Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
File:                     4jRLpjQJYdpe60riOemgYmd5Pi4.mft (raw, json)
Hash identifier:          +FnoykxIyNq5sq0Sju05bUYDALSgpdrPDzTl4je9kJ0=
Subject key identifier:   51:C3:75:5C:DB:72:69:20:06:1B:02:38:41:AD:28:8D:09:15:03:D0
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Certificate issuer:       /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial:       01A0D0EDF48CDAE6D9FCA9DCD78CA8F1C90B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
Manifest number:          10BF
Signing time:             Thu 24 Sep 2026 01:00:50 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:50 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:50 +0000
Files and hashes:         1: 0okF-0SC05COeO8yZcXV41DKYTQ.roa (hash: 84QdZnJ3IbXKy/3dxIJgvDtuCv1JRPJqt/K+MUPi0mI=)
                          2: 4jRLpjQJYdpe60riOemgYmd5Pi4.crl (hash: +MlY42mgyhsE6PPeUgUp4xhHsN4dtivj1g27nTr/bt4=)
                          3: FR-mBIRRF77kp9f_A_tdLCi7jhI.roa (hash: ls0AadaeNbnlTalpbJupO/oWIdL0LohHfGz3dRZulFc=)
                          4: kJytGYOElfqrC3DHKmoh96BhevM.roa (hash: /mTOzryyb1u7CjMFfOIX5gO5vlkkJlQ566zrAJlL2zU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ed:f4:8c:da:e6:d9:fc:a9:dc:d7:8c:a8:f1:c9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
        Validity
            Not Before: Sep 24 01:00:50 2026 GMT
            Not After : Sep 25 01:00:50 2026 GMT
        Subject: CN=51c3755cdb726920061b023841ad288d091503d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:fd:c4:39:1a:c7:4d:ca:a0:88:26:d3:6f:
                    c7:f1:fd:2e:c7:4c:c4:fa:0d:7f:12:a2:19:0a:fc:
                    fe:b7:1d:df:03:56:21:ef:74:69:ee:88:30:56:b4:
                    95:a1:a6:69:85:30:eb:f7:cf:16:8b:81:32:63:50:
                    08:98:dd:15:6e:1f:02:ba:73:e2:bf:07:d1:79:03:
                    10:0b:c8:b8:be:57:4b:c0:8e:84:97:5c:16:e2:08:
                    aa:fa:d2:75:03:21:f2:85:3a:30:e1:34:84:5a:b1:
                    5f:d9:f6:81:87:65:cf:cb:15:ee:5e:89:20:47:89:
                    d8:5b:8b:53:12:80:69:70:a5:ec:13:22:ad:b3:cb:
                    fa:44:ba:1d:28:1f:47:50:29:ee:36:39:55:dc:0c:
                    e2:86:13:1b:3f:bd:cc:eb:bd:8c:15:65:c6:1f:6f:
                    12:0b:f1:d0:77:2f:77:13:29:00:d0:d8:af:31:35:
                    e4:b0:60:d6:b8:c5:04:eb:29:de:59:60:ae:df:fc:
                    8a:03:cc:1b:f7:a9:1d:9d:ad:21:4d:42:46:cd:a9:
                    59:e7:b4:3a:96:02:9d:75:44:f7:4a:0e:5f:9d:8e:
                    60:83:87:16:c3:b6:aa:ad:c3:5d:43:96:f6:32:f7:
                    8b:c3:0b:15:b1:70:f1:f4:9f:d2:2b:64:45:df:af:
