Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
File:                     cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft (raw, json)
Hash identifier:          85yKJjVUgsWLhyKNTdQGIBdxJLdyZ5Q9Ggg7NrdM3dY=
Subject key identifier:   87:1E:7E:CC:F6:E0:DF:C6:78:64:95:19:CE:F1:CE:4F:05:15:83:90
Authority key identifier: 72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
Certificate issuer:       /CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Certificate serial:       01A131EB7EFD1978C31C54DFEF1E5257AEA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
Manifest number:          0557
Signing time:             Mon 12 Oct 2026 21:01:19 +0000
Manifest this update:     Mon 12 Oct 2026 21:01:19 +0000
Manifest next update:     Tue 13 Oct 2026 21:01:19 +0000
Files and hashes:         1: 1tgtjL3B3YdYAU03MUR31VYv6CI.roa (hash: 16zjErqZd+Fe3OsAh8pnaOrjHjMKr/IPGlIT7NNIBL0=)
                          2: cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl (hash: bDT62K3lAztD39Cyf8eY/v4vYgXBtSTVpluJBmp3Z0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:eb:7e:fd:19:78:c3:1c:54:df:ef:1e:52:57:ae:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e13915fa1bc579f5856f58ecb24786379a5d48
        Validity
            Not Before: Oct 12 21:01:19 2026 GMT
            Not After : Oct 13 21:01:19 2026 GMT
        Subject: CN=871e7eccf6e0dfc678649519cef1ce4f05158390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:75:f7:31:a8:5d:eb:4e:c3:ee:f8:c5:51:
                    54:1d:10:ec:36:d9:cd:fa:3e:32:b5:31:72:16:39:
                    97:b4:27:b8:73:77:4f:5d:5a:65:ab:fc:ea:a3:32:
                    52:cb:6a:d4:d2:fd:b8:7f:a5:04:a9:f7:25:a0:e3:
                    3c:2b:5d:b3:69:b8:eb:43:c9:a0:6f:41:9b:fc:90:
                    91:37:ff:b9:19:5d:92:90:86:25:7d:fc:9f:bb:f1:
                    08:04:6c:0b:fa:57:16:a6:ba:9c:1f:9a:cd:40:34:
                    87:7b:2c:97:d7:3a:87:b0:22:79:2f:0e:b2:d6:4d:
                    dd:e4:e6:11:dd:2b:bf:61:43:06:46:0c:b0:bb:49:
                    b9:31:21:68:36:99:5d:3f:f1:26:b8:34:9c:8c:2a:
                    e3:a1:f0:d8:99:56:a9:f8:f0:98:ce:4a:09:c6:97:
                    60:d2:ee:c2:7b:d6:ce:07:1f:84:3b:7f:29:83:06:
                    73:91:45:d8:6c:12:37:7b:01:fb:c9:3f:3e:f1:32:
                    45:8a:50:75:f3:98:e6:f9:99:93:5b:6a:80:0e:9a:
                    6b:9e:f9:59:cd:a6:18:8b:1d:a4:a8:bc:69:b2:63:
                    58:32:39:6a:53:c8:98:c4:68:7e:cd:9e:51:f0:eb:
                    51:af:1b:5d:ac:45:8e:fc:4b:f8:03:33:b4:71:91:
