Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
File:                     v5gt73eibXzBlHOzpAZNzFIX5HE.mft (raw, json)
Hash identifier:          cdw0KKUYi91iQXoofHSr24ppx0J/8ceo6/ERM/B7W+M=
Subject key identifier:   14:93:68:DE:D7:77:D1:69:A6:BD:24:C0:32:59:7A:5A:37:3A:44:B7
Authority key identifier: BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71
Certificate issuer:       /CN=bf982def77a26d7cc19473b3a4064dcc5217e471
Certificate serial:       01A109CB110827B9FE858BC4C20E25B529EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
Manifest number:          1A8A
Signing time:             Mon 05 Oct 2026 02:01:05 +0000
Manifest this update:     Mon 05 Oct 2026 02:01:05 +0000
Manifest next update:     Tue 06 Oct 2026 02:01:05 +0000
Files and hashes:         1: MavdUwtL9hXRYTucFdVXRHkrrIo.roa (hash: yraXNEacytf4HbmMAZg6e64667WxeEaDmWzKdMpCXxk=)
                          2: v5gt73eibXzBlHOzpAZNzFIX5HE.crl (hash: jtbnxLJ0s0p5cyg+I73TawIuVDCoZZZyTvl/T7v48UI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:09:cb:11:08:27:b9:fe:85:8b:c4:c2:0e:25:b5:29:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf982def77a26d7cc19473b3a4064dcc5217e471
        Validity
            Not Before: Oct  5 02:01:05 2026 GMT
            Not After : Oct  6 02:01:05 2026 GMT
        Subject: CN=149368ded777d169a6bd24c032597a5a373a44b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:80:01:e6:f3:81:87:d0:4c:47:28:01:04:
                    cf:12:58:2e:e6:48:0b:c8:5f:5b:a4:77:64:17:61:
                    6a:53:9b:cc:b8:c2:ee:3c:b0:83:07:8f:c5:f0:30:
                    f9:a3:d4:d8:17:ab:a7:aa:1f:6a:fe:74:8f:1c:0d:
                    ff:bc:bb:9f:df:3e:99:84:15:6b:53:0f:fc:33:06:
                    a3:d7:df:7f:50:b2:ff:a3:e9:bc:03:de:ea:66:8b:
                    40:7f:2e:d0:65:27:62:58:40:18:ad:7b:cf:4b:94:
                    5b:df:d4:6d:04:0f:78:0c:9d:4b:c8:8c:ab:60:e9:
                    51:c9:6a:3c:eb:93:42:d5:b3:29:0b:cc:a4:74:19:
                    5d:2a:bc:02:f2:43:2f:be:3c:95:b3:8a:e2:18:93:
                    42:ef:45:08:04:52:14:1f:25:80:03:21:d5:1f:de:
                    d2:5d:d9:14:a9:66:f2:b2:59:4a:65:95:96:63:88:
                    ec:96:ea:77:64:22:f2:aa:4d:36:2a:8d:7b:bd:02:
                    2a:d5:09:68:7e:f8:4e:e5:df:13:e7:70:c3:50:3a:
                    b1:76:c2:55:a6:8f:8c:07:66:19:64:06:1f:db:c5:
                    b0:f9:4e:eb:61:57:b0:b7:9c:af:a0:8f:db:54:c4:
                    87:48:09:77:17:e0:58:48:b3:b2:0a:3a:c2:01:65:
                    78:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:93:68:DE:D7:77:D1:69:A6:BD:24:C0:32:59:7A:5A:37:3A:44:B7
            X509v3 Authority Key Identifier:
