Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
File:                     N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json)
Hash identifier:          /xYH3X14AgWRWtBgZv3jhhjEn9zTRw5r/gHAZgqn6Pk=
Subject key identifier:   FA:DD:D0:FD:90:17:67:D8:13:73:95:08:0E:48:A2:E0:97:7C:BE:BD
Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
Certificate issuer:       /CN=37ff55b95743a915b793d72de71ac96ce6198a97
Certificate serial:       01A0E062188F612557789B23832378742681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
Manifest number:          1A05
Signing time:             Sun 27 Sep 2026 01:02:00 +0000
Manifest this update:     Sun 27 Sep 2026 01:02:00 +0000
Manifest next update:     Mon 28 Sep 2026 01:02:00 +0000
Files and hashes:         1: Kjv5ZqAKlQ-u26S6yymzYFVvtRA.roa (hash: sOevRBDCcbgFby2Me1gEDOPKrFjBhZ/Oz4Fc5/D3wtA=)
                          2: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: d6WO3cI1JYGoN6OXRP3gdGTZGqLbQoob4/rm7D4KgrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:62:18:8f:61:25:57:78:9b:23:83:23:78:74:26:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97
        Validity
            Not Before: Sep 27 01:02:00 2026 GMT
            Not After : Sep 28 01:02:00 2026 GMT
        Subject: CN=faddd0fd901767d8137395080e48a2e0977cbebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3f:be:2e:9f:cc:0d:ca:47:43:8f:eb:13:ac:
                    d3:0a:a6:bd:57:4b:54:e9:9c:4e:da:ac:55:f6:f5:
                    ac:25:ce:ab:22:4d:8b:b0:8b:a6:67:4e:eb:89:cd:
                    0d:9e:49:ff:50:49:41:4f:33:e0:72:02:d8:00:c8:
                    07:e6:0d:6d:b0:24:c1:db:48:c8:2b:15:25:b7:e8:
                    79:f2:5f:4c:7b:96:65:c6:a2:75:6e:33:32:3d:b4:
                    58:a7:6d:bf:5e:0c:93:8f:cf:12:3b:ac:f6:bf:d1:
                    36:82:90:44:4e:25:87:2f:f7:95:cc:50:df:2f:43:
                    06:2d:0e:0e:63:71:af:f0:80:09:34:59:0a:0a:ff:
                    7b:5b:40:41:26:1d:6d:a6:66:a7:86:1d:7e:41:a5:
                    28:b2:6c:52:fa:b6:9d:7d:fc:e7:7d:c1:97:9c:d8:
                    85:9a:2b:9e:7f:8c:f9:23:3f:d6:5c:61:61:7e:19:
                    a1:f8:f0:35:6d:43:ba:88:f3:11:36:25:f6:28:c2:
                    4e:bf:d5:2a:ea:60:c2:ac:a6:46:da:4d:93:cc:9a:
                    a2:9d:bd:da:49:b5:bb:05:fd:4c:c4:28:63:0d:8f:
                    1c:d5:ea:69:8f:de:9f:50:69:cc:5c:37:4e:79:c6:
                    02:4a:da:ad:4e:1b:e0:ad:56:f4:ce:1e:cc:94:b7:
                    7e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DD:D0:FD:90:17:67:D8:13:73:95:08:0E:48:A2:E0:97:7C:BE:BD
            X509v3 Authority Key Identifier:
                keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:39:87:1d:cb:a9:f6:46:f4:d0:ab:07:aa:3a:b2:0a:68:
         b2:ed:e0:86:ae:dc:0a:97:35:b2:39:42:3c:1b:ad:15:b6:ea:
         9b:01:29:63:91:11:f6:00:c1:02:dd:31:2c:82:5d:b3:e4:a6:
         f7:ea:35:cf:d3:ec:b8:77:e0:31:af:60:35:dc:ea:79:11:e6:
         dc:b8:9f:f7:23:2c:7e:87:fb:90:c1:b9:d2:e5:29:a9:9a:ba:
         ee:aa:d6:18:cf:48:ab:ad:1e:96:f1:04:c1:88:5e:51:36:b1:
         c1:ba:89:0b:0d:16:d7:76:19:56:dd:da:28:6c:d2:b0:51:26:
         ce:90:01:47:24:4a:1f:a2:41:0e:c9:47:f9:b9:60:b8:f0:cf:
         8d:44:94:79:1a:12:a5:c4:30:74:be:74:51:75:7c:7f:71:a7:
         05:3e:4b:5c:93:91:33:56:24:0d:c8:74:39:5e:a1:96:a8:3f:
         5d:d1:eb:31:e7:4a:04:0c:17:cd:96:29:6b:fc:68:9d:79:5e:
         05:e6:07:cb:d2:4b:81:9f:d7:a5:ff:43:ae:6d:fb:1a:65:05:
         a3:ba:0d:5d:ea:d3:cc:e9:7f:49:2f:ce:3c:a9:a8:82:0c:99:
         9b:86:79:46:7c:b8:ae:a5:eb:6a:3c:e3:42:d7:8f:1c:ba:d0:
         22:b2:f8:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgYhiPYSVXeJsjgyN4dCaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmY1NWI5NTc0M2E5MTViNzkzZDcyZGU3MWFjOTZjZTYx
OThhOTcwHhcNMjYwOTI3MDEwMjAwWhcNMjYwOTI4MDEwMjAwWjAzMTEwLwYDVQQD
EyhmYWRkZDBmZDkwMTc2N2Q4MTM3Mzk1MDgwZTQ4YTJlMDk3N2NiZWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT++Lp/MDcpHQ4/rE6zTCqa9V0tU
6ZxO2qxV9vWsJc6rIk2LsIumZ07ric0Nnkn/UElBTzPgcgLYAMgH5g1tsCTB20jI
KxUlt+h58l9Me5ZlxqJ1bjMyPbRYp22/XgyTj88SO6z2v9E2gpBETiWHL/eVzFDf
L0MGLQ4OY3Gv8IAJNFkKCv97W0BBJh1tpmanhh1+QaUosmxS+radffznfcGXnNiF
miuef4z5Iz/WXGFhfhmh+PA1bUO6iPMRNiX2KMJOv9Uq6mDCrKZG2k2TzJqinb3a
SbW7Bf1MxChjDY8c1eppj96fUGnMXDdOecYCStqtThvgrVb0zh7MlLd+mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrd0P2QF2fYE3OVCA5IouCXfL69MB8GA1UdIwQY
MBaAFDf/VblXQ6kVt5PXLecayWzmGYqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl85VnVWZERxUlczazljdDV4ckpiT1laaXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lMDA1OWYtYjkxMC00YmI3LTkzNDEt
Nzc1MDk3MjI2NWFhLzEvTl85VnVWZERxUlczazljdDV4ckpiT1laaXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9lMDA1OWYtYjkxMC00YmI3LTkzNDEtNzc1MDk3MjI2NWFh
LzEvTl85VnVWZERxUlczazljdDV4ckpiT1laaXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPY5hx3L
qfZG9NCrB6o6sgposu3ghq7cCpc1sjlCPButFbbqmwEpY5ER9gDBAt0xLIJds+Sm
9+o1z9PsuHfgMa9gNdzqeRHm3Lif9yMsfof7kMG50uUpqZq67qrWGM9Iq60elvEE
wYheUTaxwbqJCw0W13YZVt3aKGzSsFEmzpABRyRKH6JBDslH+blguPDPjUSUeRoS
pcQwdL50UXV8f3GnBT5LXJORM1YkDch0OV6hlqg/XdHrMedKBAwXzZYpa/xonXle
BeYHy9JLgZ/Xpf9Drm37GmUFo7oNXerTzOl/SS/OPKmoggyZm4Z5Rny4rqXrajzj
QtePHLrQIrL46g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:11:04 2026 by rpki-client