Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
File:                     m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft (raw, json)
Hash identifier:          g3+PHDLAfTYfwjSOzzoOtkQBgGMeR9WF+OOIJbJcxsA=
Subject key identifier:   31:30:E3:1F:71:F7:89:AE:86:1B:10:DB:F8:0E:B3:16:71:F4:12:DA
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Certificate issuer:       /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial:       01A0DBA91E7DA62CB26FE49F041D8ABA0E5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
Manifest number:          19A7
Signing time:             Sat 26 Sep 2026 03:01:28 +0000
Manifest this update:     Sat 26 Sep 2026 03:01:28 +0000
Manifest next update:     Sun 27 Sep 2026 03:01:28 +0000
Files and hashes:         1: NGSRZ0UFf37oBgMflKRqMJVzu1A.roa (hash: QQl6ufsi4HXmy3ASinxAh+zaiJ4iVflIUzf0L3Srl8Q=)
                          2: cnqrVuurtzefRH7SXfJZEmIqN0c.roa (hash: Vh3D8b6qjUnsJyNx9UNrDRqqXIGsiNFhU3lLE/75w7s=)
                          3: m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl (hash: z69t1mCMqsQ43/4WKuQe59gRCcWOHRA61u/WzIyN5yw=)
                          4: sPNW9L7nvdJWjHEG7P1B2mLSY6I.roa (hash: GJ8bFB5CbpvRHqB9ftaag6jbvrupCXTR5QaGBQCK/Ms=)
                          5: uLKZdDovNYh-DpBqqKP-yEKFq6g.roa (hash: VXKMVBqqwBpyEzSrFgtoLzoyOdF5dlP0dTicEmqV8zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:1e:7d:a6:2c:b2:6f:e4:9f:04:1d:8a:ba:0e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
        Validity
            Not Before: Sep 26 03:01:28 2026 GMT
            Not After : Sep 27 03:01:28 2026 GMT
        Subject: CN=3130e31f71f789ae861b10dbf80eb31671f412da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:a9:f5:9d:d8:8e:cb:11:7f:2f:38:61:84:
                    ac:67:bb:59:33:0c:c2:f6:b7:65:f9:95:bc:50:01:
                    a8:ab:ac:9e:53:f5:ec:be:74:2c:da:f8:3e:ac:4f:
                    97:8c:4d:f9:12:eb:5c:7f:c8:84:6f:50:7b:89:0c:
                    7b:da:0a:59:a1:14:e5:4f:45:2c:e8:ed:8a:3c:25:
                    2f:b9:07:d5:9c:56:a0:20:e8:46:e7:fb:9f:75:d2:
                    84:38:0e:97:97:e4:3b:c5:ef:6c:d8:91:3c:51:ac:
                    b4:3d:88:71:ef:aa:30:2a:29:71:8e:e6:4d:53:95:
                    63:d3:ef:9e:aa:2a:d7:c5:ce:7b:17:2e:2d:5a:df:
                    20:2f:80:67:31:20:f7:5b:f2:97:a6:6e:51:bb:34:
                    e1:20:43:3b:c4:51:aa:86:b0:ae:af:a8:9b:a5:87:
                    cf:18:1a:f1:2e:57:0f:c8:33:7e:68:91:2c:b9:2b:
                    2a:a8:24:18:d6:ef:ca:5c:d0:c3:a1:8c:14:4d:09:
                    42:8e:85:7a:1f:f5:a7:7d:22:02:d8:b7:a8:02:0a:
                    3b:57:c4:64:8c:28:30:e7:ef:7d:1d:05:88:df:4b:
                    62:6f:dd:d1:ac:b6:eb:bc:ad:8d:f2:02:2c:16:ea:
                    db:8a:f7:6c:28:42:5a:f7:4a:3d:99:c8:3f:b0:1c:
                    76:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:30:E3:1F:71:F7:89:AE:86:1B:10:DB:F8:0E:B3:16:71:F4:12:DA
            X509v3 Authority Key Identifier:
                keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b8:e2:b4:f6:af:83:1c:19:5f:18:5c:a1:50:68:84:60:a2:
         ad:3f:21:81:f8:ab:a9:ff:e6:9b:01:d5:67:4a:d2:06:40:99:
         dc:d8:d7:59:dc:bd:13:09:f8:88:b3:d0:19:50:12:be:11:24:
         30:8e:fb:0e:13:d0:26:17:98:1a:87:ab:ee:c4:34:45:5a:aa:
         1c:49:38:1f:1a:bc:4d:b0:2e:0d:dc:5a:a4:8d:f4:37:02:0b:
         93:82:eb:3c:cc:c1:88:db:2d:c2:99:84:31:00:97:21:a4:6c:
         24:28:b6:5d:9f:b7:47:be:77:53:60:9b:9b:1d:3f:ec:58:a1:
         ce:24:16:a1:e4:f6:b3:78:d6:bc:e7:91:07:a9:d5:d9:02:ec:
         1f:04:e7:64:83:7a:03:42:1a:27:a2:4a:e4:79:77:5a:87:a0:
         69:62:0e:f5:ed:a1:6c:17:7b:2c:ff:df:ae:f9:fe:08:08:5b:
         13:e4:19:b9:b4:a4:d0:01:57:b1:d1:34:56:a1:f3:2e:46:5e:
         79:b3:43:ca:a9:37:ad:ad:06:b3:79:5a:cb:41:e7:d3:8c:2c:
         7b:e3:17:96:3f:92:b2:6f:5b:09:9e:3c:ee:f2:87:ac:ae:c7:
         02:48:33:e6:81:ab:9a:23:82:6a:66:30:98:d7:4f:e3:af:c4:
         e1:53:51:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqR59piyyb+SfBB2Kug5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNjMyZWRiNjM1YWE4ZjljNDBhMDQ5NWE3YTYzYmI2NTM5
NTgwYmIwHhcNMjYwOTI2MDMwMTI4WhcNMjYwOTI3MDMwMTI4WjAzMTEwLwYDVQQD
EygzMTMwZTMxZjcxZjc4OWFlODYxYjEwZGJmODBlYjMxNjcxZjQxMmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSKp9Z3YjssRfy84YYSsZ7tZMwzC
9rdl+ZW8UAGoq6yeU/XsvnQs2vg+rE+XjE35Eutcf8iEb1B7iQx72gpZoRTlT0Us
6O2KPCUvuQfVnFagIOhG5/ufddKEOA6Xl+Q7xe9s2JE8Uay0PYhx76owKilxjuZN
U5Vj0++eqirXxc57Fy4tWt8gL4BnMSD3W/KXpm5RuzThIEM7xFGqhrCur6ibpYfP
GBrxLlcPyDN+aJEsuSsqqCQY1u/KXNDDoYwUTQlCjoV6H/WnfSIC2LeoAgo7V8Rk
jCgw5+99HQWI30tib93RrLbrvK2N8gIsFurbivdsKEJa90o9mcg/sBx2FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEw4x9x94muhhsQ2/gOsxZx9BLaMB8GA1UdIwQY
MBaAFJtjLttjWqj5xAoElaemO7ZTlYC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUt
ZThjOWFkNWYwNTFhLzEvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUtZThjOWFkNWYwNTFh
LzEvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7jitPav
gxwZXxhcoVBohGCirT8hgfirqf/mmwHVZ0rSBkCZ3NjXWdy9Ewn4iLPQGVASvhEk
MI77DhPQJheYGoer7sQ0RVqqHEk4Hxq8TbAuDdxapI30NwILk4LrPMzBiNstwpmE
MQCXIaRsJCi2XZ+3R753U2Cbmx0/7FihziQWoeT2s3jWvOeRB6nV2QLsHwTnZIN6
A0IaJ6JK5Hl3WoegaWIO9e2hbBd7LP/frvn+CAhbE+QZubSk0AFXsdE0VqHzLkZe
ebNDyqk3ra0Gs3lay0Hn04wse+MXlj+Ssm9bCZ487vKHrK7HAkgz5oGrmiOCamYw
mNdP46/E4VNRdg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:20:26 2026 by rpki-client