                    de:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C3:75:5C:DB:72:69:20:06:1B:02:38:41:AD:28:8D:09:15:03:D0
            X509v3 Authority Key Identifier:
                keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ce:a3:af:37:88:96:df:b8:0b:0e:ec:91:2a:44:e9:14:29:
         a4:48:4f:40:51:e6:8d:25:fd:12:8c:52:12:5f:89:6e:48:45:
         7f:3e:9b:21:4e:4c:9b:5b:65:ee:3b:03:c6:12:e6:60:2f:44:
         15:8c:4f:88:3b:d8:13:69:c1:9f:c7:e5:b2:5c:cb:19:0e:cc:
         ba:6c:68:6d:b9:38:c3:64:91:63:10:ee:a7:53:77:69:11:a0:
         d1:b1:40:fa:83:16:f9:f8:07:30:a6:af:97:51:db:6c:36:a5:
         76:6f:39:a0:b6:cd:c5:41:8b:11:96:12:55:c4:5e:92:3b:98:
         25:3a:d2:37:a9:6a:f3:d1:b9:1e:f3:0c:63:8b:cd:96:4a:e6:
         b8:04:93:c9:29:38:9e:ac:e1:95:a3:2f:11:7b:56:a7:f7:01:
         f1:06:27:a6:d2:b7:37:6b:2b:c6:1e:2b:46:8f:aa:b1:88:91:
         c4:7b:f3:17:8e:74:7e:2d:54:03:ce:6d:c3:24:12:10:15:94:
         de:f4:7c:63:68:63:21:23:3e:b2:0e:27:c1:6c:3d:03:e8:ae:
         a3:b6:dc:c2:0a:1c:96:14:ee:7a:84:fd:88:d5:4a:8f:44:41:
         3e:cd:e3:13:94:cd:3e:b7:e0:ec:4c:9e:6d:f1:a9:db:2d:c4:
         96:da:09:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQ7fSM2ubZ/Knc14yo8ckLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzQ0YmE2MzQwOTYxZGE1ZWViNGFlMjM5ZTlhMDYyNjc3
OTNlMmUwHhcNMjYwOTI0MDEwMDUwWhcNMjYwOTI1MDEwMDUwWjAzMTEwLwYDVQQD
Eyg1MWMzNzU1Y2RiNzI2OTIwMDYxYjAyMzg0MWFkMjg4ZDA5MTUwM2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG79xDkax03KoIgm02/H8f0ux0zE
+g1/EqIZCvz+tx3fA1Yh73Rp7ogwVrSVoaZphTDr988Wi4EyY1AImN0Vbh8CunPi
vwfReQMQC8i4vldLwI6El1wW4giq+tJ1AyHyhTow4TSEWrFf2faBh2XPyxXuXokg
R4nYW4tTEoBpcKXsEyKts8v6RLodKB9HUCnuNjlV3AzihhMbP73M672MFWXGH28S
C/HQdy93EykA0NivMTXksGDWuMUE6yneWWCu3/yKA8wb96kdna0hTUJGzalZ57Q6
lgKddUT3Sg5fnY5gg4cWw7aqrcNdQ5b2MveLwwsVsXDx9J/SK2RF36/eCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHDdVzbcmkgBhsCOEGtKI0JFQPQMB8GA1UdIwQY
MBaAFOI0S6Y0CWHaXutK4jnpoGJneT4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2Qt
MDJlYjlhNDEyNjM3LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NGVjNDMtNTkzNS00YWIyLWIxM2QtMDJlYjlhNDEyNjM3
LzEvNGpSTHBqUUpZZHBlNjByaU9lbWdZbWQ1UGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANc6jrzeI
lt+4Cw7skSpE6RQppEhPQFHmjSX9EoxSEl+JbkhFfz6bIU5Mm1tl7jsDxhLmYC9E
FYxPiDvYE2nBn8flslzLGQ7Mumxobbk4w2SRYxDup1N3aRGg0bFA+oMW+fgHMKav
l1HbbDaldm85oLbNxUGLEZYSVcRekjuYJTrSN6lq89G5HvMMY4vNlkrmuASTySk4
nqzhlaMvEXtWp/cB8QYnptK3N2srxh4rRo+qsYiRxHvzF450fi1UA85twyQSEBWU
3vR8Y2hjISM+sg4nwWw9A+iuo7bcwgoclhTueoT9iNVKj0RBPs3jE5TNPrfg7Eye
bfGp2y3EltoJUg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:25:14 2026 by rpki-client