Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
File:                     aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json)
Hash identifier:          7HG7oqHs/u0HZnNxb9i1UI9S60GcXgFNJ3R6S/5OuWw=
Subject key identifier:   8D:56:AA:32:70:88:98:0F:A3:24:0F:BF:43:93:AB:51:AA:A2:B6:73
Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
Certificate issuer:       /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Certificate serial:       01A0FCB4643607141C7D657096C88E237ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
Manifest number:          0847
Signing time:             Fri 02 Oct 2026 13:01:15 +0000
Manifest this update:     Fri 02 Oct 2026 13:01:15 +0000
Manifest next update:     Sat 03 Oct 2026 13:01:15 +0000
Files and hashes:         1: 2V6tdUxiqVKneaVdrbJ3uovbgVA.roa (hash: Yw91g0FZ9Kp1Cv1kNatYsOFvczojORt+cxvTk8TIlmo=)
                          2: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: ps/N9c1+Rsv33UL1gNq3xw4/it/7Ot9tnqSdES6hVtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:b4:64:36:07:14:1c:7d:65:70:96:c8:8e:23:7a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
        Validity
            Not Before: Oct  2 13:01:15 2026 GMT
            Not After : Oct  3 13:01:15 2026 GMT
        Subject: CN=8d56aa327088980fa3240fbf4393ab51aaa2b673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7f:c9:01:53:3d:55:9b:00:aa:61:bf:34:e8:
                    9b:59:6f:c5:79:dd:12:43:15:f7:8b:09:50:79:10:
                    f5:5d:c5:d9:2d:65:8d:7a:54:dd:7a:75:f3:f6:97:
                    ef:4e:fe:c7:ca:21:df:89:8c:07:0b:85:b1:e7:90:
                    5d:25:6f:74:39:1e:b6:1f:0f:3f:35:ca:ea:f2:d5:
                    86:30:ff:a7:2d:85:2a:40:69:00:92:e0:06:03:13:
                    8d:d6:94:82:f0:aa:c8:30:0a:fb:e9:03:2c:07:e7:
                    c8:37:8e:d1:64:ea:cb:cf:63:26:24:21:48:5f:cc:
                    d2:ae:86:ca:93:cb:a7:2e:12:5b:4f:72:9f:69:34:
                    ae:f4:f9:54:46:f2:71:45:cf:46:b6:da:95:13:6a:
                    7f:b5:3f:8c:60:bb:f5:8a:e7:f7:9f:f3:e6:29:4a:
                    36:24:53:35:0c:16:9c:29:2b:52:74:fa:84:72:76:
                    64:df:4b:42:e9:93:b8:cd:11:2c:9e:1c:c0:59:fe:
                    2a:4a:f0:f9:8e:26:72:8d:dc:e0:28:64:de:a1:8a:
                    f1:d8:79:c5:5e:76:1b:aa:eb:b6:20:f3:75:e1:94:
                    a5:58:50:ea:d6:a3:ce:9f:e4:a2:96:89:5f:c4:fa:
                    80:58:58:08:46:68:0b:e2:eb:46:4b:5f:bc:ba:dd:
                    bb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:56:AA:32:70:88:98:0F:A3:24:0F:BF:43:93:AB:51:AA:A2:B6:73
            X509v3 Authority Key Identifier:
                keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:71:35:52:2c:cd:49:b8:02:0b:1a:77:0b:45:6c:35:e7:2b:
         20:4f:21:d0:f8:7f:36:d8:e3:b2:92:44:7a:05:18:d9:c6:1b:
         7d:3c:08:a5:f6:3a:21:02:8b:89:9e:c5:48:a3:da:3d:a1:14:
         a4:f3:49:19:85:d0:01:94:04:f5:a2:f7:9c:04:66:24:a8:cd:
         c3:c2:fc:5b:6a:55:9b:3f:25:65:42:01:32:cb:e0:8d:c4:74:
         cb:94:b7:8a:9a:41:be:25:31:df:a5:a5:88:e3:20:b4:36:d5:
         d3:ed:22:86:ed:4c:04:98:39:01:e2:6f:41:e3:fc:9d:92:71:
         b8:06:c6:65:41:22:26:f9:82:07:a1:e4:03:1b:62:13:92:5a:
         90:18:20:b1:74:d7:eb:90:e0:17:00:d4:d7:d7:22:3e:44:55:
         dc:8f:f6:92:4f:32:67:0e:1c:51:72:47:54:fa:7b:28:7f:62:
         ad:62:ac:8b:ce:4a:f8:7f:cb:82:80:1d:97:a7:27:e0:dd:79:
         ff:03:01:b5:f1:95:68:b2:b8:11:ca:42:e6:81:62:9f:6a:c5:
         8d:93:dd:e8:9d:30:ce:4e:0e:9c:cb:7a:35:b3:c6:d2:eb:21:
         4b:fa:49:39:5d:98:68:1f:83:0a:3b:e1:d8:aa:6e:1e:b4:d8:
         eb:ac:57:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD8tGQ2BxQcfWVwlsiOI3q8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjE4NjkwOTkxNDVlMzFkN2I0YjVjNTVlYzVmOWE3MjRm
ZmNhN2UwHhcNMjYxMDAyMTMwMTE1WhcNMjYxMDAzMTMwMTE1WjAzMTEwLwYDVQQD
Eyg4ZDU2YWEzMjcwODg5ODBmYTMyNDBmYmY0MzkzYWI1MWFhYTJiNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn/JAVM9VZsAqmG/NOibWW/Fed0S
QxX3iwlQeRD1XcXZLWWNelTdenXz9pfvTv7HyiHfiYwHC4Wx55BdJW90OR62Hw8/
Ncrq8tWGMP+nLYUqQGkAkuAGAxON1pSC8KrIMAr76QMsB+fIN47RZOrLz2MmJCFI
X8zSrobKk8unLhJbT3KfaTSu9PlURvJxRc9GttqVE2p/tT+MYLv1iuf3n/PmKUo2
JFM1DBacKStSdPqEcnZk30tC6ZO4zREsnhzAWf4qSvD5jiZyjdzgKGTeoYrx2HnF
XnYbquu2IPN14ZSlWFDq1qPOn+SilolfxPqAWFgIRmgL4utGS1+8ut27aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1WqjJwiJgPoyQPv0OTq1GqorZzMB8GA1UdIwQY
MBaAFGlhhpCZFF4x17S1xV7F+ack/8p+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdHR2tKa1VYakhYdExYRlhzWDVweVRfeW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xZWYwNjEtZTU4MS00OWU0LWI4ZTQt
MmJjY2MyNzVlNjk2LzEvYVdHR2tKa1VYakhYdExYRlhzWDVweVRfeW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8xZWYwNjEtZTU4MS00OWU0LWI4ZTQtMmJjY2MyNzVlNjk2
LzEvYVdHR2tKa1VYakhYdExYRlhzWDVweVRfeW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3E1UizN
SbgCCxp3C0VsNecrIE8h0Ph/NtjjspJEegUY2cYbfTwIpfY6IQKLiZ7FSKPaPaEU
pPNJGYXQAZQE9aL3nARmJKjNw8L8W2pVmz8lZUIBMsvgjcR0y5S3ippBviUx36Wl
iOMgtDbV0+0ihu1MBJg5AeJvQeP8nZJxuAbGZUEiJvmCB6HkAxtiE5JakBggsXTX
65DgFwDU19ciPkRV3I/2kk8yZw4cUXJHVPp7KH9irWKsi85K+H/LgoAdl6cn4N15
/wMBtfGVaLK4EcpC5oFin2rFjZPd6J0wzk4OnMt6NbPG0ushS/pJOV2YaB+DCjvh
2KpuHrTY66xXzA==
-----END CERTIFICATE-----
Generated at Fri Oct 2 18:55:35 2026 by rpki-client