Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
File:                     M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json)
Hash identifier:          HJna5+VWuAbN4M5cYGel8PsOOZLMWEffnz+7SzThXNA=
Subject key identifier:   32:7D:6B:CB:B7:D6:15:44:2C:0A:21:6F:8D:C4:A0:25:8E:ED:1A:5D
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Certificate issuer:       /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial:       01A0D4265F6EAA2E24EACE96C7FBCC48FE4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
Manifest number:          079B
Signing time:             Thu 24 Sep 2026 16:01:19 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:19 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:19 +0000
Files and hashes:         1: 7nAXiiWwMrKC__gT-hUF2XA-Iso.roa (hash: vcK2N0Exej7cew/p43KdNyk4JPLcOKiM3s2+QDUjk38=)
                          2: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: AoZZ7tfLBNkkZhXP1/2IJIEN1rB2b6MSxCuGa60+3mA=)
                          3: WqDS95-He-yk3t24qKJI-_SLkPk.roa (hash: CpUmTzZjgX7L+EURvDrJ6FpyIH+66F1QJtHPFgkqtLs=)
                          4: cgOqu4SdNiUsyvVgRsWy2IiSrRk.roa (hash: iyZz+ne5RBNmhJL+kkuEkW2psKX2xrbIym9fdJ+TVi0=)
                          5: faLPN_S_WjaTJHL5obkgUoA9YU0.roa (hash: 9SARb7qgti8Rdi1ymT3uP+n1nUwS+BiJv6V79V4Y0rI=)
                          6: tkxYbwLzW57rtbTL3HAb4gik620.roa (hash: gE/XZLF/hHQla0+c26dZTm+olAmW2YqbYW49t6axXdU=)
                          7: v0CmFjYdCus3aQO-8m8_ZmwT2WU.roa (hash: gPHxfBPLjS7r3KK8sjMCL/yxvco773JImBamks13aRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:5f:6e:aa:2e:24:ea:ce:96:c7:fb:cc:48:fe:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
        Validity
            Not Before: Sep 24 16:01:19 2026 GMT
            Not After : Sep 25 16:01:19 2026 GMT
        Subject: CN=327d6bcbb7d615442c0a216f8dc4a0258eed1a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:99:11:e0:c6:dc:94:96:51:e5:3e:64:8e:
                    1d:f4:13:e0:06:24:2c:a5:69:f5:75:6e:d8:2a:b7:
                    dd:3b:5a:b7:52:96:d2:43:e5:7b:0f:75:c2:3e:75:
                    45:63:aa:8c:a3:38:ca:78:a7:15:aa:57:89:3c:60:
                    d3:7e:2e:2d:80:6a:0c:fe:97:a1:9d:74:28:cd:8f:
                    f3:61:15:77:d7:84:bf:46:5d:a0:1c:aa:41:a5:79:
                    7b:69:f2:f3:e9:f2:29:7b:c0:f8:68:8d:d8:49:f4:
                    78:43:87:8a:15:1d:c5:c1:34:83:53:57:18:8c:c3:
                    f7:74:2b:ce:00:61:2b:8b:d7:95:dc:da:a9:84:77:
                    2a:45:98:58:aa:b6:2a:dd:5d:f7:a7:12:e5:aa:81:
                    5f:77:4f:50:22:f7:83:0c:13:e8:c3:8a:cf:76:14:
                    de:69:72:c9:85:64:18:7d:f1:3f:15:a4:b0:e9:7d:
                    2b:b1:c7:de:fa:fb:3e:2b:af:cc:a4:17:7e:04:33:
                    0b:ca:98:0d:cf:93:71:ef:27:b5:5e:fd:b8:7c:2f:
                    68:56:da:34:54:a8:54:30:18:fd:cf:d7:ac:2d:50:
                    70:24:bd:24:2e:72:76:63:8b:91:6f:1d:07:38:8f:
                    95:32:2b:80:44:0d:2c:d1:24:7c:04:62:23:d1:c1:
                    a1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7D:6B:CB:B7:D6:15:44:2C:0A:21:6F:8D:C4:A0:25:8E:ED:1A:5D
            X509v3 Authority Key Identifier:
                keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:2b:09:91:61:53:b5:c4:e3:c0:e0:f5:53:5a:bd:24:c5:ef:
         1a:2d:15:3c:0c:15:b9:7f:5a:31:6f:62:3b:2d:c5:e7:f7:20:
         0a:64:3d:97:45:ab:c3:a2:67:e2:1b:f7:bf:ce:6a:bf:9c:6c:
         e1:68:c8:b6:b7:0c:9d:13:c5:06:fe:c6:3e:42:51:38:7f:ca:
         1c:59:9d:23:d0:f7:7e:a2:2d:f6:d7:4e:ef:81:f1:d2:5c:45:
         a4:31:fc:69:70:9d:a0:84:6f:bd:21:d9:93:47:9f:54:a2:f6:
         d8:96:dd:48:c1:f4:35:bb:3a:e1:f6:0a:b6:cd:d2:ca:87:79:
         13:6c:18:29:28:d2:ec:e9:2e:33:a3:ed:38:b8:57:59:ff:3c:
         a0:e7:a2:4d:ba:3a:76:c8:b1:68:8a:f5:d0:2e:f8:57:95:b6:
         df:f0:02:74:57:56:1a:53:81:b0:4b:a3:57:88:a2:dd:a3:01:
         ed:9d:fd:09:2f:8a:06:41:0c:c0:b6:11:7f:f4:7d:85:25:52:
         26:94:06:18:07:e2:73:80:af:98:62:71:cc:d4:ad:c0:91:82:
         54:05:3f:dd:7d:67:08:93:01:27:5e:e3:96:5a:6e:ac:5e:46:
         80:be:1e:73:95:65:8c:4b:e6:c5:48:ef:22:4f:26:97:5e:f9:
         d7:0a:f7:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUJl9uqi4k6s6Wx/vMSP5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNGY5ZjgzZDJkNzRjMGMwZmQwMGRhNzM1NTc4ZjczN2Rk
N2RhMDMwHhcNMjYwOTI0MTYwMTE5WhcNMjYwOTI1MTYwMTE5WjAzMTEwLwYDVQQD
EygzMjdkNmJjYmI3ZDYxNTQ0MmMwYTIxNmY4ZGM0YTAyNThlZWQxYTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ2ZEeDG3JSWUeU+ZI4d9BPgBiQs
pWn1dW7YKrfdO1q3UpbSQ+V7D3XCPnVFY6qMozjKeKcVqleJPGDTfi4tgGoM/peh
nXQozY/zYRV314S/Rl2gHKpBpXl7afLz6fIpe8D4aI3YSfR4Q4eKFR3FwTSDU1cY
jMP3dCvOAGEri9eV3NqphHcqRZhYqrYq3V33pxLlqoFfd09QIveDDBPow4rPdhTe
aXLJhWQYffE/FaSw6X0rscfe+vs+K6/MpBd+BDMLypgNz5Nx7ye1Xv24fC9oVto0
VKhUMBj9z9esLVBwJL0kLnJ2Y4uRbx0HOI+VMiuARA0s0SR8BGIj0cGhJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJ9a8u31hVELAohb43EoCWO7RpdMB8GA1UdIwQY
MBaAFDNPn4PS10wMD9ANpzVXj3N919oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgt
ZWZkMjBmNmMyZWMzLzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgtZWZkMjBmNmMyZWMz
LzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCsJkWFT
tcTjwOD1U1q9JMXvGi0VPAwVuX9aMW9iOy3F5/cgCmQ9l0Wrw6Jn4hv3v85qv5xs
4WjItrcMnRPFBv7GPkJROH/KHFmdI9D3fqIt9tdO74Hx0lxFpDH8aXCdoIRvvSHZ
k0efVKL22JbdSMH0Nbs64fYKts3Syod5E2wYKSjS7OkuM6PtOLhXWf88oOeiTbo6
dsixaIr10C74V5W23/ACdFdWGlOBsEujV4ii3aMB7Z39CS+KBkEMwLYRf/R9hSVS
JpQGGAfic4CvmGJxzNStwJGCVAU/3X1nCJMBJ17jllpurF5GgL4ec5VljEvmxUjv
Ik8ml1751wr3YQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:59:12 2026 by rpki-client