Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
File:                     DoVoAb747TroEOfmejH9AStE0ww.mft (raw, json)
Hash identifier:          PDGHBVkGGoUVHfrDEJgBfPoX24ar+k4Gh8gbtvgWCGs=
Subject key identifier:   5F:C3:55:AB:00:55:8D:4E:86:26:04:31:08:05:4C:FC:31:AB:EF:EF
Authority key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
Certificate issuer:       /CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Certificate serial:       01A0DC179157D7D10C438A355BFA589E866E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
Manifest number:          19C3
Signing time:             Sat 26 Sep 2026 05:02:06 +0000
Manifest this update:     Sat 26 Sep 2026 05:02:06 +0000
Manifest next update:     Sun 27 Sep 2026 05:02:06 +0000
Files and hashes:         1: 4hFvzV4WrmiLIBpFJw9jPUjsv-0.roa (hash: SOzlsBSFn/lFTeVqU71MsP/XA8RfCBYPDkl2dtb8tLE=)
                          2: DoVoAb747TroEOfmejH9AStE0ww.crl (hash: UdQvEa7lU2+/ueYooEF6TQw/YhIirVBDGEUDdHo/DAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:91:57:d7:d1:0c:43:8a:35:5b:fa:58:9e:86:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
        Validity
            Not Before: Sep 26 05:02:06 2026 GMT
            Not After : Sep 27 05:02:06 2026 GMT
        Subject: CN=5fc355ab00558d4e8626043108054cfc31abefef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0a:e7:99:44:8f:23:1f:53:7a:de:75:67:74:
                    28:34:2e:a4:2d:90:56:ae:de:34:6e:20:78:b1:1e:
                    97:b6:f1:eb:23:0b:a2:af:d1:23:e6:b5:27:76:4e:
                    72:e1:03:8a:35:15:d4:74:5d:64:39:cc:f9:46:77:
                    b0:ba:3e:ac:2e:99:38:27:16:30:90:49:06:4c:34:
                    c6:1d:ab:41:72:2c:2a:69:e5:37:fd:56:5e:43:de:
                    cb:b9:11:f1:63:78:71:d2:d3:25:19:12:36:a5:76:
                    ac:fd:98:57:30:17:d6:f0:af:0e:1b:1c:a1:f0:9d:
                    41:aa:e4:8c:ae:63:8d:ab:2b:a8:c7:25:35:18:cb:
                    63:db:8f:24:0b:a4:ef:cd:ca:89:14:8f:82:1e:6c:
                    bf:85:f1:c4:1b:0a:32:60:2e:50:39:b5:6b:c2:b7:
                    8f:85:5f:63:2f:62:37:ad:0e:31:0d:c9:d1:e6:30:
                    97:f5:94:b1:88:43:cb:b7:6f:09:19:9c:11:a9:29:
                    fd:78:bd:c3:81:a0:6e:44:c6:bb:dc:2f:f8:24:70:
                    21:3f:b7:78:03:7d:fe:68:33:bf:3b:9b:bb:ea:98:
                    c8:23:ab:b4:b4:7a:ce:0a:e4:18:21:f2:5b:59:4c:
                    3e:7c:9e:a9:44:82:7e:b2:8c:b2:03:33:9c:9d:f3:
                    f0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C3:55:AB:00:55:8D:4E:86:26:04:31:08:05:4C:FC:31:AB:EF:EF
