Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
File:                     v0nfV38O5EMYjAKTI0V7vFoOrTs.mft (raw, json)
Hash identifier:          Itzwed0wLU2yu2SKB4isos3wfwsyyy3dg6s0jMK6/ZE=
Subject key identifier:   7A:91:4C:11:7B:9E:F3:8A:BA:26:0B:EB:E3:42:D4:24:F8:08:87:FC
Authority key identifier: BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B
Certificate issuer:       /CN=bf49df577f0ee443188c029323457bbc5a0ead3b
Certificate serial:       01A10D70FEF4B02D56603997D9617FF246BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
Manifest number:          030E
Signing time:             Mon 05 Oct 2026 19:01:11 +0000
Manifest this update:     Mon 05 Oct 2026 19:01:11 +0000
Manifest next update:     Tue 06 Oct 2026 19:01:11 +0000
Files and hashes:         1: E4tododa1DMBDb2nJfBgbtqjzqw.asa (hash: wAdknpXHrfPEM6Cgm0cbnBJzkpf8rVj80G6Sq8iBZgI=)
                          2: v0nfV38O5EMYjAKTI0V7vFoOrTs.crl (hash: 8QMHSvKWvIfr9gvbzmS/+h2zZjWCDWC66GI8th6NirA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 19:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:70:fe:f4:b0:2d:56:60:39:97:d9:61:7f:f2:46:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf49df577f0ee443188c029323457bbc5a0ead3b
        Validity
            Not Before: Oct  5 19:01:11 2026 GMT
            Not After : Oct  6 19:01:11 2026 GMT
        Subject: CN=7a914c117b9ef38aba260bebe342d424f80887fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:60:6e:d8:f7:c5:4b:d0:e4:53:98:55:55:
                    ef:60:74:44:94:58:81:db:01:81:37:57:80:1c:69:
                    5e:94:bc:06:0f:37:46:d9:73:95:0a:a9:90:10:4c:
                    06:3e:db:42:6d:6f:19:36:1f:25:48:07:ad:dd:44:
                    d4:98:bb:01:5f:c2:50:97:93:61:5b:81:13:c2:2e:
                    82:2d:2a:bd:3b:22:49:b6:f5:47:2d:c9:6f:49:8e:
                    db:ef:b2:5e:be:bb:40:a1:d3:1c:55:52:e6:44:29:
                    c7:99:c1:b5:28:1e:99:8a:4b:96:e2:4e:ba:0e:77:
                    aa:27:c2:18:69:70:23:50:35:5a:a0:49:8d:09:82:
                    ff:3a:03:c8:80:32:ff:ee:78:e4:aa:b7:71:8a:8a:
                    b8:54:21:ab:42:f4:be:71:32:ee:0b:db:86:19:60:
                    d3:33:37:76:c2:71:41:5c:99:f9:00:69:7b:74:b7:
                    a0:bf:05:ff:9d:21:57:f7:7e:e4:d2:4e:16:28:d1:
                    12:2d:fd:52:de:23:a3:a1:b8:24:3d:c0:a3:8d:0b:
                    c4:a3:5f:08:e1:80:0b:0e:c2:11:55:0a:1b:53:f0:
                    6f:9c:0c:f3:0f:d0:10:a2:df:f1:49:42:d0:a3:10:
                    e7:9d:96:10:b9:08:ff:c1:c8:ce:ca:25:0f:26:f4:
                    4e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:91:4C:11:7B:9E:F3:8A:BA:26:0B:EB:E3:42:D4:24:F8:08:87:FC
