Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File:                     sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier:          KxP5PCxBxE3Vgu5GImmZlNheTuY4SkEx9b2zitFzPjM=
Subject key identifier:   A5:F3:12:0C:68:C7:A3:3D:5C:45:7B:A6:6F:6A:E4:3F:B2:29:8E:43
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer:       /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial:       01A0FD59883E3708FA5EC767933CF75EF9A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number:          1A82
Signing time:             Fri 02 Oct 2026 16:01:38 +0000
Manifest this update:     Fri 02 Oct 2026 16:01:38 +0000
Manifest next update:     Sat 03 Oct 2026 16:01:38 +0000
Files and hashes:         1: Q-FFM01cbkfw_d8UfrmIQr3mDSE.roa (hash: SPQggi+U+SwusUS7292cc4kZDqdLk+Y6Fxy1n2N8dxo=)
                          2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: /Hu/aZJbHiVgCCOOOf8ywAoum6vKhUVz5gQBPTWr0IU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 16:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:59:88:3e:37:08:fa:5e:c7:67:93:3c:f7:5e:f9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
        Validity
            Not Before: Oct  2 16:01:38 2026 GMT
            Not After : Oct  3 16:01:38 2026 GMT
        Subject: CN=a5f3120c68c7a33d5c457ba66f6ae43fb2298e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:76:ed:80:34:7c:67:8e:9a:54:6a:26:a4:94:
                    24:80:f5:7d:fa:dd:b2:26:77:25:1f:ee:c9:19:e0:
                    68:8c:66:7b:f5:ab:bc:48:f0:2b:ad:2d:32:72:42:
                    35:a6:c1:5a:78:32:8b:cc:0e:ac:3a:52:0f:89:f8:
                    e0:3e:c7:d8:f3:a5:7d:64:6e:6f:c4:dc:1a:b4:2b:
                    5c:2d:de:73:f5:03:37:eb:80:88:87:be:a4:7d:07:
                    6d:5b:6d:d6:13:36:38:c7:ac:f7:54:f2:13:d1:3d:
                    ad:08:9f:a1:22:1d:8e:ba:61:dd:11:42:46:9e:3d:
                    d8:f9:9a:54:83:83:8c:ab:d4:3d:23:b8:86:e9:c8:
                    5a:00:57:91:19:0b:36:9b:18:c9:2f:ae:0b:29:61:
                    19:af:ae:32:a7:fe:ce:e7:51:33:a7:62:cd:51:2b:
                    71:06:59:10:79:e6:87:20:98:df:22:be:04:f3:e0:
                    d1:d6:15:a7:82:ef:ce:7a:18:ce:ef:29:40:b6:4c:
                    89:3c:89:2b:10:c0:5a:6f:02:bd:78:f6:52:b2:8b:
                    17:66:90:81:88:4f:0c:f1:dc:9b:e1:53:b6:e0:15:
                    bb:cd:19:3b:7e:07:c6:2d:40:de:58:1f:23:33:8c:
                    5e:3f:53:d1:2d:f1:94:37:ee:93:44:7d:90:48:86:
                    2e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F3:12:0C:68:C7:A3:3D:5C:45:7B:A6:6F:6A:E4:3F:B2:29:8E:43
            X509v3 Authority Key Identifier:
                keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a8:4b:aa:91:5a:99:a0:94:20:88:40:5c:a2:95:81:f1:f2:
         99:58:e7:ab:af:a8:03:30:6e:38:ff:8d:b8:75:fc:19:ff:e4:
         c1:34:36:58:fe:19:55:df:1c:c1:fa:ca:75:9f:e3:f2:5e:aa:
         86:e4:e8:e4:c4:8c:2c:c9:86:0e:ef:7b:98:a8:67:ec:d6:49:
         dd:11:38:2e:f7:04:2d:80:55:a5:a4:50:96:86:65:bc:c2:16:
         27:31:f7:0f:89:0a:2c:d8:4f:7f:20:f7:f2:d0:5b:e2:25:d5:
         45:f9:8d:4f:8a:94:f6:fe:62:19:3d:9c:5b:35:d8:2a:8c:c7:
         de:70:8a:12:7e:ed:11:1d:8a:41:3e:e2:b1:ec:1c:88:be:97:
         d0:bf:b3:7b:b4:6b:c9:12:88:a3:61:78:2f:3a:78:d0:8a:bb:
         2a:a5:d5:97:ec:97:6b:b1:e2:68:7d:71:aa:d2:7e:71:09:fe:
         b0:b9:3b:1c:a0:cf:49:86:d9:e2:48:a2:50:d7:b3:db:60:92:
         a6:28:cc:20:c8:ba:ac:75:4f:af:bb:f9:03:b6:07:63:fa:76:
         4e:10:7c:0e:47:37:e4:75:a5:9e:3d:ad:90:9a:32:05:02:c9:
         ec:bf:61:47:50:5f:a7:20:9d:5b:67:31:0e:b8:8b:79:22:fb:
         2c:5f:26:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD9WYg+Nwj6Xsdnkzz3XvmpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmVlZDZlZGU5ZWIyODViZDJhNmFiYjk4NWFkY2RiZThm
Mjc3OWEwHhcNMjYxMDAyMTYwMTM4WhcNMjYxMDAzMTYwMTM4WjAzMTEwLwYDVQQD
EyhhNWYzMTIwYzY4YzdhMzNkNWM0NTdiYTY2ZjZhZTQzZmIyMjk4ZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XbtgDR8Z46aVGompJQkgPV9+t2y
JnclH+7JGeBojGZ79au8SPArrS0yckI1psFaeDKLzA6sOlIPifjgPsfY86V9ZG5v
xNwatCtcLd5z9QM364CIh76kfQdtW23WEzY4x6z3VPIT0T2tCJ+hIh2OumHdEUJG
nj3Y+ZpUg4OMq9Q9I7iG6chaAFeRGQs2mxjJL64LKWEZr64yp/7O51Ezp2LNUStx
BlkQeeaHIJjfIr4E8+DR1hWngu/OehjO7ylAtkyJPIkrEMBabwK9ePZSsosXZpCB
iE8M8dyb4VO24BW7zRk7fgfGLUDeWB8jM4xeP1PRLfGUN+6TRH2QSIYuRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXzEgxox6M9XEV7pm9q5D+yKY5DMB8GA1UdIwQY
MBaAFLC+7W7enrKFvSpqu5ha3Nvo8neaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYt
YjM4ZDdmNzA5ZDcwLzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYtYjM4ZDdmNzA5ZDcw
LzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADahLqpFa
maCUIIhAXKKVgfHymVjnq6+oAzBuOP+NuHX8Gf/kwTQ2WP4ZVd8cwfrKdZ/j8l6q
huTo5MSMLMmGDu97mKhn7NZJ3RE4LvcELYBVpaRQloZlvMIWJzH3D4kKLNhPfyD3
8tBb4iXVRfmNT4qU9v5iGT2cWzXYKozH3nCKEn7tER2KQT7isewciL6X0L+ze7Rr
yRKIo2F4Lzp40Iq7KqXVl+yXa7HiaH1xqtJ+cQn+sLk7HKDPSYbZ4kiiUNez22CS
pijMIMi6rHVPr7v5A7YHY/p2ThB8Dkc35HWlnj2tkJoyBQLJ7L9hR1BfpyCdW2cx
DriLeSL7LF8m4A==
-----END CERTIFICATE-----
Generated at Sat Oct 3 02:09:13 2026 by rpki-client