Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
File:                     E266c8PZX-9psaYwJBeji5vyJ20.mft (raw, json)
Hash identifier:          UvDHOa3RN7vkn6smbaE0U3MFJ42eT0aPwULcrxBFWc0=
Subject key identifier:   AB:FC:BB:63:92:B7:A8:CD:85:66:A7:84:A1:26:0F:7C:0B:C2:C9:3E
Authority key identifier: 13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D
Certificate issuer:       /CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
Certificate serial:       01A0DA5F9D0ED0BFCEA6681D284C27B8F1AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
Manifest number:          1A6F
Signing time:             Fri 25 Sep 2026 21:01:34 +0000
Manifest this update:     Fri 25 Sep 2026 21:01:34 +0000
Manifest next update:     Sat 26 Sep 2026 21:01:34 +0000
Files and hashes:         1: 8CplLFWUvz6m9qItnwKIEf1AFuY.roa (hash: +6+r1k0vn4RC5WvNIEMfcVoLtHbswjoBxdnPLuAEN74=)
                          2: E266c8PZX-9psaYwJBeji5vyJ20.crl (hash: RzPtStzIhov2bIXDx/BG3bVbcvdt5+pPeeeaqPNmuIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:5f:9d:0e:d0:bf:ce:a6:68:1d:28:4c:27:b8:f1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136eba73c3d95fef69b1a6302417a38b9bf2276d
        Validity
            Not Before: Sep 25 21:01:34 2026 GMT
            Not After : Sep 26 21:01:34 2026 GMT
        Subject: CN=abfcbb6392b7a8cd8566a784a1260f7c0bc2c93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:a8:da:ad:cd:c2:f9:c8:08:3e:35:62:68:
                    ea:00:69:33:46:fc:5c:ed:1b:6c:1d:2e:f9:4d:6d:
                    3f:52:8e:4b:a5:e8:53:5f:2e:b8:4f:8e:9a:d1:9a:
                    ed:11:c1:ed:fc:86:d3:31:c8:a5:35:75:9c:3a:2f:
                    2a:b3:bb:92:75:0b:83:65:b9:43:03:68:c1:ac:2e:
                    43:c2:ab:e7:a8:a4:a2:3b:d6:37:cb:bf:6a:13:7f:
                    73:c7:e8:24:27:53:07:e6:c9:10:b1:76:fb:3a:29:
                    35:3e:cd:99:12:dd:fb:80:c1:37:57:40:7a:39:6a:
                    c0:30:12:df:ae:e2:9c:3f:69:f9:1f:cd:5c:d1:c9:
                    a6:3f:77:bb:61:6a:8b:bb:f3:2e:bb:22:96:21:c8:
                    da:67:4f:1b:ac:60:97:1f:16:bd:78:19:2d:c8:1e:
                    46:0c:f9:d7:2c:e2:9c:0a:4e:70:41:fe:01:ee:a8:
                    f6:c1:e5:89:fc:72:9e:3a:55:95:53:5f:67:af:10:
                    e3:c6:52:e6:b5:71:e6:ef:1f:c9:66:13:ad:ef:7a:
                    b8:1e:5d:50:22:00:10:1f:a3:f9:6a:86:02:ac:80:
                    06:8b:cb:e5:47:3a:bc:7e:42:5d:e0:87:9a:b5:4e:
                    64:21:92:4d:9e:0b:52:0e:0d:58:c1:6f:7a:f3:6f:
                    4f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FC:BB:63:92:B7:A8:CD:85:66:A7:84:A1:26:0F:7C:0B:C2:C9:3E
            X509v3 Authority Key Identifier:
                keyid:13:6E:BA:73:C3:D9:5F:EF:69:B1:A6:30:24:17:A3:8B:9B:F2:27:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E266c8PZX-9psaYwJBeji5vyJ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0fe327-96e5-42fc-aab1-625028330ec6/1/E266c8PZX-9psaYwJBeji5vyJ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:22:ef:ac:6d:40:7f:f2:57:8f:e5:5c:5b:7a:66:f2:38:7a:
         e5:40:26:cd:82:fb:fd:87:f5:8a:c1:24:49:bc:44:86:e7:5a:
         9b:95:2c:b2:6a:44:61:7c:e6:9a:81:85:a7:e7:7f:59:58:0a:
         6d:9a:97:47:0a:a2:90:16:98:da:ac:2f:8b:aa:0c:76:90:6b:
         87:db:c8:e7:2d:a6:05:6b:12:2d:b8:10:89:46:64:28:a9:dc:
         d1:a7:d7:12:50:80:40:da:ec:ba:81:cf:bd:bd:c9:66:bd:c6:
         ce:dd:f4:48:19:81:e3:5f:b4:24:b0:92:cb:98:9e:50:4c:1b:
         06:6b:89:5f:06:ea:2a:23:cf:f6:4a:f6:8f:cd:c2:58:9e:bb:
         51:97:05:1a:66:74:f5:0f:53:1b:3a:07:71:e4:cb:62:7a:94:
         f4:29:c7:b9:3c:07:11:c1:0d:20:bb:e2:db:09:32:72:ea:33:
         1d:f5:6b:bc:9a:e8:81:62:ef:92:8b:e2:32:12:ab:59:03:43:
         ff:a3:33:5e:cb:b7:80:3a:3f:f6:59:ce:74:19:58:2d:3c:f4:
         8b:f9:0b:a4:24:83:2d:85:19:4f:7e:f4:26:64:66:aa:6a:cd:
         52:a9:19:42:2c:8c:30:75:15:de:dd:6a:63:e2:60:02:74:e9:
         4d:3b:bd:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaX50O0L/OpmgdKEwnuPGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNmViYTczYzNkOTVmZWY2OWIxYTYzMDI0MTdhMzhiOWJm
MjI3NmQwHhcNMjYwOTI1MjEwMTM0WhcNMjYwOTI2MjEwMTM0WjAzMTEwLwYDVQQD
EyhhYmZjYmI2MzkyYjdhOGNkODU2NmE3ODRhMTI2MGY3YzBiYzJjOTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP2o2q3NwvnICD41YmjqAGkzRvxc
7RtsHS75TW0/Uo5LpehTXy64T46a0ZrtEcHt/IbTMcilNXWcOi8qs7uSdQuDZblD
A2jBrC5DwqvnqKSiO9Y3y79qE39zx+gkJ1MH5skQsXb7Oik1Ps2ZEt37gME3V0B6
OWrAMBLfruKcP2n5H81c0cmmP3e7YWqLu/MuuyKWIcjaZ08brGCXHxa9eBktyB5G
DPnXLOKcCk5wQf4B7qj2weWJ/HKeOlWVU19nrxDjxlLmtXHm7x/JZhOt73q4Hl1Q
IgAQH6P5aoYCrIAGi8vlRzq8fkJd4IeatU5kIZJNngtSDg1YwW96829PDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKv8u2OSt6jNhWanhKEmD3wLwsk+MB8GA1UdIwQY
MBaAFBNuunPD2V/vabGmMCQXo4ub8idtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wZmUzMjctOTZlNS00MmZjLWFhYjEt
NjI1MDI4MzMwZWM2LzEvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wZmUzMjctOTZlNS00MmZjLWFhYjEtNjI1MDI4MzMwZWM2
LzEvRTI2NmM4UFpYLTlwc2FZd0pCZWppNXZ5SjIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXiLvrG1A
f/JXj+VcW3pm8jh65UAmzYL7/Yf1isEkSbxEhudam5UssmpEYXzmmoGFp+d/WVgK
bZqXRwqikBaY2qwvi6oMdpBrh9vI5y2mBWsSLbgQiUZkKKnc0afXElCAQNrsuoHP
vb3JZr3Gzt30SBmB41+0JLCSy5ieUEwbBmuJXwbqKiPP9kr2j83CWJ67UZcFGmZ0
9Q9TGzoHceTLYnqU9CnHuTwHEcENILvi2wkycuozHfVrvJrogWLvkoviMhKrWQND
/6MzXsu3gDo/9lnOdBlYLTz0i/kLpCSDLYUZT370JmRmqmrNUqkZQiyMMHUV3t1q
Y+JgAnTpTTu94Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:47:08 2026 by rpki-client