Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
File:                     1E3mWXWbAnQSSntIHQl2hAt63gY.mft (raw, json)
Hash identifier:          5ilDN4dPFNnyzenvpEA5JswG+hsoKlUCvJ3WzgsmdOE=
Subject key identifier:   01:96:98:F6:B3:D8:CB:7D:38:59:BD:2D:69:B6:2A:9D:D7:78:3D:7F
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Certificate issuer:       /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial:       01A0DACDA1360487342A9739CD66C9A9B37B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
Manifest number:          1A81
Signing time:             Fri 25 Sep 2026 23:01:44 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:44 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:44 +0000
Files and hashes:         1: 1E3mWXWbAnQSSntIHQl2hAt63gY.crl (hash: yRt+eXqojz87+mHdt9B6kyIxnkmnJBA0FF1zNTJJVCU=)
                          2: Pt0M7NnxrDEjh0WRvtZuGbZ1UJA.roa (hash: ON1158FpBOF9o3UWP6p7ZLz3OaCeEIQthwTlVtzYN/c=)
                          3: THN8hCVJidCA3UH30sjY5WP-4fE.roa (hash: UUYFxGp36/YrRjz3VGHAWAoR8JxAN5Tri92IoH5+SsM=)
                          4: Ye2GEDhazaeP2-cVb6Ll0YyHos0.roa (hash: D4xycm19E4MZpyyHq3gT/6x9Pb6wa/VQKyOsseee/GY=)
                          5: rKJI_5vgHPazIibiny0M3pEZG_4.roa (hash: ZTXWO4j1M3rBY3Zk/wDufutDDLtgGbRt+vTWZKesVQ0=)
                          6: sQ-PGm3V00xBDT0qqPPPgHHq11M.roa (hash: o5ucqRn0DHHqYoHJ+Qw03dH+VXUyTmU4LwJejoQASVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:a1:36:04:87:34:2a:97:39:cd:66:c9:a9:b3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
        Validity
            Not Before: Sep 25 23:01:44 2026 GMT
            Not After : Sep 26 23:01:44 2026 GMT
        Subject: CN=019698f6b3d8cb7d3859bd2d69b62a9dd7783d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:26:19:4f:42:6e:92:21:5a:bf:6f:c0:8d:
                    b3:89:17:1b:15:1e:7c:e1:7e:4b:a1:76:ae:c2:ee:
                    b6:39:34:ba:1b:17:a6:eb:4a:2b:ee:91:c1:e6:b6:
                    06:85:71:e4:82:6c:63:c2:79:0e:56:9e:96:30:a0:
                    84:74:af:3f:eb:49:bb:ef:75:54:dc:26:f9:b4:df:
                    b6:24:d9:fb:14:bf:35:e7:42:39:d5:f7:27:e4:9b:
                    28:52:9f:34:a6:f0:a7:60:95:4e:68:22:3a:af:33:
                    a3:ab:f3:3c:ef:ad:00:17:60:72:1d:15:cb:94:7b:
                    a1:7b:98:06:c5:68:46:ad:3d:07:d0:e9:ae:ee:0e:
                    46:e4:0f:21:6a:af:a3:74:b6:8f:d9:42:6d:3b:d3:
                    dd:13:d9:e6:df:1f:0a:50:ee:4d:c4:7a:69:d8:4f:
                    a7:d3:df:be:e6:65:e1:43:bd:89:06:90:a5:bc:ed:
                    10:fa:71:14:72:88:c5:7b:ea:06:87:bc:4d:3a:f1:
                    34:46:fd:78:68:2e:81:3e:c6:6e:54:f7:aa:da:54:
                    a9:7b:c6:65:e3:13:23:8c:0f:56:11:60:dd:7c:37:
                    d7:4d:2c:01:d5:45:50:66:27:96:16:d4:05:da:d0:
                    b2:7b:db:50:05:cf:47:f6:3f:38:73:de:c5:b6:76:
                    f3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:96:98:F6:B3:D8:CB:7D:38:59:BD:2D:69:B6:2A:9D:D7:78:3D:7F
            X509v3 Authority Key Identifier:
                keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:43:6a:9c:db:0d:43:69:b5:71:fa:d1:83:ad:d9:06:64:93:
         ac:e4:f0:2a:6b:a4:10:c8:cd:4d:57:14:c3:5c:c3:3f:69:5b:
         8e:e1:cc:bd:a8:ee:12:71:a8:d5:c4:e8:81:c9:b4:16:35:ec:
         a9:2c:b5:7e:ed:78:97:93:a1:66:41:5b:1a:81:7e:4b:c4:f5:
         29:7b:87:cc:b7:78:4f:7c:4c:4c:c3:c9:51:2f:dd:31:78:1a:
         80:f8:61:71:ec:3c:80:3c:f4:a3:07:ff:ce:cb:48:f9:22:6a:
         8b:e7:1e:5a:4b:fd:f7:ed:08:aa:5e:4a:69:2c:10:88:b9:c0:
         7d:98:74:54:b2:57:a3:d3:12:c8:9d:ba:5a:ed:57:38:20:e7:
         e3:23:2a:28:22:02:49:9a:63:15:3b:88:d5:8d:f1:18:43:f6:
         5a:18:06:ed:f6:d2:4e:c9:0c:e0:16:bb:64:37:b6:50:74:3d:
         bd:ff:5a:eb:a7:be:e9:84:29:df:da:5a:b1:73:a5:5f:01:8a:
         18:b8:50:21:7a:8e:9e:82:e5:7b:fe:e2:b1:9b:7e:0a:79:e2:
         86:00:41:d2:ec:13:2a:f8:74:df:2b:6e:f5:eb:8c:07:de:a8:
         c2:7f:46:cd:45:07:e9:4f:f7:6e:44:c2:7c:3a:97:d9:1f:6f:
         eb:2f:1a:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDazaE2BIc0Kpc5zWbJqbN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NGRlNjU5NzU5YjAyNzQxMjRhN2I0ODFkMDk3Njg0MGI3
YWRlMDYwHhcNMjYwOTI1MjMwMTQ0WhcNMjYwOTI2MjMwMTQ0WjAzMTEwLwYDVQQD
EygwMTk2OThmNmIzZDhjYjdkMzg1OWJkMmQ2OWI2MmE5ZGQ3NzgzZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqosmGU9CbpIhWr9vwI2ziRcbFR58
4X5LoXauwu62OTS6Gxem60or7pHB5rYGhXHkgmxjwnkOVp6WMKCEdK8/60m773VU
3Cb5tN+2JNn7FL8150I51fcn5JsoUp80pvCnYJVOaCI6rzOjq/M8760AF2ByHRXL
lHuhe5gGxWhGrT0H0Omu7g5G5A8haq+jdLaP2UJtO9PdE9nm3x8KUO5NxHpp2E+n
09++5mXhQ72JBpClvO0Q+nEUcojFe+oGh7xNOvE0Rv14aC6BPsZuVPeq2lSpe8Zl
4xMjjA9WEWDdfDfXTSwB1UVQZieWFtQF2tCye9tQBc9H9j84c97FtnbzZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGWmPaz2Mt9OFm9LWm2Kp3XeD1/MB8GA1UdIwQY
MBaAFNRN5ll1mwJ0Ekp7SB0JdoQLet4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUUzbVdYV2JBblFTU250SUhRbDJoQXQ2M2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83NTIxNmQtNjg0Yi00N2NjLWE5NWUt
ZGI0ZDM5ZGM0ZWM3LzEvMUUzbVdYV2JBblFTU250SUhRbDJoQXQ2M2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83NTIxNmQtNjg0Yi00N2NjLWE5NWUtZGI0ZDM5ZGM0ZWM3
LzEvMUUzbVdYV2JBblFTU250SUhRbDJoQXQ2M2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0NqnNsN
Q2m1cfrRg63ZBmSTrOTwKmukEMjNTVcUw1zDP2lbjuHMvajuEnGo1cTogcm0FjXs
qSy1fu14l5OhZkFbGoF+S8T1KXuHzLd4T3xMTMPJUS/dMXgagPhhcew8gDz0owf/
zstI+SJqi+ceWkv99+0Iql5KaSwQiLnAfZh0VLJXo9MSyJ26Wu1XOCDn4yMqKCIC
SZpjFTuI1Y3xGEP2WhgG7fbSTskM4Ba7ZDe2UHQ9vf9a66e+6YQp39pasXOlXwGK
GLhQIXqOnoLle/7isZt+CnnihgBB0uwTKvh03ytu9euMB96own9GzUUH6U/3bkTC
fDqX2R9v6y8aLQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:47:04 2026 by rpki-client