Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File:                     4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier:          lLh2GOu2UqJgEhziOr+POAEXoizFfFzQ4DPeBlKdX+0=
Subject key identifier:   EA:A2:BC:98:16:61:5F:73:83:12:7D:1D:1B:FF:1F:5A:59:B7:2A:68
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       01A0CDB63D19B8CD83BB39D39158F0A40B67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number:          1A90
Signing time:             Wed 23 Sep 2026 10:01:07 +0000
Manifest this update:     Wed 23 Sep 2026 10:01:07 +0000
Manifest next update:     Thu 24 Sep 2026 10:01:07 +0000
Files and hashes:         1: 1vioh8WBBr0buk8B9XgCVmy0V3o.roa (hash: lVxYMENWKDi2+Xm9/q5pj8wEEX5duZBJRp4Rcletd04=)
                          2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: 6vPWo+nbPLMctph5oftXTamIL3nbI2yE7CRIZO4F1Ho=)
                          3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=)
                          4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=)
                          5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=)
                          6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=)
                          7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=)
                          8: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=)
                          9: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=)
                          10: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=)
                          11: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=)
                          12: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:b6:3d:19:b8:cd:83:bb:39:d3:91:58:f0:a4:0b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: Sep 23 10:01:07 2026 GMT
            Not After : Sep 24 10:01:07 2026 GMT
        Subject: CN=eaa2bc9816615f7383127d1d1bff1f5a59b72a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fc:db:c5:1f:94:8e:af:9f:de:99:50:5a:d6:
                    c5:d0:51:34:62:f5:62:9e:6a:0b:9e:f7:4e:d7:5d:
                    c1:4e:d3:f0:5c:f4:f0:64:ff:ed:4b:8d:d1:71:4c:
                    7d:2a:67:fc:13:6d:73:6c:15:3b:39:93:57:04:ce:
                    8c:bb:f7:2d:ea:b5:cb:f1:61:5f:2a:1f:47:30:fc:
                    62:58:b3:91:28:a7:01:d4:13:21:de:94:b7:b9:59:
                    31:ce:3c:d8:f6:72:0e:64:00:37:d5:4a:40:7c:7e:
                    3e:b5:53:0b:5b:8e:d1:cf:c1:4b:1f:f9:4e:37:40:
                    f4:5b:bb:ea:dd:ce:95:e9:c7:31:8a:d0:6e:01:96:
                    6c:79:2b:a1:4d:b9:91:67:87:bc:79:60:58:23:7e:
                    20:6b:ac:85:b5:9e:d0:d2:35:d9:4f:28:bb:d3:c0:
                    0e:50:c1:28:9f:92:58:ad:fe:a3:01:62:35:73:6a:
                    24:d3:26:a7:b7:c9:35:37:25:7c:ef:8c:33:57:a1:
                    be:c7:fe:31:92:89:ad:49:4d:a4:42:ff:d8:8d:19:
                    7a:b1:6b:09:22:77:1b:73:b3:af:6e:70:4d:bd:87:
                    55:47:01:ee:df:ea:38:3f:a6:d7:9d:d5:9d:bc:3e:
                    b3:c9:74:9d:76:fb:4a:ab:1c:46:3f:94:51:c8:2a:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A2:BC:98:16:61:5F:73:83:12:7D:1D:1B:FF:1F:5A:59:B7:2A:68
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ad:bd:11:e8:01:d0:74:10:fb:fc:c4:82:71:a9:62:17:9c:
         90:95:c1:40:43:d7:98:9f:6d:4b:a1:27:54:bf:14:00:ed:b6:
         92:27:8e:24:88:c6:d0:2c:ef:7a:8c:25:c9:29:2d:5b:a1:02:
         3b:1c:9d:77:9b:71:25:0b:f4:7d:9d:98:30:5a:ac:59:c5:30:
         00:76:28:1e:be:4b:38:3e:13:fa:d8:a4:c5:87:32:6f:ce:c8:
         25:37:c7:ef:0f:e2:7e:76:05:ba:49:c9:7a:48:5e:c6:86:08:
         57:83:cf:46:af:70:53:80:80:1e:70:22:81:e6:3a:34:85:b3:
         70:7a:99:68:b5:86:33:f4:9b:1a:7f:0f:4b:a4:6f:91:a6:80:
         bd:34:46:52:25:71:70:f3:bf:7a:d9:e0:e5:aa:db:b7:4d:b9:
         e0:eb:a7:2d:46:11:c5:44:7c:1f:23:7a:21:f1:3a:c7:a1:8c:
         23:6d:96:1c:41:09:22:df:d1:fe:fc:95:f4:d6:35:ef:df:4e:
         3e:58:0e:41:11:92:37:72:4f:ed:d8:c7:7a:28:32:3c:e7:7e:
         75:30:c4:7d:f2:f7:7e:22:bf:4c:3c:93:16:16:ed:35:43:e0:
         8c:b3:65:e8:f2:c7:d1:2e:83:35:09:95:62:26:6c:85:2c:c2:
         1c:c9:da:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNtj0ZuM2DuznTkVjwpAtnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw
MGIwNTEwHhcNMjYwOTIzMTAwMTA3WhcNMjYwOTI0MTAwMTA3WjAzMTEwLwYDVQQD
EyhlYWEyYmM5ODE2NjE1ZjczODMxMjdkMWQxYmZmMWY1YTU5YjcyYTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPzbxR+Ujq+f3plQWtbF0FE0YvVi
nmoLnvdO113BTtPwXPTwZP/tS43RcUx9Kmf8E21zbBU7OZNXBM6Mu/ct6rXL8WFf
Kh9HMPxiWLORKKcB1BMh3pS3uVkxzjzY9nIOZAA31UpAfH4+tVMLW47Rz8FLH/lO
N0D0W7vq3c6V6ccxitBuAZZseSuhTbmRZ4e8eWBYI34ga6yFtZ7Q0jXZTyi708AO
UMEon5JYrf6jAWI1c2ok0yant8k1NyV874wzV6G+x/4xkomtSU2kQv/YjRl6sWsJ
Incbc7OvbnBNvYdVRwHu3+o4P6bXndWdvD6zyXSddvtKqxxGP5RRyCrobQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqivJgWYV9zgxJ9HRv/H1pZtypoMB8GA1UdIwQY
MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt
YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0
LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUq29EegB
0HQQ+/zEgnGpYheckJXBQEPXmJ9tS6EnVL8UAO22kieOJIjG0CzveowlySktW6EC
Oxydd5txJQv0fZ2YMFqsWcUwAHYoHr5LOD4T+tikxYcyb87IJTfH7w/ifnYFuknJ
ekhexoYIV4PPRq9wU4CAHnAigeY6NIWzcHqZaLWGM/SbGn8PS6RvkaaAvTRGUiVx
cPO/etng5arbt0254OunLUYRxUR8HyN6IfE6x6GMI22WHEEJIt/R/vyV9NY1799O
PlgOQRGSN3JP7djHeigyPOd+dTDEffL3fiK/TDyTFhbtNUPgjLNl6PLH0S6DNQmV
YiZshSzCHMnamA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:38:36 2026 by rpki-client