Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
File:                     f8rYnfG_maNvKQzD7w8ee00CdTM.mft (raw, json)
Hash identifier:          BRM6YL74Cj6WIFyyxLgDGHFdziy1+tSg6X3ntJyXDYg=
Subject key identifier:   03:9B:A0:8D:76:92:BE:7D:77:28:61:18:97:E2:34:F7:9D:CE:CD:C9
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       01A0DB71E07F486963AA6E91EC5AC6BD0E1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
Manifest number:          1A4D
Signing time:             Sat 26 Sep 2026 02:01:08 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:08 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:08 +0000
Files and hashes:         1: 7bMPlZft64LLOc44WXpuvWHCxYI.roa (hash: ovhICafylNUsoU6ggOnBn0FV5ld7QtZ9TQT1cYD5STo=)
                          2: 8ogFWyeBf0vuQT5jhBzXspAf2rE.roa (hash: 8SLnbSVICCGBBETX/lH2EVbhNVK83HBy2quzoB78n6s=)
                          3: f8rYnfG_maNvKQzD7w8ee00CdTM.crl (hash: DB4hKj2nF9uljGj1aQ9CSV6/Ft0dVdHUCmS24u6r9VU=)
                          4: ggggHoWexQd_x29XdkxpzklvtBY.roa (hash: RItnLwTh1P5BCA6CWkDZt99HLo5gT+F8X2TYgXTwevA=)
                          5: wS0apBhtiuVVHFFK87DoMQ3ejQc.roa (hash: ZNtmxsknYilQpUIhLRK+q8WsjLGRXiSlJ1H3sFAAUI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:71:e0:7f:48:69:63:aa:6e:91:ec:5a:c6:bd:0e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: Sep 26 02:01:08 2026 GMT
            Not After : Sep 27 02:01:08 2026 GMT
        Subject: CN=039ba08d7692be7d7728611897e234f79dcecdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7b:df:19:96:c1:90:38:9a:c6:1f:4f:5f:a2:
                    31:39:41:b7:cc:47:1f:aa:18:b3:39:e0:14:b0:ac:
                    bc:d4:0a:9a:6c:8d:a0:76:eb:4d:cd:7f:da:fd:5a:
                    02:28:d1:ec:b5:55:ca:4b:60:e3:70:b9:6d:86:87:
                    01:81:e6:ab:e9:5a:a6:8a:28:d7:55:71:83:6a:d2:
                    6c:6c:2b:ff:1b:c6:de:34:43:ce:1e:63:80:97:da:
                    08:9a:e1:a9:1c:89:58:82:6c:17:d8:87:f2:4b:ca:
                    f5:d4:70:6a:73:6c:86:50:2d:fd:46:bb:18:c8:d7:
                    5d:a4:c8:d0:81:99:61:36:3d:30:48:9b:89:d1:77:
                    4f:66:7c:1c:6f:44:b0:e3:b1:28:ee:2f:e3:0c:6c:
                    e7:a3:f4:7e:93:7f:07:d3:51:7e:0b:d4:63:f4:7e:
                    ca:3b:50:1b:b7:1a:79:ec:0b:45:73:1a:a9:5c:e9:
                    55:f8:cd:e8:a0:fc:5f:ab:5e:7c:aa:cd:c8:b2:e1:
                    69:7b:3d:ef:d7:2a:a9:10:89:f5:b3:27:38:a6:43:
                    91:9c:a9:2b:05:66:87:be:36:16:43:68:44:52:5c:
                    56:2e:95:d7:25:34:73:06:13:30:5b:3d:f4:c2:ad:
                    89:fd:be:32:eb:f2:28:d6:1e:60:e4:31:f3:e1:98:
                    c1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9B:A0:8D:76:92:BE:7D:77:28:61:18:97:E2:34:F7:9D:CE:CD:C9
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:37:5e:72:5a:9f:d4:8e:ab:b8:b8:29:35:9f:2e:d2:6d:ed:
         74:52:2e:08:c2:70:14:0c:57:36:ac:3b:67:32:9f:75:24:15:
         c5:9e:f3:3a:4a:ab:cf:7e:51:2f:73:a1:22:87:9f:f2:94:38:
         b4:a8:c1:1a:fb:03:a4:76:7c:1b:96:c9:a4:eb:81:81:ee:eb:
         a0:82:74:1a:c3:36:44:50:75:c3:1e:bf:cb:ab:c7:f9:5a:68:
         0a:ec:95:a0:3d:91:e3:ca:2a:c5:66:09:54:c8:ef:90:83:22:
         53:78:af:e9:06:e9:d3:81:0b:6f:35:32:89:ed:4e:cb:bd:99:
         b6:98:a5:92:ec:37:77:3f:62:ff:fb:9b:38:ba:34:34:69:8d:
         f0:26:32:04:13:b6:f6:60:b3:5a:09:3f:4a:e5:3f:fa:24:f3:
         db:e9:a6:bb:81:5b:c4:f4:1c:78:6d:ae:8e:41:88:0c:b9:06:
         cb:4a:08:19:c3:d3:e7:15:10:fd:0c:c8:7b:65:30:6b:b8:7c:
         7a:ed:19:8b:0f:2e:10:da:11:04:ad:c9:32:e6:0e:29:2e:e7:
         47:6b:7b:37:cb:44:1c:93:7e:1c:0a:ea:fc:40:4a:91:d8:39:
         46:8a:e7:33:ee:1c:6e:ff:b5:e6:ad:ab:d7:10:1c:fc:4e:2d:
         b0:ff:d8:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbceB/SGljqm6R7FrGvQ4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmY2FkODlkZjFiZjk5YTM2ZjI5MGNjM2VmMGYxZTdiNGQw
Mjc1MzMwHhcNMjYwOTI2MDIwMTA4WhcNMjYwOTI3MDIwMTA4WjAzMTEwLwYDVQQD
EygwMzliYTA4ZDc2OTJiZTdkNzcyODYxMTg5N2UyMzRmNzlkY2VjZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXvfGZbBkDiaxh9PX6IxOUG3zEcf
qhizOeAUsKy81AqabI2gdutNzX/a/VoCKNHstVXKS2DjcLlthocBgear6VqmiijX
VXGDatJsbCv/G8beNEPOHmOAl9oImuGpHIlYgmwX2IfyS8r11HBqc2yGUC39RrsY
yNddpMjQgZlhNj0wSJuJ0XdPZnwcb0Sw47Eo7i/jDGzno/R+k38H01F+C9Rj9H7K
O1Abtxp57AtFcxqpXOlV+M3ooPxfq158qs3IsuFpez3v1yqpEIn1syc4pkORnKkr
BWaHvjYWQ2hEUlxWLpXXJTRzBhMwWz30wq2J/b4y6/Io1h5g5DHz4ZjBSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOboI12kr59dyhhGJfiNPedzs3JMB8GA1UdIwQY
MBaAFH/K2J3xv5mjbykMw+8PHntNAnUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMt
MDE1ZDlmMWI0YjUwLzEvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMtMDE1ZDlmMWI0YjUw
LzEvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDdeclqf
1I6ruLgpNZ8u0m3tdFIuCMJwFAxXNqw7ZzKfdSQVxZ7zOkqrz35RL3OhIoef8pQ4
tKjBGvsDpHZ8G5bJpOuBge7roIJ0GsM2RFB1wx6/y6vH+VpoCuyVoD2R48oqxWYJ
VMjvkIMiU3iv6Qbp04ELbzUyie1Oy72Ztpilkuw3dz9i//ubOLo0NGmN8CYyBBO2
9mCzWgk/SuU/+iTz2+mmu4FbxPQceG2ujkGIDLkGy0oIGcPT5xUQ/QzIe2Uwa7h8
eu0Ziw8uENoRBK3JMuYOKS7nR2t7N8tEHJN+HArq/EBKkdg5RornM+4cbv+15q2r
1xAc/E4tsP/YNg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:26:47 2026 by rpki-client