Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
File:                     _sb7WkZ5dMl3qZfG3aFGSAXtN58.mft (raw, json)
Hash identifier:          YdF3QWYaJZ99qYvTJTgi8H7BzppautjdDe1bxN0Ww+I=
Subject key identifier:   AA:2B:C0:34:91:2B:5F:77:04:07:79:00:87:93:44:32:07:E9:50:D8
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Certificate issuer:       /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial:       01A0E43E3BBA03162AAD063BAFA153BCB392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
Manifest number:          0E1A
Signing time:             Sun 27 Sep 2026 19:01:18 +0000
Manifest this update:     Sun 27 Sep 2026 19:01:18 +0000
Manifest next update:     Mon 28 Sep 2026 19:01:18 +0000
Files and hashes:         1: 4ypzGfCHhgDoMmCtv9mhP95DsH8.roa (hash: cgyweP6TWOD2EkCngfHayXAx2FserZFtDFpsPs5VJG0=)
                          2: 5aXW0pRKlud-aQzlI1uwxyRBm-w.roa (hash: o7DUWNI5a2gkEo/NC5oveThPiU4wOiiJG6bKNzxtAao=)
                          3: _sb7WkZ5dMl3qZfG3aFGSAXtN58.crl (hash: 656Vt9BOePJuQHDV6sdLEzjx43fw0CQZe3XWhUPUrxE=)
                          4: nMOMLSKNHZWnqOpaztV5tvRIW_0.roa (hash: hzcdgrRKntQ9Q0+tx+TtRx6J7FNm7FNdX1mkQMztsyI=)
                          5: qybWWPweMAxxbe6Dx9t3-MHAIDM.roa (hash: Vk+vGEJAunUNZlN6ZA7MDbwnLEBdBJ90nYvsUNNE5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:3e:3b:ba:03:16:2a:ad:06:3b:af:a1:53:bc:b3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
        Validity
            Not Before: Sep 27 19:01:18 2026 GMT
            Not After : Sep 28 19:01:18 2026 GMT
        Subject: CN=aa2bc034912b5f77040779008793443207e950d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:95:58:be:68:0c:a1:cf:aa:a9:67:0e:80:
                    90:8c:55:d5:ee:f9:b6:e1:40:45:f4:c6:cf:44:9c:
                    fe:eb:96:bc:e3:fe:ba:83:4b:79:19:92:b8:af:de:
                    a3:94:33:15:64:9c:37:e7:0c:98:2b:97:35:29:f4:
                    41:50:17:89:f2:c6:4f:be:d1:00:5e:08:53:ab:73:
                    78:f7:d6:05:54:ae:21:db:05:d6:bc:0f:61:e9:47:
                    68:85:3b:cb:57:d1:df:c7:2b:66:7a:f4:d9:6e:64:
                    f9:ab:ef:82:5d:1a:f1:6b:e8:af:bc:fd:2e:f5:b3:
                    ab:95:7c:36:95:29:6b:e2:36:99:ce:9b:c4:11:3a:
                    be:73:c7:9c:a6:c6:4f:16:e1:7c:af:fb:11:08:b2:
                    9e:01:18:16:00:39:04:f0:ae:6a:2f:b4:32:b7:a6:
                    15:7a:b3:84:e4:70:85:44:7c:db:34:f8:ef:6a:81:
                    4d:79:ed:b8:40:e3:19:fb:78:c6:3f:e5:63:03:8a:
                    a8:2a:0c:ab:53:c0:0b:04:c0:0d:97:41:b8:a9:51:
                    20:ee:80:cc:af:3e:95:3e:9b:f1:55:95:39:c6:3b:
                    3c:7a:6c:6c:c8:85:95:19:d7:cf:99:12:04:48:fb:
