Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File:                     t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier:          h75ufFPoqQIgy/nobJ3cTAXbnpoPwDKWIcu9fkXJxkg=
Subject key identifier:   2A:4B:E4:86:0B:84:76:79:2E:9F:10:16:F2:77:CC:6A:0F:49:F9:8A
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer:       /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial:       01A0D2DE3E28F5FC6ABF28223A6E58D09B7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number:          09B7
Signing time:             Thu 24 Sep 2026 10:02:55 +0000
Manifest this update:     Thu 24 Sep 2026 10:02:55 +0000
Manifest next update:     Fri 25 Sep 2026 10:02:55 +0000
Files and hashes:         1: 2zOKVHZfMm9AxAnIgk6BSVssqPo.roa (hash: UxUPcLpqbBTjs1BO/RAIL95/BplOFFKqBnWYZsn/g5c=)
                          2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: IvCBQj1zAE4izbLg4QfsP9ik9WKHjbPDmDNiGwGp25Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 10:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:de:3e:28:f5:fc:6a:bf:28:22:3a:6e:58:d0:9b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
        Validity
            Not Before: Sep 24 10:02:55 2026 GMT
            Not After : Sep 25 10:02:55 2026 GMT
        Subject: CN=2a4be4860b8476792e9f1016f277cc6a0f49f98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:01:62:18:3d:ba:4b:1d:ba:6b:02:4b:a8:
                    3d:b4:4a:a4:00:64:17:64:7d:9c:2f:af:9b:7e:a7:
                    1c:26:e5:de:b4:99:4b:08:45:42:84:26:f1:75:c4:
                    f2:7b:a5:e8:eb:f9:40:9f:5b:ab:56:38:7f:51:58:
                    d3:e5:43:41:c5:f9:2a:94:3b:59:62:69:f0:5d:4a:
                    dc:50:44:93:03:ae:8b:cb:7d:a5:b6:84:ac:ec:58:
                    a9:af:b8:c1:41:fd:b7:fa:85:9e:b1:b3:f3:d1:20:
                    e7:6d:62:0b:71:c6:f4:26:fb:d2:63:f5:e6:46:d1:
                    42:53:f2:31:6c:9b:fb:18:a6:62:b8:60:d9:c4:c3:
                    ee:22:91:73:58:b2:62:05:c7:10:b4:dc:02:d7:62:
                    0f:8c:fe:ac:18:75:eb:81:b3:d9:29:ef:13:03:02:
                    37:88:98:c1:5f:c8:93:6d:8d:9c:1e:f6:78:fe:4d:
                    dc:95:ce:f7:f8:25:94:e8:a5:21:9e:3a:c4:4f:7d:
                    c3:d0:f6:e6:85:1b:81:70:35:5f:f1:c1:5e:f7:f0:
                    a1:34:e5:32:62:f5:96:82:f1:4d:5a:51:29:0c:8b:
                    2f:c4:26:c3:9b:e3:93:80:04:b3:94:5b:1c:98:d5:
                    da:56:db:7d:06:97:83:01:a4:bb:7d:e6:42:0e:2e:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4B:E4:86:0B:84:76:79:2E:9F:10:16:F2:77:CC:6A:0F:49:F9:8A
            X509v3 Authority Key Identifier:
                keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e2:24:2b:4a:11:81:17:72:3b:c2:7a:b4:23:93:67:1e:16:
         54:b7:72:a0:74:0b:72:4d:72:f0:7a:76:27:b5:6e:94:41:b4:
         93:48:cb:94:b4:eb:89:39:13:ca:77:41:70:99:ea:0a:31:19:
         13:ec:04:c0:28:23:6f:ad:8d:3f:b2:59:ab:aa:1a:ee:50:09:
         50:9d:44:63:63:18:a7:cb:4f:a5:dc:d8:6c:0d:25:26:29:27:
         c3:0b:3e:58:74:c8:69:24:98:52:84:c8:53:e6:93:e3:e3:af:
         f2:72:6e:ac:38:d1:6d:dc:5c:3e:ec:aa:87:98:44:c0:07:6d:
         ea:f8:17:20:a4:0f:b2:4a:d6:5b:fb:34:da:dc:80:9f:a9:8f:
         9a:3b:b5:6f:d1:cb:3f:32:e4:a1:ae:14:3c:c6:e9:de:8e:12:
         da:1a:02:be:6b:12:56:44:30:4f:b4:d2:75:99:0d:ae:25:b8:
         44:c8:ac:26:b2:a3:f2:b4:c8:ad:da:35:1e:60:91:9d:76:0c:
         45:fa:6c:09:53:a5:74:ba:13:54:a5:d9:9e:b3:74:49:23:45:
         72:bc:15:54:dc:1e:06:85:9e:00:f5:34:3a:cd:9e:c6:ba:3c:
         5d:e3:ff:fc:4a:a5:8a:ec:f7:82:31:8a:23:d8:fe:eb:f6:4a:
         53:de:a3:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3j4o9fxqvygiOm5Y0Jt+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OWU1ZDRmODM1ZWE4OGQ3NmI2MDI1NmUwMDM3NTQ3Y2Q5
NjgyNzkwHhcNMjYwOTI0MTAwMjU1WhcNMjYwOTI1MTAwMjU1WjAzMTEwLwYDVQQD
EygyYTRiZTQ4NjBiODQ3Njc5MmU5ZjEwMTZmMjc3Y2M2YTBmNDlmOThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfsBYhg9uksdumsCS6g9tEqkAGQX
ZH2cL6+bfqccJuXetJlLCEVChCbxdcTye6Xo6/lAn1urVjh/UVjT5UNBxfkqlDtZ
YmnwXUrcUESTA66Ly32ltoSs7Fipr7jBQf23+oWesbPz0SDnbWILccb0JvvSY/Xm
RtFCU/IxbJv7GKZiuGDZxMPuIpFzWLJiBccQtNwC12IPjP6sGHXrgbPZKe8TAwI3
iJjBX8iTbY2cHvZ4/k3clc73+CWU6KUhnjrET33D0PbmhRuBcDVf8cFe9/ChNOUy
YvWWgvFNWlEpDIsvxCbDm+OTgASzlFscmNXaVtt9BpeDAaS7feZCDi6IPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpL5IYLhHZ5Lp8QFvJ3zGoPSfmKMB8GA1UdIwQY
MBaAFLeeXU+DXqiNdrYCVuADdUfNloJ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lMzY5NGItNzdmOS00MmIwLWI1YTMt
OWI3ZDQ5YWRlZGIzLzEvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lMzY5NGItNzdmOS00MmIwLWI1YTMtOWI3ZDQ5YWRlZGIz
LzEvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeIkK0oR
gRdyO8J6tCOTZx4WVLdyoHQLck1y8Hp2J7VulEG0k0jLlLTriTkTyndBcJnqCjEZ
E+wEwCgjb62NP7JZq6oa7lAJUJ1EY2MYp8tPpdzYbA0lJiknwws+WHTIaSSYUoTI
U+aT4+Ov8nJurDjRbdxcPuyqh5hEwAdt6vgXIKQPskrWW/s02tyAn6mPmju1b9HL
PzLkoa4UPMbp3o4S2hoCvmsSVkQwT7TSdZkNriW4RMisJrKj8rTIrdo1HmCRnXYM
RfpsCVOldLoTVKXZnrN0SSNFcrwVVNweBoWeAPU0Os2exro8XeP//Eqliuz3gjGK
I9j+6/ZKU96jHQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:49:24 2026 by rpki-client