Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File:                     P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier:          Cl3zlMvXX9eTAQolN3N9tmioKxkCe2J0fIQrsptaUbI=
Subject key identifier:   E4:5C:CF:02:2D:1E:47:DC:5B:8B:A7:49:CA:93:CA:13:19:CD:D7:46
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer:       /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial:       01A1046E3F46C72B6999E4AD9CFA4A52EBBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number:          0B85
Signing time:             Sun 04 Oct 2026 01:01:36 +0000
Manifest this update:     Sun 04 Oct 2026 01:01:36 +0000
Manifest next update:     Mon 05 Oct 2026 01:01:36 +0000
Files and hashes:         1: Mr6edMVNczrnTD4fPbHhkJ_t0BI.roa (hash: B3H6ipVEXV+RUc2+4VXrDuLYCDQcw876zTiowv2ss50=)
                          2: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: CYqBiM+acFW0gS6ylwJLxyefoc/jl4s27r9W5daaV4o=)
                          3: UZU-y9KjwHBRwAFBMLEzFqF8gQE.roa (hash: 8IesYOSWF04JS1YDSdciYf6tHgm62U6HhGDalYAE7s8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:6e:3f:46:c7:2b:69:99:e4:ad:9c:fa:4a:52:eb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
        Validity
            Not Before: Oct  4 01:01:36 2026 GMT
            Not After : Oct  5 01:01:36 2026 GMT
        Subject: CN=e45ccf022d1e47dc5b8ba749ca93ca1319cdd746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:f8:38:5a:f3:55:4c:97:9a:0c:b3:3e:ab:
                    75:c0:67:e1:14:b4:e0:63:7c:42:ef:18:f9:e0:a4:
                    0a:2d:55:cf:3a:bd:80:67:a1:9b:04:d6:dc:92:50:
                    53:9a:fd:c2:3d:b7:6d:ba:07:58:04:80:27:98:b9:
                    23:8e:f5:dc:d1:52:fd:a1:ab:df:82:4d:0d:9e:91:
                    9c:08:23:de:bd:c6:86:73:83:68:1c:f1:e1:69:d2:
                    13:9b:52:ef:3a:ab:0b:24:c6:3e:1c:4d:22:6f:a9:
                    6b:0a:08:7d:43:b1:0b:e5:3c:db:a9:7f:b8:8d:58:
                    0b:a7:8b:ac:41:ed:8c:96:c9:43:e7:58:16:44:56:
                    e2:06:20:fc:d7:1b:72:73:c6:5a:96:42:b2:67:ad:
                    8a:3f:9a:bd:1f:1a:53:ea:be:f7:97:dd:18:c0:ea:
                    16:a8:34:3b:af:20:b5:08:54:07:2c:ee:3a:e2:8f:
                    bb:e1:9e:bd:75:ec:a5:db:5a:55:3f:a2:c4:51:d4:
                    2c:f7:b4:b4:52:a3:8e:43:24:d8:a1:a2:35:c6:6d:
                    d4:0a:54:57:5c:33:dd:37:17:43:4b:e9:0e:17:48:
                    e9:49:a3:39:66:6f:e3:52:62:3b:d2:05:16:0b:65:
                    3a:d5:ed:29:cd:a1:d8:c2:d3:d3:ce:0e:cc:0b:79:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5C:CF:02:2D:1E:47:DC:5B:8B:A7:49:CA:93:CA:13:19:CD:D7:46