                keyid:BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:12:3d:f8:fb:6e:09:1b:23:94:67:9a:b5:38:e5:21:b3:b5:
         6e:8e:43:08:9c:12:1b:35:51:fa:05:54:5c:ad:a7:80:aa:a3:
         2d:bf:0c:e3:e7:7a:7a:ae:9a:64:65:f9:a1:a5:06:9d:f7:52:
         cc:90:67:8f:26:c8:4c:ec:8d:4a:47:e0:7b:b5:98:f3:4c:36:
         9e:27:02:4d:db:c8:f7:b0:1a:55:65:fb:31:53:ad:c0:99:d9:
         0c:94:95:ec:45:f3:17:20:9a:e8:a8:cd:61:d7:20:24:74:0d:
         71:17:74:cf:a6:ab:46:60:99:62:e2:37:c7:b4:90:49:17:43:
         97:0c:31:a1:c5:b1:4c:4d:36:26:f0:7e:09:8b:cf:9b:7e:05:
         0b:9a:66:bd:9b:ba:80:e1:b6:15:8f:c9:60:4e:92:54:23:a2:
         30:5b:1d:24:1b:22:30:d9:a7:b1:48:2a:e2:db:60:fe:b1:d0:
         c0:bb:d6:9c:ba:51:23:c5:be:2c:e0:63:08:86:0b:6d:8d:9b:
         23:69:bf:3b:b9:42:ec:5f:47:df:52:b8:68:27:ba:92:7d:d1:
         e4:dd:78:22:55:df:66:30:c1:e7:49:fd:12:42:6f:d2:75:be:
         36:59:da:46:77:54:12:8e:05:b2:ab:5e:54:78:1c:58:de:fe:
         ba:bd:57:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEJyxEIJ7n+hYvEwg4ltSnsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOTgyZGVmNzdhMjZkN2NjMTk0NzNiM2E0MDY0ZGNjNTIx
N2U0NzEwHhcNMjYxMDA1MDIwMTA1WhcNMjYxMDA2MDIwMTA1WjAzMTEwLwYDVQQD
EygxNDkzNjhkZWQ3NzdkMTY5YTZiZDI0YzAzMjU5N2E1YTM3M2E0NGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfmAAebzgYfQTEcoAQTPElgu5kgL
yF9bpHdkF2FqU5vMuMLuPLCDB4/F8DD5o9TYF6unqh9q/nSPHA3/vLuf3z6ZhBVr
Uw/8Mwaj199/ULL/o+m8A97qZotAfy7QZSdiWEAYrXvPS5Rb39RtBA94DJ1LyIyr
YOlRyWo865NC1bMpC8ykdBldKrwC8kMvvjyVs4riGJNC70UIBFIUHyWAAyHVH97S
XdkUqWbysllKZZWWY4jslup3ZCLyqk02Ko17vQIq1QlofvhO5d8T53DDUDqxdsJV
po+MB2YZZAYf28Ww+U7rYVewt5yvoI/bVMSHSAl3F+BYSLOyCjrCAWV4PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSTaN7Xd9Fppr0kwDJZelo3OkS3MB8GA1UdIwQY
MBaAFL+YLe93om18wZRzs6QGTcxSF+RxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjVndDczZWliWHpCbEhPenBBWk56RklYNUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZmEwOTEtYjE2Zi00NTI3LThiMDAt
MWRkYWMyYjA4NDA0LzEvdjVndDczZWliWHpCbEhPenBBWk56RklYNUhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hZmEwOTEtYjE2Zi00NTI3LThiMDAtMWRkYWMyYjA4NDA0
LzEvdjVndDczZWliWHpCbEhPenBBWk56RklYNUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChI9+Ptu
CRsjlGeatTjlIbO1bo5DCJwSGzVR+gVUXK2ngKqjLb8M4+d6eq6aZGX5oaUGnfdS
zJBnjybITOyNSkfge7WY80w2nicCTdvI97AaVWX7MVOtwJnZDJSV7EXzFyCa6KjN
YdcgJHQNcRd0z6arRmCZYuI3x7SQSRdDlwwxocWxTE02JvB+CYvPm34FC5pmvZu6
gOG2FY/JYE6SVCOiMFsdJBsiMNmnsUgq4ttg/rHQwLvWnLpRI8W+LOBjCIYLbY2b
I2m/O7lC7F9H31K4aCe6kn3R5N14IlXfZjDB50n9EkJv0nW+NlnaRndUEo4Fsqte
VHgcWN7+ur1X5A==
-----END CERTIFICATE-----
Generated at Mon Oct 5 12:33:47 2026 by rpki-client