Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File:                     uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier:          EyxC2IIgKBC/ktUKh64TQR9q78XBlIjjVc5Vs2zL9NY=
Subject key identifier:   50:6E:57:71:65:82:C8:9B:12:DC:27:20:91:58:58:2F:4D:69:C7:D0
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer:       /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial:       01A0D6F06A56EDD59CDF1F4ECFC67C7ED2BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number:          1A72
Signing time:             Fri 25 Sep 2026 05:01:14 +0000
Manifest this update:     Fri 25 Sep 2026 05:01:14 +0000
Manifest next update:     Sat 26 Sep 2026 05:01:14 +0000
Files and hashes:         1: FxSV3pjhlX5ncwMd1BJ4YPhboEI.roa (hash: V6ldsVa/sdoxhFtU1dGezva/tghG5qZAguTA3/NtrDw=)
                          2: YG_wDFENOqVU5myZSFJwFFRQIGo.roa (hash: IKdcIVVEkC9wFm1DM+wG6bBK4y8HgYiZDQKQ7434QC4=)
                          3: lWRN_vpnN3jdO53Qf_s9sKGgAYI.roa (hash: DSGrSvYMDlk724DBlB7/WGTLaoZcHPiH4iyTmdQidKM=)
                          4: m-OAweDj7IYWvNC6YulzJlZP2oY.roa (hash: SiV8TM2QfFlhSK0UqbnB7bWFP5VUqLMFVQELQm9ocug=)
                          5: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: mF0pQLnga9/K+vhi7OELtGUnazY1xAmx38TGLpLhgQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 05:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:f0:6a:56:ed:d5:9c:df:1f:4e:cf:c6:7c:7e:d2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
        Validity
            Not Before: Sep 25 05:01:14 2026 GMT
            Not After : Sep 26 05:01:14 2026 GMT
        Subject: CN=506e57716582c89b12dc27209158582f4d69c7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:66:58:66:b7:18:36:c5:7c:72:55:3c:83:20:
                    40:24:48:4e:54:76:78:c1:1b:56:95:f0:e5:fa:41:
                    0e:53:1c:16:6f:cb:40:9d:be:34:44:df:dc:9a:7e:
                    58:3c:fc:30:2a:5b:eb:0c:29:dd:f3:94:ae:58:2c:
                    8a:d8:2b:72:1f:c5:65:57:af:69:6d:82:ac:3d:ed:
                    5f:cf:29:ca:d6:5b:b2:96:f1:3f:a0:fd:48:d8:4c:
                    1e:a2:e7:db:f6:4f:a7:5c:37:8e:cb:f1:5f:22:9a:
                    96:63:c2:62:67:01:a9:a1:76:86:5c:d7:84:16:70:
                    4d:a7:d3:65:91:1a:97:fd:bc:60:53:ec:e9:d6:14:
                    26:57:1f:0c:0e:5f:ad:6d:d2:93:87:83:4c:2b:af:
                    10:5a:97:35:f4:c8:ff:95:b0:21:b1:c8:16:3f:75:
                    c8:ac:22:43:ec:39:a0:b0:78:0d:17:d0:27:b5:c8:
                    d3:c2:03:26:a3:95:0d:e2:2f:91:7c:08:8e:64:5b:
                    d0:4b:ff:a8:e3:29:2f:1f:b0:cf:13:54:52:73:f0:
                    0c:d2:f3:b9:0e:69:09:76:54:cf:b8:a3:85:ed:b6:
                    50:da:ba:c6:66:24:57:03:61:fd:38:32:2d:44:85:
                    01:2a:bf:24:49:5d:90:6b:06:12:52:16:79:aa:b7:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6E:57:71:65:82:C8:9B:12:DC:27:20:91:58:58:2F:4D:69:C7:D0
            X509v3 Authority Key Identifier:
                keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:cd:75:c8:82:95:7a:69:14:67:2d:de:7d:13:bb:a7:af:01:
         c6:6a:8e:50:d9:d4:3f:48:16:04:7f:22:e1:90:13:e2:0d:7f:
         59:5a:07:dc:26:e3:3a:31:05:9c:a3:d7:72:24:8c:6d:97:41:
         da:75:1b:11:13:ad:fc:73:ff:02:4f:46:d9:9b:5f:46:be:ac:
         76:fd:1f:1d:5e:f6:2a:5f:58:f2:78:1e:44:19:84:07:42:10:
         fb:d9:89:c2:29:02:d4:0a:69:11:09:06:c9:1e:ac:1f:64:55:
         f5:9e:62:7e:72:5e:20:b4:f5:cd:04:30:e1:c2:f0:6a:e9:d5:
         0c:0b:ed:a6:f6:c8:a3:58:cd:23:19:dd:a7:ff:6c:45:aa:6f:
         66:85:e9:bf:72:d9:47:86:3f:90:02:c3:c4:09:6a:d0:2f:cc:
         45:af:d9:16:ec:ae:61:0d:24:69:17:1a:b8:f9:27:c4:a3:3a:
         4e:72:0a:d5:0f:fe:f9:b2:e6:3e:26:c6:90:84:1a:f3:42:f8:
         f8:fd:4d:c9:5c:6b:52:46:7c:71:0d:75:96:3e:1d:ae:a8:ca:
         89:24:ee:7c:e5:c9:e2:84:3f:05:05:1f:c9:6c:c5:8f:25:1b:
         ff:ae:35:e8:33:e2:b9:ef:cc:c2:2d:87:37:ff:37:73:31:7e:
         cb:fb:6d:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDW8GpW7dWc3x9Oz8Z8ftK/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQ2NDc2Nzc3M2YxMjM5YjY0NmJiNjZiZGNmNGY3ZmIx
MjA2Y2UwHhcNMjYwOTI1MDUwMTE0WhcNMjYwOTI2MDUwMTE0WjAzMTEwLwYDVQQD
Eyg1MDZlNTc3MTY1ODJjODliMTJkYzI3MjA5MTU4NTgyZjRkNjljN2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mZYZrcYNsV8clU8gyBAJEhOVHZ4
wRtWlfDl+kEOUxwWb8tAnb40RN/cmn5YPPwwKlvrDCnd85SuWCyK2CtyH8VlV69p
bYKsPe1fzynK1luylvE/oP1I2Eweoufb9k+nXDeOy/FfIpqWY8JiZwGpoXaGXNeE
FnBNp9NlkRqX/bxgU+zp1hQmVx8MDl+tbdKTh4NMK68QWpc19Mj/lbAhscgWP3XI
rCJD7DmgsHgNF9AntcjTwgMmo5UN4i+RfAiOZFvQS/+o4ykvH7DPE1RSc/AM0vO5
DmkJdlTPuKOF7bZQ2rrGZiRXA2H9ODItRIUBKr8kSV2QawYSUhZ5qrcfzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBuV3FlgsibEtwnIJFYWC9NacfQMB8GA1UdIwQY
MBaAFLkUZHZ3c/Ejm2Rrtmvc9Pf7EgbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMt
NDc1ZGJiYjBjMDhjLzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xM2ZjZDEtZDgwNi00ZTU2LTg1MzMtNDc1ZGJiYjBjMDhj
LzEvdVJSa2RuZHo4U09iWkd1MmE5ejA5X3NTQnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQc11yIKV
emkUZy3efRO7p68BxmqOUNnUP0gWBH8i4ZAT4g1/WVoH3CbjOjEFnKPXciSMbZdB
2nUbEROt/HP/Ak9G2ZtfRr6sdv0fHV72Kl9Y8ngeRBmEB0IQ+9mJwikC1AppEQkG
yR6sH2RV9Z5ifnJeILT1zQQw4cLwaunVDAvtpvbIo1jNIxndp/9sRapvZoXpv3LZ
R4Y/kALDxAlq0C/MRa/ZFuyuYQ0kaRcauPknxKM6TnIK1Q/++bLmPibGkIQa80L4
+P1NyVxrUkZ8cQ11lj4drqjKiSTufOXJ4oQ/BQUfyWzFjyUb/6416DPiue/Mwi2H
N/83czF+y/ttbA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:14:12 2026 by rpki-client