Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
File:                     1AYg6l2vilSq6hfyy57N8114UwY.mft (raw, json)
Hash identifier:          j4EZ+kXahQFkBjQOcKiLiCxxfzDLErphOtLQTnOhuwU=
Subject key identifier:   A6:FB:E2:34:64:E3:06:19:B4:BE:C8:39:C7:61:19:05:25:AC:F9:4E
Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
Certificate issuer:       /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Certificate serial:       01A11229DB9FFD86D2FBB5063641473FB0C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
Manifest number:          1566
Signing time:             Tue 06 Oct 2026 17:01:35 +0000
Manifest this update:     Tue 06 Oct 2026 17:01:35 +0000
Manifest next update:     Wed 07 Oct 2026 17:01:35 +0000
Files and hashes:         1: 1AYg6l2vilSq6hfyy57N8114UwY.crl (hash: 42VqMjzK8cimd14o77iwjupKe6N5GWnveUkybPiHvWk=)
                          2: 3HiDrZA7PYUoDOVj2lWK_MTDMy4.roa (hash: VEj0HSUKE42dKjFD2uYohf7XQqVFoN8s8ftve/Xm9PQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:29:db:9f:fd:86:d2:fb:b5:06:36:41:47:3f:b0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
        Validity
            Not Before: Oct  6 17:01:35 2026 GMT
            Not After : Oct  7 17:01:35 2026 GMT
        Subject: CN=a6fbe23464e30619b4bec839c761190525acf94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:99:10:ad:ee:d5:d3:c5:d5:bd:6b:77:53:e6:
                    95:46:96:75:a9:cd:28:d0:c2:60:35:05:79:5c:2c:
                    1c:88:ff:5e:d7:ec:bd:27:bd:e6:41:55:55:47:eb:
                    12:cc:46:11:2f:cc:a8:44:01:0c:cc:72:b3:3c:1b:
                    54:8b:7d:e6:77:d5:28:6f:5b:9c:25:7a:95:0a:73:
                    21:33:f8:5b:10:35:77:da:71:42:90:17:f3:b3:5e:
                    e6:9b:4b:cb:f3:3a:da:00:e7:40:7c:5a:a9:9e:63:
                    1e:6d:c0:e6:22:bb:0a:2f:e7:d0:44:68:78:0c:61:
                    ec:88:4d:d5:d3:e9:99:0b:f4:b2:cc:99:23:9f:94:
                    b6:b7:fd:28:01:85:bb:0b:b7:d7:05:27:f5:01:65:
                    0a:f4:73:1f:d7:e4:99:2e:56:c4:d9:7e:b5:07:61:
                    ea:5b:32:1c:6f:7e:7d:23:05:12:60:a9:a6:25:11:
                    97:8a:2f:6b:43:ae:40:82:4a:79:35:fa:38:05:69:
                    29:d3:5d:d6:a1:f8:0e:d5:b5:27:7e:2a:f5:82:e5:
                    2d:dd:10:18:a3:7f:3b:13:c2:da:cd:aa:9e:53:d8:
                    b8:74:c4:9d:af:1f:2c:43:8c:79:49:ab:bc:e3:0c:
                    8c:25:a5:b0:56:eb:46:04:0d:85:f4:77:86:08:6a:
                    4f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FB:E2:34:64:E3:06:19:B4:BE:C8:39:C7:61:19:05:25:AC:F9:4E
            X509v3 Authority Key Identifier:
                keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a9:d6:44:5a:ca:78:d7:ad:be:9b:b1:8f:21:cf:d0:5e:f8:
         6a:d1:5a:01:09:97:24:a1:62:7f:27:80:6d:73:86:32:ad:e9:
         78:86:d7:85:cf:7a:bb:36:7b:b7:a6:fb:c8:b3:5f:f4:67:ea:
         17:61:0a:71:91:bf:6d:20:b3:c4:08:e0:5d:af:da:c5:b7:14:
         ca:b8:ac:c3:74:3c:47:d3:4c:87:61:a8:d3:2b:bf:5b:d2:1f:
         fb:93:65:c3:12:ac:ba:5b:65:b6:96:2e:2d:62:04:7b:31:23:
         f7:0c:ae:d2:f0:ed:bd:b6:a3:cf:05:e8:6f:af:cd:11:98:4d:
         59:b4:8a:b2:51:77:f2:2a:6a:7a:6c:57:f1:43:64:f4:8d:fa:
         d5:6a:23:9b:8a:99:e1:98:c1:8d:dd:e2:98:69:f3:1c:a8:ca:
         ba:b9:2d:44:d3:b2:0d:b3:6d:4b:4b:42:a8:b1:cb:bb:89:b4:
         be:fc:90:18:70:24:0a:2b:1c:e6:04:b7:20:f6:45:6c:27:7e:
         a8:8c:ba:51:67:16:6f:3a:2e:3b:4b:99:60:aa:17:f3:d1:ff:
         55:a7:7d:11:d4:80:60:d0:e5:81:a1:5b:50:7b:0b:ba:34:37:
         ab:96:97:c6:49:42:b1:c6:bd:ac:23:42:68:5f:9f:5e:83:2b:
         68:42:61:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaESKduf/YbS+7UGNkFHP7DCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MDYyMGVhNWRhZjhhNTRhYWVhMTdmMmNiOWVjZGYzNWQ3
ODUzMDYwHhcNMjYxMDA2MTcwMTM1WhcNMjYxMDA3MTcwMTM1WjAzMTEwLwYDVQQD
EyhhNmZiZTIzNDY0ZTMwNjE5YjRiZWM4MzljNzYxMTkwNTI1YWNmOTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJkQre7V08XVvWt3U+aVRpZ1qc0o
0MJgNQV5XCwciP9e1+y9J73mQVVVR+sSzEYRL8yoRAEMzHKzPBtUi33md9Uob1uc
JXqVCnMhM/hbEDV32nFCkBfzs17mm0vL8zraAOdAfFqpnmMebcDmIrsKL+fQRGh4
DGHsiE3V0+mZC/SyzJkjn5S2t/0oAYW7C7fXBSf1AWUK9HMf1+SZLlbE2X61B2Hq
WzIcb359IwUSYKmmJRGXii9rQ65Agkp5Nfo4BWkp013WofgO1bUnfir1guUt3RAY
o387E8LazaqeU9i4dMSdrx8sQ4x5Sau84wyMJaWwVutGBA2F9HeGCGpPnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb74jRk4wYZtL7IOcdhGQUlrPlOMB8GA1UdIwQY
MBaAFNQGIOpdr4pUquoX8suezfNdeFMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUFZZzZsMnZpbFNxNmhmeXk1N044MTE0VXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83OThmYzUtYjU0Yy00MWMxLThhZmUt
ZjA5ZTQ2YzY5YmY4LzEvMUFZZzZsMnZpbFNxNmhmeXk1N044MTE0VXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi83OThmYzUtYjU0Yy00MWMxLThhZmUtZjA5ZTQ2YzY5YmY4
LzEvMUFZZzZsMnZpbFNxNmhmeXk1N044MTE0VXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKnWRFrK
eNetvpuxjyHP0F74atFaAQmXJKFifyeAbXOGMq3peIbXhc96uzZ7t6b7yLNf9Gfq
F2EKcZG/bSCzxAjgXa/axbcUyrisw3Q8R9NMh2Go0yu/W9If+5NlwxKsultltpYu
LWIEezEj9wyu0vDtvbajzwXob6/NEZhNWbSKslF38ipqemxX8UNk9I361Wojm4qZ
4ZjBjd3imGnzHKjKurktRNOyDbNtS0tCqLHLu4m0vvyQGHAkCisc5gS3IPZFbCd+
qIy6UWcWbzouO0uZYKoX89H/Vad9EdSAYNDlgaFbUHsLujQ3q5aXxklCsca9rCNC
aF+fXoMraEJhsA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:22:38 2026 by rpki-client