            X509v3 Authority Key Identifier:
                keyid:BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:25:93:b2:97:7b:8e:b6:d5:1d:55:8a:2b:e2:2d:fd:86:19:
         8a:be:f0:d1:8b:97:a7:a6:5c:64:d2:13:20:8f:66:e9:5f:49:
         c7:de:3e:2e:b9:0e:51:a1:81:27:9c:b4:fc:54:0f:f5:b3:f9:
         9b:e9:02:69:40:f5:94:08:50:43:30:79:94:4d:95:9f:95:2e:
         73:cb:02:60:1c:87:70:b7:f6:4e:58:0c:1d:ab:9e:e2:47:5f:
         98:8d:e9:72:1f:59:aa:b5:ec:c8:15:49:94:85:e7:50:4d:24:
         67:c6:d2:0a:36:02:23:d6:9b:bd:32:57:eb:ab:d5:53:be:4a:
         f4:5d:0d:19:d9:1b:d6:e9:35:8e:84:ce:c9:fd:fd:9c:99:88:
         6a:fa:b4:87:a4:0c:6e:3d:a9:a4:34:e9:33:b1:66:9a:f6:f5:
         17:40:d6:b2:81:89:26:f1:3c:64:29:d2:6d:41:7e:a2:5a:91:
         34:b3:34:1f:af:5f:e4:65:a1:e7:85:55:cf:b8:2d:d5:28:21:
         25:38:86:79:25:8b:3b:ad:41:2c:75:79:ac:60:e1:b4:cb:57:
         b6:aa:33:3a:35:22:8c:bb:09:ff:fa:84:e1:5c:5f:26:f8:92:
         6c:95:a4:df:fa:01:70:cb:74:f1:0a:4d:6b:6b:3e:2b:14:63:
         82:3c:27:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaENcP70sC1WYDmX2WF/8ka/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNDlkZjU3N2YwZWU0NDMxODhjMDI5MzIzNDU3YmJjNWEw
ZWFkM2IwHhcNMjYxMDA1MTkwMTExWhcNMjYxMDA2MTkwMTExWjAzMTEwLwYDVQQD
Eyg3YTkxNGMxMTdiOWVmMzhhYmEyNjBiZWJlMzQyZDQyNGY4MDg4N2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq9gbtj3xUvQ5FOYVVXvYHRElFiB
2wGBN1eAHGlelLwGDzdG2XOVCqmQEEwGPttCbW8ZNh8lSAet3UTUmLsBX8JQl5Nh
W4ETwi6CLSq9OyJJtvVHLclvSY7b77JevrtAodMcVVLmRCnHmcG1KB6ZikuW4k66
DneqJ8IYaXAjUDVaoEmNCYL/OgPIgDL/7njkqrdxioq4VCGrQvS+cTLuC9uGGWDT
Mzd2wnFBXJn5AGl7dLegvwX/nSFX937k0k4WKNESLf1S3iOjobgkPcCjjQvEo18I
4YALDsIRVQobU/BvnAzzD9AQot/xSULQoxDnnZYQuQj/wcjOyiUPJvROAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqRTBF7nvOKuiYL6+NC1CT4CIf8MB8GA1UdIwQY
MBaAFL9J31d/DuRDGIwCkyNFe7xaDq07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBuZlYzOE81RU1ZakFLVEkwVjd2Rm9PclRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hNjcxMWEtMzcyOS00OTFiLThkYmMt
OThjMmEzYzU3Yjg4LzEvdjBuZlYzOE81RU1ZakFLVEkwVjd2Rm9PclRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9hNjcxMWEtMzcyOS00OTFiLThkYmMtOThjMmEzYzU3Yjg4
LzEvdjBuZlYzOE81RU1ZakFLVEkwVjd2Rm9PclRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCWTspd7
jrbVHVWKK+It/YYZir7w0YuXp6ZcZNITII9m6V9Jx94+LrkOUaGBJ5y0/FQP9bP5
m+kCaUD1lAhQQzB5lE2Vn5Uuc8sCYByHcLf2TlgMHaue4kdfmI3pch9ZqrXsyBVJ
lIXnUE0kZ8bSCjYCI9abvTJX66vVU75K9F0NGdkb1uk1joTOyf39nJmIavq0h6QM
bj2ppDTpM7Fmmvb1F0DWsoGJJvE8ZCnSbUF+olqRNLM0H69f5GWh54VVz7gt1Sgh
JTiGeSWLO61BLHV5rGDhtMtXtqozOjUijLsJ//qE4VxfJviSbJWk3/oBcMt08QpN
a2s+KxRjgjwnhA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 02:57:41 2026 by rpki-client