Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
File:                     eY4NpPkQB7IkdorLTRMfElF9K3o.mft (raw, json)
Hash identifier:          +9pdfdJl7vzRBl4NnICx4BR4YhnlaFrGOeW9qxHNWmg=
Subject key identifier:   40:3B:D2:DF:32:2B:DA:FA:AD:6A:53:C8:30:43:7E:0A:7B:C7:E2:44
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Certificate issuer:       /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial:       01A1103B171F7F80577E62445F573ABE7C0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
Manifest number:          0CAD
Signing time:             Tue 06 Oct 2026 08:01:10 +0000
Manifest this update:     Tue 06 Oct 2026 08:01:10 +0000
Manifest next update:     Wed 07 Oct 2026 08:01:10 +0000
Files and hashes:         1: FfmG2YSQtCzDZf7LGo-eF1wiE1s.roa (hash: qrm8Hvv6ZY4XD/rO0TyVVz8/PmIjDcXusRWAzudBFPw=)
                          2: Q-_VAhr_3KM6k7h05hr8GonF39M.roa (hash: sBlSBxemwWOVZDZUFiQlhe/vEkuAulILbiLVu6l2Y+s=)
                          3: _gMstHGZPe_7SzCes23Xk4_prxs.roa (hash: UfaVFa/Va8RG4LCVknZ/sC6sc8zENIigGZfQiIzmNA4=)
                          4: eY4NpPkQB7IkdorLTRMfElF9K3o.crl (hash: okVM+UOhJjNuYNz5dM8N21bqJb94SwJyr1Kl87meGf4=)
                          5: swQMeQBE5wb78ss3tCTd5K3tnlI.roa (hash: uIGxjGabnvBWdl9aXtwznXWVFMHKBrwT9BZDyH0VO8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 08:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:3b:17:1f:7f:80:57:7e:62:44:5f:57:3a:be:7c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
        Validity
            Not Before: Oct  6 08:01:10 2026 GMT
            Not After : Oct  7 08:01:10 2026 GMT
        Subject: CN=403bd2df322bdafaad6a53c830437e0a7bc7e244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:bb:f3:c6:7a:f7:bc:5d:55:04:55:15:2a:
                    12:1c:7f:2d:a1:f1:ff:d8:79:21:84:35:dc:5f:b3:
                    8f:88:56:87:2a:ed:2a:16:ec:48:39:49:76:51:a7:
                    45:9b:3d:b2:5d:46:a9:1a:8a:f0:15:6c:13:6f:4b:
                    d5:0f:27:4c:96:77:28:95:4b:dc:58:eb:0b:6b:8d:
                    67:d5:00:2d:d2:b6:9b:53:a9:b0:06:cc:55:85:05:
                    1c:51:c6:1e:98:75:1b:d1:9c:9e:f1:9d:36:06:f6:
                    13:91:8d:f3:15:e7:a4:9e:6b:0c:c5:bc:97:62:ce:
                    16:8b:48:cf:a3:5d:39:92:d6:08:b2:2e:4f:0e:7a:
                    84:4d:14:1b:20:bc:10:a0:44:9e:a8:6e:b6:1b:fa:
                    fd:3e:6f:37:cd:80:36:37:c3:29:f2:09:0f:a0:63:
                    89:94:5c:85:e8:f1:47:ca:23:31:31:e0:33:e3:35:
                    f7:bd:9d:1a:4c:d3:31:c3:83:86:b4:f3:a1:70:88:
                    2d:88:28:46:ef:77:71:42:fd:08:9b:1c:16:30:8a:
                    be:d9:b4:73:cd:80:f1:d1:da:bd:00:3c:98:44:50:
                    f3:c4:9c:ec:20:18:6d:8d:c3:f0:74:21:cb:ae:fe:
                    62:d9:e4:2d:54:04:46:a7:83:00:5b:8c:ae:c6:20:
                    6b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3B:D2:DF:32:2B:DA:FA:AD:6A:53:C8:30:43:7E:0A:7B:C7:E2:44
            X509v3 Authority Key Identifier:
                keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e6:cc:5a:bd:7c:bd:a7:0f:ab:41:ba:04:c1:03:3c:cb:a3:
         64:71:bc:05:19:20:b2:44:f7:6a:8e:87:af:42:c2:34:58:1a:
         60:32:15:c8:ba:b2:de:8a:f3:27:e7:e4:d2:71:a9:f7:01:56:
         62:90:ff:6e:5e:47:01:c5:34:67:f7:f0:46:72:87:c0:c8:09:
         5d:e9:eb:7f:7e:6d:75:15:38:ec:27:77:a2:c6:1f:f4:7d:14:
         5f:6f:65:0f:42:e0:6a:32:e0:3b:56:71:1f:d0:d0:28:b2:41:
         59:87:b8:fe:4e:7a:5b:d3:3c:2b:6f:43:79:56:dc:05:86:36:
         42:a4:38:3f:e1:be:6b:e1:2e:33:9c:ce:ab:c9:b1:fb:d3:22:
         27:14:78:a2:5b:8f:a6:54:6d:1b:98:9d:0d:5b:11:b6:f4:7d:
         d8:79:74:76:58:57:10:32:04:b7:4b:ba:07:b9:f4:cb:cd:c5:
         eb:32:6e:2b:7d:95:49:8b:9b:33:d0:7b:e1:c5:02:af:54:03:
         38:85:a9:1a:63:77:02:e0:04:af:cb:88:4d:5a:d7:05:9b:02:
         46:bf:53:2c:3a:76:45:cd:d9:4a:b1:e0:3e:1b:1a:43:24:df:
         43:63:d2:35:d7:14:85:a7:98:cc:1b:73:5e:86:5e:eb:ef:af:
         f3:8e:ac:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEQOxcff4BXfmJEX1c6vnwMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGUwZGE0ZjkxMDA3YjIyNDc2OGFjYjRkMTMxZjEyNTE3
ZDJiN2EwHhcNMjYxMDA2MDgwMTEwWhcNMjYxMDA3MDgwMTEwWjAzMTEwLwYDVQQD
Eyg0MDNiZDJkZjMyMmJkYWZhYWQ2YTUzYzgzMDQzN2UwYTdiYzdlMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke2788Z697xdVQRVFSoSHH8tofH/
2HkhhDXcX7OPiFaHKu0qFuxIOUl2UadFmz2yXUapGorwFWwTb0vVDydMlncolUvc
WOsLa41n1QAt0rabU6mwBsxVhQUcUcYemHUb0Zye8Z02BvYTkY3zFeeknmsMxbyX
Ys4Wi0jPo105ktYIsi5PDnqETRQbILwQoESeqG62G/r9Pm83zYA2N8Mp8gkPoGOJ
lFyF6PFHyiMxMeAz4zX3vZ0aTNMxw4OGtPOhcIgtiChG73dxQv0ImxwWMIq+2bRz
zYDx0dq9ADyYRFDzxJzsIBhtjcPwdCHLrv5i2eQtVARGp4MAW4yuxiBrhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEA70t8yK9r6rWpTyDBDfgp7x+JEMB8GA1UdIwQY
MBaAFHmODaT5EAeyJHaKy00THxJRfSt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUt
NGZiNGVmOTFhODJmLzEvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUtNGZiNGVmOTFhODJm
LzEvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADubMWr18
vacPq0G6BMEDPMujZHG8BRkgskT3ao6Hr0LCNFgaYDIVyLqy3orzJ+fk0nGp9wFW
YpD/bl5HAcU0Z/fwRnKHwMgJXenrf35tdRU47Cd3osYf9H0UX29lD0LgajLgO1Zx
H9DQKLJBWYe4/k56W9M8K29DeVbcBYY2QqQ4P+G+a+EuM5zOq8mx+9MiJxR4oluP
plRtG5idDVsRtvR92Hl0dlhXEDIEt0u6B7n0y83F6zJuK32VSYubM9B74cUCr1QD
OIWpGmN3AuAEr8uITVrXBZsCRr9TLDp2Rc3ZSrHgPhsaQyTfQ2PSNdcUhaeYzBtz
XoZe6++v846sVQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 17:55:36 2026 by rpki-client