Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
File:                     hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json)
Hash identifier:          Uq8QOJadakRBhk2r3/734+xWlWfVmefqXBR6zyzfhCE=
Subject key identifier:   5C:35:E9:C1:C6:7D:24:AD:B7:39:8E:73:FB:E5:BB:E1:DB:66:DE:B9
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Certificate issuer:       /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial:       01A13033E5AB2DC5B1BB604CA3D21C964281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
Manifest number:          0DE1
Signing time:             Mon 12 Oct 2026 13:01:09 +0000
Manifest this update:     Mon 12 Oct 2026 13:01:09 +0000
Manifest next update:     Tue 13 Oct 2026 13:01:09 +0000
Files and hashes:         1: 0Lowu7hxVeuqlAiVWg9uh-_oyWw.roa (hash: 83FXzGC9XwUj1X8htPlTdsZg8/wSnvklV0n8qfw7AtY=)
                          2: Y8T6MQ3N6EL6A9u7REeJi88lYjc.roa (hash: yyEUvZCmaFWTlHBddTvd35XB4O+cqU+todAuZd+/9Mk=)
                          3: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: p3R3cPE31KWAR8QaoWcRFbNaAEdKo/LqWmRkkLjICC8=)
                          4: nv7YrBBjEqeVW-pRBpmKMzYYjNU.roa (hash: kYPGaco3pxLDHifaSJV9n0xVBsh+iPQ3pvB3Ce36XNM=)
                          5: owHwLyctP8Oxzql0_PgsjnKWR1Q.roa (hash: okd6ixQMASQtM3vodku2s12MniqN1mXlVsNaWbdKM5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 13:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:33:e5:ab:2d:c5:b1:bb:60:4c:a3:d2:1c:96:42:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
        Validity
            Not Before: Oct 12 13:01:09 2026 GMT
            Not After : Oct 13 13:01:09 2026 GMT
        Subject: CN=5c35e9c1c67d24adb7398e73fbe5bbe1db66deb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:27:2b:38:39:3c:34:cb:c3:86:64:66:0a:
                    31:12:81:f7:20:3a:13:63:23:5c:ee:15:e5:9a:a5:
                    11:e0:3f:45:fc:fa:2a:f4:52:a3:d4:ec:4c:de:99:
                    a4:c0:2b:10:ca:d3:b4:aa:93:85:54:55:ca:cf:5d:
                    cc:64:2d:0d:f6:71:08:93:5c:c6:cc:f7:73:f4:de:
                    62:ac:61:2e:92:d8:92:e9:3e:37:34:f1:29:79:1a:
                    ae:06:67:24:9c:0e:45:dc:82:93:80:df:8d:7d:3d:
                    19:d4:99:ab:51:0b:25:bd:43:c9:39:34:08:f5:e8:
                    86:02:1e:d7:89:58:5a:d1:4b:a7:11:28:48:49:e2:
                    51:90:1a:66:38:53:ce:e1:3c:0f:74:d2:90:1a:e6:
                    ff:0e:6d:6b:61:66:3e:ee:a3:ee:b2:89:dd:d1:da:
                    58:94:22:44:22:34:67:0c:5d:cd:12:a8:08:57:26:
                    2f:fa:14:cb:e4:3e:09:e3:9b:21:ae:03:2d:6c:a6:
                    38:94:59:bd:dc:f7:06:51:34:9e:81:05:53:89:89:
                    bf:7f:e8:3a:0e:ba:2a:e2:86:d7:a9:4f:cb:9b:8e:
