Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
File:                     _J8k6-8Ri5Fl5S9hypk77kMGTsI.mft (raw, json)
Hash identifier:          7EnXDgfSr143mnhq2xQYJohQHCdntZ+P+QKcTyU3YbU=
Subject key identifier:   E4:C9:B2:3B:96:39:E0:47:32:84:F0:8D:13:9F:BC:60:03:D4:C5:D2
Authority key identifier: FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
Certificate issuer:       /CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Certificate serial:       01A0D9BA578BB5E2062442C54E8040A94FE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
Manifest number:          1A04
Signing time:             Fri 25 Sep 2026 18:01:02 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:02 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:02 +0000
Files and hashes:         1: 7B0JN3TZzsWH3xWnjPsFalxLsrU.roa (hash: RqRaE/k1aztxqp++Q0wssZB3S2oxh71O7HLy7VlmBJg=)
                          2: _J8k6-8Ri5Fl5S9hypk77kMGTsI.crl (hash: 2JSsXcYpcc4JPI9438JQig7QY6eejHzoKQVJMXWhbwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:ba:57:8b:b5:e2:06:24:42:c5:4e:80:40:a9:4f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
        Validity
            Not Before: Sep 25 18:01:02 2026 GMT
            Not After : Sep 26 18:01:02 2026 GMT
        Subject: CN=e4c9b23b9639e0473284f08d139fbc6003d4c5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:c2:5c:ad:a7:d8:2e:3e:b6:f1:d1:38:22:
                    42:41:8b:1a:d8:64:5c:f5:fc:98:a5:a5:b6:37:6d:
                    50:6d:ed:c7:f2:29:8f:06:de:cc:28:9d:56:72:d7:
                    0c:6a:b1:5f:2e:23:02:76:90:c5:69:23:35:5c:51:
                    ac:0e:f0:8f:68:43:4f:5b:de:c1:2a:15:ff:36:1a:
                    f2:27:60:f3:b9:2e:ed:c2:4f:18:ed:b6:4f:84:24:
                    1f:fa:a8:b2:c7:4a:15:24:d2:53:bb:d7:92:f1:80:
                    5a:e6:4a:c8:c8:d6:21:41:2d:61:d3:e3:f1:e2:e4:
                    6e:42:b5:1f:ce:2f:18:c5:8d:59:1f:1c:43:67:c1:
                    72:9f:43:b4:5b:1f:5b:e3:44:7c:ce:2d:68:62:e2:
                    28:39:18:7e:e7:bb:95:43:86:43:87:3e:4a:73:5c:
                    f2:6c:60:9c:33:4b:2a:1b:69:82:b6:d2:13:75:9b:
                    15:0e:ab:65:0d:59:10:ae:ac:f1:2b:d5:ff:cd:bf:
                    6e:e9:55:b0:f1:e6:4b:e7:8a:23:65:ca:6c:38:39:
                    79:b7:f5:cd:c3:db:aa:d4:f0:df:8a:9e:c4:8c:91:
                    ad:fe:97:a0:7a:9d:31:45:49:16:42:33:47:ac:45:
                    1d:9b:bf:43:cd:d5:91:2e:c8:34:99:de:b8:b5:32:
                    6b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C9:B2:3B:96:39:E0:47:32:84:F0:8D:13:9F:BC:60:03:D4:C5:D2
            X509v3 Authority Key Identifier:
                keyid:FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a2:56:7e:13:5e:18:ec:ed:48:1f:c1:b3:ea:5c:54:b1:59:
         04:63:db:a1:de:42:23:94:d5:5d:4b:54:39:04:e8:9b:6d:55:
         7e:6e:d4:08:8d:6e:95:0b:55:a7:b5:65:e0:28:6c:e1:3e:0e:
         ee:0b:3b:76:ce:27:f2:2f:f8:3d:81:94:97:76:da:63:14:59:
         7b:bd:8e:98:7f:20:af:92:92:74:62:a4:13:a4:99:eb:ee:06:
         d4:2d:75:11:dc:5a:9b:a0:ff:c8:40:13:53:4a:60:e3:89:d2:
         a3:49:55:4c:4e:8e:6b:f1:f3:b4:c2:05:fd:68:f9:19:db:9f:
         e7:c4:7f:05:1d:f3:ff:75:c5:09:ae:d4:7a:47:56:64:60:d4:
         0b:92:6f:ee:02:f2:97:c6:06:db:aa:27:16:ed:03:8b:f1:1a:
         fd:52:69:af:67:85:1e:d0:e8:ab:d5:1d:05:34:28:3f:cd:c7:
         49:f7:86:03:64:e7:92:4f:28:ab:b8:f9:6a:48:2b:53:62:42:
         22:74:08:fd:f2:8d:0e:45:dd:b0:a7:d9:18:d9:74:75:74:cd:
         1b:f9:ad:3d:9f:bd:96:1f:18:71:da:26:2b:b0:b0:63:a4:df:
         41:6b:38:e0:f8:31:ea:c4:76:cb:ea:b7:9c:bb:7e:55:6f:80:
         b5:5b:cc:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZuleLteIGJELFToBAqU/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOWYyNGViZWYxMThiOTE2NWU1MmY2MWNhOTkzYmVlNDMw
NjRlYzIwHhcNMjYwOTI1MTgwMTAyWhcNMjYwOTI2MTgwMTAyWjAzMTEwLwYDVQQD
EyhlNGM5YjIzYjk2MzllMDQ3MzI4NGYwOGQxMzlmYmM2MDAzZDRjNWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1fCXK2n2C4+tvHROCJCQYsa2GRc
9fyYpaW2N21Qbe3H8imPBt7MKJ1WctcMarFfLiMCdpDFaSM1XFGsDvCPaENPW97B
KhX/NhryJ2DzuS7twk8Y7bZPhCQf+qiyx0oVJNJTu9eS8YBa5krIyNYhQS1h0+Px
4uRuQrUfzi8YxY1ZHxxDZ8Fyn0O0Wx9b40R8zi1oYuIoORh+57uVQ4ZDhz5Kc1zy
bGCcM0sqG2mCttITdZsVDqtlDVkQrqzxK9X/zb9u6VWw8eZL54ojZcpsODl5t/XN
w9uq1PDfip7EjJGt/pegep0xRUkWQjNHrEUdm79DzdWRLsg0md64tTJrKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTJsjuWOeBHMoTwjROfvGAD1MXSMB8GA1UdIwQY
MBaAFPyfJOvvEYuRZeUvYcqZO+5DBk7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0o4azYtOFJpNUZsNVM5aHlwazc3a01HVHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lNmNiMmItZGYwOS00MDA3LThhZDct
MTUzYmY3ZTdlYzJhLzEvX0o4azYtOFJpNUZsNVM5aHlwazc3a01HVHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lNmNiMmItZGYwOS00MDA3LThhZDctMTUzYmY3ZTdlYzJh
LzEvX0o4azYtOFJpNUZsNVM5aHlwazc3a01HVHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqJWfhNe
GOztSB/Bs+pcVLFZBGPbod5CI5TVXUtUOQTom21Vfm7UCI1ulQtVp7Vl4Chs4T4O
7gs7ds4n8i/4PYGUl3baYxRZe72OmH8gr5KSdGKkE6SZ6+4G1C11Edxam6D/yEAT
U0pg44nSo0lVTE6Oa/HztMIF/Wj5Gduf58R/BR3z/3XFCa7UekdWZGDUC5Jv7gLy
l8YG26onFu0Di/Ea/VJpr2eFHtDoq9UdBTQoP83HSfeGA2Tnkk8oq7j5akgrU2JC
InQI/fKNDkXdsKfZGNl0dXTNG/mtPZ+9lh8YcdomK7CwY6TfQWs44Pgx6sR2y+q3
nLt+VW+AtVvMWg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:52 2026 by rpki-client