Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
File:                     1V0PiIjtySCGjGYWIvZDdE5uVsg.mft (raw, json)
Hash identifier:          9CvydavtoJilYGwEzlAXuDTPouEh8yhlzCF90wSjJ0I=
Subject key identifier:   DC:32:A0:B9:19:11:6C:E2:D8:A0:C0:45:30:BA:CA:D0:21:49:A9:74
Authority key identifier: D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8
Certificate issuer:       /CN=d55d0f8888edc920868c661622f643744e6e56c8
Certificate serial:       01A0CE5A39E08C6BA0E03817889C8FD84DAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
Manifest number:          0AD2
Signing time:             Wed 23 Sep 2026 13:00:14 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:14 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:14 +0000
Files and hashes:         1: 1TrO_2QXOs4ws94dhqYyKBz0bHM.roa (hash: Ey59AA0KuyADSpp05wiPpigWt7/yZ3FbbIAOHS5yrug=)
                          2: 1V0PiIjtySCGjGYWIvZDdE5uVsg.crl (hash: rc4bDGfOOGTrk8K4Juy2dlWMtW00X5Ra9ltlf93QGnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:39:e0:8c:6b:a0:e0:38:17:88:9c:8f:d8:4d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55d0f8888edc920868c661622f643744e6e56c8
        Validity
            Not Before: Sep 23 13:00:14 2026 GMT
            Not After : Sep 24 13:00:14 2026 GMT
        Subject: CN=dc32a0b919116ce2d8a0c04530bacad02149a974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:c3:d3:e1:96:46:42:a8:56:ee:08:8f:a9:
                    b4:9b:1d:86:1e:63:20:b9:34:5a:6d:fa:b9:cd:77:
                    e8:3e:50:de:94:c3:c7:06:9a:7a:1a:63:bf:a1:89:
                    62:d9:92:91:c2:50:df:45:98:f9:df:24:a5:48:8a:
                    07:91:f0:0d:76:85:68:ab:62:25:88:b2:15:a6:04:
                    94:ed:08:8d:88:39:c2:3a:7a:26:27:29:75:ec:fa:
                    49:71:f4:09:d6:94:4a:2e:3b:13:35:c9:c7:e7:b9:
                    56:72:37:f3:c3:32:10:7f:1d:02:8a:ea:6e:ed:cf:
                    95:04:5a:ed:d9:00:4d:6c:2b:f7:19:db:62:9b:c5:
                    28:16:ab:55:1c:97:11:b2:ed:99:4e:bd:93:89:ca:
                    fa:b5:1a:ee:a1:0c:4a:e1:39:17:04:8a:79:0d:43:
                    ea:04:0a:78:fa:46:a6:41:a3:27:9c:33:cb:35:7d:
                    f1:74:d3:42:0c:fa:8f:8d:07:79:b9:26:dd:33:04:
                    f1:31:f5:cb:19:75:88:f5:c0:93:5b:7a:7c:68:73:
                    f1:5c:ee:55:1f:4e:46:79:35:d5:68:1c:f6:60:66:
                    19:6e:0e:bb:29:ef:28:fd:60:cf:ee:5f:c3:ee:d4:
                    b6:3d:a9:2f:27:c1:03:b5:f9:b6:33:ad:71:5f:68:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:32:A0:B9:19:11:6C:E2:D8:A0:C0:45:30:BA:CA:D0:21:49:A9:74
            X509v3 Authority Key Identifier:
