Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.mft
File:                     _QucZp7t9WiEnkSyLUsPABFImts.mft (raw, json)
Hash identifier:          s4oDoRNyPROs5QObLG28BpEiktDUfITT9IrcTlAwZN0=
Subject key identifier:   A8:8E:EA:7D:6A:57:C7:B6:1A:FF:11:D5:DA:44:E3:1F:F9:67:C2:05
Authority key identifier: FD:0B:9C:66:9E:ED:F5:68:84:9E:44:B2:2D:4B:0F:00:11:48:9A:DB
Certificate issuer:       /CN=fd0b9c669eedf568849e44b22d4b0f0011489adb
Certificate serial:       01A0E174D47A3D7C23DD741B435782AA8992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.mft
Manifest number:          EE
Signing time:             Sun 27 Sep 2026 06:02:05 +0000
Manifest this update:     Sun 27 Sep 2026 06:02:05 +0000
Manifest next update:     Mon 28 Sep 2026 06:02:05 +0000
Files and hashes:         1: LefwY8gpcZ-R-tJPrykmBr0pJFk.roa (hash: cf3hQ7ddtb5GAFex4VifyP4EhX3vFqnUNjT44D+CIHQ=)
                          2: QEAgodlhX0q31m_BwmFzK4J6e_I.roa (hash: ifPYPV007NLuqIpdttAdYACWibvcd1/6B9YqJ6XHc+w=)
                          3: _QucZp7t9WiEnkSyLUsPABFImts.crl (hash: wdPMoJPnThofMLUtGM0zOuJXfj0bd91fqJtMubWVqdk=)
                          4: v8b045fqfv6vOCgmZrVMvK97ie4.roa (hash: 2NOScfLaz7B1SjBU8c3qFZzj0fv2grUazeuB2RYFYjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:74:d4:7a:3d:7c:23:dd:74:1b:43:57:82:aa:89:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd0b9c669eedf568849e44b22d4b0f0011489adb
        Validity
            Not Before: Sep 27 06:02:05 2026 GMT
            Not After : Sep 28 06:02:05 2026 GMT
        Subject: CN=a88eea7d6a57c7b61aff11d5da44e31ff967c205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:18:eb:32:c4:f7:94:c0:a8:36:07:71:26:
                    c2:f8:c2:79:80:bf:c9:e4:6e:f6:1c:4e:04:1b:0c:
                    ea:19:29:41:52:b4:6e:28:8d:3c:ed:74:99:6b:61:
                    a4:cf:c8:71:0f:ae:01:1c:dd:c3:56:b5:86:0e:3e:
                    88:19:36:98:0f:27:ce:b7:cf:bd:9f:a2:84:5a:4e:
                    43:d6:14:a9:58:e3:91:19:51:e9:89:5a:15:fa:7e:
                    59:e0:90:ee:34:46:64:b0:96:ba:21:e9:ea:c0:2b:
                    7a:e8:3b:81:06:e9:a2:ef:02:e1:33:1a:ee:10:f3:
                    ae:69:ae:47:fd:9b:01:e6:f0:75:e2:0f:f7:84:78:
                    b5:22:67:b6:01:83:b9:77:73:71:b6:bb:8b:13:63:
                    a1:62:8f:b8:23:02:e8:08:2c:33:ce:59:16:a7:78:
                    e3:95:a3:09:7a:1f:1f:de:2b:f6:e0:bb:f8:11:8d:
                    3f:f1:09:75:fc:80:4a:d8:8f:7b:5f:9e:9c:e6:06:
                    c1:a2:6d:91:9c:66:7a:0f:0a:c3:58:ba:5c:b4:10:
                    ed:28:8b:d0:08:7e:5b:d5:5e:e5:50:08:55:ba:9a:
                    db:3e:b7:5a:b5:fc:0e:63:35:48:d7:b8:5a:d1:f5:
                    ad:89:04:da:3b:3c:b8:e4:e5:01:91:e3:1b:60:23:
