Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/V1S60jnYWp_Mr76ENS08rY5dmQA.mft
File:                     V1S60jnYWp_Mr76ENS08rY5dmQA.mft (raw, json)
Hash identifier:          GHPeeQGWWJMSXnJlcfxrhE4jcBJo1lIQuHxB4jeGwMs=
Subject key identifier:   E6:BE:17:11:72:93:6A:8B:CB:83:C1:D4:52:99:8D:1E:63:BF:EA:36
Authority key identifier: 57:54:BA:D2:39:D8:5A:9F:CC:AF:BE:84:35:2D:3C:AD:8E:5D:99:00
Certificate issuer:       /CN=5754bad239d85a9fccafbe84352d3cad8e5d9900
Certificate serial:       01A0E66347DEF3AC1647E7666AADD67FDCB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1S60jnYWp_Mr76ENS08rY5dmQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/V1S60jnYWp_Mr76ENS08rY5dmQA.mft
Manifest number:          2F
Signing time:             Mon 28 Sep 2026 05:01:01 +0000
Manifest this update:     Mon 28 Sep 2026 05:01:01 +0000
Manifest next update:     Tue 29 Sep 2026 05:01:01 +0000
Files and hashes:         1: MEw9vJlmK8tPtfpgWCFGXg0MRC0.roa (hash: MUGq2YVJo0nJKeFlRKa8DNIyZJcjs6il92Ycne4TRGA=)
                          2: V1S60jnYWp_Mr76ENS08rY5dmQA.crl (hash: 9oALUkRgA4iUOJ52rSXZ0Rcd2a65h8yIeJzVlR7F3ks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/V1S60jnYWp_Mr76ENS08rY5dmQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/V1S60jnYWp_Mr76ENS08rY5dmQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1S60jnYWp_Mr76ENS08rY5dmQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 05:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e6:63:47:de:f3:ac:16:47:e7:66:6a:ad:d6:7f:dc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5754bad239d85a9fccafbe84352d3cad8e5d9900
        Validity
            Not Before: Sep 28 05:01:01 2026 GMT
            Not After : Sep 29 05:01:01 2026 GMT
        Subject: CN=e6be171172936a8bcb83c1d452998d1e63bfea36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:26:f2:16:12:4f:4d:7e:54:7d:38:d1:6a:1d:
                    64:40:d3:32:e4:85:a7:2e:42:ad:ef:de:6d:8a:0a:
                    b5:23:cf:3b:f9:1f:f9:8b:b8:c6:fe:84:9f:03:27:
                    f0:a7:83:3c:6b:0b:fc:78:68:2e:bb:ca:7b:e3:5b:
                    65:1e:07:6d:6e:7d:f5:d0:2f:3d:cd:25:50:0d:b5:
                    b9:cf:99:88:1b:cd:8c:77:e9:4a:26:c3:a9:ed:8c:
                    76:f2:6d:2f:c3:16:8b:fe:50:a9:01:33:e3:33:4c:
                    a0:b6:20:fa:b9:9b:c2:3e:ce:5b:9a:07:d9:a0:65:
                    29:de:ff:16:01:13:9c:f6:47:b4:d8:d4:d3:6d:19:
                    d7:05:57:f6:7f:3d:10:ca:81:b6:55:21:e7:d7:26:
                    c7:66:fb:5b:bc:d4:77:de:f1:35:bc:fe:81:63:cf:
                    94:e4:fe:da:29:bb:cf:bf:3d:80:9b:b0:a7:a8:b3:
                    22:34:6e:e9:38:6f:86:6b:ae:12:b2:f0:d1:1a:cd:
                    1c:d8:48:14:a0:59:48:ff:fc:7b:74:e8:93:45:52:
                    54:dd:e7:4c:5d:08:65:69:04:e2:c5:35:18:68:70:
                    41:56:d7:65:01:f6:7c:50:c3:b7:e0:2f:7f:29:a4:
                    0a:62:ca:c5:ce:bc:6e:09:ef:18:bd:6c:e1:29:d4:
                    10:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BE:17:11:72:93:6A:8B:CB:83:C1:D4:52:99:8D:1E:63:BF:EA:36
