Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.mft
File:                     73hrU-ZKJA6IhOvHehLsEAfMnn0.mft (raw, json)
Hash identifier:          FgLmtzlkATMESBEwiTaboL/5wdrboMWRkmKVgg+sgF4=
Subject key identifier:   E6:64:B2:24:25:BF:C6:F9:9D:46:CE:D4:58:7C:9C:C9:9D:17:EB:10
Authority key identifier: EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D
Certificate issuer:       /CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
Certificate serial:       01A0D42631CD6A652D9F8281BAD1159A0A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.mft
Manifest number:          EA
Signing time:             Thu 24 Sep 2026 16:01:07 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:07 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:07 +0000
Files and hashes:         1: 1-bw5tXPdOZDDXdxJ1PqARp2P8LU.roa (hash: FpgLpZJYBSVSZFlpIQh3Qgjz5p/hTc6FQeHMMeCNwMo=)
                          2: 73hrU-ZKJA6IhOvHehLsEAfMnn0.crl (hash: Zql5OUB1++8kSXU+aufgpfmnmCgqAY5xukPg95ccCTk=)
                          3: AESpqkI4WTe7jx-yC_HTg6Sh9ok.roa (hash: CCwkANLmNhgbzDwGP6j/uZpNlT/AEM2EMbdVhaDuVsM=)
                          4: C6YtMdSEYO9dKM8BLZVn3TJEVno.roa (hash: PSnggfJpFpASGtGwabVM5/Lc5DfRw7K3fjga/IuuEIQ=)
                          5: s3zPpvS911yCXbntVAQR-dzQPNc.roa (hash: oz3GNJv3x5a9yD12x3nam6u07h9nz36EndzIcLdDfDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:31:cd:6a:65:2d:9f:82:81:ba:d1:15:9a:0a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
        Validity
            Not Before: Sep 24 16:01:07 2026 GMT
            Not After : Sep 25 16:01:07 2026 GMT
        Subject: CN=e664b22425bfc6f99d46ced4587c9cc99d17eb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:42:ac:f6:5d:b7:8b:a0:6f:25:cd:1f:ca:d3:
                    bf:b6:6f:ba:d7:be:dd:1d:71:d9:20:cd:57:62:f5:
                    51:ce:67:b4:9c:da:dd:c1:fd:46:19:a9:79:46:60:
                    6b:26:ea:b9:d2:9c:05:c5:23:48:f1:1c:4e:73:8b:
                    0c:59:f3:1f:a7:c0:3f:89:ba:66:fc:a7:66:30:68:
                    e7:87:af:44:92:d6:c3:a7:32:8b:65:71:ea:43:5f:
                    97:39:bc:d8:00:ff:bd:99:44:5b:44:77:8c:51:67:
                    0a:2d:3a:c6:67:89:9a:9d:da:dc:83:3b:49:92:78:
                    1a:f7:27:37:75:d6:ce:a0:d7:cc:9b:2c:07:58:67:
                    4b:49:aa:89:37:a1:4a:1a:57:2b:24:eb:fa:08:23:
                    e8:b0:f8:e7:ae:0e:ff:81:6a:d1:60:a7:b4:e3:67:
                    b9:aa:94:c2:62:e6:79:f3:a8:04:e6:e8:f4:7d:08:
                    ea:ad:cd:84:8b:6a:bb:61:df:02:8f:08:5c:14:58:
                    24:bc:03:e8:08:d2:a2:85:ac:94:f7:2b:23:3e:97:
                    4b:5d:5f:0b:e9:39:8d:5f:97:d0:f5:17:09:63:1b:
                    12:04:a4:7f:3f:6a:65:ee:a4:d1:87:42:a3:f5:4e:
                    5f:98:e4:e6:d4:16:9d:0c:bc:46:5c:3b:9d:a7:33:
