Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
File:                     V3bZoLVb1JWhvjxcA_olHT3ouMU.mft (raw, json)
Hash identifier:          91z79lLMu1HquxwZBVUahGz6f32/Bu8UzsdgM7bf1ko=
Subject key identifier:   1E:89:CE:A1:CC:E2:68:EA:A8:80:90:35:91:24:62:F2:52:D2:27:BE
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       01A0DD60BD4ABBEE17B729E1520B4314365F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
Manifest number:          1633
Signing time:             Sat 26 Sep 2026 11:01:39 +0000
Manifest this update:     Sat 26 Sep 2026 11:01:39 +0000
Manifest next update:     Sun 27 Sep 2026 11:01:39 +0000
Files and hashes:         1: 5O4WJBayXN8-T5sAxCOVSxDJECk.roa (hash: 1xrSDNWEV4bb8nFWycmGbVzjtMS9SCVl02w2LA86yYc=)
                          2: G1Ty4WndBpOGD61GKAs-CwP5c2w.roa (hash: l0eAmw+GJHiz9ePv9I+0pPo3dWb64rnkIyzrqbPQk6o=)
                          3: KJ_UKUidS9-7KSDGLThVTELwDhI.roa (hash: dHBmhOaPvkrCjpSOzFqmoqtogZjlMERH8Hhj6/qx0yI=)
                          4: NuEtWDfqstg6Pj9E1KeSos8IDaw.roa (hash: wtuhCZ4o02QJy1QmedWkrl+M7I3hD/AeGG3bB2Srdj0=)
                          5: V3bZoLVb1JWhvjxcA_olHT3ouMU.crl (hash: MBaNIXp5rvJvbqY6xnr5ztwRJrLxRVnJDCyPCrht1Zs=)
                          6: kMsITRvtaXC741Y_7AjN_jGGmv4.roa (hash: gbq77+xKSdpHzBJMY7zv47/LbqIo3f6akkibyM35M7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:60:bd:4a:bb:ee:17:b7:29:e1:52:0b:43:14:36:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: Sep 26 11:01:39 2026 GMT
            Not After : Sep 27 11:01:39 2026 GMT
        Subject: CN=1e89cea1cce268eaa8809035912462f252d227be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:6d:44:8c:dd:78:59:9b:03:22:fb:22:d3:
                    0b:a4:94:16:c0:2c:fc:33:01:7d:4e:93:f1:b8:3c:
                    d3:c6:f2:c6:07:e8:e8:e5:f4:11:16:48:0f:8c:3e:
                    3c:c5:5d:b6:fe:38:40:36:ae:40:99:4a:e5:5a:30:
                    16:78:4c:01:69:02:7f:74:89:04:4e:59:f5:ff:e6:
                    7f:c5:ec:89:97:7e:92:df:53:03:3b:e8:f5:1f:a6:
                    fb:af:9f:71:b2:ee:38:a1:10:dc:c9:37:c2:66:f8:
                    85:ff:5c:cf:bb:6b:83:8c:84:ce:98:0e:0c:fb:ae:
                    de:ff:77:e1:a8:59:98:92:9e:e9:06:09:c1:29:3a:
                    f2:ff:36:86:b9:33:7d:b8:0e:eb:c1:1c:a5:51:72:
                    10:99:0d:da:52:8c:8b:dc:cf:74:0a:2d:2f:3f:e7:
                    8b:f6:a5:cd:69:57:b0:d2:2a:53:40:e0:7e:08:60:
                    62:d9:c9:13:37:9a:e2:17:48:40:dd:cd:69:1b:62:
                    f6:3d:15:bb:20:c5:12:fd:c3:fa:ff:70:a3:f0:0d:
                    2b:99:61:e6:30:15:6e:74:08:98:96:86:ac:3e:ca:
                    12:b6:52:56:10:96:4b:80:eb:86:59:b8:35:49:3a:
                    63:64:27:2b:71:8d:bd:2c:fd:3f:75:c3:53:97:c2:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:89:CE:A1:CC:E2:68:EA:A8:80:90:35:91:24:62:F2:52:D2:27:BE
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5c:cd:d4:4d:75:5e:81:7c:e6:bc:38:27:17:b9:01:a1:86:
         b8:03:aa:fa:f3:a3:27:ae:de:eb:5c:55:7c:62:f5:0f:8f:74:
         23:af:83:35:09:19:4d:ca:c6:ca:75:ef:58:bb:13:ea:bc:96:
         73:2d:83:98:e5:e4:13:f2:ea:f2:16:58:95:ac:bc:9d:49:cf:
         09:21:2b:77:16:de:18:02:78:34:f0:c2:d0:8e:66:49:d3:f2:
         e3:0b:72:22:5e:c3:ed:f4:f3:08:55:5a:1d:07:f3:a4:b6:1f:
         89:71:5d:84:fe:6a:96:27:c8:b7:2f:16:b9:d0:5f:51:2b:18:
         5c:d1:59:a0:7d:de:c0:de:a6:4a:c2:9e:f4:86:8d:8e:6d:51:
         59:7c:6b:ce:91:65:60:60:30:b7:fc:2d:ca:fe:61:8f:da:29:
         43:49:be:01:be:35:6d:53:0e:bd:d8:76:85:e9:98:97:fd:d7:
         e4:7c:c9:43:1f:72:75:f4:a7:6f:95:e7:df:ad:64:1d:ff:da:
         c2:f6:6a:1b:cf:86:ad:df:93:d9:9f:f5:60:0a:dc:1b:4a:63:
         13:a3:48:4c:ac:5c:49:17:30:b1:df:eb:51:72:c9:c1:67:ee:
         81:7c:38:e7:62:1b:e2:63:06:da:07:f8:d5:d7:c0:47:78:ea:
         de:83:71:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdYL1Ku+4XtynhUgtDFDZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzZkOWEwYjU1YmQ0OTVhMWJlM2M1YzAzZmEyNTFkM2Rl
OGI4YzUwHhcNMjYwOTI2MTEwMTM5WhcNMjYwOTI3MTEwMTM5WjAzMTEwLwYDVQQD
EygxZTg5Y2VhMWNjZTI2OGVhYTg4MDkwMzU5MTI0NjJmMjUyZDIyN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTxtRIzdeFmbAyL7ItMLpJQWwCz8
MwF9TpPxuDzTxvLGB+jo5fQRFkgPjD48xV22/jhANq5AmUrlWjAWeEwBaQJ/dIkE
Tln1/+Z/xeyJl36S31MDO+j1H6b7r59xsu44oRDcyTfCZviF/1zPu2uDjITOmA4M
+67e/3fhqFmYkp7pBgnBKTry/zaGuTN9uA7rwRylUXIQmQ3aUoyL3M90Ci0vP+eL
9qXNaVew0ipTQOB+CGBi2ckTN5riF0hA3c1pG2L2PRW7IMUS/cP6/3Cj8A0rmWHm
MBVudAiYloasPsoStlJWEJZLgOuGWbg1STpjZCcrcY29LP0/dcNTl8Kq+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6JzqHM4mjqqICQNZEkYvJS0ie+MB8GA1UdIwQY
MBaAFFd22aC1W9SVob48XAP6JR096LjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81YjIxZTMtMzk0NC00Y2U2LWFhZjUt
YzBiYTJmM2ZjNzJhLzEvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81YjIxZTMtMzk0NC00Y2U2LWFhZjUtYzBiYTJmM2ZjNzJh
LzEvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVzN1E11
XoF85rw4Jxe5AaGGuAOq+vOjJ67e61xVfGL1D490I6+DNQkZTcrGynXvWLsT6ryW
cy2DmOXkE/Lq8hZYlay8nUnPCSErdxbeGAJ4NPDC0I5mSdPy4wtyIl7D7fTzCFVa
HQfzpLYfiXFdhP5qlifIty8WudBfUSsYXNFZoH3ewN6mSsKe9IaNjm1RWXxrzpFl
YGAwt/wtyv5hj9opQ0m+Ab41bVMOvdh2hemYl/3X5HzJQx9ydfSnb5Xn361kHf/a
wvZqG8+Grd+T2Z/1YArcG0pjE6NITKxcSRcwsd/rUXLJwWfugXw452Ib4mMG2gf4
1dfAR3jq3oNxMg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:16:44 2026 by rpki-client