                    c3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8E:EA:7D:6A:57:C7:B6:1A:FF:11:D5:DA:44:E3:1F:F9:67:C2:05
            X509v3 Authority Key Identifier:
                keyid:FD:0B:9C:66:9E:ED:F5:68:84:9E:44:B2:2D:4B:0F:00:11:48:9A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:15:a8:8c:fb:a1:f7:58:4e:3d:cc:0f:8b:22:5d:07:0f:5e:
         c7:e9:a2:d7:38:9b:26:f2:3c:94:57:70:73:78:14:2c:2a:6b:
         dd:a0:6e:bb:e3:7e:66:f8:73:fb:01:f4:f7:85:98:7e:04:6e:
         62:52:fe:79:4d:7c:77:86:20:c8:bd:5b:b2:d3:f3:7d:56:7e:
         3c:88:8c:1d:42:33:e7:21:99:6f:83:0b:e2:f2:cc:f4:63:71:
         db:21:64:39:a1:3a:99:79:ea:af:ce:32:22:26:12:27:53:84:
         c6:45:48:13:16:1e:77:f4:5b:96:56:b0:01:84:01:53:87:6e:
         48:e6:34:c9:a6:6b:fb:7e:48:13:c6:f4:2e:9e:4e:04:39:a8:
         9e:43:b8:6f:20:2c:ae:58:51:9b:7e:cc:73:84:67:e2:a4:fc:
         f3:af:a7:39:e8:9b:8e:26:3f:8c:e5:84:ab:3a:59:02:18:11:
         06:89:c7:3a:48:9a:c1:7b:d7:ce:44:04:aa:3f:26:14:b7:2a:
         86:b5:c7:86:06:04:48:03:3c:6f:7e:d1:38:1b:54:72:36:11:
         e5:86:52:34:d3:4c:0e:d5:f6:1c:95:d8:f1:34:3c:8a:d8:6c:
         cf:a1:77:e8:58:35:37:c3:c0:61:e0:95:aa:c0:8f:d8:87:92:
         54:e9:b6:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhdNR6PXwj3XQbQ1eCqomSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMGI5YzY2OWVlZGY1Njg4NDllNDRiMjJkNGIwZjAwMTE0
ODlhZGIwHhcNMjYwOTI3MDYwMjA1WhcNMjYwOTI4MDYwMjA1WjAzMTEwLwYDVQQD
EyhhODhlZWE3ZDZhNTdjN2I2MWFmZjExZDVkYTQ0ZTMxZmY5NjdjMjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZgY6zLE95TAqDYHcSbC+MJ5gL/J
5G72HE4EGwzqGSlBUrRuKI087XSZa2Gkz8hxD64BHN3DVrWGDj6IGTaYDyfOt8+9
n6KEWk5D1hSpWOORGVHpiVoV+n5Z4JDuNEZksJa6IenqwCt66DuBBumi7wLhMxru
EPOuaa5H/ZsB5vB14g/3hHi1Ime2AYO5d3NxtruLE2OhYo+4IwLoCCwzzlkWp3jj
laMJeh8f3iv24Lv4EY0/8Ql1/IBK2I97X56c5gbBom2RnGZ6DwrDWLpctBDtKIvQ
CH5b1V7lUAhVuprbPrdatfwOYzVI17ha0fWtiQTaOzy45OUBkeMbYCPDPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiO6n1qV8e2Gv8R1dpE4x/5Z8IFMB8GA1UdIwQY
MBaAFP0LnGae7fVohJ5Esi1LDwARSJrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1F1Y1pwN3Q5V2lFbmtTeUxVc1BBQkZJbXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAt
ZjYwZDZmNzE4MmExLzEvX1F1Y1pwN3Q5V2lFbmtTeUxVc1BBQkZJbXRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAtZjYwZDZmNzE4MmEx
LzEvX1F1Y1pwN3Q5V2lFbmtTeUxVc1BBQkZJbXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBWojPuh
91hOPcwPiyJdBw9ex+mi1zibJvI8lFdwc3gULCpr3aBuu+N+Zvhz+wH094WYfgRu
YlL+eU18d4YgyL1bstPzfVZ+PIiMHUIz5yGZb4ML4vLM9GNx2yFkOaE6mXnqr84y
IiYSJ1OExkVIExYed/RbllawAYQBU4duSOY0yaZr+35IE8b0Lp5OBDmonkO4byAs
rlhRm37Mc4Rn4qT886+nOeibjiY/jOWEqzpZAhgRBonHOkiawXvXzkQEqj8mFLcq
hrXHhgYESAM8b37ROBtUcjYR5YZSNNNMDtX2HJXY8TQ8ithsz6F36Fg1N8PAYeCV
qsCP2IeSVOm2gQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 17:25:01 2026 by rpki-client