            X509v3 Authority Key Identifier:
                keyid:57:54:BA:D2:39:D8:5A:9F:CC:AF:BE:84:35:2D:3C:AD:8E:5D:99:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1S60jnYWp_Mr76ENS08rY5dmQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/V1S60jnYWp_Mr76ENS08rY5dmQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/V1S60jnYWp_Mr76ENS08rY5dmQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8b:f0:23:9e:48:7b:55:87:c8:b0:57:26:94:14:7e:e4:b0:
         d2:98:56:91:0b:a7:d6:1b:c3:d5:4d:3d:f5:bf:b6:19:33:1c:
         f4:fa:28:c6:20:72:be:c7:d5:f9:63:63:c8:63:97:2e:ca:47:
         63:85:4c:d3:fc:ec:63:19:b9:ab:ef:51:1b:3c:b7:c8:6d:16:
         ce:f1:1d:5a:0d:d4:30:e2:2f:28:d6:d1:d4:d2:7e:87:93:e9:
         9a:34:07:3e:32:cb:88:21:0f:7a:cc:62:37:e5:ea:a4:b3:04:
         10:83:e8:e4:49:ed:2b:e7:df:c3:0f:6f:d7:ba:24:90:4f:6b:
         cc:e8:ab:80:26:b6:a1:69:2b:1f:4a:d1:34:63:e4:20:e6:d9:
         fb:03:fc:83:73:5e:59:7e:e4:02:ec:94:54:96:d7:5d:b2:a0:
         4f:a4:44:cc:04:af:31:e6:d1:48:ed:c4:29:9c:c5:4a:6e:11:
         0b:2f:08:25:ca:be:1d:aa:b1:52:27:d5:71:c3:75:5f:52:42:
         da:05:31:c0:7a:e6:1f:43:a8:a0:81:7e:a1:33:5d:f0:a3:4f:
         4c:f0:19:8d:69:0c:1b:6b:4c:a1:5f:86:75:80:55:e2:d2:ff:
         cf:62:d2:a3:d4:a8:ff:fb:c4:af:c8:08:2a:1c:36:f9:59:38:
         1e:41:a6:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDmY0fe86wWR+dmaq3Wf9yyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTRiYWQyMzlkODVhOWZjY2FmYmU4NDM1MmQzY2FkOGU1
ZDk5MDAwHhcNMjYwOTI4MDUwMTAxWhcNMjYwOTI5MDUwMTAxWjAzMTEwLwYDVQQD
EyhlNmJlMTcxMTcyOTM2YThiY2I4M2MxZDQ1Mjk5OGQxZTYzYmZlYTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ybyFhJPTX5UfTjRah1kQNMy5IWn
LkKt795tigq1I887+R/5i7jG/oSfAyfwp4M8awv8eGguu8p741tlHgdtbn310C89
zSVQDbW5z5mIG82Md+lKJsOp7Yx28m0vwxaL/lCpATPjM0ygtiD6uZvCPs5bmgfZ
oGUp3v8WAROc9ke02NTTbRnXBVf2fz0QyoG2VSHn1ybHZvtbvNR33vE1vP6BY8+U
5P7aKbvPvz2Am7CnqLMiNG7pOG+Ga64SsvDRGs0c2EgUoFlI//x7dOiTRVJU3edM
XQhlaQTixTUYaHBBVtdlAfZ8UMO34C9/KaQKYsrFzrxuCe8YvWzhKdQQuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOa+FxFyk2qLy4PB1FKZjR5jv+o2MB8GA1UdIwQY
MBaAFFdUutI52FqfzK++hDUtPK2OXZkAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFTNjBqbllXcF9Ncjc2RU5TMDhyWTVkbVFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9jZTZkMDgtZjBlOS00MzVkLWE4ZGEt
MjE3ZmRiMTk3YzEyLzEvVjFTNjBqbllXcF9Ncjc2RU5TMDhyWTVkbVFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9jZTZkMDgtZjBlOS00MzVkLWE4ZGEtMjE3ZmRiMTk3YzEy
LzEvVjFTNjBqbllXcF9Ncjc2RU5TMDhyWTVkbVFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmovwI55I
e1WHyLBXJpQUfuSw0phWkQun1hvD1U099b+2GTMc9PooxiByvsfV+WNjyGOXLspH
Y4VM0/zsYxm5q+9RGzy3yG0WzvEdWg3UMOIvKNbR1NJ+h5PpmjQHPjLLiCEPesxi
N+XqpLMEEIPo5EntK+ffww9v17okkE9rzOirgCa2oWkrH0rRNGPkIObZ+wP8g3Ne
WX7kAuyUVJbXXbKgT6REzASvMebRSO3EKZzFSm4RCy8IJcq+HaqxUifVccN1X1JC
2gUxwHrmH0OooIF+oTNd8KNPTPAZjWkMG2tMoV+GdYBV4tL/z2LSo9So//vEr8gI
Khw2+Vk4HkGmbw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 13:14:34 2026 by rpki-client