Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
File:                     yMr0p4F9msWWHUKkx-WuGrHRg_o.mft (raw, json)
Hash identifier:          R+IxMlDK3pMi/8LoQ5GKU7FEH7zPG142I7HxM+x89YI=
Subject key identifier:   58:AB:CB:68:42:42:54:53:EC:BC:9D:D1:7B:C1:76:5F:32:68:84:F1
Authority key identifier: C8:CA:F4:A7:81:7D:9A:C5:96:1D:42:A4:C7:E5:AE:1A:B1:D1:83:FA
Certificate issuer:       /CN=c8caf4a7817d9ac5961d42a4c7e5ae1ab1d183fa
Certificate serial:       01A12A318161F13C13034F6B678F77A4D8AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
Manifest number:          0105
Signing time:             Sun 11 Oct 2026 09:00:49 +0000
Manifest this update:     Sun 11 Oct 2026 09:00:49 +0000
Manifest next update:     Mon 12 Oct 2026 09:00:49 +0000
Files and hashes:         1: 8txx-a7bVPOx2o3RXnkrRbsFJvw.roa (hash: 9QzPxs6o1/HIn/z859bIlS9gq61Oxzk7wr0uT3OmX3c=)
                          2: yMr0p4F9msWWHUKkx-WuGrHRg_o.crl (hash: e4DQyBCpJtJrEaFPdPnsxGnAhq3puyLel+ORGHnCxJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:31:81:61:f1:3c:13:03:4f:6b:67:8f:77:a4:d8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8caf4a7817d9ac5961d42a4c7e5ae1ab1d183fa
        Validity
            Not Before: Oct 11 09:00:49 2026 GMT
            Not After : Oct 12 09:00:49 2026 GMT
        Subject: CN=58abcb6842425453ecbc9dd17bc1765f326884f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c2:87:d8:22:1a:40:6e:fb:bf:a2:44:ae:97:
                    f7:34:de:27:3c:42:9e:75:6c:6b:b7:5d:10:49:5f:
                    01:f9:fa:5b:8b:0f:10:68:b4:5c:35:30:b4:41:b8:
                    c6:dd:91:fb:27:17:e7:2e:b4:9c:f8:71:7e:68:ac:
                    14:94:b1:a9:61:1e:58:b7:42:19:b6:52:b9:2b:33:
                    93:f1:1d:65:65:94:8f:3a:5c:62:37:89:4c:af:00:
                    c7:2d:dc:ea:44:17:64:38:30:8a:4d:ac:f2:f2:ad:
                    e6:55:fb:95:ad:ae:dc:80:4a:2e:3c:62:52:80:3a:
                    20:cd:8e:4a:84:67:f7:f4:35:07:6b:93:c4:0e:de:
                    ec:e9:8e:c1:6d:60:0e:2d:4a:58:f8:a6:d1:f9:52:
                    97:f2:86:13:5e:ec:31:e0:1e:32:80:6e:26:ab:8d:
                    33:5e:00:b7:91:85:ef:71:db:16:be:81:df:4d:03:
                    08:e0:88:1d:13:73:48:50:5b:79:1a:b1:39:98:03:
                    96:d0:7f:40:e8:d6:83:dc:39:f6:f0:19:4c:d4:7f:
                    22:b0:38:63:f3:94:82:b5:d1:31:25:22:f4:10:0c:
                    05:96:9b:e8:40:8c:ed:fe:75:e1:c8:3b:cc:26:54:
                    3c:ea:90:d7:58:4d:61:fc:b1:c5:66:e3:0a:4d:bd:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AB:CB:68:42:42:54:53:EC:BC:9D:D1:7B:C1:76:5F:32:68:84:F1
            X509v3 Authority Key Identifier:
