Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
File:                     r26u_xI8pnRG0OSUAeSVBXB44XQ.mft (raw, json)
Hash identifier:          uCREFSN0Z6JlbSESjLgdx4+Tw8hvn9oZ7NA56tSQaQ8=
Subject key identifier:   BF:B5:DD:97:06:42:7D:A2:FF:2D:B8:2A:D4:40:07:DB:7D:F7:19:6A
Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
Certificate issuer:       /CN=af6eaeff123ca67446d0e49401e495057078e174
Certificate serial:       01A0E098E7CB1245A533303F853A06A543C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
Manifest number:          0A9E
Signing time:             Sun 27 Sep 2026 02:01:52 +0000
Manifest this update:     Sun 27 Sep 2026 02:01:52 +0000
Manifest next update:     Mon 28 Sep 2026 02:01:52 +0000
Files and hashes:         1: Toj2MXLv_0tnvaOa8SabyfyAH7M.roa (hash: LJgBJJsZvDC+Ue6FuF++Df+Q+t0hp3VFYM3vhkZt4FQ=)
                          2: liwxDT5LJpIXlKlVZ9n6p87PfOI.roa (hash: BOe25rjjRQ8tqwHFLqCfoig+Bv/rJP70vjeo2DPMR9c=)
                          3: r26u_xI8pnRG0OSUAeSVBXB44XQ.crl (hash: Nz7pp3wBQ7DW1RsNcGVd6Wf5aBE2Ow1QR8ddigMJExo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:98:e7:cb:12:45:a5:33:30:3f:85:3a:06:a5:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174
        Validity
            Not Before: Sep 27 02:01:52 2026 GMT
            Not After : Sep 28 02:01:52 2026 GMT
        Subject: CN=bfb5dd9706427da2ff2db82ad44007db7df7196a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:84:13:87:bf:f5:d5:38:56:a0:14:90:72:
                    0b:ee:14:24:f5:e1:18:6c:e9:a6:36:73:56:bd:4d:
                    19:f5:a5:e1:21:86:24:61:b6:ca:8e:6f:ad:cd:b3:
                    ff:54:04:3b:7b:39:b0:07:fb:b8:f4:90:13:b0:be:
                    b9:da:73:c3:fa:97:ec:57:e5:ae:ab:95:80:5a:ef:
                    96:01:18:60:db:36:b4:5c:f5:6d:c7:4f:ed:98:ef:
                    81:d6:6d:43:60:14:38:1c:46:ef:e8:ea:2a:f8:41:
                    c7:27:5d:23:5a:e3:64:cc:ae:91:25:9b:6a:70:1a:
                    64:36:36:a9:79:53:b0:ee:48:50:d6:e6:db:07:32:
                    0e:9f:8e:25:d0:ab:88:33:2b:c5:91:8a:8a:f7:f0:
                    0d:0e:c8:ce:8b:81:2b:f0:01:f7:b2:37:f7:27:99:
                    be:22:b7:5d:d4:c1:1e:fc:aa:49:aa:67:71:6f:61:
                    35:dd:63:27:cb:3b:84:e9:24:ff:32:d8:39:54:26:
                    7b:3a:9e:4b:23:7a:5f:06:d1:c3:d6:bb:51:41:b4:
                    fb:e4:db:93:f3:eb:2c:de:3e:e3:ce:05:6a:f5:5f:
                    34:3c:e8:c5:88:6f:fe:18:ce:b7:be:76:75:05:35:
                    b4:e2:62:64:9b:a8:b3:b8:e1:3b:86:e7:15:ab:5e:
                    f1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B5:DD:97:06:42:7D:A2:FF:2D:B8:2A:D4:40:07:DB:7D:F7:19:6A
