Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
File:                     I399sDMxTEc82hlODfefHDddo_Q.mft (raw, json)
Hash identifier:          QOFmRLdNaApSYigLr/YFx4tHSGyLAo71orwrL/ctn0c=
Subject key identifier:   25:CA:34:29:52:1A:07:E9:FB:94:AD:25:5C:8B:6D:37:FC:EF:B7:5F
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Certificate issuer:       /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial:       01A0CFA3E75C124CD72B38863D853464F804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
Manifest number:          1A9A
Signing time:             Wed 23 Sep 2026 19:00:20 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:20 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:20 +0000
Files and hashes:         1: FA9Nx6h2GDGuDWivaetY48_JZBY.roa (hash: qCJEbptC+2Sx+e+Y3VIZydyiW+Q7Yd8NiHhHUmo6rek=)
                          2: I399sDMxTEc82hlODfefHDddo_Q.crl (hash: tSnQ5r133Z0MGR2THbnuMcNBb4Byoa3PbHXKPdmd8no=)
                          3: Kc_ZYw3v8hIzmM1zcgt9F5cxL98.roa (hash: Lw1rg+/Tz8s8iqnT6INdOtQPU4yz9vyMzF8Or+39BWE=)
                          4: OwT3MWkGmy8nucB77AIErlwv-c8.roa (hash: TO+izXPgq1XnvslTtUGRCnNQnecbCKgXbwm0U1xhS58=)
                          5: ei49HQBepZfijJONn1YXG9qTwnQ.roa (hash: 436lkK/qtqzaDmSUiPMUIk0ZEB4+mDd5VFzkWFWYadA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a3:e7:5c:12:4c:d7:2b:38:86:3d:85:34:64:f8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
        Validity
            Not Before: Sep 23 19:00:20 2026 GMT
            Not After : Sep 24 19:00:20 2026 GMT
        Subject: CN=25ca3429521a07e9fb94ad255c8b6d37fcefb75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:87:9f:1f:1c:80:da:6e:74:e6:56:53:f8:73:
                    5f:32:a6:cd:7a:1c:95:8d:13:84:65:f9:42:7f:98:
                    9c:26:98:ea:6f:a5:99:4e:64:b5:3c:83:9d:8e:67:
                    99:ed:ab:df:22:f1:7d:b1:a9:bc:00:d9:42:cc:ea:
                    7a:eb:51:61:96:e8:b3:43:80:31:86:31:77:da:e4:
                    4f:b5:ec:7c:85:9c:70:af:b9:cc:c9:b0:9d:9f:4b:
                    a4:9b:94:5d:78:bf:86:59:39:bf:0e:bb:3a:ac:cb:
                    c3:a2:ef:19:f3:8c:a9:ff:f6:2f:6a:3e:be:51:29:
                    dd:5f:8a:18:f8:ce:31:83:5b:0c:d1:79:45:e2:79:
                    d7:3e:dc:b4:30:dd:55:e7:67:9a:53:7c:81:c4:33:
                    ae:30:f3:42:36:e7:4f:67:a8:5b:16:60:4d:ec:f9:
                    52:5f:d6:c5:7b:1f:cd:ae:dc:6d:bf:8b:c5:50:9c:
                    92:bc:c7:70:93:67:43:6e:08:cc:90:40:b4:97:5c:
                    08:7e:02:85:b0:b9:4b:96:a0:72:cb:ba:c0:bc:a6:
                    b4:b2:9a:0e:a1:51:92:70:c0:33:e1:96:2e:92:cc:
                    03:08:69:2e:2a:9b:c9:5e:08:78:4d:b3:47:ea:a5:
