Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
File:                     IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json)
Hash identifier:          pJdUXGn+7qbt51zCmjFZgbLM9CHX8DIUFjqnyg0L4JQ=
Subject key identifier:   50:8A:0E:BC:A4:D5:BC:D6:E9:5B:1E:AF:EF:3F:2A:70:6D:C0:B3:F7
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Certificate issuer:       /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial:       01A1298D37D79D4C167B77BE63812935FF56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
Manifest number:          167A
Signing time:             Sun 11 Oct 2026 06:01:23 +0000
Manifest this update:     Sun 11 Oct 2026 06:01:23 +0000
Manifest next update:     Mon 12 Oct 2026 06:01:23 +0000
Files and hashes:         1: 11YShjM6iG1lgHk0sBIwxGUI_MU.roa (hash: zv1LSj4scuwBiIwmG809DfMSYAbVZ65wSUdzZngzxuU=)
                          2: 4uhQK-ahMU-b686CpY3ebuHDcxA.roa (hash: jPmzy29N69ytvo0+nxFYwzpNOf0HZh68Epxb4V5zrHQ=)
                          3: 9JMNSgr9GTZCq7ECk8aWcWWpSWc.roa (hash: ZYWDq0P6qMgiPXizLcgupz8/qvO2gFU/jwxMaGxycaw=)
                          4: Aldb8rVQEYH7AIYKbirLccTqxfk.roa (hash: xKeQuE6N5Er4acIg7kKR9Q2RvuXmil18lO24CsbXiP0=)
                          5: AygaSJoY4X-N8pcfdiWT-0OzTH0.roa (hash: GpuGRR+uDCRH0KzkkUeOxZxQXmqHI/G6tCUG41o6giA=)
                          6: Gz0_KsyuxF_Mtua-1HhemOuZcQg.roa (hash: IbzaI7YpmiRgkQae6jLRwhProyJ2PzVbvEcbQ3Zj2TA=)
                          7: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: /OK/ZRCJPRETBGOPE/LvTGC+AMVONNbyZqGRZS5zpAk=)
                          8: _og34UxL66HAf1x6tJdapHB1KD4.roa (hash: MIlbN2zWAQQHEFQMrsU48v1H/MqxZJmHAhuOJZrCJMw=)
                          9: gZE3Te4FZ7-Lp4GEJQvQEkwqiDA.roa (hash: r4RCM40eYHCKKFN/sAxepQztxTn6V46H7fRE/7G8fQU=)
                          10: lwmtxoWx5clkivlnh1Kh10qANc8.roa (hash: aox9Sa8RSdnqNanp7vV3UK2GlMEf/ITdwIirj370CTo=)
                          11: pUjgfHpSLJEroItVeYdePetGeno.roa (hash: 3GHGFzGCi0a87nJzoUGj4P1u3SwU6ateFJ0oPnoaNEM=)
                          12: vOyidTyiIS9RXt084gFh3QAi7BY.roa (hash: TBJz0+Ix8YJsKWxa0n0dLVQdi5WM4OAHaQ/OM30EBD4=)
                          13: ygZyjuYzflVbHgfVvcHOxvuu0E4.roa (hash: IH0YWQaBGEjd+Nsl8K72F6uJWsgW3OOY75p4PPRBdZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:8d:37:d7:9d:4c:16:7b:77:be:63:81:29:35:ff:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
        Validity
            Not Before: Oct 11 06:01:23 2026 GMT
            Not After : Oct 12 06:01:23 2026 GMT
        Subject: CN=508a0ebca4d5bcd6e95b1eafef3f2a706dc0b3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:fb:99:3d:9a:07:a0:73:31:5a:8b:7c:63:
                    6b:ca:6d:0b:d7:02:c7:9b:a3:fd:52:8d:f0:1a:c7:
                    0a:e1:be:f5:25:66:a5:d2:c8:0d:01:78:b3:8f:7a:
                    a3:0e:80:0c:28:11:82:5f:6e:e6:cc:bc:d9:a9:a0:
                    a8:38:6d:3a:32:8e:73:55:01:ff:e3:e3:3c:4c:1b:
                    d1:16:44:22:c2:db:0b:e5:25:1a:8b:38:9e:61:71:
                    ea:07:87:9b:62:b1:3c:1b:01:53:89:2a:23:39:b7:
                    d5:bc:62:e6:6a:e0:8d:6b:49:27:8a:fe:2a:8b:12:
                    b8:95:e0:3f:d0:8b:51:cc:e8:c5:d6:a7:ff:28:8c:
                    78:be:14:35:65:a3:d3:63:95:0a:4e:14:09:be:86:
                    59:bd:05:70:47:a7:df:bb:05:e8:d7:da:b6:b6:03:
                    0b:c4:40:bc:8c:bd:c1:40:00:22:5e:35:dd:20:03:
                    4b:ee:08:f7:80:a9:75:cf:ed:3b:39:ec:1a:c3:47:
                    db:16:bb:45:47:0b:49:57:6a:a5:92:c9:2d:e6:61:
                    10:d9:43:70:2d:80:aa:cb:a1:64:73:36:bf:f3:cf:
                    0a:e6:e1:a0:82:7e:5c:30:24:81:66:29:f9:11:66:
                    92:0d:11:9e:4e:a4:da:b7:83:92:07:ac:d9:fd:6f:
                    29:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8A:0E:BC:A4:D5:BC:D6:E9:5B:1E:AF:EF:3F:2A:70:6D:C0:B3:F7
            X509v3 Authority Key Identifier:
                keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c5:a3:44:71:d8:92:6e:a6:12:a6:90:f7:2f:6e:42:89:7f:
         64:1e:75:7d:d8:23:3d:52:5c:90:0f:0f:12:4d:c3:8f:77:65:
         a9:a1:61:b0:8e:5d:b6:d1:ab:df:dc:6b:a0:9d:84:94:ac:a2:
         c6:fa:de:47:ba:2e:ec:81:13:13:62:96:f9:41:21:60:a7:2a:
         6a:64:ee:5f:4d:9b:45:26:e8:81:1f:a8:c1:a8:13:9a:9f:4b:
         08:0c:a2:00:0e:f6:ef:bc:ba:6f:8e:c4:75:00:c3:db:94:0e:
         14:35:f7:0e:2c:3f:bd:78:79:de:50:93:0d:6d:e6:f9:e5:c6:
         85:ef:19:72:8a:2b:60:a4:5c:73:cf:7f:6b:06:44:82:f3:ca:
         f6:92:5f:81:1d:34:dd:60:1c:88:dc:5f:2f:89:90:9f:18:49:
         d2:27:7a:ab:cd:2f:86:7e:f1:68:ae:33:e1:b6:ff:cd:25:d6:
         51:d9:88:d0:5e:93:83:9f:a8:a9:cb:91:94:c5:73:ae:ba:e4:
         ab:26:9a:95:04:de:ca:e6:2b:96:dc:f9:b2:5b:9d:27:6c:6c:
         eb:a1:9c:a6:67:09:ff:7f:c3:a5:22:af:9b:fc:0c:75:fd:10:
         a4:12:ba:49:f0:c2:39:b4:e5:d1:a2:72:60:ae:9f:68:92:ff:
         dd:50:36:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpjTfXnUwWe3e+Y4EpNf9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2
NTg4MWEwHhcNMjYxMDExMDYwMTIzWhcNMjYxMDEyMDYwMTIzWjAzMTEwLwYDVQQD
Eyg1MDhhMGViY2E0ZDViY2Q2ZTk1YjFlYWZlZjNmMmE3MDZkYzBiM2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWj7mT2aB6BzMVqLfGNrym0L1wLH
m6P9Uo3wGscK4b71JWal0sgNAXizj3qjDoAMKBGCX27mzLzZqaCoOG06Mo5zVQH/
4+M8TBvRFkQiwtsL5SUaizieYXHqB4ebYrE8GwFTiSojObfVvGLmauCNa0kniv4q
ixK4leA/0ItRzOjF1qf/KIx4vhQ1ZaPTY5UKThQJvoZZvQVwR6ffuwXo19q2tgML
xEC8jL3BQAAiXjXdIANL7gj3gKl1z+07Oewaw0fbFrtFRwtJV2qlkskt5mEQ2UNw
LYCqy6Fkcza/888K5uGggn5cMCSBZin5EWaSDRGeTqTat4OSB6zZ/W8prwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCKDryk1bzW6Vser+8/KnBtwLP3MB8GA1UdIwQY
MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct
ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0
LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8WjRHHY
km6mEqaQ9y9uQol/ZB51fdgjPVJckA8PEk3Dj3dlqaFhsI5dttGr39xroJ2ElKyi
xvreR7ou7IETE2KW+UEhYKcqamTuX02bRSbogR+owagTmp9LCAyiAA7277y6b47E
dQDD25QOFDX3Diw/vXh53lCTDW3m+eXGhe8ZcoorYKRcc89/awZEgvPK9pJfgR00
3WAciNxfL4mQnxhJ0id6q80vhn7xaK4z4bb/zSXWUdmI0F6Tg5+oqcuRlMVzrrrk
qyaalQTeyuYrltz5sludJ2xs66GcpmcJ/3/DpSKvm/wMdf0QpBK6SfDCObTl0aJy
YK6faJL/3VA25w==
-----END CERTIFICATE-----
Generated at Sun Oct 11 15:07:55 2026 by rpki-client