            X509v3 Authority Key Identifier:
                keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:28:4d:bb:dd:1f:e4:c1:8e:f4:68:bb:a7:bd:92:42:d3:b1:
         d6:68:f3:55:11:d7:cc:eb:bf:94:9f:d4:ca:51:e7:4a:95:cc:
         9a:6c:5d:7a:cd:de:3e:58:1b:2c:03:62:76:b6:02:44:2c:98:
         2c:cf:5e:d1:dd:58:54:fa:72:6b:32:b6:50:2a:a4:de:b1:4b:
         5a:49:e7:60:55:f9:45:26:1a:36:c5:3d:d5:c7:14:ce:c5:5f:
         1b:20:63:93:64:76:5b:93:e9:79:50:16:a8:47:cb:1c:b2:e9:
         a2:95:a6:5b:a5:cf:83:f9:d5:8f:62:57:6e:1f:b4:90:56:c4:
         0e:a3:13:6e:31:69:cb:25:96:84:0c:30:e3:b4:97:e3:d8:f0:
         3b:9c:e2:ef:77:8a:bb:51:ce:f9:bb:98:ee:a5:98:e9:76:fc:
         5d:8c:69:05:d7:25:82:1f:83:61:84:a2:2a:40:d3:e9:c4:c3:
         00:01:de:ee:ca:54:2b:d9:11:9a:70:d3:31:92:fe:f8:85:1d:
         3e:53:7e:90:df:c5:91:e4:f9:55:c4:51:b0:ce:e5:83:69:8a:
         6a:ef:43:41:f1:c1:a0:0b:3a:74:04:1e:2d:2c:d0:ca:95:b8:
         0d:ee:a1:f3:45:d3:01:3e:bd:cc:c1:06:a6:b3:8f:41:5f:85:
         8e:b8:3c:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgmOfLEkWlMzA/hToGpUPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNmVhZWZmMTIzY2E2NzQ0NmQwZTQ5NDAxZTQ5NTA1NzA3
OGUxNzQwHhcNMjYwOTI3MDIwMTUyWhcNMjYwOTI4MDIwMTUyWjAzMTEwLwYDVQQD
EyhiZmI1ZGQ5NzA2NDI3ZGEyZmYyZGI4MmFkNDQwMDdkYjdkZjcxOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZuEE4e/9dU4VqAUkHIL7hQk9eEY
bOmmNnNWvU0Z9aXhIYYkYbbKjm+tzbP/VAQ7ezmwB/u49JATsL652nPD+pfsV+Wu
q5WAWu+WARhg2za0XPVtx0/tmO+B1m1DYBQ4HEbv6Ooq+EHHJ10jWuNkzK6RJZtq
cBpkNjapeVOw7khQ1ubbBzIOn44l0KuIMyvFkYqK9/ANDsjOi4Er8AH3sjf3J5m+
Irdd1MEe/KpJqmdxb2E13WMnyzuE6ST/Mtg5VCZ7Op5LI3pfBtHD1rtRQbT75NuT
8+ss3j7jzgVq9V80POjFiG/+GM63vnZ1BTW04mJkm6izuOE7hucVq17xlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+13ZcGQn2i/y24KtRAB9t99xlqMB8GA1UdIwQY
MBaAFK9urv8SPKZ0RtDklAHklQVweOF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjI2dV94SThwblJHME9TVUFlU1ZCWEI0NFhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MDAxNjQtODlkMS00MDRmLWFmMzUt
NGVmNDdmYzRiZDdmLzEvcjI2dV94SThwblJHME9TVUFlU1ZCWEI0NFhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83MDAxNjQtODlkMS00MDRmLWFmMzUtNGVmNDdmYzRiZDdm
LzEvcjI2dV94SThwblJHME9TVUFlU1ZCWEI0NFhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhShNu90f
5MGO9Gi7p72SQtOx1mjzVRHXzOu/lJ/UylHnSpXMmmxdes3ePlgbLANidrYCRCyY
LM9e0d1YVPpyazK2UCqk3rFLWknnYFX5RSYaNsU91ccUzsVfGyBjk2R2W5PpeVAW
qEfLHLLpopWmW6XPg/nVj2JXbh+0kFbEDqMTbjFpyyWWhAww47SX49jwO5zi73eK
u1HO+buY7qWY6Xb8XYxpBdclgh+DYYSiKkDT6cTDAAHe7spUK9kRmnDTMZL++IUd
PlN+kN/FkeT5VcRRsM7lg2mKau9DQfHBoAs6dAQeLSzQypW4De6h80XTAT69zMEG
prOPQV+Fjrg8kQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:35 2026 by rpki-client