Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
File:                     5dasEgU_FIaz3nfxyHC1a538ORM.mft (raw, json)
Hash identifier:          J2w7Ij+Ja2AlZbWt9tbNixu8a5Jc7W4zbaiIVSmAnCg=
Subject key identifier:   95:8D:CC:E6:AE:45:72:9C:41:4E:4E:BC:82:33:95:D5:F8:2A:06:F1
Authority key identifier: E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13
Certificate issuer:       /CN=e5d6ac12053f1486b3de77f1c870b56b9dfc3913
Certificate serial:       01A0CEFF015AC0BE042AADE044ADD2FC6F91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
Manifest number:          1A68
Signing time:             Wed 23 Sep 2026 16:00:13 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:13 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:13 +0000
Files and hashes:         1: 1EN7TRD-aLVl5lkSCjm_nVcC3UU.roa (hash: MtswjThVcbS9+sptcfq3+1p1Rfy1WmBysgNNW6G/HTs=)
                          2: 5dasEgU_FIaz3nfxyHC1a538ORM.crl (hash: UwgflR2pK+EGfkDDQBLqFgmTKqwaCGspJqcfRURnTPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:01:5a:c0:be:04:2a:ad:e0:44:ad:d2:fc:6f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6ac12053f1486b3de77f1c870b56b9dfc3913
        Validity
            Not Before: Sep 23 16:00:13 2026 GMT
            Not After : Sep 24 16:00:13 2026 GMT
        Subject: CN=958dcce6ae45729c414e4ebc823395d5f82a06f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:64:fa:28:3f:af:58:6b:d4:eb:71:ca:28:a9:
                    b6:18:0b:85:46:b7:16:26:5f:ec:f2:c9:52:c4:0b:
                    ca:6a:16:21:94:6c:e7:2a:39:a3:38:93:77:97:44:
                    ba:fb:88:cc:f1:44:ea:09:c6:2f:23:2f:98:2d:f5:
                    81:95:bf:7e:d1:87:ad:fb:46:49:44:5f:bf:05:2b:
                    2f:c5:b4:71:2a:6a:d0:8c:4d:69:03:07:c1:f9:af:
                    ee:c4:ec:60:fd:2a:c9:f5:ef:15:35:60:89:dc:fc:
                    d9:cf:3b:3b:de:ba:09:9a:46:21:86:0a:97:e0:b0:
                    fd:85:18:90:56:c6:ad:10:90:db:d9:9a:f9:a7:c4:
                    42:74:63:70:e7:7f:76:10:79:98:d8:fb:6f:0f:3e:
                    90:69:2b:fa:b0:46:ff:b7:11:10:5e:aa:ba:9d:86:
                    3a:13:ea:47:8b:37:7d:ec:14:77:44:89:c8:ab:7c:
                    75:e3:6b:90:4c:af:da:10:6b:e6:79:73:dd:5a:67:
                    28:de:28:7f:cc:a0:a3:21:6e:19:ff:cc:52:aa:8e:
                    78:b9:21:4d:a8:b6:12:97:ef:88:9a:d2:e2:b5:86:
                    d6:7b:6c:52:66:cd:6c:dd:30:df:18:53:d5:51:1d:
                    a5:c0:d6:b3:de:0c:6a:dd:3c:43:c8:3f:1d:96:e8:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8D:CC:E6:AE:45:72:9C:41:4E:4E:BC:82:33:95:D5:F8:2A:06:F1
            X509v3 Authority Key Identifier:
                keyid:E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:3b:4b:b7:27:1a:67:5a:15:bd:4f:26:15:49:d7:0a:4d:7e:
         02:11:d0:f6:11:42:6d:79:24:28:54:eb:c2:e7:b9:eb:a3:2c:
         eb:29:e7:01:ed:7a:ae:13:21:d3:0a:e8:99:fd:f3:71:4b:f7:
         b5:67:6c:50:0b:a4:ff:d8:ca:71:31:47:01:2c:c0:2a:ae:7d:
         4c:40:00:26:af:f8:03:a6:17:47:65:de:52:ce:d6:d3:8b:93:
         a5:dc:c1:fc:01:35:34:32:5c:99:7e:7c:b2:cb:5d:a6:9e:e4:
         31:d3:ce:f6:0b:cc:b1:11:5c:94:f8:f8:c2:43:1d:7d:62:23:
         a4:25:1a:35:43:f2:e5:7b:66:23:9c:81:d6:bf:17:44:49:8c:
         d8:22:0e:32:94:d3:32:c7:f1:d7:1b:61:1d:a3:de:80:c0:d2:
         66:8c:0c:62:87:50:0a:89:b1:f1:b6:74:94:20:02:f8:f3:6e:
         0f:7a:1e:06:4c:0b:88:82:82:b4:11:91:f7:af:6c:79:62:00:
         a4:9d:39:1a:6c:e4:10:8f:58:a9:ae:18:13:69:84:47:50:c2:
         5a:13:af:ef:0f:2f:39:88:35:4f:4b:09:5d:97:e6:5e:7b:48:
         56:f0:10:17:38:d4:33:27:b3:ad:61:46:f7:92:86:55:fb:e4:
         c1:ec:87:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO/wFawL4EKq3gRK3S/G+RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZDZhYzEyMDUzZjE0ODZiM2RlNzdmMWM4NzBiNTZiOWRm
YzM5MTMwHhcNMjYwOTIzMTYwMDEzWhcNMjYwOTI0MTYwMDEzWjAzMTEwLwYDVQQD
Eyg5NThkY2NlNmFlNDU3MjljNDE0ZTRlYmM4MjMzOTVkNWY4MmEwNmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mT6KD+vWGvU63HKKKm2GAuFRrcW
Jl/s8slSxAvKahYhlGznKjmjOJN3l0S6+4jM8UTqCcYvIy+YLfWBlb9+0Yet+0ZJ
RF+/BSsvxbRxKmrQjE1pAwfB+a/uxOxg/SrJ9e8VNWCJ3PzZzzs73roJmkYhhgqX
4LD9hRiQVsatEJDb2Zr5p8RCdGNw5392EHmY2PtvDz6QaSv6sEb/txEQXqq6nYY6
E+pHizd97BR3RInIq3x142uQTK/aEGvmeXPdWmco3ih/zKCjIW4Z/8xSqo54uSFN
qLYSl++ImtLitYbWe2xSZs1s3TDfGFPVUR2lwNaz3gxq3TxDyD8dlugzmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWNzOauRXKcQU5OvIIzldX4KgbxMB8GA1UdIwQY
MBaAFOXWrBIFPxSGs9538chwtWud/DkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWRhc0VnVV9GSWF6M25meHlIQzFhNTM4T1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lNjJjNGYtNWVlMi00ZmUwLTk1NDAt
YjEwM2ZhNDc0M2I5LzEvNWRhc0VnVV9GSWF6M25meHlIQzFhNTM4T1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lNjJjNGYtNWVlMi00ZmUwLTk1NDAtYjEwM2ZhNDc0M2I5
LzEvNWRhc0VnVV9GSWF6M25meHlIQzFhNTM4T1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDtLtyca
Z1oVvU8mFUnXCk1+AhHQ9hFCbXkkKFTrwue566Ms6ynnAe16rhMh0wromf3zcUv3
tWdsUAuk/9jKcTFHASzAKq59TEAAJq/4A6YXR2XeUs7W04uTpdzB/AE1NDJcmX58
sstdpp7kMdPO9gvMsRFclPj4wkMdfWIjpCUaNUPy5XtmI5yB1r8XREmM2CIOMpTT
Msfx1xthHaPegMDSZowMYodQComx8bZ0lCAC+PNuD3oeBkwLiIKCtBGR969seWIA
pJ05GmzkEI9Yqa4YE2mER1DCWhOv7w8vOYg1T0sJXZfmXntIVvAQFzjUMyezrWFG
95KGVfvkweyHTQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:50:05 2026 by rpki-client