Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
File:                     mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json)
Hash identifier:          1BWJpeZyPxqJRgvEekDSb0EhV/U6o7g+11UCSK45p5k=
Subject key identifier:   D3:44:4A:96:4D:4F:EC:EA:BF:50:CF:FD:84:09:AD:F3:46:D1:D0:25
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       01A0EB53548D97D931E25161D8336CA940F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
Manifest number:          1B0D
Signing time:             Tue 29 Sep 2026 04:01:41 +0000
Manifest this update:     Tue 29 Sep 2026 04:01:41 +0000
Manifest next update:     Wed 30 Sep 2026 04:01:41 +0000
Files and hashes:         1: 1EoM1UO0JsRER_6OIEo8eh1Sx-4.roa (hash: V7Dtw6vdqsk3cN/h42qguGZXjyed4erKeqilX1KdNkE=)
                          2: 5OGPGzofiEFa09GnFOAn5hhvk48.roa (hash: h2LTT9rBOO/bxXO9EO5NFwg/fB9HG26CM4uymezMPKI=)
                          3: IPMiCKDGg-4bycZ4wSrvvc3HolI.roa (hash: Up0dPWNya84ceqWIOnzBSjlOj2l1pRl6VXrPutXxbZ4=)
                          4: OyXa5XHUgsJSBsdbc3Qrhq4QU1Y.roa (hash: Gyfd0tsIEQsaZgvjHA4zwq5b2ZqvTwYd6Np55tiRmHQ=)
                          5: P_IQf465IziNUba5nDDuA9mYb2E.roa (hash: NtF/MIHSktYf3HQG++BY9SW33um7HsSxglhUDmVhaCg=)
                          6: THhHEbJLNflyjg0CGgDKLOWHmNw.roa (hash: hE5im+TYFFs2d+KHjtsfg9PpKV6WFy0Jtd49aeuY6Po=)
                          7: e7Lvz7EuGDsmNFIhRbwvynj9xTY.asa (hash: ns2I70ZkX4z8+mK5f+FUnkH52JTj0mfI9C5qd0rPQ1g=)
                          8: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: 7xHx+g0x9mZPLfuIP1Mo6uZbhRV2L2Fcn0QeygS13oY=)
                          9: vREpqPygKpqEUBRK1WP9YRnHT1U.roa (hash: aIOz9LGkgfShAFeGoLvJK3zSpzEcpe5gJpmAOuZIS1I=)
                          10: z0oaUfPMt3Z_xl8gY8NTLVtXaGM.roa (hash: q9SpH5VN4ogoXvDgwfQyWPD2v94u40id/9IL4OGY508=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:53:54:8d:97:d9:31:e2:51:61:d8:33:6c:a9:40:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Sep 29 04:01:41 2026 GMT
            Not After : Sep 30 04:01:41 2026 GMT
        Subject: CN=d3444a964d4feceabf50cffd8409adf346d1d025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:06:77:cd:55:d0:87:43:04:3e:99:33:57:
                    c2:9a:2f:99:b2:36:43:9d:eb:39:0f:ea:32:3e:bf:
                    e9:89:8d:b5:94:ee:a6:b2:10:dc:ca:8d:db:fd:a7:
                    51:45:99:0f:ca:80:e2:1a:29:39:02:a2:bc:ae:d9:
                    eb:3c:e8:64:b8:6f:a5:d8:57:cb:b7:54:4f:eb:29:
                    75:c5:7b:42:8f:5b:5d:d9:ac:39:fb:1f:8b:4f:de:
                    1a:89:c9:ac:c9:5c:9e:0c:15:bd:24:1b:d5:91:4d:
                    9f:b7:c4:c9:61:e1:be:8e:8a:43:bd:f7:ca:21:87:
                    21:8a:0c:48:94:ec:01:c3:16:74:a8:99:01:45:00:
                    bd:69:a0:16:c3:f0:ae:3e:b2:6b:e5:a9:7f:03:44:
                    53:ed:d3:a2:b5:9c:35:b4:bf:67:9c:11:60:c1:82:
                    22:20:37:92:52:d2:53:3a:a1:9e:36:a1:5e:b8:26:
                    ea:3c:6f:8f:f3:ea:b3:38:92:cd:ea:97:31:49:c8:
                    57:42:40:f1:3d:83:d2:03:a3:71:28:01:fb:81:6f:
                    6d:b5:2a:3e:f9:d1:58:b7:3f:6a:6f:7c:4b:a9:28:
                    46:dc:d5:d1:b7:c5:a8:61:a0:e2:dc:34:aa:98:cc:
                    8a:a9:ac:d2:a5:3a:45:e2:18:0a:4a:96:a0:7d:f4:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:44:4A:96:4D:4F:EC:EA:BF:50:CF:FD:84:09:AD:F3:46:D1:D0:25
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:73:90:e9:a8:01:79:06:a3:1a:28:30:80:77:56:12:df:64:
         45:63:f5:20:55:6d:bd:04:23:b8:60:63:15:45:db:1c:79:11:
         96:d0:84:d5:4d:4b:06:4d:e4:29:c3:6b:58:fa:fe:d1:82:cd:
         b3:64:3f:96:ac:17:e2:f3:57:65:35:01:9a:cc:9d:93:6e:2b:
         b1:fb:77:76:1d:c0:b3:60:c9:9a:00:0a:07:67:be:a2:e6:07:
         ec:8e:63:21:91:e0:f1:a3:52:12:9c:68:08:1f:de:44:44:ac:
         e5:13:0f:9b:a5:a1:7e:d8:37:e6:57:e1:d3:35:20:a1:e5:51:
         f6:05:d7:7b:cf:47:a8:38:97:a3:78:f1:a9:a1:8d:2e:4d:77:
         6c:9b:55:22:b6:c4:24:67:37:b2:a2:36:cb:d5:f6:f2:28:02:
         bc:99:5a:fd:61:db:6b:81:30:40:94:da:6e:c8:d4:0a:9a:1c:
         93:50:e8:7a:09:71:4d:e3:1b:e9:e9:09:4f:b7:44:37:b3:92:
         02:c2:a1:c8:42:d1:7f:08:41:2e:4e:77:ea:7d:b8:f6:80:25:
         80:35:ec:14:ae:f5:9d:95:98:ad:5c:35:60:f3:cf:90:11:3f:
         4a:d2:3e:08:ef:64:32:99:60:15:09:7a:b9:af:ce:38:0d:a0:
         af:55:a0:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrU1SNl9kx4lFh2DNsqUDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5
N2I5ZDAwHhcNMjYwOTI5MDQwMTQxWhcNMjYwOTMwMDQwMTQxWjAzMTEwLwYDVQQD
EyhkMzQ0NGE5NjRkNGZlY2VhYmY1MGNmZmQ4NDA5YWRmMzQ2ZDFkMDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnkGd81V0IdDBD6ZM1fCmi+ZsjZD
nes5D+oyPr/piY21lO6mshDcyo3b/adRRZkPyoDiGik5AqK8rtnrPOhkuG+l2FfL
t1RP6yl1xXtCj1td2aw5+x+LT94aicmsyVyeDBW9JBvVkU2ft8TJYeG+jopDvffK
IYchigxIlOwBwxZ0qJkBRQC9aaAWw/CuPrJr5al/A0RT7dOitZw1tL9nnBFgwYIi
IDeSUtJTOqGeNqFeuCbqPG+P8+qzOJLN6pcxSchXQkDxPYPSA6NxKAH7gW9ttSo+
+dFYtz9qb3xLqShG3NXRt8WoYaDi3DSqmMyKqazSpTpF4hgKSpagffTHyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNESpZNT+zqv1DP/YQJrfNG0dAlMB8GA1UdIwQY
MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt
NzU1MTgwOWNiNzMxLzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx
LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXOQ6agB
eQajGigwgHdWEt9kRWP1IFVtvQQjuGBjFUXbHHkRltCE1U1LBk3kKcNrWPr+0YLN
s2Q/lqwX4vNXZTUBmsydk24rsft3dh3As2DJmgAKB2e+ouYH7I5jIZHg8aNSEpxo
CB/eRESs5RMPm6Whftg35lfh0zUgoeVR9gXXe89HqDiXo3jxqaGNLk13bJtVIrbE
JGc3sqI2y9X28igCvJla/WHba4EwQJTabsjUCpock1DoeglxTeMb6ekJT7dEN7OS
AsKhyELRfwhBLk536n249oAlgDXsFK71nZWYrVw1YPPPkBE/StI+CO9kMplgFQl6
ua/OOA2gr1Wgig==
-----END CERTIFICATE-----
Generated at Tue Sep 29 06:51:48 2026 by rpki-client