Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
File:                     rqwbISmrusZTn4DaZVDElyHQqMQ.mft (raw, json)
Hash identifier:          A5NbWZl4d28sho4dXkPNiaLEIu6bWCuz5wRKkvj4SSc=
Subject key identifier:   28:FB:96:68:31:BC:DE:44:C1:63:5C:E8:9E:7E:1D:CC:77:47:6B:F0
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Certificate issuer:       /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial:       01A0D26ED306033469603E202E1C5FA2D2B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 08:01:13 +0000
Manifest this update:     Thu 24 Sep 2026 08:01:13 +0000
Manifest next update:     Fri 25 Sep 2026 08:01:13 +0000
Files and hashes:         1: 3oYuOEcw1b9v0ouS6gA5UBDk4tQ.asa (hash: nrqhWNV+Xc5NkmygiKViAPbV5PLyvcfSxXDvQeMjjJs=)
                          2: UYOEbjPyLAeXDjmWXka43xNSBrc.roa (hash: Ea7vb/KbqpdCWL5Nsui+X7+vrHZiuSMLp+d9Fc0ie4Y=)
                          3: W-LfzjkBmc4oTKnPhjs0kfHNJ6Q.roa (hash: ftW/H5OGOvc73tGHyq9jUHDKeB+UWHSYf4rvMWEvpmQ=)
                          4: rqwbISmrusZTn4DaZVDElyHQqMQ.crl (hash: xMvpHSZqalPCfhtyFT0vyi5iyLgCyZuXlULIstBn/ys=)
                          5: w_LZxwyOUgD4IGBy1szvQwuznT8.roa (hash: YO+GhiXP/lIUMsu3S7EDreywlrg58HTztRPtniTveWM=)
                          6: x7TD4pUm1hOHrZRLC3TJ-5O5zTI.roa (hash: L8tddTG9LQKbBaTsHjpHN79P5a7dlI7sXDT4x985xho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6e:d3:06:03:34:69:60:3e:20:2e:1c:5f:a2:d2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
        Validity
            Not Before: Sep 24 08:01:13 2026 GMT
            Not After : Sep 25 08:01:13 2026 GMT
        Subject: CN=28fb966831bcde44c1635ce89e7e1dcc77476bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:2f:43:ce:46:6e:15:a3:01:c5:d6:69:38:
                    18:f5:93:0a:08:42:97:89:e6:40:ee:81:e9:31:87:
                    03:67:c8:2f:67:71:fb:bd:ea:1f:94:d5:00:6e:6b:
                    61:f8:2f:fc:eb:99:fe:b0:18:2a:2f:d1:65:28:1a:
                    ef:01:bd:fb:b4:28:da:37:51:a1:50:40:51:ef:ef:
                    4a:e1:b8:d3:83:57:38:04:19:c3:2a:51:56:b9:de:
                    1e:3c:52:d9:43:90:81:ab:a2:86:bf:db:51:a3:58:
                    75:f1:a7:02:f3:c3:cb:f3:90:00:41:fa:0d:04:22:
                    11:d1:81:af:de:07:77:d8:16:c2:86:26:6a:92:84:
                    a5:8c:51:03:7a:06:67:75:d9:e2:2e:1b:ee:1b:34:
                    de:ad:86:45:53:b6:2e:36:40:a5:53:80:83:ba:8b:
                    8a:99:2c:58:da:a2:a4:cf:08:a4:99:cb:17:9f:06:
                    0d:db:a7:55:7a:ef:3e:4b:6c:c8:21:cf:b9:eb:34:
                    00:e4:64:0e:ae:f1:c8:63:47:fc:fd:d6:7a:3b:59:
                    62:3b:28:b1:47:97:1c:cd:f5:b7:5a:52:6f:04:df:
                    8b:fe:77:bd:ad:a1:11:20:b1:77:fa:64:0f:5f:34:
