Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File:                     tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier:          yrdV/aNf+nqaNf9RlT/UZ2MVP27jQMxBlczjrgd+8Do=
Subject key identifier:   98:B1:3D:59:BA:43:71:C6:4D:01:EE:E4:B8:AF:BC:7E:26:62:CC:D3
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer:       /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial:       01A1005AF82CEE62CF75DA00F2FDDB2A548E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number:          15E6
Signing time:             Sat 03 Oct 2026 06:02:04 +0000
Manifest this update:     Sat 03 Oct 2026 06:02:04 +0000
Manifest next update:     Sun 04 Oct 2026 06:02:04 +0000
Files and hashes:         1: CLr2MXWe1_bT6kZgkrjIjMbd7B0.roa (hash: gQEYUEzKFyH2/cM28ksUHG3hbitgcosJBEkltHf/gqA=)
                          2: PTqqtT4_tP0RAOhqpaeaV7qFsoM.roa (hash: gS+7X+RhiaD/Wpkqye3btlKeUsU6cdg4vX6kC9nPKmY=)
                          3: Zx8NV8g2SZTn17r6ny-ihGOw0zg.roa (hash: oDKvuRyprpCre1JRHHQFdko0hYMR6EjsyiF9Shy7Ous=)
                          4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: emJEYRm0aVazcRfgcKxlg81/vfF8WLKIrASS1a/dH44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:5a:f8:2c:ee:62:cf:75:da:00:f2:fd:db:2a:54:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
        Validity
            Not Before: Oct  3 06:02:04 2026 GMT
            Not After : Oct  4 06:02:04 2026 GMT
        Subject: CN=98b13d59ba4371c64d01eee4b8afbc7e2662ccd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e6:0b:a4:33:17:c9:a5:be:e3:37:75:49:80:
                    55:e0:cf:cc:d6:05:8a:09:ea:9a:74:29:36:10:73:
                    23:2e:e1:66:df:de:57:aa:6a:c4:dc:54:6d:76:a7:
                    71:3c:6f:8a:8f:22:bc:67:e6:8f:a4:20:42:51:8d:
                    bc:68:2b:c5:ab:d4:e1:52:6b:f7:72:01:61:ea:dc:
                    b6:7a:5b:66:45:f4:3b:bd:70:32:d9:d2:de:49:4e:
                    7a:f2:09:b6:f8:2a:95:57:8d:06:b8:78:0f:59:95:
                    b8:ae:49:de:04:4f:0a:1a:84:d9:7b:0e:47:d6:69:
                    4c:d4:81:d0:a2:70:f0:ef:36:64:0b:b7:0f:12:91:
                    6b:30:de:a1:cb:93:00:71:15:68:76:76:02:a9:81:
                    8a:cb:b9:09:a9:15:22:d9:e3:34:1f:50:e5:47:68:
                    16:2b:af:f4:73:38:ee:93:c4:15:39:6b:4c:dd:9b:
                    9d:a6:4d:09:9e:f3:05:6a:6c:cb:d5:91:48:ab:61:
                    dc:16:26:6e:bc:ae:43:1f:33:12:72:a9:cf:5a:39:
                    a7:60:4d:9a:10:0e:ac:65:6f:eb:95:de:9d:77:fe:
                    e5:66:ca:8a:f4:97:e3:17:36:f3:6d:7b:d6:c5:8a:
                    9c:0c:41:11:7f:03:ab:ec:0f:aa:a6:60:e0:12:ef:
                    f5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B1:3D:59:BA:43:71:C6:4D:01:EE:E4:B8:AF:BC:7E:26:62:CC:D3
            X509v3 Authority Key Identifier:
                keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:44:f9:27:5b:4d:95:0c:05:22:d8:71:40:8d:3e:f4:de:15:
         31:a1:be:98:8c:5e:97:2d:32:d0:25:ff:b7:84:d8:48:4e:ad:
         4e:7b:e0:85:6d:45:a7:ac:ad:ff:49:5d:34:c0:47:f4:df:50:
         77:d7:fa:3c:e1:cb:23:f3:a9:75:8f:20:b6:66:2b:c7:44:30:
         60:30:55:6c:39:e8:cf:91:41:74:66:7b:f5:5d:80:60:89:c7:
         a3:c9:bb:52:67:26:e9:e4:89:e8:75:c1:e5:25:ab:27:2f:e1:
         41:76:16:cd:15:63:de:47:8e:4c:e2:67:3f:00:68:22:14:3c:
         48:01:52:18:e7:e6:66:bd:95:51:74:8b:37:16:7e:45:da:6e:
         56:9f:ef:1d:30:1f:f9:fa:53:6f:33:f4:31:79:b1:39:15:8d:
         e3:05:55:d9:4d:08:4f:6d:a3:cc:a4:65:d8:f0:a9:e0:08:c1:
         84:85:3a:3f:9d:08:0a:a4:0b:bf:83:41:bd:95:fe:0b:c8:30:
         91:f7:1a:e4:e3:d1:1a:9d:0d:e8:a0:32:bf:06:66:13:a2:2c:
         f2:6a:b2:7b:6d:ff:8f:9d:dc:67:ef:94:81:68:81:6c:54:5a:
         23:9b:29:e7:f3:3a:7e:ff:ae:f3:ff:f1:6d:38:e6:71:71:5c:
         7a:36:4f:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEAWvgs7mLPddoA8v3bKlSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OWJkODRkYTE3OTk3Y2JiMjg2YWY5MDIyYWIyZTA1YmEw
OGI0NDIwHhcNMjYxMDAzMDYwMjA0WhcNMjYxMDA0MDYwMjA0WjAzMTEwLwYDVQQD
Eyg5OGIxM2Q1OWJhNDM3MWM2NGQwMWVlZTRiOGFmYmM3ZTI2NjJjY2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eYLpDMXyaW+4zd1SYBV4M/M1gWK
CeqadCk2EHMjLuFm395XqmrE3FRtdqdxPG+KjyK8Z+aPpCBCUY28aCvFq9ThUmv3
cgFh6ty2eltmRfQ7vXAy2dLeSU568gm2+CqVV40GuHgPWZW4rkneBE8KGoTZew5H
1mlM1IHQonDw7zZkC7cPEpFrMN6hy5MAcRVodnYCqYGKy7kJqRUi2eM0H1DlR2gW
K6/0czjuk8QVOWtM3Zudpk0JnvMFamzL1ZFIq2HcFiZuvK5DHzMScqnPWjmnYE2a
EA6sZW/rld6dd/7lZsqK9JfjFzbzbXvWxYqcDEERfwOr7A+qpmDgEu/1BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJixPVm6Q3HGTQHu5LivvH4mYszTMB8GA1UdIwQY
MBaAFLSb2E2heZfLsoavkCKrLgW6CLRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2It
MGM5MDliZjViZTRkLzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2ItMGM5MDliZjViZTRk
LzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUT5J1tN
lQwFIthxQI0+9N4VMaG+mIxely0y0CX/t4TYSE6tTnvghW1Fp6yt/0ldNMBH9N9Q
d9f6POHLI/OpdY8gtmYrx0QwYDBVbDnoz5FBdGZ79V2AYInHo8m7Umcm6eSJ6HXB
5SWrJy/hQXYWzRVj3keOTOJnPwBoIhQ8SAFSGOfmZr2VUXSLNxZ+RdpuVp/vHTAf
+fpTbzP0MXmxORWN4wVV2U0IT22jzKRl2PCp4AjBhIU6P50ICqQLv4NBvZX+C8gw
kfca5OPRGp0N6KAyvwZmE6Is8mqye23/j53cZ++UgWiBbFRaI5sp5/M6fv+u8//x
bTjmcXFcejZPww==
-----END CERTIFICATE-----
Generated at Sat Oct 3 11:17:18 2026 by rpki-client