Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
File:                     n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft (raw, json)
Hash identifier:          0QQOe3pXEzdpcfuRU4SWbXDBB6hn4NNMVkp12Cho7bU=
Subject key identifier:   3C:83:B1:C6:BA:E0:14:36:FA:DA:05:B1:76:15:B7:CF:6E:57:82:94
Authority key identifier: 9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
Certificate issuer:       /CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Certificate serial:       01A0DBAA174154BD847B6F04C411C561502E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
Manifest number:          EB
Signing time:             Sat 26 Sep 2026 03:02:32 +0000
Manifest this update:     Sat 26 Sep 2026 03:02:32 +0000
Manifest next update:     Sun 27 Sep 2026 03:02:32 +0000
Files and hashes:         1: 3sMnbgFlgRN6qTOgEaIxr6_8d-k.roa (hash: PQf0TYbRUaWDGilp0A7TiyN7qbDatKPuZrY3XALzNR4=)
                          2: 9RxYfwpOllVmFbUnzc-gHoabB44.roa (hash: /FmEDajuom+xgc2h3TGSfCVMlt4s5+O8iK3GFZc2cpQ=)
                          3: C3dLx6qeIik8HQR643ArrOFcxWw.roa (hash: pfrW5zSUbSnHsyVL3Nxv55eIHRIZ43KSi08lC2fGId4=)
                          4: G_OuDbVtKVjP3d0tjZnHLsZ83sE.roa (hash: pP2ZidmFasR/WmTJoaBDlilJcJecRSWLlBbfYiRpn4M=)
                          5: iPUEtdk8uK7It4e5YIwhrS-blIY.roa (hash: cCrIx5/3xv9yTrz1ALRR0gRJeVouvLvQFBFUHgTs3vc=)
                          6: n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl (hash: pIduBohFcjlRaW+lFMwxoieMhPb0bDwMhM4rCHTFqZQ=)
                          7: q_09y7kzQ35Hofngi_hiaffCZwA.roa (hash: sHIfF0cJoyvJ2aYaxzmWds00JZ6y6D950zXoaEnnPTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:aa:17:41:54:bd:84:7b:6f:04:c4:11:c5:61:50:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
        Validity
            Not Before: Sep 26 03:02:32 2026 GMT
            Not After : Sep 27 03:02:32 2026 GMT
        Subject: CN=3c83b1c6bae01436fada05b17615b7cf6e578294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:e4:eb:38:fc:fb:b8:2f:55:35:a0:77:cc:
                    6b:9b:9e:60:f7:65:94:fe:8c:ac:88:74:82:37:8d:
                    66:3b:2b:40:56:0b:d9:36:4e:72:a1:79:c3:5b:f3:
                    bd:5b:1e:5a:f6:2b:77:3a:53:5e:20:b9:09:e4:ed:
                    c3:a8:78:a6:d9:62:22:c9:e6:67:e9:72:ff:21:59:
                    35:79:3d:b0:0b:d1:9a:a1:66:d2:86:a1:59:dd:0f:
                    9f:d2:dc:cb:33:bb:9e:8e:dd:40:c6:f8:8d:66:7d:
                    42:f3:32:62:11:56:b8:45:0a:d5:cd:03:06:f0:4f:
                    bd:c0:f7:f7:3b:cd:65:bb:d1:0e:f9:14:99:38:a4:
                    24:32:b4:b4:75:fa:7c:ef:10:88:60:53:86:68:d9:
                    9e:07:66:7d:62:76:11:d8:df:f6:bf:11:8f:d1:07:
                    d8:08:d2:1c:d9:2b:b4:28:3f:0b:4b:63:9a:f8:3d:
                    bd:0e:84:5f:27:7e:16:2d:e4:1a:3a:80:4a:7c:13:
                    cc:70:0c:00:35:bd:3d:07:a2:24:fb:52:f5:d0:18:
                    e6:29:12:09:63:91:b6:35:07:92:0e:d0:5c:42:58:
