Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
File:                     tYaoZDYz6YdBEai881GKCQXyhgk.mft (raw, json)
Hash identifier:          p+Eu1/OiWFXNxwOE4IeLtDrOHGtYadlLJr8vvK/QR8w=
Subject key identifier:   10:96:24:8C:CF:E2:E8:26:FC:24:E4:D9:3A:7B:D4:B2:22:6D:DC:79
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Certificate issuer:       /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial:       01A12B0D91290A56F9BB5023ECA3355377AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
Manifest number:          1644
Signing time:             Sun 11 Oct 2026 13:01:11 +0000
Manifest this update:     Sun 11 Oct 2026 13:01:11 +0000
Manifest next update:     Mon 12 Oct 2026 13:01:11 +0000
Files and hashes:         1: R_zL9EhetPG627p64jnL_1AQk_k.roa (hash: /ASm15I9YtFuL/r1IrLrMNiCv/23kZabo3hMsyygvPM=)
                          2: Zx2Ej29t4Sy3ugAdSAEr8wgh-eI.roa (hash: 6qePl3E6/9bWQI3GzNjE+NBTWrA6JE82fp1zkkf+j8o=)
                          3: gPytstS2H2DCx0G35K4nAVksneE.roa (hash: I34ZNFgqBn6ft829pIhUL9qJ7ZwAtJssKpKV0YYtJmI=)
                          4: hL4U-26oJ-d8CY7a6r3Udux4pFM.roa (hash: 8nT0Nid1k0WCSq4dufjGbFyrf1TbKzMQQr3veAEfmRs=)
                          5: jJ74mpm8B1pyvT1MNhCtSe0cxRk.roa (hash: OKs2X6l4NJ7txPZTz3RUzDrNyB2I3km6f/sNQFkFGUQ=)
                          6: tYaoZDYz6YdBEai881GKCQXyhgk.crl (hash: GzdWr19DPtFPaIp4zbL2yxDShV1vPQSEtpHlQjH2fjY=)
                          7: v_CzW-gEtbdZtpCnpKHVty7BP7s.roa (hash: FK1HiNTHGuvdh1/S7hYfIVoOC1e1CT6RxRS6KDmNYRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:0d:91:29:0a:56:f9:bb:50:23:ec:a3:35:53:77:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
        Validity
            Not Before: Oct 11 13:01:11 2026 GMT
            Not After : Oct 12 13:01:11 2026 GMT
        Subject: CN=1096248ccfe2e826fc24e4d93a7bd4b2226ddc79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c5:56:1a:a1:e1:2a:9d:59:ce:bd:5b:3f:f6:
                    c8:ec:d4:5d:3a:25:2a:11:f6:0d:5e:f8:4a:29:65:
                    b9:2c:9f:70:b5:06:d5:99:9b:a9:d3:f6:80:77:8b:
                    42:0f:39:ee:ce:6c:cb:f1:72:d1:98:26:e1:22:ae:
                    cf:6e:ec:a6:3e:b8:d1:d6:8d:4d:41:3e:91:5b:48:
                    ea:0d:65:0c:47:a3:a0:fb:be:d0:e0:23:e4:9f:76:
                    d1:ad:d6:3a:ac:64:79:a6:91:29:3b:33:75:44:a3:
                    19:ac:4d:79:e0:dc:3d:09:a1:85:55:b9:07:fc:51:
                    72:27:6f:3b:01:9c:64:a9:ce:6d:66:b5:62:f3:22:
                    2f:13:42:3d:b2:f7:19:4a:1f:4a:48:24:29:f0:4c:
                    55:6c:c8:d0:a9:a3:04:f0:3c:9b:db:64:50:a0:15:
                    11:f9:34:cd:08:17:00:56:a5:78:6c:18:6c:1b:41:
                    41:eb:a4:2b:6d:f3:34:96:b7:ee:24:c2:24:ef:97:
                    76:15:62:91:dc:51:44:f6:dd:f2:20:fc:a9:92:bf:
                    b4:cf:c9:98:d4:9d:10:e7:5f:71:2c:c4:f1:32:04:
                    1c:1a:cb:86:76:3a:8c:36:a7:25:da:48:32:43:5a:
                    e0:eb:06:57:d6:fe:4e:ca:83:f9:92:7b:b0:98:9b:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:96:24:8C:CF:E2:E8:26:FC:24:E4:D9:3A:7B:D4:B2:22:6D:DC:79
            X509v3 Authority Key Identifier:
                keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b7:a9:e7:06:b3:57:62:5e:84:80:86:71:56:15:84:b1:52:
         a3:de:93:28:c7:5c:7c:24:d7:83:36:d3:fc:74:8e:62:e2:e1:
         e4:56:13:69:61:17:58:f7:b0:7b:a9:15:01:a7:34:69:33:c6:
         a0:4e:31:d9:1d:91:3a:b2:f8:d9:80:ab:99:42:0a:93:b6:df:
         8b:54:5d:c5:15:d0:c1:35:57:58:26:2e:85:64:c4:7b:cf:bb:
         41:ec:ed:8e:c5:b6:e8:6c:18:14:5c:4b:aa:61:23:b3:3d:c3:
         9f:b9:ee:95:a2:54:9b:dc:9c:6b:ba:42:b4:b4:61:eb:d6:f1:
         c2:13:d8:45:4c:7e:d1:81:77:52:b3:0e:35:cf:9f:6c:da:4f:
         90:90:b7:88:e6:ca:47:9e:64:56:b7:3f:a7:73:6f:bc:83:4b:
         f4:9e:88:91:1c:6c:a2:5a:da:a0:61:8e:76:ea:7c:fc:f3:db:
         f2:11:96:18:2b:de:a1:e7:3e:e2:60:be:e3:2a:e6:67:90:61:
         45:6b:ad:aa:e1:88:0a:4f:c5:c4:79:60:61:47:cf:61:8b:2f:
         7d:1c:94:93:67:7c:9a:b8:e8:ba:f7:5f:d9:17:a4:3b:fd:d9:
         c9:f1:d9:9f:2f:a8:73:7d:b7:33:37:f3:50:32:6f:55:db:01:
         8c:17:65:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErDZEpClb5u1Aj7KM1U3etMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ODZhODY0MzYzM2U5ODc0MTExYThiY2YzNTE4YTA5MDVm
Mjg2MDkwHhcNMjYxMDExMTMwMTExWhcNMjYxMDEyMTMwMTExWjAzMTEwLwYDVQQD
EygxMDk2MjQ4Y2NmZTJlODI2ZmMyNGU0ZDkzYTdiZDRiMjIyNmRkYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38VWGqHhKp1Zzr1bP/bI7NRdOiUq
EfYNXvhKKWW5LJ9wtQbVmZup0/aAd4tCDznuzmzL8XLRmCbhIq7PbuymPrjR1o1N
QT6RW0jqDWUMR6Og+77Q4CPkn3bRrdY6rGR5ppEpOzN1RKMZrE154Nw9CaGFVbkH
/FFyJ287AZxkqc5tZrVi8yIvE0I9svcZSh9KSCQp8ExVbMjQqaME8Dyb22RQoBUR
+TTNCBcAVqV4bBhsG0FB66QrbfM0lrfuJMIk75d2FWKR3FFE9t3yIPypkr+0z8mY
1J0Q519xLMTxMgQcGsuGdjqMNqcl2kgyQ1rg6wZX1v5OyoP5knuwmJvSCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCWJIzP4ugm/CTk2Tp71LIibdx5MB8GA1UdIwQY
MBaAFLWGqGQ2M+mHQRGovPNRigkF8oYJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFlhb1pEWXo2WWRCRWFpODgxR0tDUVh5aGdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yMGNjYWMtMzNlZS00NWRjLWJjOWMt
NDQ5OWUzMjM5ZjFmLzEvdFlhb1pEWXo2WWRCRWFpODgxR0tDUVh5aGdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yMGNjYWMtMzNlZS00NWRjLWJjOWMtNDQ5OWUzMjM5ZjFm
LzEvdFlhb1pEWXo2WWRCRWFpODgxR0tDUVh5aGdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7ep5waz
V2JehICGcVYVhLFSo96TKMdcfCTXgzbT/HSOYuLh5FYTaWEXWPewe6kVAac0aTPG
oE4x2R2ROrL42YCrmUIKk7bfi1RdxRXQwTVXWCYuhWTEe8+7QeztjsW26GwYFFxL
qmEjsz3Dn7nulaJUm9yca7pCtLRh69bxwhPYRUx+0YF3UrMONc+fbNpPkJC3iObK
R55kVrc/p3NvvINL9J6IkRxsolraoGGOdup8/PPb8hGWGCveoec+4mC+4yrmZ5Bh
RWutquGICk/FxHlgYUfPYYsvfRyUk2d8mrjouvdf2RekO/3ZyfHZny+oc323Mzfz
UDJvVdsBjBdlCA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 16:38:47 2026 by rpki-client