Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
File:                     _DWHfMA4v_25e7PW6iFqtSs6BYI.mft (raw, json)
Hash identifier:          RDhyceja3sbZwYDvHJzyh+QcY8qoWRsGl909op1h2oc=
Subject key identifier:   4E:61:E5:9D:76:9C:D3:7A:53:33:A0:FF:59:FF:B8:C1:7F:8D:65:54
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Certificate issuer:       /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial:       01A0D570A5B9C0B2F5C16D834CF4F4637BB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
Manifest number:          18B5
Signing time:             Thu 24 Sep 2026 22:02:04 +0000
Manifest this update:     Thu 24 Sep 2026 22:02:04 +0000
Manifest next update:     Fri 25 Sep 2026 22:02:04 +0000
Files and hashes:         1: 8huTzHW57A5cCLn4DJengqWUHbU.roa (hash: QbaePOyAbanHl8XCDKIaOAWESWKmtviz49Mi0ZJ8gU8=)
                          2: _6DXV1WE0v-oybUplKLLF-qO42Q.roa (hash: Iu/YSu6oOqTfa7ZyhKaNhQqb474GLyUXE1gWIy1f6g4=)
                          3: _DWHfMA4v_25e7PW6iFqtSs6BYI.crl (hash: nTjofqCCTcEJxwe0B6WkBn20rJdn9XexKNhOpcJXEJ0=)
                          4: cnRs0nFBKnPSwQ1F-1xOIce5la0.roa (hash: OKJospeoF5ncHQtQYt7c9nFDBBSFOmh/9wk/WbCnrEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:a5:b9:c0:b2:f5:c1:6d:83:4c:f4:f4:63:7b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
        Validity
            Not Before: Sep 24 22:02:04 2026 GMT
            Not After : Sep 25 22:02:04 2026 GMT
        Subject: CN=4e61e59d769cd37a5333a0ff59ffb8c17f8d6554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2f:54:94:08:e1:cb:eb:8d:e4:2c:44:f2:e3:
                    ed:50:fe:51:ba:cd:41:cc:a7:73:40:49:95:63:90:
                    a0:73:10:2e:70:ef:ca:bd:c4:4b:59:74:e0:44:8b:
                    89:87:00:26:d4:10:c6:2c:b4:0c:84:2f:75:c0:87:
                    6e:6a:4e:41:a8:f2:08:ad:ba:9c:80:a6:d9:22:b0:
                    f5:5b:03:a4:8a:b2:50:40:7a:2d:78:f6:90:2d:34:
                    dd:f3:a0:fc:cf:8b:89:36:ea:38:db:8b:ce:d4:81:
                    e9:54:5b:58:d3:c7:a3:05:39:6b:2b:c3:4e:c8:6b:
                    d1:00:92:40:0a:9f:58:9a:19:d9:6b:26:de:26:d1:
                    cf:ee:8d:98:4f:1d:19:e3:d7:e4:2f:85:d7:37:9e:
                    98:60:97:40:55:ab:09:90:f4:37:d1:76:a7:fe:ac:
                    00:a8:17:bf:d9:15:cd:82:f0:bc:0e:5a:cc:56:d6:
                    b6:d2:69:c1:84:e3:52:ee:0d:bd:93:d8:a5:a1:90:
                    2d:74:22:61:fe:60:05:1d:b9:73:c8:41:4c:c2:97:
                    d7:d9:43:dc:ec:c7:fd:ca:57:f9:db:27:be:0b:ca:
                    8d:fe:d0:df:a2:05:fa:18:29:a7:f2:73:e3:88:ea:
                    b4:c2:46:31:da:65:6e:10:5c:b8:d2:92:df:05:80:
                    9c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:61:E5:9D:76:9C:D3:7A:53:33:A0:FF:59:FF:B8:C1:7F:8D:65:54
            X509v3 Authority Key Identifier:
                keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:02:83:ba:93:09:84:c2:ed:ca:48:a8:fc:f0:e4:85:2a:c0:
         6e:78:3d:a6:b1:be:bd:3a:76:05:45:40:a7:ce:d2:47:32:0e:
         ed:a6:cf:ad:60:65:9a:41:36:77:8d:5e:ab:4c:fa:82:92:f9:
         b7:a3:b8:b5:33:00:50:68:15:51:82:a1:92:93:c1:fe:f0:00:
         8c:fc:a9:09:f8:68:47:2b:16:ee:56:1d:eb:2d:11:10:93:0c:
         e6:a9:0d:b5:6c:da:f3:64:0f:5e:12:c3:7f:7e:59:32:de:2c:
         fc:f0:51:7f:6c:91:59:f3:56:af:28:2d:34:3b:17:b7:99:77:
         20:1f:49:71:d3:3d:09:c9:71:f9:51:1b:c3:b9:49:27:43:a3:
         f2:dc:71:14:5d:22:f5:f1:93:a2:3f:26:8d:e1:ac:2a:c3:55:
         2c:4b:3a:7c:ff:31:e6:2b:d9:0e:6d:7c:3d:b2:03:ff:00:39:
         d0:66:c2:25:00:59:27:74:de:02:72:b6:13:0e:98:96:66:a2:
         e0:3a:21:b4:f4:2a:ad:e4:f8:37:c1:5f:f5:f5:67:60:2e:0e:
         58:71:b9:38:a1:b6:bd:03:16:40:cf:ea:1a:4b:c3:c6:73:09:
         c5:bd:02:df:21:52:04:ff:7a:44:4d:cb:df:23:78:32:30:51:
         95:ec:eb:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVcKW5wLL1wW2DTPT0Y3u0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMzU4NzdjYzAzOGJmZmRiOTdiYjNkNmVhMjE2YWI1MmIz
YTA1ODIwHhcNMjYwOTI0MjIwMjA0WhcNMjYwOTI1MjIwMjA0WjAzMTEwLwYDVQQD
Eyg0ZTYxZTU5ZDc2OWNkMzdhNTMzM2EwZmY1OWZmYjhjMTdmOGQ2NTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC9UlAjhy+uN5CxE8uPtUP5Rus1B
zKdzQEmVY5CgcxAucO/KvcRLWXTgRIuJhwAm1BDGLLQMhC91wIduak5BqPIIrbqc
gKbZIrD1WwOkirJQQHotePaQLTTd86D8z4uJNuo424vO1IHpVFtY08ejBTlrK8NO
yGvRAJJACp9YmhnZaybeJtHP7o2YTx0Z49fkL4XXN56YYJdAVasJkPQ30Xan/qwA
qBe/2RXNgvC8DlrMVta20mnBhONS7g29k9iloZAtdCJh/mAFHblzyEFMwpfX2UPc
7Mf9ylf52ye+C8qN/tDfogX6GCmn8nPjiOq0wkYx2mVuEFy40pLfBYCcyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5h5Z12nNN6UzOg/1n/uMF/jWVUMB8GA1UdIwQY
MBaAFPw1h3zAOL/9uXuz1uoharUrOgWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMt
OGU2NWIzNDdmMjE4LzEvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMtOGU2NWIzNDdmMjE4
LzEvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAKDupMJ
hMLtykio/PDkhSrAbng9prG+vTp2BUVAp87SRzIO7abPrWBlmkE2d41eq0z6gpL5
t6O4tTMAUGgVUYKhkpPB/vAAjPypCfhoRysW7lYd6y0REJMM5qkNtWza82QPXhLD
f35ZMt4s/PBRf2yRWfNWrygtNDsXt5l3IB9JcdM9Cclx+VEbw7lJJ0Oj8txxFF0i
9fGToj8mjeGsKsNVLEs6fP8x5ivZDm18PbID/wA50GbCJQBZJ3TeAnK2Ew6Ylmai
4DohtPQqreT4N8Ff9fVnYC4OWHG5OKG2vQMWQM/qGkvDxnMJxb0C3yFSBP96RE3L
3yN4MjBRlezrHw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:35:21 2026 by rpki-client