                    a3:29:3b:57:0b:a7:38:ac:5e:56:72:2a:7e:f9:e5:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2B:C0:34:91:2B:5F:77:04:07:79:00:87:93:44:32:07:E9:50:D8
            X509v3 Authority Key Identifier:
                keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f7:26:ea:b1:49:9d:57:ce:4b:51:55:c2:24:70:c4:63:48:
         81:b1:aa:2f:36:8f:29:44:0e:92:59:e1:fc:df:af:3b:dc:e9:
         76:6a:f4:86:2c:df:78:97:04:df:82:58:c9:78:4e:76:9a:d6:
         2f:7e:f1:b7:7a:3f:f3:30:9c:c1:90:64:3b:57:8f:80:ea:7f:
         c7:88:4d:19:7f:34:10:86:f1:dd:bf:b8:c6:2f:a0:03:3e:5f:
         99:27:ff:b4:1a:18:d5:ab:75:09:c8:d9:29:34:8d:1c:c5:a9:
         07:8e:e2:53:08:48:6e:4d:9b:76:99:90:23:4d:af:34:67:5c:
         e3:7e:8a:b7:a9:51:96:6e:c2:a5:5b:26:bd:95:9f:56:fc:68:
         db:15:5b:c2:71:11:18:34:d4:81:3c:cf:cd:33:96:f3:33:92:
         08:58:38:0c:4c:8b:5d:1c:c7:8d:0c:a8:1e:f0:45:9a:4a:35:
         e0:05:3b:58:88:4b:f4:9b:76:11:3e:31:94:f5:53:3d:b7:fc:
         e9:35:44:b8:79:60:a0:c5:1b:f7:04:b3:36:23:f7:50:8c:91:
         3d:8a:88:6d:f4:06:5e:ed:27:a2:f8:3d:b3:d1:94:c7:74:f1:
         b6:6e:e9:20:74:b1:11:14:9d:90:b1:d8:a3:d6:92:48:4b:09:
         3d:ed:19:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDkPju6AxYqrQY7r6FTvLOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzZmYjVhNDY3OTc0Yzk3N2E5OTdjNmRkYTE0NjQ4MDVl
ZDM3OWYwHhcNMjYwOTI3MTkwMTE4WhcNMjYwOTI4MTkwMTE4WjAzMTEwLwYDVQQD
EyhhYTJiYzAzNDkxMmI1Zjc3MDQwNzc5MDA4NzkzNDQzMjA3ZTk1MGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbmVWL5oDKHPqqlnDoCQjFXV7vm2
4UBF9MbPRJz+65a84/66g0t5GZK4r96jlDMVZJw35wyYK5c1KfRBUBeJ8sZPvtEA
XghTq3N499YFVK4h2wXWvA9h6UdohTvLV9HfxytmevTZbmT5q++CXRrxa+ivvP0u
9bOrlXw2lSlr4jaZzpvEETq+c8ecpsZPFuF8r/sRCLKeARgWADkE8K5qL7Qyt6YV
erOE5HCFRHzbNPjvaoFNee24QOMZ+3jGP+VjA4qoKgyrU8ALBMANl0G4qVEg7oDM
rz6VPpvxVZU5xjs8emxsyIWVGdfPmRIESPujKTtXC6c4rF5Wcip++eXpIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKorwDSRK193BAd5AIeTRDIH6VDYMB8GA1UdIwQY
MBaAFP7G+1pGeXTJd6mXxt2hRkgF7TefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUt
MTI2NDFmOWU2ZmMwLzEvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUtMTI2NDFmOWU2ZmMw
LzEvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPcm6rFJ
nVfOS1FVwiRwxGNIgbGqLzaPKUQOklnh/N+vO9zpdmr0hizfeJcE34JYyXhOdprW
L37xt3o/8zCcwZBkO1ePgOp/x4hNGX80EIbx3b+4xi+gAz5fmSf/tBoY1at1CcjZ
KTSNHMWpB47iUwhIbk2bdpmQI02vNGdc436Kt6lRlm7CpVsmvZWfVvxo2xVbwnER
GDTUgTzPzTOW8zOSCFg4DEyLXRzHjQyoHvBFmko14AU7WIhL9Jt2ET4xlPVTPbf8
6TVEuHlgoMUb9wSzNiP3UIyRPYqIbfQGXu0novg9s9GUx3Txtm7pIHSxERSdkLHY
o9aSSEsJPe0ZEg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:44:49 2026 by rpki-client