Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File:                     yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier:          L99qRmGvbqnaQIGL+Fj8hOnO2cEWV1BdmAWPZfg2AV8=
Subject key identifier:   96:1D:83:5E:25:F4:28:14:2D:13:8E:28:94:B7:F5:D4:43:68:CA:76
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer:       /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial:       01A11898F25DA60ED233DB12AF1C95D7C5DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number:          0EB4
Signing time:             Wed 07 Oct 2026 23:00:39 +0000
Manifest this update:     Wed 07 Oct 2026 23:00:39 +0000
Manifest next update:     Thu 08 Oct 2026 23:00:39 +0000
Files and hashes:         1: kmHpE0nIsqnNjXBHZzn8ghlLUAY.roa (hash: vHtrQdMnfFyM3Hed/jGaAR/NyxOc2xl8ZPzUXZL4Gvc=)
                          2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: 4OWFf8DjDFNAzeVFO7wF9y1+Xu+ItqX5xCVvGP7chZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:18:98:f2:5d:a6:0e:d2:33:db:12:af:1c:95:d7:c5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
        Validity
            Not Before: Oct  7 23:00:39 2026 GMT
            Not After : Oct  8 23:00:39 2026 GMT
        Subject: CN=961d835e25f428142d138e2894b7f5d44368ca76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:9d:0a:ac:ac:3b:0f:79:64:d1:32:15:68:
                    a9:28:f5:7b:88:cc:b6:34:5f:8a:78:87:b6:a4:ea:
                    15:71:6b:f0:2b:12:82:d7:a9:aa:73:12:a7:a2:20:
                    39:32:c1:aa:73:1b:01:d9:c2:d9:95:da:7c:7b:19:
                    70:ae:88:d1:1c:2b:59:8c:2d:17:cb:51:d6:b9:c5:
                    f4:68:35:4f:68:b1:20:73:9f:af:88:f4:af:27:33:
                    73:c5:6c:3c:35:ee:a9:d0:d1:9d:f6:7f:43:40:b8:
                    48:60:37:a8:47:f9:cb:22:5e:17:2a:d9:b4:02:1e:
                    7f:51:d7:72:f9:b0:24:71:ba:1e:3c:f9:d9:d0:75:
                    05:e3:86:65:85:5c:59:3a:68:34:90:f7:3c:89:29:
                    1f:f6:44:97:a2:69:52:30:54:4c:67:42:dc:ab:ed:
                    d9:d0:9d:b1:e2:48:db:85:7d:a1:d8:cc:56:74:43:
                    b7:77:77:c0:96:9b:bb:3e:91:fc:1e:58:ba:0d:41:
                    b6:09:6c:d9:cb:18:3f:86:20:5e:2d:ca:0c:d3:8e:
                    e3:30:d1:65:0f:46:52:a2:68:dc:1b:70:da:a7:e1:
                    5b:89:16:5a:4f:8c:4a:31:0b:d9:25:34:30:13:db:
                    94:aa:5a:fa:32:74:e5:06:61:df:c3:61:2d:6a:a8:
                    64:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1D:83:5E:25:F4:28:14:2D:13:8E:28:94:B7:F5:D4:43:68:CA:76
            X509v3 Authority Key Identifier:
                keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:84:c7:31:52:5e:8f:d7:d0:3b:fc:8e:6f:43:c6:9a:79:56:
         47:a1:cb:db:85:66:5e:b6:21:51:4b:47:ba:23:50:4c:99:1e:
         74:d7:c5:44:65:30:84:1c:8f:2b:e2:cd:c6:9c:f2:8d:d3:2f:
         d3:e0:31:10:9e:3a:f1:5d:c2:b5:45:80:99:2a:26:8d:c4:fc:
         db:11:ca:6d:98:84:92:ae:32:a8:5e:ef:ad:30:7d:b9:30:04:
         18:6a:25:53:4d:06:07:50:78:25:79:e0:96:ab:27:0b:c8:71:
         bb:1c:61:c1:9d:c1:09:70:8c:3f:d5:fd:fa:92:ae:7c:85:63:
         1f:f8:2f:a8:3e:3d:e1:c1:5a:a3:56:c6:c3:6a:f4:45:d7:f4:
         fe:45:7b:88:8b:24:f1:3e:10:75:fb:4c:d2:f0:52:86:c5:7d:
         64:54:7e:d6:c0:21:b8:56:30:03:f0:fa:cf:db:d2:1a:fb:56:
         d3:9b:8e:31:9e:50:ad:ac:af:7f:a4:aa:13:70:87:e1:94:c8:
         08:10:48:ca:d5:86:6d:e1:b5:4e:0a:ec:a4:fb:f5:99:04:a3:
         b2:5e:1d:c9:1d:f5:da:78:86:6c:e9:6a:f9:7e:0f:f2:ce:c0:
         f4:d2:db:dc:aa:ac:99:b8:aa:43:f3:e7:5c:ff:fd:33:4b:33:
         84:f6:bf:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEYmPJdpg7SM9sSrxyV18XdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjliYWFiMWExM2RmMzBlZmYwZmNkNzgwYzRiYmM1NGJj
M2U2ZDUwHhcNMjYxMDA3MjMwMDM5WhcNMjYxMDA4MjMwMDM5WjAzMTEwLwYDVQQD
Eyg5NjFkODM1ZTI1ZjQyODE0MmQxMzhlMjg5NGI3ZjVkNDQzNjhjYTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN6dCqysOw95ZNEyFWipKPV7iMy2
NF+KeIe2pOoVcWvwKxKC16mqcxKnoiA5MsGqcxsB2cLZldp8exlwrojRHCtZjC0X
y1HWucX0aDVPaLEgc5+viPSvJzNzxWw8Ne6p0NGd9n9DQLhIYDeoR/nLIl4XKtm0
Ah5/Uddy+bAkcboePPnZ0HUF44ZlhVxZOmg0kPc8iSkf9kSXomlSMFRMZ0Lcq+3Z
0J2x4kjbhX2h2MxWdEO3d3fAlpu7PpH8Hli6DUG2CWzZyxg/hiBeLcoM047jMNFl
D0ZSomjcG3Dap+FbiRZaT4xKMQvZJTQwE9uUqlr6MnTlBmHfw2EtaqhklwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYdg14l9CgULROOKJS39dRDaMp2MB8GA1UdIwQY
MBaAFMj5uqsaE98w7/D814DEu8VLw+bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDIt
ZGI0ODRjY2U3MjkzLzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zZTY3NjItMDk4OS00OGVmLWE4ZDItZGI0ODRjY2U3Mjkz
LzEveVBtNnF4b1QzekR2OFB6WGdNUzd4VXZENXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYTHMVJe
j9fQO/yOb0PGmnlWR6HL24VmXrYhUUtHuiNQTJkedNfFRGUwhByPK+LNxpzyjdMv
0+AxEJ468V3CtUWAmSomjcT82xHKbZiEkq4yqF7vrTB9uTAEGGolU00GB1B4JXng
lqsnC8hxuxxhwZ3BCXCMP9X9+pKufIVjH/gvqD494cFao1bGw2r0Rdf0/kV7iIsk
8T4QdftM0vBShsV9ZFR+1sAhuFYwA/D6z9vSGvtW05uOMZ5Qrayvf6SqE3CH4ZTI
CBBIytWGbeG1TgrspPv1mQSjsl4dyR312niGbOlq+X4P8s7A9NLb3KqsmbiqQ/Pn
XP/9M0szhPa/oA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 09:21:59 2026 by rpki-client