                keyid:D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:69:86:04:d0:03:fc:bc:81:83:df:36:56:ae:d1:75:9b:04:
         52:d0:b1:a6:74:c3:ee:a6:68:aa:ca:df:f9:b1:a9:e6:4c:45:
         64:75:1b:fc:b5:61:84:44:00:b1:24:25:77:c6:fd:23:2e:9c:
         f6:4e:0f:01:7a:23:ea:4f:c8:5b:8c:a0:71:54:a8:be:a0:ba:
         92:6d:58:d8:0b:4c:c3:2f:09:5f:fd:bc:60:e6:51:19:ab:ed:
         75:f4:75:e7:e3:5f:52:c4:95:fc:85:40:cc:32:dc:1c:13:b1:
         6f:a6:02:3a:ee:5b:42:a3:68:d4:5b:f4:fb:66:d1:01:e1:a4:
         e7:08:ff:2f:6f:40:8c:dd:78:ab:e4:11:d8:90:04:8a:a5:d0:
         26:c1:95:93:8a:0b:f9:cd:3f:84:52:a8:7e:df:1c:ee:a7:d5:
         75:8c:a6:62:5f:f0:c5:35:57:bc:ef:6b:f0:32:d1:f4:63:4c:
         f4:ad:7d:41:25:3d:e4:32:6e:91:45:07:ce:28:88:fa:a1:8b:
         9e:9d:9a:0d:4d:38:2f:de:09:96:86:e4:f8:b5:06:ca:b6:e9:
         42:df:e6:dd:f6:90:dd:2a:dd:47:43:5b:70:32:29:bd:b4:1c:
         1c:a3:fa:39:91:d2:b3:ff:6e:df:0a:0a:29:16:d3:dd:c0:8c:
         3a:c1:12:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOWjngjGug4DgXiJyP2E2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NWQwZjg4ODhlZGM5MjA4NjhjNjYxNjIyZjY0Mzc0NGU2
ZTU2YzgwHhcNMjYwOTIzMTMwMDE0WhcNMjYwOTI0MTMwMDE0WjAzMTEwLwYDVQQD
EyhkYzMyYTBiOTE5MTE2Y2UyZDhhMGMwNDUzMGJhY2FkMDIxNDlhOTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnDD0+GWRkKoVu4Ij6m0mx2GHmMg
uTRabfq5zXfoPlDelMPHBpp6GmO/oYli2ZKRwlDfRZj53ySlSIoHkfANdoVoq2Il
iLIVpgSU7QiNiDnCOnomJyl17PpJcfQJ1pRKLjsTNcnH57lWcjfzwzIQfx0Ciupu
7c+VBFrt2QBNbCv3Gdtim8UoFqtVHJcRsu2ZTr2Ticr6tRruoQxK4TkXBIp5DUPq
BAp4+kamQaMnnDPLNX3xdNNCDPqPjQd5uSbdMwTxMfXLGXWI9cCTW3p8aHPxXO5V
H05GeTXVaBz2YGYZbg67Ke8o/WDP7l/D7tS2PakvJ8EDtfm2M61xX2j7NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwyoLkZEWzi2KDARTC6ytAhSal0MB8GA1UdIwQY
MBaAFNVdD4iI7ckghoxmFiL2Q3ROblbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVYwUGlJanR5U0NHakdZV0l2WkRkRTV1VnNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xOTM5ODgtOTU3Mi00NTVjLWEyNjgt
ZGU0MGRhYTI2ODRkLzEvMVYwUGlJanR5U0NHakdZV0l2WkRkRTV1VnNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xOTM5ODgtOTU3Mi00NTVjLWEyNjgtZGU0MGRhYTI2ODRk
LzEvMVYwUGlJanR5U0NHakdZV0l2WkRkRTV1VnNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2mGBNAD
/LyBg982Vq7RdZsEUtCxpnTD7qZoqsrf+bGp5kxFZHUb/LVhhEQAsSQld8b9Iy6c
9k4PAXoj6k/IW4ygcVSovqC6km1Y2AtMwy8JX/28YOZRGavtdfR15+NfUsSV/IVA
zDLcHBOxb6YCOu5bQqNo1Fv0+2bRAeGk5wj/L29AjN14q+QR2JAEiqXQJsGVk4oL
+c0/hFKoft8c7qfVdYymYl/wxTVXvO9r8DLR9GNM9K19QSU95DJukUUHziiI+qGL
np2aDU04L94Jlobk+LUGyrbpQt/m3faQ3SrdR0NbcDIpvbQcHKP6OZHSs/9u3woK
KRbT3cCMOsESgw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:50:16 2026 by rpki-client