                    59:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1E:7E:CC:F6:E0:DF:C6:78:64:95:19:CE:F1:CE:4F:05:15:83:90
            X509v3 Authority Key Identifier:
                keyid:72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4f:ce:15:d2:12:77:12:dd:83:ba:10:72:1c:a7:70:3b:e0:
         59:ae:a1:c1:82:57:77:5d:88:f4:be:a8:31:b4:fb:5c:ba:df:
         64:eb:e6:ea:e5:33:22:96:1c:90:1b:dd:e2:16:07:a6:18:1f:
         b3:ae:ac:65:f5:99:4b:22:60:2a:61:41:a6:f5:c1:25:18:a2:
         30:77:cc:75:04:36:c0:1e:ba:12:12:ce:d2:61:d9:bd:0f:04:
         37:67:28:1c:90:61:12:d1:ba:19:64:67:cf:ce:26:d4:97:07:
         1d:54:24:04:fa:37:58:9a:7e:86:34:a9:2e:5c:8b:1a:7e:8b:
         8d:5e:87:6a:13:61:7b:8e:c6:56:bf:ba:36:40:05:15:f7:bd:
         bb:0a:2a:a4:eb:34:4e:2a:80:e6:8c:5b:b0:38:c6:d9:40:5b:
         4e:b0:cc:09:3b:79:a5:3d:94:34:28:81:6e:60:b8:7b:97:b6:
         2e:d4:95:e2:89:67:d4:f6:cf:77:28:3f:5d:df:47:fe:c9:9e:
         90:37:a0:77:61:22:22:77:45:33:50:f1:11:e4:fa:0a:0b:71:
         96:b3:cf:e9:32:68:d2:16:0c:81:6e:a8:af:10:41:cb:e0:4a:
         27:35:ea:e7:97:83:47:45:37:6d:b2:2f:46:34:a7:89:4a:c7:
         1b:a9:8b:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEx6379GXjDHFTf7x5SV66iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTEzOTE1ZmExYmM1NzlmNTg1NmY1OGVjYjI0Nzg2Mzc5
YTVkNDgwHhcNMjYxMDEyMjEwMTE5WhcNMjYxMDEzMjEwMTE5WjAzMTEwLwYDVQQD
Eyg4NzFlN2VjY2Y2ZTBkZmM2Nzg2NDk1MTljZWYxY2U0ZjA1MTU4MzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFZ19zGoXetOw+74xVFUHRDsNtnN
+j4ytTFyFjmXtCe4c3dPXVplq/zqozJSy2rU0v24f6UEqfcloOM8K12zabjrQ8mg
b0Gb/JCRN/+5GV2SkIYlffyfu/EIBGwL+lcWprqcH5rNQDSHeyyX1zqHsCJ5Lw6y
1k3d5OYR3Su/YUMGRgywu0m5MSFoNpldP/EmuDScjCrjofDYmVap+PCYzkoJxpdg
0u7Ce9bOBx+EO38pgwZzkUXYbBI3ewH7yT8+8TJFilB185jm+ZmTW2qADpprnvlZ
zaYYix2kqLxpsmNYMjlqU8iYxGh+zZ5R8OtRrxtdrEWO/Ev4AzO0cZFZaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcefsz24N/GeGSVGc7xzk8FFYOQMB8GA1UdIwQY
MBaAFHLhORX6G8V59YVvWOyyR4Y3ml1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85MmJiYmYtOWY5My00NzQxLTg2ODIt
ZjFlOGJkNzQxODBjLzEvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85MmJiYmYtOWY5My00NzQxLTg2ODItZjFlOGJkNzQxODBj
LzEvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApE/OFdIS
dxLdg7oQchyncDvgWa6hwYJXd12I9L6oMbT7XLrfZOvm6uUzIpYckBvd4hYHphgf
s66sZfWZSyJgKmFBpvXBJRiiMHfMdQQ2wB66EhLO0mHZvQ8EN2coHJBhEtG6GWRn
z84m1JcHHVQkBPo3WJp+hjSpLlyLGn6LjV6HahNhe47GVr+6NkAFFfe9uwoqpOs0
TiqA5oxbsDjG2UBbTrDMCTt5pT2UNCiBbmC4e5e2LtSV4oln1PbPdyg/Xd9H/sme
kDegd2EiIndFM1DxEeT6CgtxlrPP6TJo0hYMgW6orxBBy+BKJzXq55eDR0U3bbIv
RjSniUrHG6mLlg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 06:05:34 2026 by rpki-client