
        Subject: CN=f2bd6714ced40c0f870185da580e8a527e048593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9c:49:3a:9f:f5:c9:53:a3:ff:e5:d5:c1:79:
                    00:af:1f:ca:cb:e9:95:d1:0d:29:d9:1a:04:b0:a4:
                    41:98:1b:c4:70:7c:cb:25:d3:f4:58:af:04:87:56:
                    b0:72:62:4c:8a:34:d8:1e:70:f8:11:bf:a8:6f:aa:
                    61:0c:64:e2:2d:7a:25:db:89:b1:59:4c:dc:ba:c9:
                    a2:02:ab:bd:df:3a:5e:80:ea:df:17:46:e0:6e:2e:
                    47:de:69:1b:1f:fe:74:1c:03:ac:11:cd:a6:9c:97:
                    2d:66:12:18:4b:ea:04:12:03:0a:71:6f:81:ad:b8:
                    9b:f0:9d:79:0e:31:00:32:58:58:e5:d7:0d:26:d8:
                    44:82:18:de:28:52:9d:88:b2:41:74:07:57:63:77:
                    82:59:c1:94:ce:36:f6:ee:7d:f4:2f:7e:e4:6f:c3:
                    3a:21:6c:93:89:19:5b:17:b1:ea:9e:a7:ee:82:8f:
                    8d:ba:71:7a:bb:e2:ed:c3:3a:a2:bd:aa:8b:5d:fb:
                    72:a4:fd:d4:79:56:1a:29:ef:d9:c4:6a:a4:08:42:
                    9b:39:04:aa:83:d1:80:35:d1:85:bd:7c:48:ca:60:
                    9d:55:bd:ad:45:f2:81:e5:fd:6d:30:38:58:6f:97:
                    df:de:94:07:96:84:a3:85:21:dc:75:e7:3b:c4:4f:
                    59:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BD:67:14:CE:D4:0C:0F:87:01:85:DA:58:0E:8A:52:7E:04:85:93
            X509v3 Authority Key Identifier:
                keyid:FD:E5:77:FA:A2:35:71:7A:E1:34:38:E1:D5:2E:A4:B4:E3:DA:54:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:82:e5:f1:1d:47:96:80:22:16:f8:29:c8:81:5d:12:76:d0:
         0c:db:b5:eb:26:45:fe:d9:87:ca:b7:a5:3b:46:34:f1:0a:4c:
         19:45:a4:e8:c7:91:22:c4:ad:23:2e:b2:44:2d:ac:89:50:c9:
         ee:15:a1:24:39:5b:43:49:03:7f:54:2e:b7:ec:08:af:fe:54:
         b2:41:9f:e5:2b:f1:d4:61:78:8b:cc:76:9c:c7:d7:9d:88:a5:
         7b:8d:6b:9f:63:fe:82:b2:70:c8:5c:05:29:e7:a2:38:51:5b:
         f9:bb:eb:93:e1:1a:47:ef:93:5f:2d:5d:c5:01:f4:64:d0:09:
         e1:fc:12:ba:01:ce:de:50:fb:a5:81:ed:2c:6d:b9:76:15:f9:
         b0:bf:6a:15:cd:9c:c0:da:e6:c2:76:cf:60:76:b6:c9:c9:62:
         66:28:b0:9e:53:75:5b:e5:f2:81:42:3d:a6:6d:e5:94:6e:b9:
         03:60:d8:f9:9a:38:8b:ab:24:d4:63:07:1b:d9:fd:57:cc:6e:
         65:b1:71:fd:b6:5e:73:cf:22:51:ad:61:c5:89:5b:94:03:b5:
         c4:d7:cd:ae:c1:8c:24:09:3c:7f:a5:93:bb:3e:a0:6b:71:77:
         49:17:1a:b1:2e:3a:39:ea:f5:d5:3c:a8:4e:a2:19:51:6a:46:
         fb:de:5a:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpjTkH8LmUOnCYrO2N0GS1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZTU3N2ZhYTIzNTcxN2FlMTM0MzhlMWQ1MmVhNGI0ZTNk
YTU0OTgwHhcNMjYxMDExMDYwMTIzWhcNMjYxMDEyMDYwMTIzWjAzMTEwLwYDVQQD
EyhmMmJkNjcxNGNlZDQwYzBmODcwMTg1ZGE1ODBlOGE1MjdlMDQ4NTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5xJOp/1yVOj/+XVwXkArx/Ky+mV
0Q0p2RoEsKRBmBvEcHzLJdP0WK8Eh1awcmJMijTYHnD4Eb+ob6phDGTiLXol24mx
WUzcusmiAqu93zpegOrfF0bgbi5H3mkbH/50HAOsEc2mnJctZhIYS+oEEgMKcW+B
rbib8J15DjEAMlhY5dcNJthEghjeKFKdiLJBdAdXY3eCWcGUzjb27n30L37kb8M6
IWyTiRlbF7Hqnqfugo+NunF6u+LtwzqivaqLXftypP3UeVYaKe/ZxGqkCEKbOQSq
g9GANdGFvXxIymCdVb2tRfKB5f1tMDhYb5ff3pQHloSjhSHcdec7xE9ZqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPK9ZxTO1AwPhwGF2lgOilJ+BIWTMB8GA1UdIwQY
MBaAFP3ld/qiNXF64TQ44dUupLTj2lSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2VWMy1xSTFjWHJoTkRqaDFTNmt0T1BhVkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hYTYxOTItMDQyNy00MWM0LTk3YWQt
NmVlNzQ1MTU2ODQ0LzEvX2VWMy1xSTFjWHJoTkRqaDFTNmt0T1BhVkpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9hYTYxOTItMDQyNy00MWM0LTk3YWQtNmVlNzQ1MTU2ODQ0
LzEvX2VWMy1xSTFjWHJoTkRqaDFTNmt0T1BhVkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbILl8R1H
loAiFvgpyIFdEnbQDNu16yZF/tmHyrelO0Y08QpMGUWk6MeRIsStIy6yRC2siVDJ
7hWhJDlbQ0kDf1Qut+wIr/5UskGf5Svx1GF4i8x2nMfXnYile41rn2P+grJwyFwF
KeeiOFFb+bvrk+EaR++TXy1dxQH0ZNAJ4fwSugHO3lD7pYHtLG25dhX5sL9qFc2c
wNrmwnbPYHa2ycliZiiwnlN1W+XygUI9pm3llG65A2DY+Zo4i6sk1GMHG9n9V8xu
ZbFx/bZec88iUa1hxYlblAO1xNfNrsGMJAk8f6WTuz6ga3F3SRcasS46Oer11Tyo
TqIZUWpG+95ahQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:51:25 2026 by rpki-client