Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
File:                     0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft (raw, json)
Hash identifier:          U2B47Mx7uPDwFCNfYXHeXKkffV8G9ttpZP6YxYG6uBM=
Subject key identifier:   71:2D:6A:9B:01:F3:C5:A2:1D:28:64:28:54:CE:F2:85:D6:DB:80:1F
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Certificate issuer:       /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial:       01A0DBDF9B3836D6E1197D0EC73EE045866D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
Manifest number:          1A70
Signing time:             Sat 26 Sep 2026 04:00:59 +0000
Manifest this update:     Sat 26 Sep 2026 04:00:59 +0000
Manifest next update:     Sun 27 Sep 2026 04:00:59 +0000
Files and hashes:         1: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl (hash: 8MmS9o1ekCvMeDACq47+13e2enQ4b7cKA8Bmaz2oNFs=)
                          2: 6sIpurMyf7U7cVjfDtGf65yWDwA.roa (hash: cZnmgrrB6eUg5rHF2CdbgLHSyI5RnOe61koYU+5dDnA=)
                          3: NZSg7hN5dj36ijrS0iZ916AKsoM.roa (hash: VS2r3z5DpXErRLlghndtWldrsOM22Uv0cqCOqDvPp5M=)
                          4: _EXzGZ6mIohQTkOQklm2HctGpf0.roa (hash: d5WVsZmAqKJyYsnjGKZS29R+h6TCBV39mM8GYttnuxM=)
                          5: aTt1lDOQ__4_BOzrJWRmWq2_g_I.roa (hash: v57HfwpPj2JAqIcZD1AamnQQx8/Wn9ebUoCosyKqGs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:df:9b:38:36:d6:e1:19:7d:0e:c7:3e:e0:45:86:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
        Validity
            Not Before: Sep 26 04:00:59 2026 GMT
            Not After : Sep 27 04:00:59 2026 GMT
        Subject: CN=712d6a9b01f3c5a21d28642854cef285d6db801f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e4:4b:1b:10:6b:0c:0f:b0:89:d0:08:10:fc:
                    25:d1:c2:c0:79:cf:bb:94:bb:bd:5f:bb:f6:52:97:
                    63:30:dc:fc:01:2a:1f:69:9e:cc:81:cc:2d:46:2b:
                    e9:79:29:91:04:74:df:9f:9f:56:52:c5:f1:1c:9d:
                    27:89:db:db:b0:20:21:d5:91:37:3f:79:a6:dd:57:
                    41:a1:8f:ad:01:0b:18:da:87:9e:32:03:dd:95:f5:
                    2a:37:2f:28:23:25:43:7f:6e:f0:bc:e2:38:fb:a0:
                    26:bb:ab:68:fe:95:ec:ca:ea:f0:c7:4f:bc:93:8b:
                    0d:c6:dc:7a:38:5d:f3:9e:08:14:c5:36:99:54:a5:
                    03:65:34:b6:ed:cf:42:ed:c5:1a:96:40:cc:82:7b:
                    9a:56:3d:1e:7e:55:42:c2:13:a4:ac:e0:0f:53:f8:
                    ae:1e:c7:de:d2:8a:20:ca:0a:18:e1:d6:91:e3:5e:
                    dc:db:87:ce:ba:3f:64:9a:65:a2:18:3d:fc:29:55:
                    f2:1d:3c:5e:d4:44:c0:7f:f1:2b:59:20:2d:1a:b3:
                    61:ad:8d:8b:34:85:30:71:e0:6a:f9:18:4d:4f:42:
                    ed:50:38:46:8b:2e:0e:b0:e8:af:ca:44:2f:02:08:
                    ed:3b:44:a1:0c:27:db:a8:d2:75:30:f9:43:cb:f7:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2D:6A:9B:01:F3:C5:A2:1D:28:64:28:54:CE:F2:85:D6:DB:80:1F
            X509v3 Authority Key Identifier:
                keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:44:04:68:62:4c:43:8f:b4:24:92:9f:63:f8:38:7a:3a:e0:
         8d:c9:f1:2f:83:b5:d4:b3:30:0b:b6:65:70:a1:ac:71:80:fc:
         2b:3c:78:3a:63:b6:ea:1c:f0:9a:5b:f9:29:a7:c6:ab:75:f3:
         14:f9:8b:4a:8f:2d:83:5a:16:c6:e7:a8:af:6d:f1:f7:cf:53:
         bb:bf:4f:bb:9a:96:75:5c:41:57:64:42:c0:14:2a:76:c6:56:
         d0:bb:c1:bd:cd:d6:eb:78:a6:68:07:e5:df:dd:fb:70:27:3b:
         c5:66:aa:39:6a:e3:ce:b3:30:a0:db:c4:00:2d:b2:b3:07:da:
         0b:01:ec:9f:69:bb:8f:ad:49:d7:d2:bd:b2:33:46:e5:b2:aa:
         c7:e6:41:64:e3:00:7c:81:1b:5e:d4:ae:59:62:a1:77:74:15:
         8b:3a:43:c5:59:b3:06:3a:2e:d1:e5:d0:1c:dc:ca:0f:86:bb:
         54:0c:10:80:39:39:42:da:2f:4e:62:13:ef:36:32:d4:0d:64:
         6c:49:d4:90:7d:1f:a3:c7:aa:5d:80:b1:4c:de:03:7e:58:3e:
         21:cc:ae:59:89:ee:d2:2d:8f:f4:f5:65:59:47:68:45:29:6a:
         38:f7:04:74:40:7e:b3:d0:28:ae:4b:21:9b:0a:c9:5e:fd:87:
         60:fa:50:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDb35s4NtbhGX0Oxz7gRYZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMzA0NmQxNmNmYzM5MWIwMjhiODg3NDM3NzNjZTAwNWNm
OTdiMWQwHhcNMjYwOTI2MDQwMDU5WhcNMjYwOTI3MDQwMDU5WjAzMTEwLwYDVQQD
Eyg3MTJkNmE5YjAxZjNjNWEyMWQyODY0Mjg1NGNlZjI4NWQ2ZGI4MDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uRLGxBrDA+widAIEPwl0cLAec+7
lLu9X7v2UpdjMNz8ASofaZ7MgcwtRivpeSmRBHTfn59WUsXxHJ0nidvbsCAh1ZE3
P3mm3VdBoY+tAQsY2oeeMgPdlfUqNy8oIyVDf27wvOI4+6Amu6to/pXsyurwx0+8
k4sNxtx6OF3znggUxTaZVKUDZTS27c9C7cUalkDMgnuaVj0eflVCwhOkrOAPU/iu
Hsfe0oogygoY4daR417c24fOuj9kmmWiGD38KVXyHTxe1ETAf/ErWSAtGrNhrY2L
NIUwceBq+RhNT0LtUDhGiy4OsOivykQvAgjtO0ShDCfbqNJ1MPlDy/fkMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEtapsB88WiHShkKFTO8oXW24AfMB8GA1UdIwQY
MBaAFNAwRtFs/DkbAouIdDdzzgBc+XsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xOGQxMzItOTk1MS00MDU1LWI1YTYt
ZGMwZTFhNzI1MjIxLzEvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xOGQxMzItOTk1MS00MDU1LWI1YTYtZGMwZTFhNzI1MjIx
LzEvMERCRzBXejhPUnNDaTRoME4zUE9BRno1ZXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEQEaGJM
Q4+0JJKfY/g4ejrgjcnxL4O11LMwC7ZlcKGscYD8Kzx4OmO26hzwmlv5KafGq3Xz
FPmLSo8tg1oWxueor23x989Tu79Pu5qWdVxBV2RCwBQqdsZW0LvBvc3W63imaAfl
3937cCc7xWaqOWrjzrMwoNvEAC2yswfaCwHsn2m7j61J19K9sjNG5bKqx+ZBZOMA
fIEbXtSuWWKhd3QVizpDxVmzBjou0eXQHNzKD4a7VAwQgDk5QtovTmIT7zYy1A1k
bEnUkH0fo8eqXYCxTN4Dflg+IcyuWYnu0i2P9PVlWUdoRSlqOPcEdEB+s9Aorksh
mwrJXv2HYPpQDw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:27:56 2026 by rpki-client