Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
File:                     datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json)
Hash identifier:          JEVwvpPikT0RvetOJb02rTAC7H/N2F+O4S1I36k3wFs=
Subject key identifier:   33:11:25:A5:A8:AF:E0:48:91:FD:C8:4C:66:AB:6D:C4:55:C1:24:14
Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
Certificate issuer:       /CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Certificate serial:       01A0D872B16EC0AF06FE308F1E711EC93C94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
Manifest number:          0754
Signing time:             Fri 25 Sep 2026 12:03:10 +0000
Manifest this update:     Fri 25 Sep 2026 12:03:10 +0000
Manifest next update:     Sat 26 Sep 2026 12:03:10 +0000
Files and hashes:         1: ajNgz3i4R4z9MoH7g9Gh2FsCAiM.roa (hash: ak7eVyyVkmWQATGl9IjiTOWOerTXTRW7k0wkBuX7rhg=)
                          2: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: sUCjCdNbR7g/0WJWMLZQ2kvaCNGjuToeMl8zYD+2qIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:b1:6e:c0:af:06:fe:30:8f:1e:71:1e:c9:3c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40
        Validity
            Not Before: Sep 25 12:03:10 2026 GMT
            Not After : Sep 26 12:03:10 2026 GMT
        Subject: CN=331125a5a8afe04891fdc84c66ab6dc455c12414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:11:f2:86:ee:46:4c:67:37:f1:50:12:5c:00:
                    a4:35:f9:a5:cf:9f:6d:7e:a0:e2:e7:82:b4:7e:61:
                    a7:e3:26:a4:ae:e3:14:05:b4:bd:c4:f5:d9:f1:cf:
                    d0:b9:61:c7:ec:57:31:b0:81:26:82:f6:cd:10:b7:
                    d2:a9:2a:81:c7:95:b4:d6:e6:e4:87:60:7a:6a:6e:
                    c5:cb:8d:00:35:9f:17:51:d8:3b:8a:f7:26:2b:01:
                    75:5c:c8:d5:9f:7a:82:d3:39:75:b4:ea:1a:2c:9c:
                    f2:03:11:fd:c2:ef:ea:76:3d:56:1c:48:42:75:0a:
                    5e:93:91:8f:6f:b0:51:94:94:5e:54:35:15:7d:7c:
                    95:2e:9e:ab:e9:40:ab:81:87:e5:36:1f:cc:3e:45:
                    c6:81:07:33:b4:9f:95:83:0e:24:ef:93:1a:6b:75:
                    d4:a8:42:91:2f:29:be:38:58:f7:c3:79:da:3c:fd:
                    0e:23:5c:ef:b7:b2:ca:c1:48:01:21:db:8d:44:3a:
                    32:47:eb:fe:94:97:f9:58:6e:f3:3f:d0:ee:8d:5d:
                    fc:b7:e1:df:b3:65:d4:65:72:67:3c:a1:06:6d:af:
                    8f:16:5c:75:8c:51:66:b1:4f:1f:ec:42:98:e1:96:
                    9f:41:53:3a:f1:04:14:49:dd:de:5e:55:bc:ce:8d:
                    d7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:11:25:A5:A8:AF:E0:48:91:FD:C8:4C:66:AB:6D:C4:55:C1:24:14
            X509v3 Authority Key Identifier:
                keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:fb:02:d4:41:4a:1d:8b:80:97:6f:01:83:cc:3e:6f:85:c5:
         c2:76:0a:c8:25:ab:9e:06:f5:bd:7f:20:08:55:7f:f0:48:7c:
         41:55:87:d7:ba:40:d8:ac:d6:f9:0a:65:81:26:a1:89:97:19:
         54:c7:75:05:95:91:31:34:66:b8:df:4c:9a:5d:59:55:0d:41:
         fb:09:3e:b4:ba:0e:df:56:27:5d:46:f2:2e:67:c9:89:dc:59:
         4d:f6:4a:8b:85:4f:cb:a1:32:d7:17:ec:92:5a:46:3a:90:5b:
         33:89:cd:4c:67:75:71:36:c4:17:2b:ce:fd:7b:05:f0:3c:b5:
         02:c7:2b:6b:d9:4a:73:58:59:d1:41:d1:af:fb:b4:aa:89:c0:
         b9:76:3c:8d:36:76:11:77:29:b2:02:10:ca:0e:40:b8:11:f3:
         ad:54:e1:6f:62:04:50:0c:57:9b:43:f9:cf:de:ee:6a:b1:93:
         7d:08:1a:4d:d4:a3:ff:6c:d6:2e:d6:4d:ec:04:92:52:18:61:
         e2:86:85:45:7f:55:9e:d3:c6:b6:76:7a:19:52:99:a1:ad:f6:
         e7:49:67:2d:c4:bc:45:89:a2:27:9f:cb:a5:1d:e4:bf:30:ee:
         46:39:8d:72:bb:6d:cd:19:f2:df:ab:44:15:16:39:c8:2f:72:
         11:45:42:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcrFuwK8G/jCPHnEeyTyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YWI0MDhhYTlmNzFhODFlODgzZjhkMTQ5NjVmNzczNTM4
YjVhNDAwHhcNMjYwOTI1MTIwMzEwWhcNMjYwOTI2MTIwMzEwWjAzMTEwLwYDVQQD
EygzMzExMjVhNWE4YWZlMDQ4OTFmZGM4NGM2NmFiNmRjNDU1YzEyNDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxHyhu5GTGc38VASXACkNfmlz59t
fqDi54K0fmGn4yakruMUBbS9xPXZ8c/QuWHH7FcxsIEmgvbNELfSqSqBx5W01ubk
h2B6am7Fy40ANZ8XUdg7ivcmKwF1XMjVn3qC0zl1tOoaLJzyAxH9wu/qdj1WHEhC
dQpek5GPb7BRlJReVDUVfXyVLp6r6UCrgYflNh/MPkXGgQcztJ+Vgw4k75Maa3XU
qEKRLym+OFj3w3naPP0OI1zvt7LKwUgBIduNRDoyR+v+lJf5WG7zP9DujV38t+Hf
s2XUZXJnPKEGba+PFlx1jFFmsU8f7EKY4ZafQVM68QQUSd3eXlW8zo3X2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMRJaWor+BIkf3ITGarbcRVwSQUMB8GA1UdIwQY
MBaAFHWrQIqp9xqB6IP40Ull93NTi1pAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGF0QWlxbjNHb0hvZ19qUlNXWDNjMU9MV2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85ZGI0MWEtOGYxYy00NmM1LWEyZTEt
OGUyM2IwMjZjNmI1LzEvZGF0QWlxbjNHb0hvZ19qUlNXWDNjMU9MV2tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85ZGI0MWEtOGYxYy00NmM1LWEyZTEtOGUyM2IwMjZjNmI1
LzEvZGF0QWlxbjNHb0hvZ19qUlNXWDNjMU9MV2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPsC1EFK
HYuAl28Bg8w+b4XFwnYKyCWrngb1vX8gCFV/8Eh8QVWH17pA2KzW+QplgSahiZcZ
VMd1BZWRMTRmuN9Mml1ZVQ1B+wk+tLoO31YnXUbyLmfJidxZTfZKi4VPy6Ey1xfs
klpGOpBbM4nNTGd1cTbEFyvO/XsF8Dy1Ascra9lKc1hZ0UHRr/u0qonAuXY8jTZ2
EXcpsgIQyg5AuBHzrVThb2IEUAxXm0P5z97uarGTfQgaTdSj/2zWLtZN7ASSUhhh
4oaFRX9VntPGtnZ6GVKZoa3250lnLcS8RYmiJ5/LpR3kvzDuRjmNcrttzRny36tE
FRY5yC9yEUVC+Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:52:12 2026 by rpki-client