Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
File:                     dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json)
Hash identifier:          37YxEWBYpfNt2Q+K0Yhn7Do8HbkfMOZtParJEoe0IaI=
Subject key identifier:   13:15:A3:7D:B2:A6:9C:9C:13:40:93:1C:EA:A6:D2:C2:5C:47:46:6E
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Certificate issuer:       /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial:       01A0D20036E44CCBDA7E915C2215FAAAFF9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
Manifest number:          1A01
Signing time:             Thu 24 Sep 2026 06:00:24 +0000
Manifest this update:     Thu 24 Sep 2026 06:00:24 +0000
Manifest next update:     Fri 25 Sep 2026 06:00:24 +0000
Files and hashes:         1: adYAw1QARYUATfxCFb6i8Q_fm-o.roa (hash: QPoF7S4xS1/LhTKBOqbjrxIWUWpnI5hm5nl1XAjSOeg=)
                          2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: ih8D63RJWcBuYMV5h0PwgTZ4e9ESgxvx7wpvoUK3c1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:00:36:e4:4c:cb:da:7e:91:5c:22:15:fa:aa:ff:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
        Validity
            Not Before: Sep 24 06:00:24 2026 GMT
            Not After : Sep 25 06:00:24 2026 GMT
        Subject: CN=1315a37db2a69c9c1340931ceaa6d2c25c47466e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:49:31:4c:29:0b:61:eb:4a:77:e9:6a:ae:
                    c0:73:99:83:aa:97:a9:3c:e9:17:b4:22:51:73:fd:
                    40:cb:16:43:16:ef:fc:fd:5e:1e:00:7a:07:80:d2:
                    66:08:07:d6:4b:b2:19:06:e8:06:d6:1f:f0:33:83:
                    5e:07:d4:05:7d:3d:80:6e:b1:51:8f:43:3e:cf:25:
                    52:89:e5:24:d7:49:5e:f0:d4:05:40:aa:fc:c0:5e:
                    34:af:f1:56:89:8b:14:66:bb:0d:26:36:b3:7a:d1:
                    d4:96:40:82:df:28:bc:da:1a:f0:17:ce:a9:f1:61:
                    b9:6e:63:e5:af:1b:26:3b:69:59:ed:85:69:16:a6:
                    d0:65:ca:56:0a:f7:ef:2f:35:4f:28:59:4e:01:68:
                    43:8a:0e:cf:d3:e1:93:a7:18:0e:fe:91:8b:3d:ac:
                    bf:47:2e:16:a3:6f:a0:95:23:09:b3:ba:26:01:ea:
                    1c:50:8a:61:eb:83:30:9b:7a:10:a8:51:e2:2c:0e:
                    fd:4a:1e:a1:42:3f:69:1f:ad:43:1c:25:dd:39:9a:
                    7c:bd:dd:6b:b9:26:7c:5c:d7:93:37:bc:6f:cf:c2:
                    e9:ba:5d:21:fd:5a:d9:43:48:67:84:d9:ea:26:45:
                    cd:94:6b:99:0f:53:1d:7c:5e:dc:7f:cd:b7:61:96:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:15:A3:7D:B2:A6:9C:9C:13:40:93:1C:EA:A6:D2:C2:5C:47:46:6E
            X509v3 Authority Key Identifier:
                keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ff:77:3d:85:ac:cd:ae:45:3e:91:3a:38:8b:ab:25:df:bb:
         bd:7b:9e:63:3e:54:f9:0b:04:1d:2b:ee:3e:73:0b:44:a2:53:
         ea:e4:e1:a8:98:4a:0d:4d:bb:a7:2e:65:b9:e7:c0:27:61:e1:
         77:66:1c:bb:99:cd:cc:9b:a9:40:bc:05:0a:b0:e0:cc:ba:77:
         43:33:40:93:54:98:7c:06:25:fa:ac:1c:93:76:22:4f:e0:5f:
         7c:8b:73:21:5f:0a:a4:1f:32:6c:e0:56:17:e4:32:1a:3b:ca:
         fb:fc:08:40:b1:55:62:f2:91:cc:f1:62:86:68:9a:39:70:dd:
         8c:32:a4:79:19:d3:ec:c2:33:a3:97:fd:92:bb:25:6d:b4:e4:
         e2:17:a9:53:93:1c:72:de:5e:12:5f:3a:21:8f:c3:8d:f6:19:
         4f:85:4d:a9:93:78:60:51:83:bc:8f:43:64:ed:b9:cb:08:55:
         fa:4e:81:b3:6f:16:16:f6:02:52:39:7e:9a:c6:e0:ed:f4:60:
         46:43:8b:52:9d:32:ff:1d:fd:a5:48:ff:00:b5:15:c4:36:28:
         c3:7e:39:0c:97:3d:98:b5:b1:fe:17:d6:5f:cd:64:ec:3f:fa:
         78:dd:65:2b:67:d7:9b:07:5c:9c:98:9d:d5:47:61:d9:79:8b:
         0e:e6:22:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSADbkTMvafpFcIhX6qv+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YmU0NjFlYjlmNzAwNGYyOWExN2ZkZGRmZWYyZTJlYTA1
ZWI5YWYwHhcNMjYwOTI0MDYwMDI0WhcNMjYwOTI1MDYwMDI0WjAzMTEwLwYDVQQD
EygxMzE1YTM3ZGIyYTY5YzljMTM0MDkzMWNlYWE2ZDJjMjVjNDc0NjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5FJMUwpC2HrSnfpaq7Ac5mDqpep
POkXtCJRc/1AyxZDFu/8/V4eAHoHgNJmCAfWS7IZBugG1h/wM4NeB9QFfT2AbrFR
j0M+zyVSieUk10le8NQFQKr8wF40r/FWiYsUZrsNJjazetHUlkCC3yi82hrwF86p
8WG5bmPlrxsmO2lZ7YVpFqbQZcpWCvfvLzVPKFlOAWhDig7P0+GTpxgO/pGLPay/
Ry4Wo2+glSMJs7omAeocUIph64Mwm3oQqFHiLA79Sh6hQj9pH61DHCXdOZp8vd1r
uSZ8XNeTN7xvz8Lpul0h/VrZQ0hnhNnqJkXNlGuZD1MdfF7cf823YZZKLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMVo32yppycE0CTHOqm0sJcR0ZuMB8GA1UdIwQY
MBaAFHa+Rh659wBPKaF/3d/vLi6gXrmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2Yt
ODhjZmEzZGNhNmRlLzEvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2YtODhjZmEzZGNhNmRl
LzEvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWv93PYWs
za5FPpE6OIurJd+7vXueYz5U+QsEHSvuPnMLRKJT6uThqJhKDU27py5luefAJ2Hh
d2Ycu5nNzJupQLwFCrDgzLp3QzNAk1SYfAYl+qwck3YiT+BffItzIV8KpB8ybOBW
F+QyGjvK+/wIQLFVYvKRzPFihmiaOXDdjDKkeRnT7MIzo5f9krslbbTk4hepU5Mc
ct5eEl86IY/DjfYZT4VNqZN4YFGDvI9DZO25ywhV+k6Bs28WFvYCUjl+msbg7fRg
RkOLUp0y/x39pUj/ALUVxDYow345DJc9mLWx/hfWX81k7D/6eN1lK2fXmwdcnJid
1Udh2XmLDuYiTw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:50 2026 by rpki-client