Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
File:                     4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json)
Hash identifier:          MlZCepZMGfaCZw/pm+ZadTNBWvHjZjilzWhY42abX14=
Subject key identifier:   5B:60:52:1C:29:47:BC:78:25:E3:D9:F8:9C:48:2C:C1:31:E9:23:F6
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Certificate issuer:       /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial:       01A0D6B9F7FD924EB6A2090E293DDBDFDBB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
Manifest number:          1728
Signing time:             Fri 25 Sep 2026 04:01:46 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:46 +0000
Manifest next update:     Sat 26 Sep 2026 04:01:46 +0000
Files and hashes:         1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: qrqrQnJFhLANf33bg7VrmmjMZtjwOtEXgocuR03FfzI=)
                          2: fJgYZ4ej2JhPoX-SwafXWVTllE4.roa (hash: oBfl5sq0NvI5C3NZdb3K0ESRoAncOv9TLGKLm+7rmlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 04:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:b9:f7:fd:92:4e:b6:a2:09:0e:29:3d:db:df:db:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
        Validity
            Not Before: Sep 25 04:01:46 2026 GMT
            Not After : Sep 26 04:01:46 2026 GMT
        Subject: CN=5b60521c2947bc7825e3d9f89c482cc131e923f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:26:1e:7e:e5:15:c5:d9:9f:4d:e4:c6:5a:
                    8c:99:e4:d7:5a:65:bc:30:4a:2f:1e:7a:ee:69:0a:
                    7d:0f:a7:5a:7d:04:84:79:4a:a4:05:7e:c5:06:c9:
                    e8:9e:f4:70:e5:2b:d9:81:66:bf:57:ca:e0:82:d5:
                    15:a3:c6:dc:f3:93:b6:51:28:33:33:94:9b:a8:a9:
                    ac:0a:4b:23:0d:52:8a:f5:d8:2e:1e:f0:91:1a:79:
                    47:42:7e:3b:6d:53:90:90:a1:56:1f:5a:4d:2d:a9:
                    be:eb:95:41:78:c6:a9:30:ed:3e:92:55:9d:72:04:
                    20:b2:c0:e5:16:87:39:80:5f:c9:5e:1c:13:3d:51:
                    78:ee:b9:ef:b8:56:62:03:a1:ec:80:b9:52:a6:51:
                    2f:b8:70:0e:b0:93:73:19:62:ef:42:c3:6b:d7:4b:
                    10:60:de:b5:0f:dd:01:0e:e9:81:90:1b:92:1f:e3:
                    1d:4e:a5:65:b9:bc:24:51:cc:f4:4c:99:56:e7:19:
                    73:82:78:bb:12:6d:64:56:74:2b:05:39:db:c3:35:
                    69:e5:dd:90:26:cb:02:ae:e9:d3:73:27:15:b8:96:
                    f7:96:6a:1b:e5:61:2e:dd:57:b2:0d:84:b8:40:03:
                    46:97:37:39:5a:2a:36:98:7c:ea:07:6e:4c:31:fa:
                    2e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:60:52:1C:29:47:BC:78:25:E3:D9:F8:9C:48:2C:C1:31:E9:23:F6
            X509v3 Authority Key Identifier:
                keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:95:74:96:b6:24:79:30:9d:09:a4:00:b7:41:a6:81:32:ce:
         57:bc:e5:72:10:3d:28:4e:a7:ae:c4:21:6c:05:e3:d2:42:ed:
         86:e1:59:6b:83:02:c7:fe:50:1c:e3:25:ba:f4:d5:6f:d1:6b:
         89:c7:df:6d:44:61:8c:98:12:ee:6e:9e:cd:d8:07:8b:ec:e9:
         43:bd:ee:6e:43:f5:fd:54:61:e4:1f:f0:07:c8:0d:22:4c:b9:
         9b:1c:26:4d:f4:1e:9f:c4:3b:5e:2e:7b:14:91:8f:48:6d:e9:
         2a:99:95:4e:b8:a0:d7:76:23:d6:90:7a:8c:f0:dc:d0:23:84:
         f1:24:fc:79:7b:2a:bf:28:73:49:54:3d:55:8c:db:76:0c:cf:
         2e:44:26:ac:e3:df:c4:3d:06:1f:2c:14:e2:5e:75:92:5b:9b:
         16:90:59:8c:fc:21:1f:24:53:96:a9:1f:b4:ab:46:3b:76:ea:
         e5:e4:1e:8d:86:94:07:9f:59:38:6c:5c:21:09:85:4c:f2:6c:
         04:41:2e:f5:40:63:27:83:45:07:fe:8d:a8:23:00:4a:b3:72:
         0c:51:f2:11:d7:01:49:7e:07:57:a7:cf:68:8a:17:ab:e1:2e:
         8d:3a:b1:b6:97:c6:73:c2:60:1e:98:21:24:a2:26:e6:b7:8f:
         d7:f1:67:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWuff9kk62ogkOKT3b39uxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNzc1MzhkZWMyZWZjZDJmMTFjYzYzNzE5N2QxZDlhNmZk
YWU5ZDkwHhcNMjYwOTI1MDQwMTQ2WhcNMjYwOTI2MDQwMTQ2WjAzMTEwLwYDVQQD
Eyg1YjYwNTIxYzI5NDdiYzc4MjVlM2Q5Zjg5YzQ4MmNjMTMxZTkyM2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogMmHn7lFcXZn03kxlqMmeTXWmW8
MEovHnruaQp9D6dafQSEeUqkBX7FBsnonvRw5SvZgWa/V8rggtUVo8bc85O2USgz
M5SbqKmsCksjDVKK9dguHvCRGnlHQn47bVOQkKFWH1pNLam+65VBeMapMO0+klWd
cgQgssDlFoc5gF/JXhwTPVF47rnvuFZiA6HsgLlSplEvuHAOsJNzGWLvQsNr10sQ
YN61D90BDumBkBuSH+MdTqVlubwkUcz0TJlW5xlzgni7Em1kVnQrBTnbwzVp5d2Q
JssCrunTcycVuJb3lmob5WEu3VeyDYS4QANGlzc5Wio2mHzqB25MMfoueQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtgUhwpR7x4JePZ+JxILMEx6SP2MB8GA1UdIwQY
MBaAFOJ3U43sLvzS8RzGNxl9HZpv2unZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hMzFkZGItMWZkMi00NjFjLWJmZWIt
ODJlZTJkMmI0Mjg5LzEvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hMzFkZGItMWZkMi00NjFjLWJmZWItODJlZTJkMmI0Mjg5
LzEvNG5kVGpld3VfTkx4SE1ZM0dYMGRtbV9hNmRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspV0lrYk
eTCdCaQAt0GmgTLOV7zlchA9KE6nrsQhbAXj0kLthuFZa4MCx/5QHOMluvTVb9Fr
icffbURhjJgS7m6ezdgHi+zpQ73ubkP1/VRh5B/wB8gNIky5mxwmTfQen8Q7Xi57
FJGPSG3pKpmVTrig13Yj1pB6jPDc0COE8ST8eXsqvyhzSVQ9VYzbdgzPLkQmrOPf
xD0GHywU4l51klubFpBZjPwhHyRTlqkftKtGO3bq5eQejYaUB59ZOGxcIQmFTPJs
BEEu9UBjJ4NFB/6NqCMASrNyDFHyEdcBSX4HV6fPaIoXq+EujTqxtpfGc8JgHpgh
JKIm5reP1/Fn4g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:53:28 2026 by rpki-client