Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File:                     C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier:          GmbUXypcDKXLAIUsmvFWDehb/B7hvfAPbrC7l/UDphE=
Subject key identifier:   29:04:D5:EF:F8:0D:54:9B:06:4C:E1:8C:46:04:4A:82:7F:82:AD:C9
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer:       /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial:       01A0CDECFD9C0F00991C2C94112C13DCA0A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number:          1A6B
Signing time:             Wed 23 Sep 2026 11:00:55 +0000
Manifest this update:     Wed 23 Sep 2026 11:00:55 +0000
Manifest next update:     Thu 24 Sep 2026 11:00:55 +0000
Files and hashes:         1: BwduuVx9l2nXmwgZ7Z0rdGaB0vk.roa (hash: tKwGTm1sUwUZQb6LPE6PThWaMP+7FrY2iOoxRlqeasA=)
                          2: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: DLiovfvxVNX9zmy9XbQD6tYrGNhjahrmaNLVJ2VP4y4=)
                          3: JcIgVRfB8cbXUGJV5jVgHdlKA-I.roa (hash: H3hUh7Lj3XT5Z/feO9iXQdqL5i8JEzQ7efNMXFvag+M=)
                          4: QBFOO2tn9pUMXEP3B8Y6yrN0cbs.roa (hash: iD5VMKrDQqntsgGwuHDr3ykwaCt5FhHGjmfd2aJeHi0=)
                          5: kOPeECJgf7afkCCLiHssxt-4orA.roa (hash: GjGFT1vjy/jU6Jp6/gNpJX6Uz0711cTvYrio7hse2nU=)
                          6: vFfz2KCVr-YjTvbVa1ppOhfGS1Y.roa (hash: GUNtVZiBD0D0GGK+nxbvhCVN7x2+7uSWqZZH/LfJL4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:ec:fd:9c:0f:00:99:1c:2c:94:11:2c:13:dc:a0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
        Validity
            Not Before: Sep 23 11:00:55 2026 GMT
            Not After : Sep 24 11:00:55 2026 GMT
        Subject: CN=2904d5eff80d549b064ce18c46044a827f82adc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:62:b8:87:b6:87:7b:bb:a2:fc:37:98:db:
                    b5:15:37:59:a7:aa:0f:b3:b4:fb:d4:09:50:bb:85:
                    28:ec:44:95:d2:28:cf:00:c5:b2:5b:1a:9c:da:27:
                    7e:d9:8a:c0:7a:50:6c:dc:d9:a1:1a:d1:ea:dd:fc:
                    4b:85:ad:c0:c8:67:6d:2f:97:0c:0a:66:66:cd:03:
                    14:33:3e:96:d5:83:49:98:b4:18:5f:55:bf:bf:d3:
                    01:3e:aa:75:44:23:67:90:80:f0:08:6a:fb:9f:6b:
                    40:f6:f9:d8:37:a8:fb:b6:3e:ca:cf:87:e4:31:3e:
                    51:c9:69:3f:ea:ac:12:d0:9e:dc:53:09:0e:64:a0:
                    62:a0:3e:a0:f7:6f:24:00:3f:72:36:89:7a:6a:14:
                    49:bc:b4:bd:b4:03:31:bb:c2:ee:32:25:40:f0:f8:
                    88:6d:5c:16:81:5d:40:c0:6a:41:ae:89:61:e3:cc:
                    74:11:8c:36:e2:d5:48:a0:c0:99:5f:65:20:74:a5:
                    a3:7b:80:96:cb:08:81:c5:f5:5c:4f:cd:fc:20:9b:
                    6c:11:75:0d:6d:f8:41:61:55:16:c1:82:0d:ce:b5:
                    e3:b7:61:3e:a2:f1:cf:1e:28:3b:a9:f0:b4:7c:4b:
                    16:3c:14:0a:9f:4c:55:bc:43:f1:a1:5d:01:0e:80:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:04:D5:EF:F8:0D:54:9B:06:4C:E1:8C:46:04:4A:82:7F:82:AD:C9
            X509v3 Authority Key Identifier:
                keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:61:0b:df:6f:72:5f:aa:4d:1f:fb:49:fb:65:6e:0f:84:17:
         2b:fd:75:e1:ac:09:c3:1d:fd:6e:7e:b9:2a:00:c7:74:b5:20:
         b9:2e:53:17:cd:66:f6:df:ed:f8:76:1c:40:4a:ca:73:8f:e0:
         6a:ef:ad:b1:13:34:7a:ed:90:8b:bf:97:b5:9e:74:d9:a3:d6:
         f4:4c:e4:bd:91:5f:db:e7:22:6e:9f:97:20:07:f7:e5:3a:ef:
         9b:af:da:87:f6:72:eb:15:f7:a1:c2:a4:59:e9:06:8e:87:18:
         f2:11:ff:8a:e6:a0:eb:2e:5e:af:af:0e:97:4f:bc:2b:6c:bb:
         c9:f8:23:eb:21:8c:db:fc:de:10:d7:93:b7:09:b2:f6:4d:5c:
         f4:c6:fa:fc:f9:f6:0a:0e:c7:e4:33:72:d3:cf:f4:00:5a:68:
         92:5b:3f:b7:13:e1:f1:e9:ae:19:2f:9d:1e:a6:ec:97:65:2d:
         f8:db:e0:68:d1:42:67:16:d6:d5:db:fe:23:ce:05:b8:5f:8e:
         c4:9e:bd:c6:fb:0b:a5:85:c1:eb:0f:36:d2:d9:73:e8:02:0f:
         f2:b2:e7:e1:78:e9:99:08:a1:d4:53:98:b9:6b:3d:36:de:27:
         0d:ba:0e:f8:bb:29:a4:75:f1:17:5d:e3:1f:77:af:53:eb:bd:
         b2:e4:93:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDN7P2cDwCZHCyUESwT3KCjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOTM0YzM2Yjc3MzAwODg2NWI5YzlmYjBmZDQ4NjY5Mzk1
YWM3MzAwHhcNMjYwOTIzMTEwMDU1WhcNMjYwOTI0MTEwMDU1WjAzMTEwLwYDVQQD
EygyOTA0ZDVlZmY4MGQ1NDliMDY0Y2UxOGM0NjA0NGE4MjdmODJhZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6piuIe2h3u7ovw3mNu1FTdZp6oP
s7T71AlQu4Uo7ESV0ijPAMWyWxqc2id+2YrAelBs3NmhGtHq3fxLha3AyGdtL5cM
CmZmzQMUMz6W1YNJmLQYX1W/v9MBPqp1RCNnkIDwCGr7n2tA9vnYN6j7tj7Kz4fk
MT5RyWk/6qwS0J7cUwkOZKBioD6g928kAD9yNol6ahRJvLS9tAMxu8LuMiVA8PiI
bVwWgV1AwGpBrolh48x0EYw24tVIoMCZX2UgdKWje4CWywiBxfVcT838IJtsEXUN
bfhBYVUWwYINzrXjt2E+ovHPHig7qfC0fEsWPBQKn0xVvEPxoV0BDoAmSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkE1e/4DVSbBkzhjEYESoJ/gq3JMB8GA1UdIwQY
MBaAFAuTTDa3cwCIZbnJ+w/Uhmk5WscwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQt
YTMwMmY1MWQzODJjLzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQtYTMwMmY1MWQzODJj
LzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamEL329y
X6pNH/tJ+2VuD4QXK/114awJwx39bn65KgDHdLUguS5TF81m9t/t+HYcQErKc4/g
au+tsRM0eu2Qi7+XtZ502aPW9EzkvZFf2+cibp+XIAf35Trvm6/ah/Zy6xX3ocKk
WekGjocY8hH/iuag6y5er68Ol0+8K2y7yfgj6yGM2/zeENeTtwmy9k1c9Mb6/Pn2
Cg7H5DNy08/0AFpokls/txPh8emuGS+dHqbsl2Ut+NvgaNFCZxbW1dv+I84FuF+O
xJ69xvsLpYXB6w820tlz6AIP8rLn4XjpmQih1FOYuWs9Nt4nDboO+LsppHXxF13j
H3evU+u9suSTQw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:41:09 2026 by rpki-client