Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
File:                     hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json)
Hash identifier:          Hl4nH/Fmaf0NyfVDmKyDmfte7b+C9Kh+pd1+NPwS4bk=
Subject key identifier:   68:54:56:08:18:B9:BC:B4:24:E1:1A:3B:43:44:57:5D:48:0F:C9:B1
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Certificate issuer:       /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial:       01A0CC6C21FA704A51CCE80AA5C8F96CA9A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
Manifest number:          19C2
Signing time:             Wed 23 Sep 2026 04:00:33 +0000
Manifest this update:     Wed 23 Sep 2026 04:00:33 +0000
Manifest next update:     Thu 24 Sep 2026 04:00:33 +0000
Files and hashes:         1: DRi6gZm2ApJ9zWvuSIffTh_44j0.roa (hash: NDQ8jCUezYMaYn3NL3pjn/AqInQQgH2COtpVWhCKawg=)
                          2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: WDJVhRW6P+MA7EMRLvkf8Z9YjAyTy2ElI9+V7RWd0gY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:6c:21:fa:70:4a:51:cc:e8:0a:a5:c8:f9:6c:a9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
        Validity
            Not Before: Sep 23 04:00:33 2026 GMT
            Not After : Sep 24 04:00:33 2026 GMT
        Subject: CN=6854560818b9bcb424e11a3b4344575d480fc9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:ae:8c:d0:f3:8c:c7:cd:93:ec:19:f5:eb:
                    da:3f:e2:f8:39:d5:06:72:2f:c6:e2:e5:98:6c:fd:
                    59:b0:7b:ae:ba:67:60:dc:2c:b0:27:6e:32:ef:d7:
                    e6:b0:56:7a:ef:af:f7:47:dc:fa:0b:91:ff:19:db:
                    20:91:84:e9:54:4a:a8:60:28:dc:ec:5c:95:a3:f2:
                    8b:8e:3b:f2:f4:4f:ee:c5:34:d3:e6:2a:49:07:2c:
                    ac:14:8e:36:1b:e9:ab:ee:d0:41:de:d6:95:56:eb:
                    25:fb:0e:cb:1a:73:df:ef:c1:80:4e:09:8a:4b:2c:
                    49:0b:4c:8c:69:cf:1e:77:e8:03:6c:23:54:b6:02:
                    fd:1c:83:1b:d2:04:40:78:fe:f6:24:e5:d3:79:29:
                    0b:bc:22:0f:2b:7e:2f:f1:eb:d9:75:fc:26:f2:b4:
                    c2:60:36:e4:94:40:e8:3d:5a:b6:18:ae:84:86:78:
                    cd:7f:1f:19:40:2b:03:fc:cb:db:6e:76:bd:20:8f:
                    24:85:c0:3a:26:19:b3:7d:17:52:8f:37:2c:ac:e2:
                    5a:e1:7f:1d:c7:da:9f:b1:ac:b3:11:6b:bc:16:24:
                    2b:57:4c:4b:71:fc:52:c4:5e:36:ef:34:14:4f:2c:
                    79:29:d4:d9:b0:fe:32:6c:04:d6:5b:97:38:bc:b0:
                    da:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:54:56:08:18:B9:BC:B4:24:E1:1A:3B:43:44:57:5D:48:0F:C9:B1
            X509v3 Authority Key Identifier:
                keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e2:3d:6c:e5:9d:b6:4f:66:1d:8b:8e:b3:85:5a:03:10:7a:
         e3:b0:94:a5:24:3b:8e:0c:74:1b:f5:e1:c4:07:45:a3:1b:cb:
         bb:4f:51:b8:12:a7:fc:6e:e6:25:12:22:1f:c4:5f:9f:e8:27:
         d0:d3:20:61:00:70:03:fa:9e:92:68:8d:91:03:ff:91:07:5c:
         28:24:2c:9c:c5:62:0e:62:cf:f0:a8:73:b8:c7:f2:e4:46:18:
         79:64:8d:fe:6b:68:0c:91:ef:85:1e:43:63:e5:38:80:3f:cf:
         ec:02:71:de:26:38:5c:5e:75:78:5b:03:c1:cd:d0:02:f2:39:
         3e:7f:0a:06:a0:92:af:13:12:cc:e6:b4:37:a2:d5:09:da:2e:
         88:f4:b8:61:7a:50:bd:4e:94:da:f6:2d:cd:d9:51:95:3f:3d:
         6a:f9:06:30:a1:d7:5c:49:da:64:13:79:11:bd:9b:52:93:59:
         e3:0f:8e:cd:0d:04:39:61:ce:7c:ab:7b:c4:df:fb:bf:92:67:
         39:3c:9a:81:fc:d6:e0:00:bb:60:97:1b:58:4b:65:a5:88:38:
         2f:5b:d9:8f:16:a3:73:9b:f4:c4:1d:b3:b9:31:62:ab:c4:c3:
         f9:3f:f7:c7:90:a7:52:dc:9a:50:2e:33:56:d0:7a:bb:15:62:
         81:40:ca:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMbCH6cEpRzOgKpcj5bKmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDIyZTE2MmY2ZTZiOTc1NWNlNGNlODQ1MTIwZTYyOTM5
NTA2ZjcwHhcNMjYwOTIzMDQwMDMzWhcNMjYwOTI0MDQwMDMzWjAzMTEwLwYDVQQD
Eyg2ODU0NTYwODE4YjliY2I0MjRlMTFhM2I0MzQ0NTc1ZDQ4MGZjOWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuyujNDzjMfNk+wZ9evaP+L4OdUG
ci/G4uWYbP1ZsHuuumdg3CywJ24y79fmsFZ676/3R9z6C5H/GdsgkYTpVEqoYCjc
7FyVo/KLjjvy9E/uxTTT5ipJByysFI42G+mr7tBB3taVVusl+w7LGnPf78GATgmK
SyxJC0yMac8ed+gDbCNUtgL9HIMb0gRAeP72JOXTeSkLvCIPK34v8evZdfwm8rTC
YDbklEDoPVq2GK6EhnjNfx8ZQCsD/Mvbbna9II8khcA6JhmzfRdSjzcsrOJa4X8d
x9qfsayzEWu8FiQrV0xLcfxSxF427zQUTyx5KdTZsP4ybATWW5c4vLDaewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhUVggYuby0JOEaO0NEV11ID8mxMB8GA1UdIwQY
MBaAFIYCLhYvbmuXVc5M6EUSDmKTlQb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83ODJjMDctNGJiYS00ODEwLWI5OGIt
MDU5ZGJjYzhkY2VmLzEvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC83ODJjMDctNGJiYS00ODEwLWI5OGItMDU5ZGJjYzhkY2Vm
LzEvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+I9bOWd
tk9mHYuOs4VaAxB647CUpSQ7jgx0G/XhxAdFoxvLu09RuBKn/G7mJRIiH8Rfn+gn
0NMgYQBwA/qekmiNkQP/kQdcKCQsnMViDmLP8KhzuMfy5EYYeWSN/mtoDJHvhR5D
Y+U4gD/P7AJx3iY4XF51eFsDwc3QAvI5Pn8KBqCSrxMSzOa0N6LVCdouiPS4YXpQ
vU6U2vYtzdlRlT89avkGMKHXXEnaZBN5Eb2bUpNZ4w+OzQ0EOWHOfKt7xN/7v5Jn
OTyagfzW4AC7YJcbWEtlpYg4L1vZjxajc5v0xB2zuTFiq8TD+T/3x5CnUtyaUC4z
VtB6uxVigUDKhw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:57:58 2026 by rpki-client