                    90:81:90:e5:bf:8c:3d:4c:27:d7:af:fa:24:5a:dc:
                    ac:43:f6:73:6b:af:28:17:15:0a:e9:61:aa:3c:95:
                    c4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:35:E9:C1:C6:7D:24:AD:B7:39:8E:73:FB:E5:BB:E1:DB:66:DE:B9
            X509v3 Authority Key Identifier:
                keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:45:e8:af:1b:56:0a:fb:5d:60:4e:30:52:54:e0:a4:82:7e:
         c8:be:7d:df:7d:21:c0:47:9d:66:3e:fd:d3:64:cc:49:77:69:
         57:28:8c:30:f2:3a:25:3a:88:32:4b:3a:d3:91:41:a0:17:5e:
         d5:67:ea:9f:51:09:a5:9d:5d:e8:a8:3b:5b:d6:8d:c9:91:eb:
         e9:36:a1:59:86:d8:6b:46:59:a2:54:f9:91:a1:8e:9f:3e:db:
         ea:35:39:ca:02:10:7f:67:14:ac:ae:a6:7d:b4:ed:a7:19:ba:
         1a:34:65:d8:0f:37:09:1a:8b:49:d6:58:1e:40:4e:6a:b5:3e:
         9b:e0:93:99:93:ae:0d:39:93:00:12:18:15:24:68:ba:fe:a4:
         18:a2:34:b5:81:65:db:a5:77:d2:77:81:4a:37:30:c1:9a:e4:
         73:5d:2f:6d:e4:fe:17:5e:2c:6c:b2:ec:35:9f:87:2d:50:4a:
         5b:23:b4:06:23:40:07:3e:c9:32:1a:6e:0c:8b:78:95:d9:31:
         89:61:0c:a4:08:ee:25:44:77:87:b8:ce:92:4d:2f:fc:4c:44:
         be:eb:79:64:5c:f5:34:f5:f3:ef:8f:d2:ba:6a:29:01:bd:f4:
         4b:9f:4f:3f:42:6e:00:8d:ea:ad:ff:e7:d8:28:99:cd:62:31:
         1c:b5:30:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEwM+WrLcWxu2BMo9IclkKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDU4MmNhNzA0NzE3ZWIwYzk0YmU0ZDg5NDEzZjRiYzJk
OGI4ZTUwHhcNMjYxMDEyMTMwMTA5WhcNMjYxMDEzMTMwMTA5WjAzMTEwLwYDVQQD
Eyg1YzM1ZTljMWM2N2QyNGFkYjczOThlNzNmYmU1YmJlMWRiNjZkZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHInKzg5PDTLw4ZkZgoxEoH3IDoT
YyNc7hXlmqUR4D9F/Poq9FKj1OxM3pmkwCsQytO0qpOFVFXKz13MZC0N9nEIk1zG
zPdz9N5irGEuktiS6T43NPEpeRquBmcknA5F3IKTgN+NfT0Z1JmrUQslvUPJOTQI
9eiGAh7XiVha0UunEShISeJRkBpmOFPO4TwPdNKQGub/Dm1rYWY+7qPusond0dpY
lCJEIjRnDF3NEqgIVyYv+hTL5D4J45shrgMtbKY4lFm93PcGUTSegQVTiYm/f+g6
Droq4obXqU/Lm46QgZDlv4w9TCfXr/okWtysQ/Zza68oFxUK6WGqPJXEzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw16cHGfSSttzmOc/vlu+HbZt65MB8GA1UdIwQY
MBaAFIRFgspwRxfrDJS+TYlBP0vC2LjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAt
ZjIzZjY2ZjhkMjQyLzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAtZjIzZjY2ZjhkMjQy
LzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEXorxtW
CvtdYE4wUlTgpIJ+yL59330hwEedZj7902TMSXdpVyiMMPI6JTqIMks605FBoBde
1Wfqn1EJpZ1d6Kg7W9aNyZHr6TahWYbYa0ZZolT5kaGOnz7b6jU5ygIQf2cUrK6m
fbTtpxm6GjRl2A83CRqLSdZYHkBOarU+m+CTmZOuDTmTABIYFSRouv6kGKI0tYFl
26V30neBSjcwwZrkc10vbeT+F14sbLLsNZ+HLVBKWyO0BiNABz7JMhpuDIt4ldkx
iWEMpAjuJUR3h7jOkk0v/ExEvut5ZFz1NPXz74/SumopAb30S59PP0JuAI3qrf/n
2CiZzWIxHLUwhw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 01:37:22 2026 by rpki-client