Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File:                     pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier:          MG6M+HhoO9wCIitaN42pbxB4b2Azc/QTd4j7D8kjiTY=
Subject key identifier:   C7:51:FE:45:11:95:0D:4C:8D:0F:ED:F5:66:AE:9E:12:7E:35:74:A0
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer:       /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial:       01A13559F16351A6CE9421F1E8A6D517FF6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number:          12CF
Signing time:             Tue 13 Oct 2026 13:00:49 +0000
Manifest this update:     Tue 13 Oct 2026 13:00:49 +0000
Manifest next update:     Wed 14 Oct 2026 13:00:49 +0000
Files and hashes:         1: bJoUcVZjNVPjCjUlI2KaBxy6p6k.roa (hash: ebBDlPRlXWyLq2KbuwNyF2wojOacfcKBKPPYOJJnz0M=)
                          2: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: h6Pcv8StPBDhpqsnH0UhTYn1nSW6H73bbs6D3KIQkvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:59:f1:63:51:a6:ce:94:21:f1:e8:a6:d5:17:ff:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
        Validity
            Not Before: Oct 13 13:00:49 2026 GMT
            Not After : Oct 14 13:00:49 2026 GMT
        Subject: CN=c751fe4511950d4c8d0fedf566ae9e127e3574a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bc:2e:8e:52:b2:cb:8b:b1:23:cb:ba:65:e5:
                    e6:06:b1:a7:0f:30:91:27:c3:b7:d1:da:81:d9:b5:
                    57:63:ad:d1:ba:01:2b:8a:2a:af:03:88:53:6d:10:
                    7e:70:fb:32:1b:32:88:eb:a0:9f:25:d3:36:06:47:
                    90:ce:ad:aa:e9:40:f6:44:af:1c:bd:72:42:0f:27:
                    9a:27:a2:f9:14:b9:40:7e:c3:72:89:c8:0d:d4:8e:
                    f2:f8:25:2c:0f:26:98:66:f3:87:02:f9:74:67:be:
                    7f:7c:78:26:a1:67:99:37:f8:4b:b8:23:13:ba:05:
                    40:6e:b0:a6:61:f8:76:a8:14:43:93:e5:4a:aa:31:
                    e9:92:5e:65:70:6d:79:39:7b:3c:2f:ec:f5:4d:ee:
                    80:58:ea:23:23:19:30:a8:de:3c:75:b0:d5:f7:5b:
                    8d:1f:0b:f5:df:91:e6:f8:3e:bd:6a:9b:2e:49:d6:
                    de:9e:22:92:79:7f:cb:40:7f:10:59:90:f0:d9:fb:
                    e0:17:73:d2:74:cd:e0:d2:53:78:f1:ba:d4:c1:d9:
                    5d:60:31:df:77:1d:7c:48:02:65:ac:83:fd:18:60:
                    58:01:d4:cf:38:36:2a:10:68:cb:c9:35:f0:50:ef:
                    93:2c:83:9e:40:d9:36:2c:ce:19:57:af:c2:3a:60:
                    84:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:51:FE:45:11:95:0D:4C:8D:0F:ED:F5:66:AE:9E:12:7E:35:74:A0
            X509v3 Authority Key Identifier:
                keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c7:44:b5:c7:ac:10:31:0e:d6:a9:42:61:d0:bc:a7:45:75:
         2e:d1:e2:4c:76:d7:1a:2c:74:f4:2c:04:c1:01:29:17:5a:81:
         11:75:93:9c:a5:76:ff:ce:fb:e7:bd:c1:d9:7f:ed:cf:fa:52:
         c7:3a:89:63:1c:58:71:6e:68:e8:3f:5f:4e:41:74:ed:88:63:
         78:d8:28:30:b7:92:bf:48:18:df:52:30:fa:d4:d4:27:39:50:
         c3:77:bf:bf:a3:be:c2:aa:c6:fe:9d:7a:fe:6d:8d:8b:77:c3:
         b5:8a:a4:e0:31:02:a8:16:5b:93:75:f1:91:8d:22:ff:c7:f3:
         b4:98:43:af:84:14:b3:2c:fd:6e:6a:ad:3f:89:b8:9f:88:c1:
         ea:4c:ee:f1:dd:44:13:9a:25:3b:bc:83:bf:96:7d:1e:13:67:
         b4:6a:5d:24:2f:25:49:da:5f:ca:7e:06:54:25:1e:17:e4:d7:
         66:eb:17:7d:20:c1:a5:34:ce:1c:81:21:70:bc:42:34:f1:4d:
         71:a5:75:e0:73:9c:cb:cd:7a:b4:d1:25:60:de:a0:b1:ef:c3:
         91:4d:dd:c7:23:fc:b9:b4:b5:1a:4b:d2:a3:8f:38:1a:60:c5:
         3d:ad:4f:84:9b:05:ab:67:7a:d7:ee:6e:ee:77:99:df:3c:37:
         24:d7:b6:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1WfFjUabOlCHx6KbVF/9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWY2MjY2ZjYxYTFlY2NkNGRlZTA5NGNjNzFjNmRiODZi
YmIzN2IwHhcNMjYxMDEzMTMwMDQ5WhcNMjYxMDE0MTMwMDQ5WjAzMTEwLwYDVQQD
EyhjNzUxZmU0NTExOTUwZDRjOGQwZmVkZjU2NmFlOWUxMjdlMzU3NGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrwujlKyy4uxI8u6ZeXmBrGnDzCR
J8O30dqB2bVXY63RugEriiqvA4hTbRB+cPsyGzKI66CfJdM2BkeQzq2q6UD2RK8c
vXJCDyeaJ6L5FLlAfsNyicgN1I7y+CUsDyaYZvOHAvl0Z75/fHgmoWeZN/hLuCMT
ugVAbrCmYfh2qBRDk+VKqjHpkl5lcG15OXs8L+z1Te6AWOojIxkwqN48dbDV91uN
Hwv135Hm+D69apsuSdbeniKSeX/LQH8QWZDw2fvgF3PSdM3g0lN48brUwdldYDHf
dx18SAJlrIP9GGBYAdTPODYqEGjLyTXwUO+TLIOeQNk2LM4ZV6/COmCERwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdR/kURlQ1MjQ/t9WaunhJ+NXSgMB8GA1UdIwQY
MBaAFKSfYmb2Gh7M1N7glMxxxtuGu7N7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEt
OThiZTMzNWYzYzU0LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEtOThiZTMzNWYzYzU0
LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsdEtces
EDEO1qlCYdC8p0V1LtHiTHbXGix09CwEwQEpF1qBEXWTnKV2/877573B2X/tz/pS
xzqJYxxYcW5o6D9fTkF07YhjeNgoMLeSv0gY31Iw+tTUJzlQw3e/v6O+wqrG/p16
/m2Ni3fDtYqk4DECqBZbk3XxkY0i/8fztJhDr4QUsyz9bmqtP4m4n4jB6kzu8d1E
E5olO7yDv5Z9HhNntGpdJC8lSdpfyn4GVCUeF+TXZusXfSDBpTTOHIEhcLxCNPFN
caV14HOcy816tNElYN6gse/DkU3dxyP8ubS1GkvSo484GmDFPa1PhJsFq2d61+5u
7neZ3zw3JNe2cg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 18:50:02 2026 by rpki-client