Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File:                     llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier:          TJqYQNMAph4SvqGpZ/0h3Lge3sCHRNaeoi+1pO9HcUU=
Subject key identifier:   DC:5E:4B:07:9E:B5:4D:C4:E5:46:CC:D2:A6:AA:1D:AD:7A:E0:5C:83
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer:       /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial:       01A105B7C7FFA1815940495235F0DF84D540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number:          1A87
Signing time:             Sun 04 Oct 2026 07:01:32 +0000
Manifest this update:     Sun 04 Oct 2026 07:01:32 +0000
Manifest next update:     Mon 05 Oct 2026 07:01:32 +0000
Files and hashes:         1: QGW4LwlvDICFL2rpJRW4EK0DFIc.roa (hash: dEh5JmMpZS30YtylfZQmdL8aaYHuh+kMQSbQLZPHa4Q=)
                          2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: ZARgOEjgFXzXI1PRy+S4xwlM6TM/EO4qbzpC06k0CtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:b7:c7:ff:a1:81:59:40:49:52:35:f0:df:84:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
        Validity
            Not Before: Oct  4 07:01:32 2026 GMT
            Not After : Oct  5 07:01:32 2026 GMT
        Subject: CN=dc5e4b079eb54dc4e546ccd2a6aa1dad7ae05c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8f:c9:6c:5e:2d:fb:6e:a4:e1:7d:de:56:32:
                    91:b9:26:09:44:70:83:fd:5b:fb:d4:78:15:9c:bf:
                    3e:45:d8:6b:16:a5:54:be:66:60:03:7d:8e:bc:7c:
                    44:0d:fe:ba:a9:40:05:49:7c:d5:8f:70:cc:39:f9:
                    dc:d1:8c:49:45:fb:4a:ed:82:8c:6f:54:ab:64:d1:
                    2b:6f:23:0d:62:1b:c7:45:7f:4c:e6:69:4a:e8:08:
                    d3:7b:b7:9d:97:28:a2:c1:3b:dc:61:3d:04:32:5d:
                    e7:09:04:7c:df:43:33:31:12:82:61:90:01:e6:cf:
                    b5:80:f0:2d:96:93:ca:dc:2c:47:76:b6:e0:29:47:
                    1f:a8:de:08:0d:87:1c:9c:bd:d2:31:8e:7f:b4:d4:
                    57:67:36:2c:a6:68:8d:93:87:8e:89:d9:29:fc:42:
                    bf:aa:31:c7:5d:6e:8f:9a:b4:b7:d1:9e:83:15:b9:
                    97:3f:13:9b:08:b6:1d:f2:22:fe:aa:e9:cd:01:6d:
                    8e:c5:7f:52:8e:60:a0:1c:2c:ea:9f:02:f4:c8:9f:
                    eb:fe:d5:ab:b9:52:55:1b:a6:32:99:4d:27:f6:87:
                    77:7d:a1:80:54:70:ae:9f:e2:c4:c6:5d:16:4f:bd:
                    0e:fc:76:54:51:2a:e7:60:84:60:14:20:ee:c1:a6:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5E:4B:07:9E:B5:4D:C4:E5:46:CC:D2:A6:AA:1D:AD:7A:E0:5C:83
            X509v3 Authority Key Identifier:
                keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:72:81:77:22:c8:fe:5a:c8:0b:f7:6c:2a:77:21:5e:09:13:
         81:03:51:af:2e:f3:5e:c4:e4:4d:b0:72:aa:0e:53:e8:c9:01:
         94:23:2e:dc:a7:79:39:7a:2b:0a:77:48:f8:da:9c:ff:50:05:
         02:35:67:d9:cc:dc:c1:50:59:74:a1:ca:e6:81:4e:3c:43:20:
         78:ce:ee:4e:82:e3:fe:6f:de:c5:bf:02:23:f2:5a:92:75:de:
         7d:d5:dc:ed:71:07:b5:a2:a3:f9:97:31:e8:d6:06:e2:5e:59:
         21:86:09:84:46:a5:8d:f6:d1:ed:1f:6a:25:99:6d:12:8a:35:
         12:1c:c8:0a:b6:11:7e:4f:b0:eb:60:ec:ee:5b:2d:20:a9:b5:
         56:6b:44:25:5b:5f:10:64:85:43:37:fa:9b:b6:13:58:64:d2:
         a2:d2:56:c3:c1:cd:cc:49:b1:96:e1:3a:31:41:f1:e1:fc:c9:
         da:02:d4:ad:5c:0d:ef:00:8c:6b:08:1e:8c:06:04:ef:76:7f:
         76:66:1d:09:a3:f3:cc:84:42:13:07:52:c0:3e:32:50:e3:d2:
         ae:d3:f0:ed:32:ac:4d:64:eb:38:0a:23:8e:b0:17:9a:88:91:
         8c:83:76:ca:59:84:74:aa:d2:8f:69:ba:81:a1:2d:3f:bf:e7:
         6d:2e:b4:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEFt8f/oYFZQElSNfDfhNVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NTQ3M2Q2ODU3MmVhMjIzOGJkZDg3NWFmYTcyNWEwNDA1
ZGU0ODMwHhcNMjYxMDA0MDcwMTMyWhcNMjYxMDA1MDcwMTMyWjAzMTEwLwYDVQQD
EyhkYzVlNGIwNzllYjU0ZGM0ZTU0NmNjZDJhNmFhMWRhZDdhZTA1YzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y/JbF4t+26k4X3eVjKRuSYJRHCD
/Vv71HgVnL8+RdhrFqVUvmZgA32OvHxEDf66qUAFSXzVj3DMOfnc0YxJRftK7YKM
b1SrZNErbyMNYhvHRX9M5mlK6AjTe7edlyiiwTvcYT0EMl3nCQR830MzMRKCYZAB
5s+1gPAtlpPK3CxHdrbgKUcfqN4IDYccnL3SMY5/tNRXZzYspmiNk4eOidkp/EK/
qjHHXW6PmrS30Z6DFbmXPxObCLYd8iL+qunNAW2OxX9SjmCgHCzqnwL0yJ/r/tWr
uVJVG6YymU0n9od3faGAVHCun+LExl0WT70O/HZUUSrnYIRgFCDuwaZV1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxeSweetU3E5UbM0qaqHa164FyDMB8GA1UdIwQY
MBaAFJZUc9aFcuoiOL3Yda+nJaBAXeSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMt
NDVmODI5YzZkZDExLzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8zZjliMjItYzFlMy00ZGU5LWI2OWMtNDVmODI5YzZkZDEx
LzEvbGxSejFvVnk2aUk0dmRoMXI2Y2xvRUJkNUlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3KBdyLI
/lrIC/dsKnchXgkTgQNRry7zXsTkTbByqg5T6MkBlCMu3Kd5OXorCndI+Nqc/1AF
AjVn2czcwVBZdKHK5oFOPEMgeM7uToLj/m/exb8CI/JaknXefdXc7XEHtaKj+Zcx
6NYG4l5ZIYYJhEaljfbR7R9qJZltEoo1EhzICrYRfk+w62Ds7lstIKm1VmtEJVtf
EGSFQzf6m7YTWGTSotJWw8HNzEmxluE6MUHx4fzJ2gLUrVwN7wCMawgejAYE73Z/
dmYdCaPzzIRCEwdSwD4yUOPSrtPw7TKsTWTrOAojjrAXmoiRjIN2ylmEdKrSj2m6
gaEtP7/nbS60EA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 11:52:03 2026 by rpki-client