                    15:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:64:B2:24:25:BF:C6:F9:9D:46:CE:D4:58:7C:9C:C9:9D:17:EB:10
            X509v3 Authority Key Identifier:
                keyid:EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:fd:49:b7:9f:68:cd:b2:4b:fc:76:54:f2:b3:39:ca:81:59:
         16:b9:3b:83:30:30:de:6d:b9:e8:65:55:43:f4:39:7b:74:a2:
         b1:3c:b7:bb:e6:89:6b:31:eb:d1:08:e7:05:19:38:55:ba:ef:
         b3:b5:d9:c1:93:a4:14:bb:b3:29:20:99:7d:e2:49:66:ec:d8:
         67:70:ab:43:0e:6f:2e:b0:8c:f8:26:2d:e2:32:f8:4d:ae:87:
         6b:06:50:33:63:ee:6f:e8:96:34:90:dd:03:ab:2f:4a:dd:f0:
         60:1a:ae:e0:d9:fb:db:b7:35:2d:8f:20:5e:fd:a6:63:b1:2e:
         72:0a:1d:72:23:25:cb:46:66:5a:79:73:40:6d:ee:16:a0:d1:
         c7:0c:10:e7:aa:28:1c:3f:d2:23:6a:08:1f:49:66:84:5f:ca:
         5d:93:bf:32:44:8f:a1:e4:32:21:02:95:0c:dc:22:2d:df:35:
         71:f0:45:e2:ec:fb:f5:e0:81:73:aa:18:8c:06:1b:ff:bc:30:
         65:a3:74:99:34:79:fb:0b:5c:0b:29:9b:17:60:37:66:f4:84:
         64:83:b4:3f:bd:44:48:43:16:ae:06:c9:be:cf:0f:5e:2c:2a:
         cf:75:1c:c6:d0:79:a2:14:0f:25:c3:9a:1b:ca:a1:d0:bc:b9:
         b9:55:c6:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUJjHNamUtn4KButEVmgpmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNzg2YjUzZTY0YTI0MGU4ODg0ZWJjNzdhMTJlYzEwMDdj
YzllN2QwHhcNMjYwOTI0MTYwMTA3WhcNMjYwOTI1MTYwMTA3WjAzMTEwLwYDVQQD
EyhlNjY0YjIyNDI1YmZjNmY5OWQ0NmNlZDQ1ODdjOWNjOTlkMTdlYjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUKs9l23i6BvJc0fytO/tm+6177d
HXHZIM1XYvVRzme0nNrdwf1GGal5RmBrJuq50pwFxSNI8RxOc4sMWfMfp8A/ibpm
/KdmMGjnh69EktbDpzKLZXHqQ1+XObzYAP+9mURbRHeMUWcKLTrGZ4mandrcgztJ
knga9yc3ddbOoNfMmywHWGdLSaqJN6FKGlcrJOv6CCPosPjnrg7/gWrRYKe042e5
qpTCYuZ586gE5uj0fQjqrc2Ei2q7Yd8CjwhcFFgkvAPoCNKihayU9ysjPpdLXV8L
6TmNX5fQ9RcJYxsSBKR/P2pl7qTRh0Kj9U5fmOTm1BadDLxGXDudpzMVgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZksiQlv8b5nUbO1Fh8nMmdF+sQMB8GA1UdIwQY
MBaAFO94a1PmSiQOiITrx3oS7BAHzJ59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzNoclUtWktKQTZJaE92SGVoTHNFQWZNbm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjIt
OGIyYjQ3MzhiMWNjLzEvNzNoclUtWktKQTZJaE92SGVoTHNFQWZNbm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjItOGIyYjQ3MzhiMWNj
LzEvNzNoclUtWktKQTZJaE92SGVoTHNFQWZNbm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANP1Jt59o
zbJL/HZU8rM5yoFZFrk7gzAw3m256GVVQ/Q5e3SisTy3u+aJazHr0QjnBRk4Vbrv
s7XZwZOkFLuzKSCZfeJJZuzYZ3CrQw5vLrCM+CYt4jL4Ta6HawZQM2Pub+iWNJDd
A6svSt3wYBqu4Nn727c1LY8gXv2mY7EucgodciMly0ZmWnlzQG3uFqDRxwwQ56oo
HD/SI2oIH0lmhF/KXZO/MkSPoeQyIQKVDNwiLd81cfBF4uz79eCBc6oYjAYb/7ww
ZaN0mTR5+wtcCymbF2A3ZvSEZIO0P71ESEMWrgbJvs8PXiwqz3UcxtB5ohQPJcOa
G8qh0Ly5uVXGYg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:22:02 2026 by rpki-client