Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File:                     uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier:          m3Y0wtEtm/z7dIEdpPYUqBd7eOKOIcoIxGZHEFy4WVQ=
Subject key identifier:   63:07:7C:91:14:29:28:B1:E5:63:F3:A4:4C:2F:48:6A:3C:B8:17:D3
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer:       /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial:       01A0E3D04053B86B270C7833A6A7CA51C04B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number:          0E3F
Signing time:             Sun 27 Sep 2026 17:01:10 +0000
Manifest this update:     Sun 27 Sep 2026 17:01:10 +0000
Manifest next update:     Mon 28 Sep 2026 17:01:10 +0000
Files and hashes:         1: _1ONv99BnnmudSRYd6dRqlyZIis.roa (hash: bfQcICbHkAmGOY8DwQBd7z3DHYTS6Nksb+9VqNl7RPs=)
                          2: _qgjZUprLsuqYsWmj9vP9f6xthk.roa (hash: GM0m9yFuCRSbpKde8jgOPR1V9tzQSRA4/KDcI3DgI1c=)
                          3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: Gslw0pxvhCEpQ2rxGNTaFZe/4rOAu2ALFziS9ii8WRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:d0:40:53:b8:6b:27:0c:78:33:a6:a7:ca:51:c0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
        Validity
            Not Before: Sep 27 17:01:10 2026 GMT
            Not After : Sep 28 17:01:10 2026 GMT
        Subject: CN=63077c91142928b1e563f3a44c2f486a3cb817d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:d4:18:c6:f5:8f:fc:77:ab:f2:98:de:45:
                    31:a0:05:8b:13:db:5d:d4:52:0e:27:f7:9e:ce:0e:
                    4c:4e:34:2d:10:eb:b5:57:8c:6b:75:fe:51:38:a8:
                    fb:fb:32:a3:c3:1e:2c:cd:42:04:e3:03:28:1c:7c:
                    b8:c7:2f:a5:da:c9:8b:6b:d9:0c:3e:df:de:f0:61:
                    b0:0b:7d:87:fe:07:84:d4:71:66:da:9b:77:b1:51:
                    66:15:06:2d:4a:40:57:30:2e:47:47:f0:e5:24:db:
                    69:8b:1b:b9:92:cd:d3:1d:63:1f:4f:ed:fc:f6:30:
                    0b:2d:3a:19:eb:2e:53:62:e7:e8:8f:8a:3b:67:d5:
                    70:e7:fd:24:94:cc:ba:d4:f2:5e:79:70:69:bd:f9:
                    5e:3c:55:18:62:d9:17:ea:f9:79:b3:af:34:bf:03:
                    52:0c:83:b0:74:e1:5d:0f:f4:91:76:46:ac:e0:2d:
                    39:8a:40:a3:42:78:2a:19:81:3f:be:fe:7f:d5:29:
                    48:f5:a7:f5:61:78:b3:a4:7c:c9:80:f5:8f:a4:6c:
                    4a:76:10:5a:55:a6:ae:40:ae:9b:66:0d:95:e2:ac:
                    6f:83:37:b8:92:7c:07:3c:3f:06:8a:84:4c:91:27:
                    1e:bc:db:8f:d8:55:2a:77:3a:3f:8b:27:f1:67:d3:
                    89:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:07:7C:91:14:29:28:B1:E5:63:F3:A4:4C:2F:48:6A:3C:B8:17:D3