            X509v3 Authority Key Identifier:
                keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:9b:16:92:5a:36:55:4c:af:3f:86:c8:ea:bc:0c:45:a5:8f:
         94:8b:7a:e3:d4:af:e5:b9:5e:d4:06:6c:8e:24:7f:b4:c1:2b:
         9b:5d:32:2c:f5:11:83:ab:32:3b:24:b9:2f:01:c5:b7:8e:0f:
         cf:27:ff:c1:e9:c3:8b:ee:8a:ca:b3:39:82:de:9e:f7:2a:90:
         86:cf:bc:78:bd:0d:fc:f4:92:cd:75:f4:be:2b:de:69:e7:e7:
         d3:9b:c9:f5:b0:12:27:fe:83:73:a2:4c:31:ba:39:a7:6f:a2:
         2b:18:b9:f2:c8:1c:91:8e:6b:97:7e:75:a8:23:ac:da:2a:79:
         85:10:82:86:9c:78:20:b6:60:c8:cd:a3:0f:92:26:06:71:1c:
         03:56:59:ad:d0:99:da:42:aa:f6:98:a6:47:92:76:39:06:80:
         89:b0:61:90:2f:6d:6c:62:93:92:07:5d:9e:70:39:96:fd:1a:
         4a:eb:93:a0:25:53:cf:51:e0:75:a8:56:77:46:80:db:4c:53:
         87:12:7f:2a:a9:7a:27:14:be:a5:b7:0f:bf:a9:53:0c:06:e2:
         ea:04:79:88:c1:61:d5:f7:16:2c:a3:98:8a:d1:90:b0:12:2f:
         ed:bf:4d:02:82:17:91:5f:29:0c:79:51:18:29:07:07:9e:20:
         50:4a:d9:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEEbj9GxytpmeStnPpKUuu9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNWJjNDQwMTQyODViNmYzZTI4NzJhZWNmNWQ0ZjMzZTI2
OGNlOGIwHhcNMjYxMDA0MDEwMTM2WhcNMjYxMDA1MDEwMTM2WjAzMTEwLwYDVQQD
EyhlNDVjY2YwMjJkMWU0N2RjNWI4YmE3NDljYTkzY2ExMzE5Y2RkNzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf74OFrzVUyXmgyzPqt1wGfhFLTg
Y3xC7xj54KQKLVXPOr2AZ6GbBNbcklBTmv3CPbdtugdYBIAnmLkjjvXc0VL9oavf
gk0NnpGcCCPevcaGc4NoHPHhadITm1LvOqsLJMY+HE0ib6lrCgh9Q7EL5TzbqX+4
jVgLp4usQe2MlslD51gWRFbiBiD81xtyc8ZalkKyZ62KP5q9HxpT6r73l90YwOoW
qDQ7ryC1CFQHLO464o+74Z69deyl21pVP6LEUdQs97S0UqOOQyTYoaI1xm3UClRX
XDPdNxdDS+kOF0jpSaM5Zm/jUmI70gUWC2U61e0pzaHYwtPTzg7MC3nOAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORczwItHkfcW4unScqTyhMZzddGMB8GA1UdIwQY
MBaAFD9bxEAUKFtvPihyrs9dTzPiaM6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDkt
MDI5NTNjZTYzODQzLzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zMjI2OTMtZTU4Yi00OGUyLWJkZDktMDI5NTNjZTYzODQz
LzEvUDF2RVFCUW9XMjgtS0hLdXoxMVBNLUpvem9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5sWklo2
VUyvP4bI6rwMRaWPlIt649Sv5ble1AZsjiR/tMErm10yLPURg6syOyS5LwHFt44P
zyf/wenDi+6KyrM5gt6e9yqQhs+8eL0N/PSSzXX0viveaefn05vJ9bASJ/6Dc6JM
Mbo5p2+iKxi58sgckY5rl351qCOs2ip5hRCChpx4ILZgyM2jD5ImBnEcA1ZZrdCZ
2kKq9pimR5J2OQaAibBhkC9tbGKTkgddnnA5lv0aSuuToCVTz1HgdahWd0aA20xT
hxJ/Kql6JxS+pbcPv6lTDAbi6gR5iMFh1fcWLKOYitGQsBIv7b9NAoIXkV8pDHlR
GCkHB54gUErZqg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 10:21:28 2026 by rpki-client