Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
File:                     axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json)
Hash identifier:          uS8BMAiWoKrDXKKm8QPyEv/BGrKYzEYEHb7GdtEsrzM=
Subject key identifier:   F4:67:A7:43:96:9F:B5:97:BF:6C:49:B7:2C:E9:2A:B3:BE:42:63:63
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Certificate issuer:       /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial:       01A0F90EF15739BE8A1D5A81206EA3BED1D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
Manifest number:          1876
Signing time:             Thu 01 Oct 2026 20:01:41 +0000
Manifest this update:     Thu 01 Oct 2026 20:01:41 +0000
Manifest next update:     Fri 02 Oct 2026 20:01:41 +0000
Files and hashes:         1: URIXovot20BpTLwGW5N6pOlLgy4.roa (hash: wvN6iNM+Z86YXZPPdosS4TWVox9d1Df0z+4sQXyWazA=)
                          2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: Wvgr0Nu7/W/YV2j9rj7o/No27PfSzouL9p0BWu+eYww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 16:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f9:0e:f1:57:39:be:8a:1d:5a:81:20:6e:a3:be:d1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
        Validity
            Not Before: Oct  1 20:01:41 2026 GMT
            Not After : Oct  2 20:01:41 2026 GMT
        Subject: CN=f467a743969fb597bf6c49b72ce92ab3be426363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:0c:25:85:8a:4d:6c:ce:a8:88:2f:83:27:
                    ec:71:5b:95:ef:47:bf:c8:fa:1e:40:b7:39:95:29:
                    96:3d:b1:ef:14:8a:59:10:f1:76:f5:10:c7:6f:e8:
                    d6:df:51:7b:46:5b:5d:e6:c9:01:36:84:80:f9:a9:
                    1a:98:75:f0:45:8f:33:58:f8:a9:44:8a:09:1c:ec:
                    bd:17:98:4e:ca:28:93:97:a6:6f:36:f6:6f:f9:51:
                    90:ed:ba:5f:52:a9:8a:09:fd:fa:a5:52:5a:d2:a7:
                    d1:0a:0d:12:22:6a:da:aa:d6:b5:6b:ae:af:04:a3:
                    6b:50:b5:3a:f4:52:42:4a:81:83:be:d8:6f:f1:1d:
                    7e:9a:5f:be:97:b1:0a:6b:c7:14:18:e3:55:6e:b8:
                    ff:db:ea:15:54:7d:23:b9:1e:3f:5c:8b:1e:2e:0e:
                    cf:16:b8:2d:c0:e0:b4:2f:b9:7a:d1:3f:52:c9:53:
                    c9:20:e2:74:cb:70:b6:ac:03:17:d4:7e:39:31:0f:
                    ed:cf:00:88:89:1c:3f:12:60:1a:4d:5e:9c:f9:0b:
                    04:a0:4d:7a:14:be:be:55:da:19:8b:1b:9c:cf:00:
                    7d:5a:0e:6c:da:c4:ef:d6:05:5a:74:ea:13:34:25:
                    8c:2c:b9:38:cc:3c:e4:3b:63:03:4d:2c:08:5a:21:
                    0a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:67:A7:43:96:9F:B5:97:BF:6C:49:B7:2C:E9:2A:B3:BE:42:63:63
            X509v3 Authority Key Identifier:
                keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:87:b3:b9:28:e7:2f:20:7d:b6:f6:cc:80:14:fc:ff:4c:f2:
         83:5d:df:a2:aa:cb:2b:b5:02:07:15:0e:c4:58:d0:a2:c1:d1:
         01:ea:21:94:2c:ac:03:0f:19:5e:29:e7:7b:bb:51:93:2a:1a:
         2d:63:82:8b:17:7f:06:e2:41:f8:e6:1e:7b:27:f0:21:1c:fd:
         60:5b:8e:d9:0d:dc:c0:4a:4e:40:ca:08:8d:9f:81:39:aa:ec:
         68:69:cc:66:56:f0:3c:06:97:b2:84:d9:4f:96:23:f3:82:b1:
         02:17:b7:98:e3:0e:56:9a:aa:fd:30:92:c4:e3:d7:ce:cb:47:
         ee:31:29:0f:4d:82:64:84:27:ff:c1:99:7e:31:04:cb:45:16:
         73:52:8a:49:8a:60:b5:f0:97:8d:40:27:d1:11:68:d1:d4:ca:
         1b:72:84:7a:38:e2:eb:de:eb:dc:e9:4f:02:d6:b5:03:7a:03:
         61:70:70:d7:4b:34:31:0f:0a:b7:e2:31:72:b1:71:61:2f:41:
         db:41:77:92:3a:a1:95:3d:5d:06:d6:a0:c9:6a:ce:4a:c7:f9:
         7e:3b:e8:53:1f:1b:a3:05:f9:19:f9:fa:87:32:88:b6:f2:0a:
         14:4f:cf:87:76:ec:d6:2a:8c:6b:e4:d7:7e:74:0b:de:a8:58:
         e3:07:57:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD5DvFXOb6KHVqBIG6jvtHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTlkMWJjYWM3NTIzMTJlYzRkZTZmNWJkMzlhY2NlMzJh
YjZiZDYwHhcNMjYxMDAxMjAwMTQxWhcNMjYxMDAyMjAwMTQxWjAzMTEwLwYDVQQD
EyhmNDY3YTc0Mzk2OWZiNTk3YmY2YzQ5YjcyY2U5MmFiM2JlNDI2MzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwUMJYWKTWzOqIgvgyfscVuV70e/
yPoeQLc5lSmWPbHvFIpZEPF29RDHb+jW31F7Rltd5skBNoSA+akamHXwRY8zWPip
RIoJHOy9F5hOyiiTl6ZvNvZv+VGQ7bpfUqmKCf36pVJa0qfRCg0SImraqta1a66v
BKNrULU69FJCSoGDvthv8R1+ml++l7EKa8cUGONVbrj/2+oVVH0juR4/XIseLg7P
FrgtwOC0L7l60T9SyVPJIOJ0y3C2rAMX1H45MQ/tzwCIiRw/EmAaTV6c+QsEoE16
FL6+VdoZixuczwB9Wg5s2sTv1gVadOoTNCWMLLk4zDzkO2MDTSwIWiEKxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRnp0OWn7WXv2xJtyzpKrO+QmNjMB8GA1UdIwQY
MBaAFGsZ0bysdSMS7E3m9b05rM4yq2vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYt
YjU1MWU0OTQzNWEyLzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYtYjU1MWU0OTQzNWEy
LzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYezuSjn
LyB9tvbMgBT8/0zyg13foqrLK7UCBxUOxFjQosHRAeohlCysAw8ZXinne7tRkyoa
LWOCixd/BuJB+OYeeyfwIRz9YFuO2Q3cwEpOQMoIjZ+BOarsaGnMZlbwPAaXsoTZ
T5Yj84KxAhe3mOMOVpqq/TCSxOPXzstH7jEpD02CZIQn/8GZfjEEy0UWc1KKSYpg
tfCXjUAn0RFo0dTKG3KEejji697r3OlPAta1A3oDYXBw10s0MQ8Kt+IxcrFxYS9B
20F3kjqhlT1dBtagyWrOSsf5fjvoUx8bowX5Gfn6hzKItvIKFE/Ph3bs1iqMa+TX
fnQL3qhY4wdXxw==
-----END CERTIFICATE-----
Generated at Fri Oct 2 08:33:55 2026 by rpki-client