Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
File:                     ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft (raw, json)
Hash identifier:          nNKdbhVnpowfMwf8B5eBPyvBcHGmMsOnClHB09CdqWc=
Subject key identifier:   CA:54:D0:89:40:8E:95:AC:18:2B:94:BB:20:09:C7:C4:D1:54:9B:79
Authority key identifier: 10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06
Certificate issuer:       /CN=10d7038b83eb247fc65bdad0195b86246f8f3006
Certificate serial:       01A0E02AB06A15986D7C4020826AC954021C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
Manifest number:          0B4D
Signing time:             Sun 27 Sep 2026 00:01:29 +0000
Manifest this update:     Sun 27 Sep 2026 00:01:29 +0000
Manifest next update:     Mon 28 Sep 2026 00:01:29 +0000
Files and hashes:         1: 7CSVGtYUX5r3HPpcYYedHjS20IQ.roa (hash: hzzOsdStylJXNXeCzZeL6+XDTe9J82yzkNqZCVPm+lM=)
                          2: ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl (hash: 4V/BEyQX4xVgkiI5XJPmDKlrwDJnesbF+65qoPEUCkY=)
                          3: nQENJbRz1W0WhBM6EIeWbWaXGe0.roa (hash: XnC7G+pMyq9QIiJSY8PXtmwY2A35n+casWMMCOJ/vOc=)
                          4: oav3URwQXyrT2jUvgDPn7DGmVPM.roa (hash: Jvb2wKPQQKuUPKcxKQbXia8en+VF6t/8IxGtUqGnPLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:2a:b0:6a:15:98:6d:7c:40:20:82:6a:c9:54:02:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10d7038b83eb247fc65bdad0195b86246f8f3006
        Validity
            Not Before: Sep 27 00:01:29 2026 GMT
            Not After : Sep 28 00:01:29 2026 GMT
        Subject: CN=ca54d089408e95ac182b94bb2009c7c4d1549b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:60:43:fb:3d:bf:ae:94:c6:a8:1a:9b:47:
                    59:da:57:27:e5:de:04:86:db:20:07:af:76:82:c2:
                    78:dc:04:d9:17:e2:58:f2:04:6d:f4:50:7b:6b:52:
                    92:f9:74:40:bb:b9:ca:c0:37:30:2f:84:19:ce:1e:
                    1c:5d:21:53:40:cc:b5:2f:d8:85:cf:7c:59:90:7d:
                    fc:08:79:c7:42:38:10:8c:60:fe:46:99:54:b1:38:
                    52:05:85:e2:45:4a:24:5b:cb:7d:4a:54:bb:cd:b8:
                    72:06:1f:1d:5c:b9:19:bc:83:7a:e3:54:31:65:dc:
                    b1:aa:90:93:a6:eb:73:80:65:40:11:04:99:d3:dd:
                    29:de:f5:62:13:43:69:4e:50:b2:32:15:d3:11:91:
                    89:a0:99:6f:77:ff:35:03:7c:df:5d:a6:1e:78:93:
                    af:49:3a:95:93:09:52:58:98:0a:64:62:fd:e9:34:
                    5d:b2:ac:7f:cd:57:93:48:03:34:e2:92:18:04:1b:
                    bc:50:b6:3d:0e:20:db:64:a9:04:5e:76:ec:f4:f6:
                    3d:6c:69:98:90:c6:46:0d:50:f2:f9:78:48:7c:1e:
                    2a:91:ea:83:95:0a:95:dc:ef:05:60:4c:90:55:46:
                    df:f2:4a:2e:29:ad:4a:7b:ec:61:f9:44:81:36:77:
                    93:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:54:D0:89:40:8E:95:AC:18:2B:94:BB:20:09:C7:C4:D1:54:9B:79