                    71:b3:7e:01:f8:80:5a:8e:29:39:1c:79:96:25:bd:
                    39:e4:fa:5c:0c:f0:7d:6a:92:3e:86:ff:12:42:93:
                    0b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:83:B1:C6:BA:E0:14:36:FA:DA:05:B1:76:15:B7:CF:6E:57:82:94
            X509v3 Authority Key Identifier:
                keyid:9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2f:07:3e:ab:db:cd:41:7d:33:84:67:d9:ab:56:67:e0:91:
         d3:06:d7:95:a6:6a:ec:43:1a:76:e2:ff:e3:d8:fd:ed:be:4b:
         3e:b6:22:e9:23:77:b0:fe:7d:cd:d8:bd:a9:08:65:20:b3:6e:
         c6:29:27:84:2c:4c:2c:a9:b8:98:48:d5:fc:82:39:b1:e1:c5:
         33:82:77:0a:50:cc:54:18:e0:9e:28:8c:52:1d:7a:7a:25:60:
         f6:c1:5f:fe:bb:4f:ae:57:84:84:e8:67:eb:79:25:4a:8b:65:
         b0:de:c4:89:8b:7f:68:8c:1c:b3:99:af:92:5f:0a:b3:c4:f5:
         af:35:10:db:53:2f:f4:02:0e:5b:48:5c:ad:9f:c6:ff:7c:1a:
         df:bf:96:00:62:92:6c:ee:b1:d3:24:00:4e:39:a0:c7:8c:ad:
         f0:e0:da:38:82:bc:91:4e:07:8f:86:32:b7:02:c7:2b:0e:d0:
         bd:c7:ff:1d:04:fb:5c:26:69:f8:5e:31:28:d2:e3:a4:6c:52:
         55:ef:22:5a:f5:8a:80:14:48:08:12:92:34:d6:96:1c:b3:78:
         9c:e6:a4:c4:ec:89:55:f7:d7:60:b4:60:c9:96:91:db:c9:29:
         66:6f:c9:13:34:d7:9f:df:76:38:e5:03:70:85:d3:14:f3:b6:
         2d:6b:5e:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqhdBVL2Ee28ExBHFYVAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODVkMTQ3NjBmOTg2NjJiOTg5ODkzZDhhMWU1ZTA1Y2Qz
YTEzZTQwHhcNMjYwOTI2MDMwMjMyWhcNMjYwOTI3MDMwMjMyWjAzMTEwLwYDVQQD
EygzYzgzYjFjNmJhZTAxNDM2ZmFkYTA1YjE3NjE1YjdjZjZlNTc4Mjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntvk6zj8+7gvVTWgd8xrm55g92WU
/oysiHSCN41mOytAVgvZNk5yoXnDW/O9Wx5a9it3OlNeILkJ5O3DqHim2WIiyeZn
6XL/IVk1eT2wC9GaoWbShqFZ3Q+f0tzLM7uejt1AxviNZn1C8zJiEVa4RQrVzQMG
8E+9wPf3O81lu9EO+RSZOKQkMrS0dfp87xCIYFOGaNmeB2Z9YnYR2N/2vxGP0QfY
CNIc2Su0KD8LS2Oa+D29DoRfJ34WLeQaOoBKfBPMcAwANb09B6Ik+1L10BjmKRIJ
Y5G2NQeSDtBcQlhxs34B+IBajik5HHmWJb055PpcDPB9apI+hv8SQpML4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyDsca64BQ2+toFsXYVt89uV4KUMB8GA1UdIwQY
MBaAFJ+F0Udg+YZiuYmJPYoeXgXNOhPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRYUlIyRDVobUs1aVlrOWloNWVCYzA2RS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQt
ZjA5M2UxN2IyN2VmLzEvbjRYUlIyRDVobUs1aVlrOWloNWVCYzA2RS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQtZjA5M2UxN2IyN2Vm
LzEvbjRYUlIyRDVobUs1aVlrOWloNWVCYzA2RS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAby8HPqvb
zUF9M4Rn2atWZ+CR0wbXlaZq7EMaduL/49j97b5LPrYi6SN3sP59zdi9qQhlILNu
xiknhCxMLKm4mEjV/II5seHFM4J3ClDMVBjgniiMUh16eiVg9sFf/rtPrleEhOhn
63klSotlsN7EiYt/aIwcs5mvkl8Ks8T1rzUQ21Mv9AIOW0hcrZ/G/3wa37+WAGKS
bO6x0yQATjmgx4yt8ODaOIK8kU4Hj4YytwLHKw7Qvcf/HQT7XCZp+F4xKNLjpGxS
Ve8iWvWKgBRICBKSNNaWHLN4nOakxOyJVffXYLRgyZaR28kpZm/JEzTXn992OOUD
cIXTFPO2LWtebw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:14:29 2026 by rpki-client