Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File:                     F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier:          U18LNO1QnmL9dx7GMZiDOQbav3wi81Pl7AigpZnksfg=
Subject key identifier:   A8:45:8E:B5:32:73:04:92:E2:9A:C1:30:D0:E0:E5:7E:61:69:08:20
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer:       /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial:       01A102ED19CA0F00ADBBE83FC478C5C0D133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number:          1180
Signing time:             Sat 03 Oct 2026 18:00:55 +0000
Manifest this update:     Sat 03 Oct 2026 18:00:55 +0000
Manifest next update:     Sun 04 Oct 2026 18:00:55 +0000
Files and hashes:         1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: lYjXp/yzoMkwgJZt5fh2wUF8smfNM/6bJuYUqTaXARE=)
                          2: zzFYra5xZw5Yy-fz5dClERnnWlg.roa (hash: Wpga3aZynT3QdMPkk/GpaE5YFxq1IKAu5eZho4xu1iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:ed:19:ca:0f:00:ad:bb:e8:3f:c4:78:c5:c0:d1:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
        Validity
            Not Before: Oct  3 18:00:55 2026 GMT
            Not After : Oct  4 18:00:55 2026 GMT
        Subject: CN=a8458eb532730492e29ac130d0e0e57e61690820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:08:19:fa:75:d2:bf:20:cc:68:75:76:b0:f6:
                    9b:a5:2a:4e:63:f1:0c:31:52:e0:19:d2:82:14:09:
                    77:69:aa:80:7a:af:25:ea:d3:e8:af:ba:bc:67:a6:
                    d2:03:17:b3:b9:a4:02:45:4d:76:71:de:e9:76:31:
                    64:0c:e2:f1:ba:f5:cb:18:83:b4:79:ad:52:a1:9b:
                    f6:39:ed:8c:07:2d:91:de:f8:6e:01:ce:3b:ba:dd:
                    6a:b8:4b:0d:28:ce:e0:a2:49:a4:9c:f4:a8:c5:8f:
                    17:72:13:69:3b:83:6c:c3:0b:24:bd:06:4a:04:b7:
                    3f:cd:cf:ca:b4:5d:42:76:c6:2d:7b:80:30:fc:5e:
                    d9:6b:1c:4e:93:24:0d:76:74:bc:da:5d:cb:42:27:
                    b5:4e:d8:d2:9b:fa:05:8b:b8:d3:fe:ba:30:ac:58:
                    4d:d4:e7:26:5f:a3:d9:22:04:d8:d5:6c:72:0b:7d:
                    bb:01:50:55:f8:73:75:31:11:5e:9c:5d:f2:1b:86:
                    12:38:86:1e:08:ff:8a:77:cc:78:b8:28:b1:56:ad:
                    87:a6:eb:2e:16:35:a5:d0:a3:91:ab:22:65:0b:8b:
                    e3:87:64:bc:d7:c9:4a:ae:1d:2a:5d:ee:7c:85:ae:
                    4c:0b:9a:40:fe:df:1a:8c:d3:b7:d3:66:1c:3b:ae:
                    12:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:45:8E:B5:32:73:04:92:E2:9A:C1:30:D0:E0:E5:7E:61:69:08:20
            X509v3 Authority Key Identifier:
                keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e6:bf:c6:32:70:c1:bf:df:f2:b1:6e:de:4a:5b:af:f9:1c:
         c7:dd:ca:09:db:24:32:99:b6:db:e9:40:00:62:42:21:1a:80:
         8a:31:8f:32:23:8b:89:fb:56:93:e9:32:b7:d5:c9:d1:b2:8d:
         c3:ad:e4:08:fa:03:1a:0a:83:60:6a:9b:c3:b1:f4:3b:8c:b4:
         4b:b6:53:24:7d:84:96:22:f4:b1:b5:22:80:9e:70:a4:45:9b:
         dc:cf:b9:50:e2:7a:6f:2b:6a:33:06:9c:a6:2e:f5:83:4c:a9:
         ec:33:fa:2d:80:43:b4:d9:15:fd:24:bd:99:be:60:88:22:6e:
         55:08:aa:f3:97:f7:45:9c:fa:c3:f6:f4:a7:70:48:e4:53:c0:
         b3:95:90:8b:49:9d:e5:8f:54:ba:78:2b:e1:e4:af:bf:92:3e:
         61:25:65:2d:94:2b:e0:22:5c:9a:09:2d:12:e1:fb:16:40:98:
         ff:5f:32:22:a9:49:73:9d:2f:53:17:3b:88:63:63:8e:6c:d3:
         b6:7e:14:21:60:4e:a3:95:0e:b0:28:32:05:91:50:fb:fe:d8:
         d3:0f:04:59:8f:2a:48:bf:e9:b6:e0:34:24:8b:1a:f1:49:b7:
         87:f4:8f:0b:42:66:49:58:03:e0:2c:02:e9:b0:52:bb:7b:6e:
         4e:e9:3d:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEC7RnKDwCtu+g/xHjFwNEzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTcyZDQzODM1Y2Q2YTY2ZTU0ZTVhNTg1NmNlNTdkZTI4
MmQ0M2EwHhcNMjYxMDAzMTgwMDU1WhcNMjYxMDA0MTgwMDU1WjAzMTEwLwYDVQQD
EyhhODQ1OGViNTMyNzMwNDkyZTI5YWMxMzBkMGUwZTU3ZTYxNjkwODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqggZ+nXSvyDMaHV2sPabpSpOY/EM
MVLgGdKCFAl3aaqAeq8l6tPor7q8Z6bSAxezuaQCRU12cd7pdjFkDOLxuvXLGIO0
ea1SoZv2Oe2MBy2R3vhuAc47ut1quEsNKM7gokmknPSoxY8XchNpO4NswwskvQZK
BLc/zc/KtF1CdsYte4Aw/F7ZaxxOkyQNdnS82l3LQie1TtjSm/oFi7jT/rowrFhN
1OcmX6PZIgTY1WxyC327AVBV+HN1MRFenF3yG4YSOIYeCP+Kd8x4uCixVq2Hpusu
FjWl0KORqyJlC4vjh2S818lKrh0qXe58ha5MC5pA/t8ajNO302YcO64SPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhFjrUycwSS4prBMNDg5X5haQggMB8GA1UdIwQY
MBaAFBeXLUODXNamblTlpYVs5X3igtQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWIt
OTA5NWVjYzg3ODc4LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWItOTA5NWVjYzg3ODc4
LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMua/xjJw
wb/f8rFu3kpbr/kcx93KCdskMpm22+lAAGJCIRqAijGPMiOLiftWk+kyt9XJ0bKN
w63kCPoDGgqDYGqbw7H0O4y0S7ZTJH2EliL0sbUigJ5wpEWb3M+5UOJ6bytqMwac
pi71g0yp7DP6LYBDtNkV/SS9mb5giCJuVQiq85f3RZz6w/b0p3BI5FPAs5WQi0md
5Y9Uungr4eSvv5I+YSVlLZQr4CJcmgktEuH7FkCY/18yIqlJc50vUxc7iGNjjmzT
tn4UIWBOo5UOsCgyBZFQ+/7Y0w8EWY8qSL/ptuA0JIsa8Um3h/SPC0JmSVgD4CwC
6bBSu3tuTuk9Ew==
-----END CERTIFICATE-----
Generated at Sun Oct 4 03:14:33 2026 by rpki-client