            X509v3 Authority Key Identifier:
                keyid:10:D7:03:8B:83:EB:24:7F:C6:5B:DA:D0:19:5B:86:24:6F:8F:30:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENcDi4PrJH_GW9rQGVuGJG-PMAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6105ad-8304-49f4-a0de-1c5bde2c14f4/1/ENcDi4PrJH_GW9rQGVuGJG-PMAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:71:10:61:4a:e0:40:aa:9c:4a:d1:2c:7b:43:a7:a9:d7:b0:
         54:62:5c:12:b8:f4:a9:76:3a:6b:aa:c2:4a:7d:50:b1:97:36:
         a5:54:f2:84:c3:9d:c0:18:f0:e9:ad:d0:01:3f:ad:5d:29:d7:
         b4:55:de:3b:bc:01:95:e2:45:0e:a0:f2:3a:98:e5:39:c0:bd:
         4b:2a:66:9e:9e:b4:b0:51:a6:39:ce:43:37:0a:a2:d6:bb:2a:
         5a:c1:1f:95:f6:e6:4c:57:cf:50:de:6a:3f:9d:72:a7:e8:16:
         c6:f4:24:8c:2b:5c:ad:0f:99:6a:3d:3d:13:bc:24:9d:35:9d:
         71:a4:7d:31:1a:4a:4c:b5:9a:dd:9a:19:76:96:f5:8a:3d:b8:
         e2:0b:c9:e5:f4:3e:9c:20:7b:e6:fe:3c:44:e6:6b:dc:bf:91:
         05:36:a3:f3:c4:4e:2d:e3:a2:3f:f0:7d:7f:f6:91:c4:05:c6:
         f8:73:0d:f0:80:8e:49:bb:e7:30:c8:da:81:8d:b0:d6:51:75:
         67:0a:1b:24:8c:74:37:c4:f6:84:7c:e9:1c:0a:1b:d2:6a:99:
         30:77:34:b1:9e:7b:17:74:fa:6e:bf:08:61:18:05:a1:d7:c9:
         0f:f8:58:fd:b0:03:85:8f:14:13:74:d9:b4:be:9a:84:4d:55:
         72:d7:bc:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgKrBqFZhtfEAggmrJVAIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZDcwMzhiODNlYjI0N2ZjNjViZGFkMDE5NWI4NjI0NmY4
ZjMwMDYwHhcNMjYwOTI3MDAwMTI5WhcNMjYwOTI4MDAwMTI5WjAzMTEwLwYDVQQD
EyhjYTU0ZDA4OTQwOGU5NWFjMTgyYjk0YmIyMDA5YzdjNGQxNTQ5Yjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr5gQ/s9v66Uxqgam0dZ2lcn5d4E
htsgB692gsJ43ATZF+JY8gRt9FB7a1KS+XRAu7nKwDcwL4QZzh4cXSFTQMy1L9iF
z3xZkH38CHnHQjgQjGD+RplUsThSBYXiRUokW8t9SlS7zbhyBh8dXLkZvIN641Qx
ZdyxqpCTputzgGVAEQSZ090p3vViE0NpTlCyMhXTEZGJoJlvd/81A3zfXaYeeJOv
STqVkwlSWJgKZGL96TRdsqx/zVeTSAM04pIYBBu8ULY9DiDbZKkEXnbs9PY9bGmY
kMZGDVDy+XhIfB4qkeqDlQqV3O8FYEyQVUbf8kouKa1Ke+xh+USBNneTvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpU0IlAjpWsGCuUuyAJx8TRVJt5MB8GA1UdIwQY
MBaAFBDXA4uD6yR/xlva0BlbhiRvjzAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU5jRGk0UHJKSF9HVzlyUUdWdUdKRy1QTUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82MTA1YWQtODMwNC00OWY0LWEwZGUt
MWM1YmRlMmMxNGY0LzEvRU5jRGk0UHJKSF9HVzlyUUdWdUdKRy1QTUFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82MTA1YWQtODMwNC00OWY0LWEwZGUtMWM1YmRlMmMxNGY0
LzEvRU5jRGk0UHJKSF9HVzlyUUdWdUdKRy1QTUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHEQYUrg
QKqcStEse0OnqdewVGJcErj0qXY6a6rCSn1QsZc2pVTyhMOdwBjw6a3QAT+tXSnX
tFXeO7wBleJFDqDyOpjlOcC9Sypmnp60sFGmOc5DNwqi1rsqWsEflfbmTFfPUN5q
P51yp+gWxvQkjCtcrQ+Zaj09E7wknTWdcaR9MRpKTLWa3ZoZdpb1ij244gvJ5fQ+
nCB75v48ROZr3L+RBTaj88ROLeOiP/B9f/aRxAXG+HMN8ICOSbvnMMjagY2w1lF1
ZwobJIx0N8T2hHzpHAob0mqZMHc0sZ57F3T6br8IYRgFodfJD/hY/bADhY8UE3TZ
tL6ahE1Vcte8BA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:49:44 2026 by rpki-client