Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
File:                     mAScy5olSKAa-jAXQVFXSgx6QSw.mft (raw, json)
Hash identifier:          WMHy59yBvk7AuhMyPGRbFiJ1Ou5ST+J4lP9Ad41tkEE=
Subject key identifier:   DF:78:9F:B6:F5:37:E4:E7:78:8C:3E:61:2C:BF:4C:C3:7F:0B:D0:C4
Authority key identifier: 98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C
Certificate issuer:       /CN=98049ccb9a2548a01afa30174151574a0c7a412c
Certificate serial:       01A0D3B85154EECA10D88877962BC8F4CFEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
Manifest number:          01FF
Signing time:             Thu 24 Sep 2026 14:01:07 +0000
Manifest this update:     Thu 24 Sep 2026 14:01:07 +0000
Manifest next update:     Fri 25 Sep 2026 14:01:07 +0000
Files and hashes:         1: mAScy5olSKAa-jAXQVFXSgx6QSw.crl (hash: hhI4fW0uLkYPLWoS8uPtXa7S7fObianGr5g/sihm86U=)
                          2: v3rr5t_ahN3SGVp2ApT1qF3-fwA.asa (hash: RejTRkyxSV+Llox1LpfU1092WFQtRS38pK5lWPMIQNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:b8:51:54:ee:ca:10:d8:88:77:96:2b:c8:f4:cf:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98049ccb9a2548a01afa30174151574a0c7a412c
        Validity
            Not Before: Sep 24 14:01:07 2026 GMT
            Not After : Sep 25 14:01:07 2026 GMT
        Subject: CN=df789fb6f537e4e7788c3e612cbf4cc37f0bd0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c9:7c:2a:c8:8b:bc:0a:3a:ea:39:8d:c2:8a:
                    73:e8:d6:a7:29:99:a5:cc:45:05:11:c1:ea:20:de:
                    3c:68:98:f6:62:98:be:6b:9a:12:80:49:7e:8c:4a:
                    8f:2f:ee:81:7f:a9:41:58:ff:a6:44:bd:a3:e6:f5:
                    7f:0d:4c:49:20:10:7b:56:f0:b0:6b:43:ed:26:14:
                    13:67:b7:b7:f2:26:be:bc:17:fa:92:82:ac:3e:90:
                    6a:f4:03:97:f4:b0:0c:21:15:9d:71:c8:3a:86:a4:
                    7f:71:75:25:76:fa:e4:73:f1:f6:08:89:65:3f:1c:
                    06:cc:bb:63:f1:17:d0:ef:a3:18:90:49:68:e8:f6:
                    56:4e:d4:33:97:80:b1:64:45:cd:4c:0f:98:80:b6:
                    e8:0d:a2:25:92:83:3d:7b:d4:68:05:a2:1e:4f:4d:
                    ac:f3:15:30:45:91:a6:b7:f3:1a:16:ca:83:85:ee:
                    50:3c:55:05:84:ef:09:33:9e:e3:f0:57:d7:bb:8f:
                    d7:e2:b4:98:f1:c4:55:36:d6:3e:93:7e:f7:8d:7b:
                    87:02:44:f9:ad:83:d2:bc:a6:3c:f6:fc:64:cd:01:
                    c8:71:6b:82:86:c0:6a:e0:f9:22:79:ba:a6:e1:fe:
                    66:82:8f:e7:60:f6:ad:1a:1f:eb:15:5b:b8:ae:da:
                    40:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:78:9F:B6:F5:37:E4:E7:78:8C:3E:61:2C:BF:4C:C3:7F:0B:D0:C4
            X509v3 Authority Key Identifier:
                keyid:98:04:9C:CB:9A:25:48:A0:1A:FA:30:17:41:51:57:4A:0C:7A:41:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAScy5olSKAa-jAXQVFXSgx6QSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d2eb2f-5159-4144-812d-92c7cfaa8b7d/1/mAScy5olSKAa-jAXQVFXSgx6QSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:70:0a:fd:a5:9a:97:e6:e4:6d:78:6a:a0:5d:1f:84:e8:8a:
         50:03:e6:cb:06:25:a0:f8:a2:c7:be:d9:9a:fd:8b:31:5b:d8:
         f0:34:f6:0e:d3:7e:b4:68:08:08:00:08:1b:21:f2:ff:fb:ba:
         44:72:db:b1:42:56:48:94:f2:55:0b:5c:9b:85:6a:0e:74:3d:
         c7:0d:32:90:aa:83:e0:be:59:dc:8f:26:bd:36:d1:8f:28:7b:
         58:ee:99:ea:6e:aa:ee:7d:3c:cd:6e:e6:c7:9f:bd:87:85:b8:
         56:f7:18:d9:73:57:1e:d9:d7:ba:45:f3:75:2f:20:e6:2e:95:
         e1:04:32:fb:dd:ef:10:75:59:4f:c1:f4:27:0c:47:0e:90:e7:
         47:6f:62:f9:77:c4:b4:84:3b:97:72:26:59:b1:9a:f8:ea:b0:
         37:ef:e4:ed:e7:38:ca:a5:30:ee:47:d8:73:ea:3c:f1:ab:ea:
         ae:48:dc:b0:2d:ae:58:07:ed:f3:7f:fb:8e:0a:5e:4d:52:ea:
         f2:f3:23:50:1b:7a:44:d6:5e:9d:9c:4d:36:f7:1d:a7:b2:df:
         fb:27:35:da:3c:db:bc:30:8e:01:eb:c9:3f:89:a4:fc:be:9e:
         85:2d:3b:53:25:83:36:1f:32:54:0d:38:17:ee:3a:c0:58:0f:
         ae:bf:4f:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTuFFU7soQ2Ih3livI9M/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MDQ5Y2NiOWEyNTQ4YTAxYWZhMzAxNzQxNTE1NzRhMGM3
YTQxMmMwHhcNMjYwOTI0MTQwMTA3WhcNMjYwOTI1MTQwMTA3WjAzMTEwLwYDVQQD
EyhkZjc4OWZiNmY1MzdlNGU3Nzg4YzNlNjEyY2JmNGNjMzdmMGJkMGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ml8KsiLvAo66jmNwopz6NanKZml
zEUFEcHqIN48aJj2Ypi+a5oSgEl+jEqPL+6Bf6lBWP+mRL2j5vV/DUxJIBB7VvCw
a0PtJhQTZ7e38ia+vBf6koKsPpBq9AOX9LAMIRWdccg6hqR/cXUldvrkc/H2CIll
PxwGzLtj8RfQ76MYkElo6PZWTtQzl4CxZEXNTA+YgLboDaIlkoM9e9RoBaIeT02s
8xUwRZGmt/MaFsqDhe5QPFUFhO8JM57j8FfXu4/X4rSY8cRVNtY+k373jXuHAkT5
rYPSvKY89vxkzQHIcWuChsBq4Pkiebqm4f5mgo/nYPatGh/rFVu4rtpA7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN94n7b1N+TneIw+YSy/TMN/C9DEMB8GA1UdIwQY
MBaAFJgEnMuaJUigGvowF0FRV0oMekEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUFTY3k1b2xTS0FhLWpBWFFWRlhTZ3g2UVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kMmViMmYtNTE1OS00MTQ0LTgxMmQt
OTJjN2NmYWE4YjdkLzEvbUFTY3k1b2xTS0FhLWpBWFFWRlhTZ3g2UVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kMmViMmYtNTE1OS00MTQ0LTgxMmQtOTJjN2NmYWE4Yjdk
LzEvbUFTY3k1b2xTS0FhLWpBWFFWRlhTZ3g2UVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinAK/aWa
l+bkbXhqoF0fhOiKUAPmywYloPiix77Zmv2LMVvY8DT2DtN+tGgICAAIGyHy//u6
RHLbsUJWSJTyVQtcm4VqDnQ9xw0ykKqD4L5Z3I8mvTbRjyh7WO6Z6m6q7n08zW7m
x5+9h4W4VvcY2XNXHtnXukXzdS8g5i6V4QQy+93vEHVZT8H0JwxHDpDnR29i+XfE
tIQ7l3ImWbGa+OqwN+/k7ec4yqUw7kfYc+o88avqrkjcsC2uWAft83/7jgpeTVLq
8vMjUBt6RNZenZxNNvcdp7Lf+yc12jzbvDCOAevJP4mk/L6ehS07UyWDNh8yVA04
F+46wFgPrr9P/g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:24:14 2026 by rpki-client