            X509v3 Authority Key Identifier:
                keyid:0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7b:f3:41:93:49:29:00:72:1f:ab:b7:a8:de:b9:ed:3c:84:
         6c:ec:7a:ae:f7:cb:cc:26:f0:9d:85:cd:b0:a2:a4:bd:a7:93:
         48:df:55:a6:27:32:80:18:07:1c:f3:b0:e6:63:a5:63:14:f0:
         b6:82:6d:db:69:1d:ac:9c:0a:34:12:ca:5b:19:fa:76:41:b0:
         52:19:17:7d:63:db:a1:f2:2f:9f:c1:cc:3a:f9:e5:b1:20:6e:
         cc:5e:87:0e:4b:14:32:85:23:fa:67:91:d7:93:5e:83:cb:37:
         d9:b5:16:04:2f:43:01:35:1b:8b:81:bf:dd:9e:87:05:6b:b7:
         e6:53:65:50:a8:c0:e4:37:60:c6:e8:86:42:b7:22:4b:59:14:
         6a:d0:89:00:63:de:b2:1a:90:28:c5:e9:81:e2:ed:59:2d:50:
         90:ec:6d:69:58:22:b5:ff:fa:b2:68:ca:c8:fa:ff:e4:cd:9d:
         6c:b6:dc:99:33:b6:72:0a:5e:77:a3:10:0d:71:17:4b:05:50:
         79:c5:dd:ca:d0:06:ea:2a:22:c0:0c:a1:6a:75:a7:27:7d:c0:
         91:94:0e:dc:e8:9a:aa:75:3f:90:c8:57:3e:42:8e:81:df:aa:
         c3:88:79:b6:3e:b5:29:2f:d7:fd:6d:d9:f3:6b:6c:e8:c8:22:
         c6:ca:1f:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcF5FX19EMQ4o1W/pYnoZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlODU2ODAxYmVmOGVkM2FlODEwZTdlNjdhMzFmZDAxMmI0
NGQzMGMwHhcNMjYwOTI2MDUwMjA2WhcNMjYwOTI3MDUwMjA2WjAzMTEwLwYDVQQD
Eyg1ZmMzNTVhYjAwNTU4ZDRlODYyNjA0MzEwODA1NGNmYzMxYWJlZmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wrnmUSPIx9Tet51Z3QoNC6kLZBW
rt40biB4sR6XtvHrIwuir9Ej5rUndk5y4QOKNRXUdF1kOcz5Rnewuj6sLpk4JxYw
kEkGTDTGHatBciwqaeU3/VZeQ97LuRHxY3hx0tMlGRI2pXas/ZhXMBfW8K8OGxyh
8J1BquSMrmONqyuoxyU1GMtj248kC6TvzcqJFI+CHmy/hfHEGwoyYC5QObVrwreP
hV9jL2I3rQ4xDcnR5jCX9ZSxiEPLt28JGZwRqSn9eL3DgaBuRMa73C/4JHAhP7d4
A33+aDO/O5u76pjII6u0tHrOCuQYIfJbWUw+fJ6pRIJ+soyyAzOcnfPwZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/DVasAVY1OhiYEMQgFTPwxq+/vMB8GA1UdIwQY
MBaAFA6FaAG++O066BDn5nox/QErRNMMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81NDE0MzQtODc5ZC00ZTU1LWE0N2Yt
MTkwYjA2ZGVlNGRjLzEvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC81NDE0MzQtODc5ZC00ZTU1LWE0N2YtMTkwYjA2ZGVlNGRj
LzEvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnvzQZNJ
KQByH6u3qN657TyEbOx6rvfLzCbwnYXNsKKkvaeTSN9VpicygBgHHPOw5mOlYxTw
toJt22kdrJwKNBLKWxn6dkGwUhkXfWPbofIvn8HMOvnlsSBuzF6HDksUMoUj+meR
15Neg8s32bUWBC9DATUbi4G/3Z6HBWu35lNlUKjA5DdgxuiGQrciS1kUatCJAGPe
shqQKMXpgeLtWS1QkOxtaVgitf/6smjKyPr/5M2dbLbcmTO2cgped6MQDXEXSwVQ
ecXdytAG6ioiwAyhanWnJ33AkZQO3OiaqnU/kMhXPkKOgd+qw4h5tj61KS/X/W3Z
82ts6MgixsofsA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:40:02 2026 by rpki-client