                    30:6a:fb:02:90:66:84:f6:a1:f3:5c:9d:5a:fd:6d:
                    26:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FB:96:68:31:BC:DE:44:C1:63:5C:E8:9E:7E:1D:CC:77:47:6B:F0
            X509v3 Authority Key Identifier:
                keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:bd:0e:c7:3d:9d:b2:68:5a:ac:fc:95:79:bd:b8:6e:68:03:
         fb:52:14:5e:12:8d:1f:a0:8d:01:6e:de:a3:db:d3:1e:26:87:
         87:77:e5:fc:2e:ad:71:03:56:b9:7e:33:a7:be:7a:54:8b:eb:
         f9:e4:3c:0f:d4:77:9c:06:1d:4d:67:61:0e:bc:cd:ff:4b:ef:
         23:6a:2f:61:f2:b7:fe:86:e8:74:1c:ce:61:8a:ad:54:82:cb:
         82:2d:f9:93:82:53:19:47:93:45:55:a2:98:87:d1:7d:40:31:
         dd:c3:a6:da:19:c3:55:67:40:50:48:e9:41:ec:d0:19:4f:62:
         a1:63:b0:17:74:c6:50:90:d9:5c:80:ac:8d:3e:d8:63:c3:a3:
         e9:25:d6:31:56:8a:8a:49:55:5e:05:b4:62:01:bb:88:d9:62:
         d1:f3:da:5c:45:fe:ea:2c:ed:5e:58:6e:d6:89:3b:be:77:70:
         ca:30:07:47:71:48:6b:47:85:16:a6:ec:f4:f4:39:55:d2:84:
         1a:9c:98:69:b7:e3:2a:96:42:38:ce:6f:e6:65:5a:8c:2e:eb:
         44:6b:46:29:01:1e:cd:d7:e0:f7:d1:d9:0e:59:ce:76:0f:fd:
         e0:53:8f:de:d8:0a:df:ce:ac:89:fd:b8:1c:65:2e:c7:33:7b:
         b3:38:d1:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSbtMGAzRpYD4gLhxfotKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYWMxYjIxMjlhYmJhYzY1MzlmODBkYTY1NTBjNDk3MjFk
MGE4YzQwHhcNMjYwOTI0MDgwMTEzWhcNMjYwOTI1MDgwMTEzWjAzMTEwLwYDVQQD
EygyOGZiOTY2ODMxYmNkZTQ0YzE2MzVjZTg5ZTdlMWRjYzc3NDc2YmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRQvQ85GbhWjAcXWaTgY9ZMKCEKX
ieZA7oHpMYcDZ8gvZ3H7veoflNUAbmth+C/865n+sBgqL9FlKBrvAb37tCjaN1Gh
UEBR7+9K4bjTg1c4BBnDKlFWud4ePFLZQ5CBq6KGv9tRo1h18acC88PL85AAQfoN
BCIR0YGv3gd32BbChiZqkoSljFEDegZnddniLhvuGzTerYZFU7YuNkClU4CDuouK
mSxY2qKkzwikmcsXnwYN26dVeu8+S2zIIc+56zQA5GQOrvHIY0f8/dZ6O1liOyix
R5cczfW3WlJvBN+L/ne9raERILF3+mQPXzQwavsCkGaE9qHzXJ1a/W0m7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj7lmgxvN5EwWNc6J5+Hcx3R2vwMB8GA1UdIwQY
MBaAFK6sGyEpq7rGU5+A2mVQxJch0KjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGIt
ODY2YjJiMDIxZmM1LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9iOWJiN2YtMTY2ZC00MWFmLWExZGItODY2YjJiMDIxZmM1
LzEvcnF3YklTbXJ1c1pUbjREYVpWREVseUhRcU1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX70Oxz2d
smharPyVeb24bmgD+1IUXhKNH6CNAW7eo9vTHiaHh3fl/C6tcQNWuX4zp756VIvr
+eQ8D9R3nAYdTWdhDrzN/0vvI2ovYfK3/obodBzOYYqtVILLgi35k4JTGUeTRVWi
mIfRfUAx3cOm2hnDVWdAUEjpQezQGU9ioWOwF3TGUJDZXICsjT7YY8Oj6SXWMVaK
iklVXgW0YgG7iNli0fPaXEX+6iztXlhu1ok7vndwyjAHR3FIa0eFFqbs9PQ5VdKE
GpyYabfjKpZCOM5v5mVajC7rRGtGKQEezdfg99HZDlnOdg/94FOP3tgK386sif24
HGUuxzN7szjRJA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:56:21 2026 by rpki-client