Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File:                     up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier:          NISX3cHrOVZ5xwQfWyE/jlpaOLCDaI6ThBUwoCZ+WOk=
Subject key identifier:   8B:B8:E3:96:49:D6:2B:88:89:37:5D:12:63:D6:FA:79:D9:0B:81:30
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer:       /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial:       01A0D1926793874DA7EDCCF433DC077235D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number:          1A7E
Signing time:             Thu 24 Sep 2026 04:00:27 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:27 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:27 +0000
Files and hashes:         1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=)
                          2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=)
                          3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=)
                          4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=)
                          5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=)
                          6: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=)
                          7: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=)
                          8: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=)
                          9: MR0r-YpSmpXMsH4aFzpiE02h6bo.roa (hash: f4/OYvolIQCytH134KDQmcd51o3N0KRG0eWhuISvPcg=)
                          10: N3LKuwLRuVKYuFWiGYpHH9iTJDU.roa (hash: +3GE+YLKYRUGq2ir////J+cfvpEdtk9nror7A4YJdrQ=)
                          11: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=)
                          12: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=)
                          13: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=)
                          14: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=)
                          15: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=)
                          16: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=)
                          17: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=)
                          18: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=)
                          19: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=)
                          20: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=)
                          21: lh0U2VbssLYHQuI_GeDtu-78fs8.roa (hash: argvv+35DPV6sAk39FUkOQj04x5r0LiO2lKQbHUbgZU=)
                          22: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=)
                          23: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=)
                          24: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=)
                          25: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=)
                          26: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: zmNx/cG0nMSS0P3yKRMGQuotmu7ASoatbLXfHpiv7Ls=)
                          27: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=)
                          28: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:67:93:87:4d:a7:ed:cc:f4:33:dc:07:72:35:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
        Validity
            Not Before: Sep 24 04:00:27 2026 GMT
            Not After : Sep 25 04:00:27 2026 GMT
        Subject: CN=8bb8e39649d62b8889375d1263d6fa79d90b8130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:53:db:34:01:cd:40:e3:d0:95:7e:85:32:92:
                    50:1f:bc:e4:8f:c7:98:6b:66:a7:30:72:dd:b3:ac:
                    cb:58:d5:7d:68:68:22:3b:4b:7c:4d:77:d7:c1:d4:
                    66:79:18:b7:7e:e5:4e:bf:0d:e9:5f:34:5d:3e:46:
                    a7:3e:c0:50:9f:6e:84:3b:34:10:a3:ef:c5:23:dc:
                    24:00:bc:38:00:24:77:f0:d4:70:ef:78:6d:89:ad:
                    b3:5b:0b:d2:40:35:2e:ec:bb:90:49:8e:8a:2c:ce:
                    18:37:fe:c0:f7:f0:4f:a7:33:14:22:ce:f0:cb:23:
                    aa:07:cb:75:f7:ac:da:9d:5a:d4:43:f0:44:70:b2:
                    cf:4a:9a:8a:b8:80:50:fa:95:7c:f0:5c:79:a5:69:
                    60:3e:d8:bb:a1:c0:2b:30:a8:b5:16:0c:fc:3b:fe:
                    b0:c1:11:d5:15:53:7b:2d:d9:38:d9:89:d9:e2:c5:
                    b5:1f:e9:90:b2:c9:2f:6d:e2:6e:3e:d2:59:fd:23:
                    1c:21:36:8b:00:30:e5:01:0f:08:f7:8e:2b:d2:99:
                    62:20:5c:d9:2e:63:e0:81:df:5a:29:22:5e:77:e3:
                    a6:07:08:b7:54:24:ba:51:d6:3a:4c:b3:8a:ed:f3:
                    f6:39:f3:64:11:dc:c4:9b:6d:68:25:7d:88:77:80:
                    3f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B8:E3:96:49:D6:2B:88:89:37:5D:12:63:D6:FA:79:D9:0B:81:30
            X509v3 Authority Key Identifier:
                keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e8:de:0c:de:bf:c0:61:66:47:e3:6e:f5:34:6c:d6:58:40:
         1a:d2:ad:79:58:70:c6:30:b2:02:0a:8d:0b:93:94:c5:6c:d5:
         d5:03:20:2c:69:31:f6:4b:89:20:99:3d:9a:18:fe:46:d2:78:
         59:c2:3a:64:f9:9f:c7:a1:4d:11:e5:12:ca:66:71:71:98:ad:
         12:23:ee:ee:d0:aa:97:cb:9e:d5:68:13:6c:c9:4f:ac:b8:b3:
         64:d3:4b:06:bd:21:d4:b5:8c:31:ee:b9:02:1b:05:cd:ca:76:
         22:71:e7:dd:35:19:db:55:e5:97:88:eb:f2:f2:83:04:a9:6f:
         a5:2e:51:30:a5:32:de:56:26:5b:5f:13:9c:af:b8:44:1d:28:
         31:6f:c5:dc:74:81:61:b1:88:b3:2c:18:6b:ab:76:2d:bd:cd:
         72:bc:2f:bb:84:db:77:1f:8a:72:49:1b:cf:4a:92:88:84:4e:
         dd:46:e9:74:ea:ac:9c:dc:07:0b:f7:4a:9d:da:07:19:89:eb:
         51:64:62:83:4a:19:95:27:2e:b1:33:f0:52:9e:c8:f0:4d:2a:
         71:01:13:e1:ca:b1:08:71:5b:60:93:85:38:33:5a:23:19:48:
         be:f1:54:ba:7d:2e:9e:00:65:a8:85:9f:6b:d2:1a:b7:3a:6f:
         76:e5:d0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:01:24 2026 by rpki-client