            X509v3 Authority Key Identifier:
                keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b8:24:3d:03:74:ce:a1:6b:4e:d5:7c:27:2f:f7:48:c0:be:
         85:2f:8f:e0:ce:b1:56:68:4d:15:14:03:75:ef:d2:da:0d:0f:
         b9:76:8b:47:af:fa:1d:54:e3:a6:a5:ac:82:8f:3b:e0:ac:1c:
         2d:80:bd:eb:dc:b2:6d:0d:58:29:6c:9e:d5:75:85:b3:f9:8a:
         9c:2a:6d:0c:cf:dc:c4:2c:41:2f:13:37:70:d2:3d:05:70:a4:
         ad:55:be:76:8a:e4:dc:97:3b:6e:2d:2e:d9:a6:ce:16:74:bc:
         3a:ba:53:92:08:d8:83:c4:86:db:55:fd:b7:83:33:ac:31:c2:
         b4:bc:f3:d7:4f:29:74:76:88:36:e0:e5:b9:32:e9:1d:4e:ad:
         3c:71:96:2c:50:64:a0:8b:ef:70:6a:9b:59:17:86:b4:ee:92:
         27:06:ab:c5:03:92:6f:5c:ed:7d:2c:d4:8c:4b:e1:ed:25:60:
         48:0d:ed:2f:45:72:be:2b:c5:7f:16:cc:58:14:75:bf:26:12:
         b4:6c:64:c3:d1:99:18:b4:bb:bf:8e:2c:bb:df:92:01:44:93:
         a6:9b:b7:b9:de:3f:14:33:19:1c:ee:96:5f:81:d3:eb:5b:6f:
         88:7c:11:84:2c:d7:5e:20:06:07:1b:1c:8f:69:3c:bf:b1:80:
         9c:3e:7e:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDj0EBTuGsnDHgzpqfKUcBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5M2E1MWRhMjA1MzA0NGY5NjI2MmY2MzdkMGM5Y2MwNWQ3
MzAwNDEwHhcNMjYwOTI3MTcwMTEwWhcNMjYwOTI4MTcwMTEwWjAzMTEwLwYDVQQD
Eyg2MzA3N2M5MTE0MjkyOGIxZTU2M2YzYTQ0YzJmNDg2YTNjYjgxN2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgzUGMb1j/x3q/KY3kUxoAWLE9td
1FIOJ/eezg5MTjQtEOu1V4xrdf5ROKj7+zKjwx4szUIE4wMoHHy4xy+l2smLa9kM
Pt/e8GGwC32H/geE1HFm2pt3sVFmFQYtSkBXMC5HR/DlJNtpixu5ks3THWMfT+38
9jALLToZ6y5TYufoj4o7Z9Vw5/0klMy61PJeeXBpvflePFUYYtkX6vl5s680vwNS
DIOwdOFdD/SRdkas4C05ikCjQngqGYE/vv5/1SlI9af1YXizpHzJgPWPpGxKdhBa
VaauQK6bZg2V4qxvgze4knwHPD8GioRMkScevNuP2FUqdzo/iyfxZ9OJ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMHfJEUKSix5WPzpEwvSGo8uBfTMB8GA1UdIwQY
MBaAFLk6UdogUwRPliYvY30MnMBdcwBBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8wMjQxNDMtMDQyYy00MjIyLWJlMGIt
YTEyYjNjM2FlODhmLzEvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8wMjQxNDMtMDQyYy00MjIyLWJlMGItYTEyYjNjM2FlODhm
LzEvdVRwUjJpQlRCRS1XSmk5amZReWN3RjF6QUVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbgkPQN0
zqFrTtV8Jy/3SMC+hS+P4M6xVmhNFRQDde/S2g0PuXaLR6/6HVTjpqWsgo874Kwc
LYC969yybQ1YKWye1XWFs/mKnCptDM/cxCxBLxM3cNI9BXCkrVW+dork3Jc7bi0u
2abOFnS8OrpTkgjYg8SG21X9t4MzrDHCtLzz108pdHaINuDluTLpHU6tPHGWLFBk
oIvvcGqbWReGtO6SJwarxQOSb1ztfSzUjEvh7SVgSA3tL0VyvivFfxbMWBR1vyYS
tGxkw9GZGLS7v44su9+SAUSTppu3ud4/FDMZHO6WX4HT61tviHwRhCzXXiAGBxsc
j2k8v7GAnD5+Aw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 21:29:00 2026 by rpki-client