Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File:                     lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier:          7pvNiq0ndmio5H/UGRlQR7qiQoQOG/zA7PQrgCPZZMI=
Subject key identifier:   D8:0A:C3:AC:0E:93:3B:4E:F3:01:3A:4C:30:F7:62:6E:29:67:1D:FD
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer:       /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial:       01A105B770786E7381ACA6300ABB8186238A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number:          05A5
Signing time:             Sun 04 Oct 2026 07:01:10 +0000
Manifest this update:     Sun 04 Oct 2026 07:01:10 +0000
Manifest next update:     Mon 05 Oct 2026 07:01:10 +0000
Files and hashes:         1: 4hphMIiGnD5dkRsiJyBBPbVD-VA.asa (hash: nDZrttogDfPJ+CPWuZAXD7WXRjv1eX2CBPcPX7A56PM=)
                          2: QuJwAkOFN_XOE8IM4XrowzLIN7M.roa (hash: VPGDJLJ+93FnhUEzwkY0Hv11B12LiVEv3FiMpJzAXQA=)
                          3: TWNFCCObGkb6aNl1-64DYQpBWus.roa (hash: UlueX8sbWPD2fhvWmHL9sCcVILRKQCMdFOnEOQOjliY=)
                          4: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: hSIZocu1ylFnlDWily75Az5fiEy8OkyCE/dwJcAAGmg=)
                          5: rJNKAC_7vgy7WAf0s8sdhHN9BiQ.roa (hash: 1B23Y1SamnbnH9DuB2QCnvYB+p28JNjbqvc9WGT21MQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:b7:70:78:6e:73:81:ac:a6:30:0a:bb:81:86:23:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
        Validity
            Not Before: Oct  4 07:01:10 2026 GMT
            Not After : Oct  5 07:01:10 2026 GMT
        Subject: CN=d80ac3ac0e933b4ef3013a4c30f7626e29671dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:fc:cb:f9:ba:9e:1e:ac:30:37:81:7d:30:
                    18:a4:29:46:ef:2c:f3:9e:dd:f8:88:1f:35:5c:15:
                    14:17:45:d4:52:11:5b:b4:de:f8:d2:57:ed:04:c6:
                    b3:67:3b:79:e9:4f:5d:4b:11:26:88:69:94:e9:1b:
                    b1:5f:a6:3c:9f:c0:52:ef:8d:67:01:6b:25:75:38:
                    56:63:3e:bd:e5:da:ef:0b:f9:0f:6d:8b:b2:2e:74:
                    31:87:f8:78:4e:0a:3a:83:1e:03:fd:98:c7:15:55:
                    34:f2:8d:d6:be:0e:03:3f:fb:3b:a6:d7:63:ae:04:
                    bd:a4:25:d7:7d:af:7f:c3:bd:c9:b2:4e:0a:62:f0:
                    1e:4d:e6:a5:1d:2d:03:00:c4:e7:c5:d8:b2:69:4f:
                    d3:44:24:5a:26:3d:f5:dd:04:1c:cd:8a:88:c6:b1:
                    66:90:37:c8:df:04:be:d2:7d:e4:fe:de:1c:dd:fa:
                    5a:7d:69:f8:c4:20:bd:60:6c:45:36:ba:78:93:49:
                    9b:4b:20:cb:11:fe:89:5b:98:b8:64:ef:97:95:05:
                    2d:3a:ef:2e:05:ee:51:c9:b8:71:75:b6:53:f2:ee:
                    ec:81:13:cd:d2:4c:ef:ee:53:34:8c:3b:76:5a:dc:
                    4c:da:df:58:98:23:a1:fc:17:53:47:d0:ae:e0:c8:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0A:C3:AC:0E:93:3B:4E:F3:01:3A:4C:30:F7:62:6E:29:67:1D:FD
            X509v3 Authority Key Identifier:
                keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:74:75:03:1d:e1:da:5c:d8:d0:5a:38:e8:d7:91:6e:1c:de:
         24:b2:96:fe:ab:02:55:50:f9:a1:94:a7:82:a4:80:df:29:5a:
         10:f7:6b:8c:3b:8f:cf:b6:63:9b:d2:01:b5:94:8f:4f:ff:3e:
         6c:6b:b5:d6:c6:35:fc:bb:36:ca:46:5c:0c:dc:b5:8e:7e:ce:
         8c:65:59:3b:8d:f2:af:db:49:86:d6:83:2d:7b:94:ca:be:18:
         48:5f:57:20:b4:c2:9c:ba:00:84:d5:e0:a6:0c:da:11:fa:81:
         f5:e2:42:e2:49:bf:2a:3a:49:3e:1c:4a:62:02:f6:a8:ec:f0:
         d7:75:a6:f3:ad:ca:e2:5e:95:17:21:c1:91:65:bd:3b:18:14:
         ec:2d:a2:a7:1a:cd:c7:06:2c:ce:95:11:71:91:20:2f:36:0b:
         4b:72:1e:16:b9:f1:ed:f6:c4:27:5f:b9:65:3c:59:31:1c:e0:
         a3:1b:a7:24:59:37:8d:11:74:0f:f0:fe:91:15:75:1a:2c:00:
         35:2c:93:60:42:52:86:ce:34:4c:3a:e2:ca:94:56:bc:0d:2e:
         f8:91:74:06:ee:98:db:59:a5:d5:84:90:14:ad:7a:ae:4c:c1:
         1b:91:23:cd:c2:05:f3:c5:1a:d1:58:bd:29:bb:95:e3:ae:e1:
         e7:c8:57:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEFt3B4bnOBrKYwCruBhiOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NzczNDVkZmNjOTM0NzhjNWZmMjIxZDQ4MmVlNGM5ODQ4
M2Y5MDgwHhcNMjYxMDA0MDcwMTEwWhcNMjYxMDA1MDcwMTEwWjAzMTEwLwYDVQQD
EyhkODBhYzNhYzBlOTMzYjRlZjMwMTNhNGMzMGY3NjI2ZTI5NjcxZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/T8y/m6nh6sMDeBfTAYpClG7yzz
nt34iB81XBUUF0XUUhFbtN740lftBMazZzt56U9dSxEmiGmU6RuxX6Y8n8BS741n
AWsldThWYz695drvC/kPbYuyLnQxh/h4Tgo6gx4D/ZjHFVU08o3Wvg4DP/s7ptdj
rgS9pCXXfa9/w73Jsk4KYvAeTealHS0DAMTnxdiyaU/TRCRaJj313QQczYqIxrFm
kDfI3wS+0n3k/t4c3fpafWn4xCC9YGxFNrp4k0mbSyDLEf6JW5i4ZO+XlQUtOu8u
Be5RybhxdbZT8u7sgRPN0kzv7lM0jDt2WtxM2t9YmCOh/BdTR9Cu4MgcdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgKw6wOkztO8wE6TDD3Ym4pZx39MB8GA1UdIwQY
MBaAFJV3NF38yTR4xf8iHUgu5MmEg/kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUt
NDMzZjVmYTRmOTAxLzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUtNDMzZjVmYTRmOTAx
LzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXR1Ax3h
2lzY0Fo46NeRbhzeJLKW/qsCVVD5oZSngqSA3ylaEPdrjDuPz7Zjm9IBtZSPT/8+
bGu11sY1/Ls2ykZcDNy1jn7OjGVZO43yr9tJhtaDLXuUyr4YSF9XILTCnLoAhNXg
pgzaEfqB9eJC4km/KjpJPhxKYgL2qOzw13Wm863K4l6VFyHBkWW9OxgU7C2ipxrN
xwYszpURcZEgLzYLS3IeFrnx7fbEJ1+5ZTxZMRzgoxunJFk3jRF0D/D+kRV1GiwA
NSyTYEJShs40TDriypRWvA0u+JF0Bu6Y21ml1YSQFK16rkzBG5EjzcIF88Ua0Vi9
KbuV467h58hXRA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 16:43:46 2026 by rpki-client