Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
File:                     atCw5EzIalF2lUfCKteWGEtUsJI.mft (raw, json)
Hash identifier:          mZADhADsFFuP5VHsgdw3zsxJm1JiCa++LaUJvCP0zmk=
Subject key identifier:   34:20:CA:94:CA:CF:56:E8:02:45:59:01:1B:F1:5A:5C:BF:ED:3D:5E
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Certificate issuer:       /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial:       01A0E43E541BB2DBE29F00CFBB0EEB5A8A14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
Manifest number:          0A78
Signing time:             Sun 27 Sep 2026 19:01:25 +0000
Manifest this update:     Sun 27 Sep 2026 19:01:25 +0000
Manifest next update:     Mon 28 Sep 2026 19:01:25 +0000
Files and hashes:         1: 0ul1kQaY9ZsjZ6D1G5IS3q4-jrU.roa (hash: n3ClLicPf2BqzLQfRNhlEpFjAzJga1SwOaEo1F4CIE0=)
                          2: 4n6h4ugITdeJkQY9OiYg-tZuWt8.roa (hash: +8PusmRVb3Mk5VwiwmniXkFGCgDpm5CG0k+BeQCfnz0=)
                          3: 62bq7WlY7p_MSSVatF-OsDnmpsM.roa (hash: D0qw8khW1eVP1JVVmkx/hy6DkGmowDIVmiRdByPRyk4=)
                          4: atCw5EzIalF2lUfCKteWGEtUsJI.crl (hash: FrP24MN+AvrY2VWLsWp3iD73WFmUJ3+OIqRu1oPsnfs=)
                          5: oq-FxRXyTIXzyweRp0nnP66ynGg.roa (hash: S4stpy1EZFYMG0faQESyF4V9AjjskCgMI7Ts69RF38Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:3e:54:1b:b2:db:e2:9f:00:cf:bb:0e:eb:5a:8a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
        Validity
            Not Before: Sep 27 19:01:25 2026 GMT
            Not After : Sep 28 19:01:25 2026 GMT
        Subject: CN=3420ca94cacf56e8024559011bf15a5cbfed3d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:ba:c7:9e:0d:ae:7d:cc:50:7f:8e:1b:29:
                    ce:de:25:30:36:44:26:38:e8:fe:4f:b3:e9:df:d1:
                    52:10:fb:bf:63:90:38:cf:75:0d:e5:25:a8:b9:7f:
                    07:0d:3b:45:cf:2b:53:f8:ed:60:7b:04:09:e9:d5:
                    fa:bf:e4:6a:8e:21:2b:0b:e7:fd:06:27:30:8e:04:
                    c3:7a:6a:60:bc:53:a3:3c:fe:2a:96:a5:d0:84:8b:
                    29:d7:4e:ef:4b:4d:03:c3:6c:28:0d:ac:9a:06:ad:
                    65:69:d9:2d:54:68:31:51:71:24:45:f2:c1:36:9d:
                    78:1f:01:84:79:97:c9:cc:e2:3b:aa:f0:48:b4:91:
                    b3:d9:10:e2:f1:21:88:af:8c:3f:03:ae:a5:f7:88:
                    31:32:86:cb:1f:45:af:4d:ee:8f:e6:26:91:23:a2:
                    22:ca:46:c0:9c:35:7a:03:aa:c3:eb:23:73:77:1b:
                    62:ff:3b:0b:e4:b7:95:16:ae:e5:17:5f:aa:62:79:
                    ad:6b:cd:be:25:29:c8:7f:8f:f4:bd:27:5c:06:fd:
                    e3:40:fd:28:0d:5d:ac:1f:61:1f:34:e7:4d:e1:84:
                    30:27:2b:5b:68:07:55:76:af:bf:d6:d1:31:a9:ca:
                    1b:58:ea:b9:9d:67:cf:36:e9:a4:88:0a:62:ad:a9:
                    29:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:20:CA:94:CA:CF:56:E8:02:45:59:01:1B:F1:5A:5C:BF:ED:3D:5E
            X509v3 Authority Key Identifier:
                keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f2:b0:88:80:60:b8:9b:b4:07:2c:cf:cf:a3:9b:98:21:4f:
         cd:13:48:af:fe:e2:86:9b:ba:b2:70:98:21:16:72:9b:91:14:
         4d:cd:0f:61:26:e9:2f:0c:94:69:ee:27:97:f4:bf:b1:93:e7:
         7f:65:ad:78:3d:6b:34:23:2e:55:7a:e2:79:13:0a:d0:b9:89:
         0c:02:3d:9c:11:6d:1f:c0:3e:53:ee:dc:c0:13:3c:18:12:52:
         aa:04:85:12:d7:0b:66:c1:35:74:de:3b:fb:c9:df:15:c9:b8:
         5e:4e:60:cd:ab:a0:35:4a:76:3c:7a:35:c3:c7:01:8b:35:5f:
         f0:0d:14:77:98:3e:30:1e:25:0d:3e:68:9a:5c:14:98:39:9f:
         2f:7c:ec:1b:46:46:db:cc:b4:af:99:6c:f9:dd:76:c9:2d:a8:
         cf:50:83:ca:32:36:08:b5:10:f8:72:c6:df:53:ed:3e:ce:2d:
         5f:14:6c:0f:92:6f:cd:cc:c9:9e:b2:b1:0a:a9:fc:d2:69:eb:
         ab:ce:0c:3f:ab:d6:59:c0:ca:ea:c4:e4:d9:69:d6:ff:cf:55:
         39:39:43:1c:0c:70:3d:24:21:4b:d6:0a:25:17:60:c7:a9:40:
         2a:cb:6c:85:5b:7f:f3:76:4b:b7:ae:2e:88:79:ee:31:d4:6a:
         31:77:40:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDkPlQbstvinwDPuw7rWooUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZDBiMGU0NGNjODZhNTE3Njk1NDdjMjJhZDc5NjE4NGI1
NGIwOTIwHhcNMjYwOTI3MTkwMTI1WhcNMjYwOTI4MTkwMTI1WjAzMTEwLwYDVQQD
EygzNDIwY2E5NGNhY2Y1NmU4MDI0NTU5MDExYmYxNWE1Y2JmZWQzZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnq6x54Nrn3MUH+OGynO3iUwNkQm
OOj+T7Pp39FSEPu/Y5A4z3UN5SWouX8HDTtFzytT+O1gewQJ6dX6v+RqjiErC+f9
BicwjgTDempgvFOjPP4qlqXQhIsp107vS00Dw2woDayaBq1ladktVGgxUXEkRfLB
Np14HwGEeZfJzOI7qvBItJGz2RDi8SGIr4w/A66l94gxMobLH0WvTe6P5iaRI6Ii
ykbAnDV6A6rD6yNzdxti/zsL5LeVFq7lF1+qYnmta82+JSnIf4/0vSdcBv3jQP0o
DV2sH2EfNOdN4YQwJytbaAdVdq+/1tExqcobWOq5nWfPNumkiApirakpfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQgypTKz1boAkVZARvxWly/7T1eMB8GA1UdIwQY
MBaAFGrQsORMyGpRdpVHwirXlhhLVLCSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXRDdzVFeklhbEYybFVmQ0t0ZVdHRXRVc0pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81YTFlZjctZjNhNC00NzNjLWE2OWMt
NDgyMjVmMzExMWNmLzEvYXRDdzVFeklhbEYybFVmQ0t0ZVdHRXRVc0pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81YTFlZjctZjNhNC00NzNjLWE2OWMtNDgyMjVmMzExMWNm
LzEvYXRDdzVFeklhbEYybFVmQ0t0ZVdHRXRVc0pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvKwiIBg
uJu0ByzPz6ObmCFPzRNIr/7ihpu6snCYIRZym5EUTc0PYSbpLwyUae4nl/S/sZPn
f2WteD1rNCMuVXrieRMK0LmJDAI9nBFtH8A+U+7cwBM8GBJSqgSFEtcLZsE1dN47
+8nfFcm4Xk5gzaugNUp2PHo1w8cBizVf8A0Ud5g+MB4lDT5omlwUmDmfL3zsG0ZG
28y0r5ls+d12yS2oz1CDyjI2CLUQ+HLG31PtPs4tXxRsD5JvzczJnrKxCqn80mnr
q84MP6vWWcDK6sTk2WnW/89VOTlDHAxwPSQhS9YKJRdgx6lAKstshVt/83ZLt64u
iHnuMdRqMXdAKA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 01:18:26 2026 by rpki-client