Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
File:                     31EgEGEfkbFilnKKlNGmZbSrdXA.mft (raw, json)
Hash identifier:          3oF/FN1yrYi8AWUyTvyWq2CWXiqi8IsnhJ+14AiIrWk=
Subject key identifier:   11:A7:67:B3:46:DF:3C:F0:48:8F:28:23:43:4D:18:84:DE:DC:EF:6D
Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
Certificate issuer:       /CN=df512010611f91b16296728a94d1a665b4ab7570
Certificate serial:       01A0D012D43F9A0F8D1E740BA3832E8CA0D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
Manifest number:          1A6C
Signing time:             Wed 23 Sep 2026 21:01:29 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:29 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:29 +0000
Files and hashes:         1: 31EgEGEfkbFilnKKlNGmZbSrdXA.crl (hash: lM9dko2OwMMXdIPPDmrdnYv4MN8BLNIMmm1W4021BBY=)
                          2: KwvgmxkuN2Vb_g5rfP-r60wn56s.roa (hash: pRgKb7xCV6ebEVi6C792sZZDSzLwlu0u5goqcmXhzF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:d4:3f:9a:0f:8d:1e:74:0b:a3:83:2e:8c:a0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570
        Validity
            Not Before: Sep 23 21:01:29 2026 GMT
            Not After : Sep 24 21:01:29 2026 GMT
        Subject: CN=11a767b346df3cf0488f2823434d1884dedcef6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:6c:1f:2b:bd:a0:07:c2:a8:1c:0f:f7:45:
                    b3:dd:e4:d9:d8:50:a2:23:ea:b5:d1:9f:53:db:ca:
                    d1:7f:5b:93:fe:27:69:3f:b7:02:8f:b0:f4:05:7e:
                    17:ec:67:91:d8:1b:66:33:16:81:87:a2:c7:9c:24:
                    19:b5:88:06:94:a6:68:9a:2b:05:24:dc:d6:de:e8:
                    8a:fb:b5:59:3f:0e:17:e7:32:d8:d8:b8:88:ff:ed:
                    15:2b:1f:75:e4:11:cb:ff:65:a0:74:1c:a9:f5:f4:
                    bc:66:20:f4:0d:54:33:5b:25:78:5d:64:17:9b:dd:
                    bd:53:ac:2a:1d:15:a9:85:e5:0f:55:81:73:52:11:
                    38:0c:d5:e0:61:35:f3:0e:f0:68:6c:da:77:99:34:
                    a7:b9:a4:ef:59:fd:43:1f:76:44:ef:0a:2f:9e:6f:
                    9e:97:d9:d1:98:35:6a:eb:aa:17:9f:fa:8f:90:fb:
                    1c:cd:db:f4:e5:4d:5e:4d:86:fe:f6:ac:af:a1:b3:
                    9e:02:70:94:db:b0:ae:0c:18:50:cb:52:e7:96:f0:
                    d2:f6:c0:40:ab:c0:bf:94:e6:e7:5e:e5:77:72:95:
                    bb:72:6d:15:fd:74:73:6e:3b:72:0c:f4:dc:3d:7c:
                    0a:f1:1d:75:44:f2:a3:45:c4:5d:d1:90:05:47:f2:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A7:67:B3:46:DF:3C:F0:48:8F:28:23:43:4D:18:84:DE:DC:EF:6D
            X509v3 Authority Key Identifier:
                keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7c:71:9c:76:a2:f9:95:34:b4:93:66:68:d0:c0:3d:2d:e3:
         52:53:1f:88:f7:06:ea:76:6f:01:c3:ef:1c:3b:8e:66:a9:9d:
         7d:cf:b5:0e:08:97:b6:9b:29:8c:0e:fa:29:fb:6f:46:46:bf:
         94:f5:56:1f:3b:43:55:88:93:d7:18:c4:bd:78:86:58:da:3a:
         2d:3b:f2:8c:0a:ea:5d:eb:90:94:84:5f:f1:f6:32:11:fb:6a:
         de:ba:ea:30:27:2d:cd:f1:ea:81:88:be:68:0b:6c:57:88:68:
         a4:3a:72:e1:59:69:66:a0:4c:ce:35:dc:2f:50:bd:91:81:cb:
         1c:f5:31:0d:af:b9:28:7f:cc:28:65:26:e7:e2:30:cf:45:6e:
         db:05:a5:a7:fc:e9:7f:fe:5a:73:cb:b5:ef:0e:80:23:1f:17:
         e3:28:c5:cd:05:65:6d:37:12:a1:dd:b3:fb:a1:2e:e3:d0:39:
         ea:36:38:9f:16:68:c3:9f:53:c0:25:08:09:91:f9:fb:1c:3d:
         a9:42:92:0d:f4:43:b6:30:db:d1:89:fa:8d:c9:56:75:fe:5b:
         17:8d:21:32:a3:cc:90:5d:41:44:99:0f:8a:c8:eb:ca:05:b9:
         b5:db:27:b6:c7:1c:10:e8:11:e2:4c:58:ab:cf:88:3a:26:61:
         45:e8:15:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEtQ/mg+NHnQLo4MujKDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTEyMDEwNjExZjkxYjE2Mjk2NzI4YTk0ZDFhNjY1YjRh
Yjc1NzAwHhcNMjYwOTIzMjEwMTI5WhcNMjYwOTI0MjEwMTI5WjAzMTEwLwYDVQQD
EygxMWE3NjdiMzQ2ZGYzY2YwNDg4ZjI4MjM0MzRkMTg4NGRlZGNlZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArENsHyu9oAfCqBwP90Wz3eTZ2FCi
I+q10Z9T28rRf1uT/idpP7cCj7D0BX4X7GeR2BtmMxaBh6LHnCQZtYgGlKZomisF
JNzW3uiK+7VZPw4X5zLY2LiI/+0VKx915BHL/2WgdByp9fS8ZiD0DVQzWyV4XWQX
m929U6wqHRWpheUPVYFzUhE4DNXgYTXzDvBobNp3mTSnuaTvWf1DH3ZE7wovnm+e
l9nRmDVq66oXn/qPkPsczdv05U1eTYb+9qyvobOeAnCU27CuDBhQy1LnlvDS9sBA
q8C/lObnXuV3cpW7cm0V/XRzbjtyDPTcPXwK8R11RPKjRcRd0ZAFR/IrtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGnZ7NG3zzwSI8oI0NNGITe3O9tMB8GA1UdIwQY
MBaAFN9RIBBhH5GxYpZyipTRpmW0q3VwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWIt
YjA2MmU5NzI1YjFkLzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWItYjA2MmU5NzI1YjFk
LzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXxxnHai
+ZU0tJNmaNDAPS3jUlMfiPcG6nZvAcPvHDuOZqmdfc+1DgiXtpspjA76KftvRka/
lPVWHztDVYiT1xjEvXiGWNo6LTvyjArqXeuQlIRf8fYyEftq3rrqMCctzfHqgYi+
aAtsV4hopDpy4VlpZqBMzjXcL1C9kYHLHPUxDa+5KH/MKGUm5+Iwz0Vu2wWlp/zp
f/5ac8u17w6AIx8X4yjFzQVlbTcSod2z+6Eu49A56jY4nxZow59TwCUICZH5+xw9
qUKSDfRDtjDb0Yn6jclWdf5bF40hMqPMkF1BRJkPisjrygW5tdsntsccEOgR4kxY
q8+IOiZhRegVrw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:04:21 2026 by rpki-client