Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File:                     s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier:          ehyRrx/zCwwEzonHrVouHFzV/Pa35G+1806c5qiSpI0=
Subject key identifier:   7D:8D:B0:B3:D0:DB:12:52:5B:27:BC:25:8D:BE:A2:BD:E3:A6:25:A8
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer:       /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial:       01A110E08623532B88EC895B51DC74463AD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number:          15FA
Signing time:             Tue 06 Oct 2026 11:01:52 +0000
Manifest this update:     Tue 06 Oct 2026 11:01:52 +0000
Manifest next update:     Wed 07 Oct 2026 11:01:52 +0000
Files and hashes:         1: VjVnMCIpJllowS-mUdPKmibH_s4.roa (hash: RkAjCgTxoEP9Ub/dSw/Wwxp7BKhfppLg+6NL3UVv1Zg=)
                          2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: AVPfi9YmoWHIuLmqskcuR9dLijnbp/5IBAxqeAt58dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:e0:86:23:53:2b:88:ec:89:5b:51:dc:74:46:3a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
        Validity
            Not Before: Oct  6 11:01:52 2026 GMT
            Not After : Oct  7 11:01:52 2026 GMT
        Subject: CN=7d8db0b3d0db12525b27bc258dbea2bde3a625a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:9a:97:d6:b1:31:1d:28:94:77:d2:1f:e1:
                    36:3e:de:6e:ef:16:53:ee:a6:e4:97:93:8b:6b:39:
                    a1:29:65:f4:6c:fc:af:30:07:db:26:e6:33:41:6a:
                    40:46:55:d3:8a:68:24:8b:5c:3f:67:8a:e8:55:25:
                    57:cc:63:34:18:f9:d4:61:fd:34:17:67:f1:d8:6f:
                    b9:0b:66:4c:13:87:92:91:30:53:51:80:3b:a1:7d:
                    41:46:ef:7b:b7:73:2a:c2:13:cb:52:66:3c:e4:bf:
                    1d:b2:47:68:b7:0e:39:3a:9b:48:1f:89:d9:db:69:
                    d5:b9:a0:0e:f0:8a:3a:ed:be:cb:0f:7e:ce:1d:29:
                    d9:33:b0:b7:42:60:92:8c:77:b8:f8:87:82:cb:6a:
                    e6:0d:d6:5c:9f:55:74:82:d8:e1:69:12:66:cc:d0:
                    77:9c:2e:2f:7a:36:f6:ef:c2:ef:f2:a6:cc:f6:d9:
                    71:96:db:03:fa:3d:67:37:9a:05:70:28:e2:61:df:
                    ce:f5:49:fa:cc:7e:60:61:6c:31:81:cb:3a:fb:d1:
                    4a:4b:06:f4:72:1a:d9:8b:d2:a2:ea:4d:9a:a4:dd:
                    73:b4:a1:5a:04:71:bc:f0:c0:fd:71:7c:91:ce:f6:
                    0d:f9:ac:c0:88:3a:54:79:04:ee:85:93:e3:77:23:
                    b5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8D:B0:B3:D0:DB:12:52:5B:27:BC:25:8D:BE:A2:BD:E3:A6:25:A8
            X509v3 Authority Key Identifier:
                keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0c:c7:85:f2:fc:60:d7:f2:df:15:bf:af:0b:be:a2:61:b5:
         40:9f:6e:e6:e5:d5:50:63:49:11:d8:ab:da:5d:57:7a:fc:ca:
         16:a0:8d:d0:6b:a5:e3:64:9c:89:08:09:a8:9a:58:25:97:c7:
         3d:d8:4c:43:f8:f9:45:0e:81:f1:90:9d:f6:2e:3f:57:53:00:
         b8:ae:bb:b9:9c:45:95:0d:1f:e7:cd:d2:f8:1c:bf:69:64:44:
         f4:f5:fa:3f:ec:09:a7:9d:19:fa:5e:c0:6e:15:fb:8b:92:c8:
         76:3b:81:9a:53:b9:c3:13:02:b7:b5:cf:eb:97:8d:35:44:d2:
         25:44:8f:7c:6a:19:2d:ae:e4:87:32:f3:f6:e6:1a:f2:50:f1:
         69:f8:15:81:60:b5:74:f6:e9:03:0d:ab:ab:c9:1c:ac:a5:6f:
         67:bb:1d:d3:ab:e4:bb:50:31:6b:10:ac:63:d3:1b:f5:29:6e:
         6f:bc:80:aa:b8:30:f5:bb:45:50:55:7f:f2:70:ef:1f:cf:1d:
         11:7f:6a:1e:41:70:cf:51:43:df:59:c4:ee:67:06:9c:99:62:
         a4:34:65:a4:34:4b:a5:2a:bf:f5:04:8b:f2:b2:f2:82:a2:2b:
         4d:ec:79:37:e6:b4:6c:48:21:21:b3:37:3e:ee:df:38:d1:3c:
         24:b7:0a:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEQ4IYjUyuI7IlbUdx0RjrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZTA2NGUxNzMzNWZkZWI4M2EwOTg2MmE3MzVhNmU5Nzc2
MmQ5NzMwHhcNMjYxMDA2MTEwMTUyWhcNMjYxMDA3MTEwMTUyWjAzMTEwLwYDVQQD
Eyg3ZDhkYjBiM2QwZGIxMjUyNWIyN2JjMjU4ZGJlYTJiZGUzYTYyNWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBmal9axMR0olHfSH+E2Pt5u7xZT
7qbkl5OLazmhKWX0bPyvMAfbJuYzQWpARlXTimgki1w/Z4roVSVXzGM0GPnUYf00
F2fx2G+5C2ZME4eSkTBTUYA7oX1BRu97t3MqwhPLUmY85L8dskdotw45OptIH4nZ
22nVuaAO8Io67b7LD37OHSnZM7C3QmCSjHe4+IeCy2rmDdZcn1V0gtjhaRJmzNB3
nC4vejb278Lv8qbM9tlxltsD+j1nN5oFcCjiYd/O9Un6zH5gYWwxgcs6+9FKSwb0
chrZi9Ki6k2apN1ztKFaBHG88MD9cXyRzvYN+azAiDpUeQTuhZPjdyO1JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2NsLPQ2xJSWye8JY2+or3jpiWoMB8GA1UdIwQY
MBaAFLPgZOFzNf3rg6CYYqc1pul3YtlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTct
MWQ1NTEzYmZmNGQ2LzEvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTctMWQ1NTEzYmZmNGQ2
LzEvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAzHhfL8
YNfy3xW/rwu+omG1QJ9u5uXVUGNJEdir2l1XevzKFqCN0Gul42SciQgJqJpYJZfH
PdhMQ/j5RQ6B8ZCd9i4/V1MAuK67uZxFlQ0f583S+By/aWRE9PX6P+wJp50Z+l7A
bhX7i5LIdjuBmlO5wxMCt7XP65eNNUTSJUSPfGoZLa7khzLz9uYa8lDxafgVgWC1
dPbpAw2rq8kcrKVvZ7sd06vku1AxaxCsY9Mb9Slub7yAqrgw9btFUFV/8nDvH88d
EX9qHkFwz1FD31nE7mcGnJlipDRlpDRLpSq/9QSL8rLygqIrTex5N+a0bEghIbM3
Pu7fONE8JLcK9A==
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:34:32 2026 by rpki-client