                keyid:C8:CA:F4:A7:81:7D:9A:C5:96:1D:42:A4:C7:E5:AE:1A:B1:D1:83:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7d:fc:04:56:66:a9:d8:6e:a6:05:20:bb:e5:0f:dd:29:9d:
         30:5a:8e:81:3b:f2:3f:2b:e5:32:ed:13:a4:32:de:c0:fb:07:
         dd:e3:46:31:37:23:86:bd:23:2f:17:f8:06:b4:68:47:da:6b:
         05:5a:3b:60:bb:8a:12:75:78:5a:76:0c:a6:bd:08:60:cd:27:
         df:d8:df:a5:57:38:18:3b:a6:ab:fc:0d:3a:c3:35:8d:11:9a:
         2a:87:22:f1:a2:34:ac:6f:29:19:40:c2:aa:03:8d:3d:8a:58:
         30:81:8f:6a:f1:77:91:d2:2b:ff:90:12:06:00:49:d6:40:50:
         78:dc:3f:04:15:05:76:0d:f4:34:39:8f:86:d7:af:8c:e7:2c:
         85:80:c7:91:55:03:1c:08:c0:b0:9f:bf:eb:f5:94:92:dd:79:
         5f:32:14:77:da:70:da:b9:54:36:11:06:d8:71:13:1e:23:b0:
         41:6c:62:17:21:93:2d:b1:1d:02:4a:e4:47:d6:f8:95:15:33:
         a7:84:9b:70:68:25:5a:f0:a5:8f:ea:ef:b3:18:c7:4c:d1:f7:
         d2:ad:42:52:e7:6b:63:e6:6c:fd:9c:fb:47:b0:1d:9d:07:9f:
         c8:81:89:28:29:47:48:55:ca:18:21:eb:ae:9c:26:08:47:b8:
         60:87:e2:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEqMYFh8TwTA09rZ493pNiuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Y2FmNGE3ODE3ZDlhYzU5NjFkNDJhNGM3ZTVhZTFhYjFk
MTgzZmEwHhcNMjYxMDExMDkwMDQ5WhcNMjYxMDEyMDkwMDQ5WjAzMTEwLwYDVQQD
Eyg1OGFiY2I2ODQyNDI1NDUzZWNiYzlkZDE3YmMxNzY1ZjMyNjg4NGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMKH2CIaQG77v6JErpf3NN4nPEKe
dWxrt10QSV8B+fpbiw8QaLRcNTC0QbjG3ZH7JxfnLrSc+HF+aKwUlLGpYR5Yt0IZ
tlK5KzOT8R1lZZSPOlxiN4lMrwDHLdzqRBdkODCKTazy8q3mVfuVra7cgEouPGJS
gDogzY5KhGf39DUHa5PEDt7s6Y7BbWAOLUpY+KbR+VKX8oYTXuwx4B4ygG4mq40z
XgC3kYXvcdsWvoHfTQMI4IgdE3NIUFt5GrE5mAOW0H9A6NaD3Dn28BlM1H8isDhj
85SCtdExJSL0EAwFlpvoQIzt/nXhyDvMJlQ86pDXWE1h/LHFZuMKTb1jeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiry2hCQlRT7Lyd0XvBdl8yaITxMB8GA1UdIwQY
MBaAFMjK9KeBfZrFlh1CpMflrhqx0YP6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU1yMHA0Rjltc1dXSFVLa3gtV3VHckhSZ19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81MDhlNzAtNzhiOS00ZWZkLWI1Zjkt
ZjEwYjAwNzBkNzAxLzEveU1yMHA0Rjltc1dXSFVLa3gtV3VHckhSZ19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81MDhlNzAtNzhiOS00ZWZkLWI1ZjktZjEwYjAwNzBkNzAx
LzEveU1yMHA0Rjltc1dXSFVLa3gtV3VHckhSZ19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYX38BFZm
qdhupgUgu+UP3SmdMFqOgTvyPyvlMu0TpDLewPsH3eNGMTcjhr0jLxf4BrRoR9pr
BVo7YLuKEnV4WnYMpr0IYM0n39jfpVc4GDumq/wNOsM1jRGaKoci8aI0rG8pGUDC
qgONPYpYMIGPavF3kdIr/5ASBgBJ1kBQeNw/BBUFdg30NDmPhtevjOcshYDHkVUD
HAjAsJ+/6/WUkt15XzIUd9pw2rlUNhEG2HETHiOwQWxiFyGTLbEdAkrkR9b4lRUz
p4SbcGglWvClj+rvsxjHTNH30q1CUudrY+Zs/Zz7R7AdnQefyIGJKClHSFXKGCHr
rpwmCEe4YIfi9g==
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:22:47 2026 by rpki-client