                    20:d5:c5:5e:c9:18:61:7e:3e:de:b4:21:70:4d:b5:
                    fc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CA:34:29:52:1A:07:E9:FB:94:AD:25:5C:8B:6D:37:FC:EF:B7:5F
            X509v3 Authority Key Identifier:
                keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8c:44:00:ec:86:98:a9:6d:ce:e3:91:72:03:20:6b:74:26:
         94:68:f9:ee:85:c7:a5:23:a1:f5:b8:40:5a:32:dc:fb:0d:3d:
         24:0e:45:b0:da:6b:32:bd:ef:f1:9d:4c:be:05:e1:96:3b:91:
         80:9f:8f:7c:f8:b1:3c:b1:ac:25:a1:12:8d:7a:4b:2c:68:37:
         79:a5:c8:6f:2a:87:3f:6a:3a:64:5f:16:eb:3e:1e:9f:8e:7d:
         f4:7a:f6:35:94:f9:36:f8:f4:67:86:99:ec:04:ce:cd:d9:85:
         97:2f:fb:bb:a4:1f:34:06:f8:3a:0d:b1:46:a7:d2:ae:2f:fa:
         76:7b:07:20:0a:9f:63:ad:3a:f9:ff:79:75:a2:17:cd:7e:14:
         09:ff:80:bf:2e:3b:6a:9c:1e:90:ce:6d:ed:6c:f9:bd:67:1b:
         94:27:47:2b:9e:1b:46:36:24:87:ee:b9:67:6d:cc:a6:86:a6:
         80:6b:ec:7f:f9:aa:a3:3f:29:c1:c1:4d:d2:ec:d7:5c:05:96:
         1a:6b:2c:cf:50:99:30:c4:62:09:c7:17:8e:03:14:94:a9:90:
         1f:35:9f:1a:aa:78:b2:64:51:0c:d3:a9:63:34:5a:81:84:2f:
         5f:45:61:c2:e6:d8:d5:27:66:b4:37:99:87:83:bf:19:95:d5:
         dc:dc:55:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPo+dcEkzXKziGPYU0ZPgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2Y3ZGIwMzMzMTRjNDczY2RhMTk0ZTBkZjc5ZjFjMzc1
ZGEzZjQwHhcNMjYwOTIzMTkwMDIwWhcNMjYwOTI0MTkwMDIwWjAzMTEwLwYDVQQD
EygyNWNhMzQyOTUyMWEwN2U5ZmI5NGFkMjU1YzhiNmQzN2ZjZWZiNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44efHxyA2m505lZT+HNfMqbNehyV
jROEZflCf5icJpjqb6WZTmS1PIOdjmeZ7avfIvF9sam8ANlCzOp661FhluizQ4Ax
hjF32uRPtex8hZxwr7nMybCdn0ukm5RdeL+GWTm/Drs6rMvDou8Z84yp//Yvaj6+
USndX4oY+M4xg1sM0XlF4nnXPty0MN1V52eaU3yBxDOuMPNCNudPZ6hbFmBN7PlS
X9bFex/Nrtxtv4vFUJySvMdwk2dDbgjMkEC0l1wIfgKFsLlLlqByy7rAvKa0spoO
oVGScMAz4ZYukswDCGkuKpvJXgh4TbNH6qUg1cVeyRhhfj7etCFwTbX8CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXKNClSGgfp+5StJVyLbTf877dfMB8GA1UdIwQY
MBaAFCN/fbAzMUxHPNoZTg33nxw3XaP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYt
ZWUwNjAzOTQ5ZjkzLzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYtZWUwNjAzOTQ5Zjkz
LzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYxEAOyG
mKltzuORcgMga3QmlGj57oXHpSOh9bhAWjLc+w09JA5FsNprMr3v8Z1MvgXhljuR
gJ+PfPixPLGsJaESjXpLLGg3eaXIbyqHP2o6ZF8W6z4en4599Hr2NZT5Nvj0Z4aZ
7ATOzdmFly/7u6QfNAb4Og2xRqfSri/6dnsHIAqfY606+f95daIXzX4UCf+Avy47
apwekM5t7Wz5vWcblCdHK54bRjYkh+65Z23MpoamgGvsf/mqoz8pwcFN0uzXXAWW
Gmssz1CZMMRiCccXjgMUlKmQHzWfGqp4smRRDNOpYzRagYQvX0VhwubY1SdmtDeZ
h4O/GZXV3NxVyw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:57:55 2026 by rpki-client