Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File:                     maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier:          SbSwLp3A4rWEqIx5M+Jdy2WekKHPGK9jWJJO7j4tVvo=
Subject key identifier:   81:CE:15:00:59:FE:F2:24:ED:6F:00:79:2A:AD:73:49:53:BB:41:DA
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer:       /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial:       01A0D34A635C4B1B9A54AE01C2C325041EB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number:          1A77
Signing time:             Thu 24 Sep 2026 12:01:02 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:02 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:02 +0000
Files and hashes:         1: CQ22INHNBj4XjlCUrI5XIygZ-R0.roa (hash: XIhPQfL8JPX1XhK5bY8YDY2+uw01ecHaNFfLz05TOJ0=)
                          2: KJY5nxCnM8VflNqrt-fuQ6cuQes.roa (hash: CD+3ziwBgnP7/0qdqqYvm343nyyRQZA21pgLWpHPvXc=)
                          3: lnG5zaZt-7xO_hAn8wuZTfTqkgM.roa (hash: AlDx5dd5qCfr7Hi5X2lV2/K6+UMvJudIe04xWsHdrCg=)
                          4: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: nhDWQNPrPDHzPECKFSBnBxGkwz38p3DlOvvgNWu+w/E=)
                          5: pgw_vXBhOHyYYmolPmheFOInOlo.roa (hash: FBhZNS8WeqSQq7ASqmhTPAh4HzJGXnwv4pIHLO19zl4=)
                          6: vcqIh9RGrfqsmlHa25tlLbDVTfk.roa (hash: 8nj2WBXLZRsVEzQqCt+NovapA3YHbN5awEImncwyZTU=)
                          7: x1x-cyI_biGTaUkZngKWx4DjWCs.roa (hash: aGX6ptYmiAeod9VDsNlQzerfO//pVNDw6U3vNGlEKjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 12:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4a:63:5c:4b:1b:9a:54:ae:01:c2:c3:25:04:1e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
        Validity
            Not Before: Sep 24 12:01:02 2026 GMT
            Not After : Sep 25 12:01:02 2026 GMT
        Subject: CN=81ce150059fef224ed6f00792aad734953bb41da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:4a:dc:5f:af:20:40:f2:83:be:87:39:b0:
                    b1:6d:5a:19:ae:10:85:27:9a:b0:c2:86:64:81:03:
                    b1:4f:fb:bd:e5:99:fb:48:dc:01:bd:a8:b5:18:b1:
                    78:62:00:f0:23:ad:ad:c0:46:a0:47:7f:64:f2:06:
                    93:f4:09:81:fd:01:b9:98:c3:04:87:84:dc:b1:72:
                    24:43:98:5e:78:53:8c:d7:35:5a:dc:30:dc:a9:e8:
                    13:bf:3e:b2:b6:be:53:60:88:8c:eb:91:41:25:65:
                    44:b3:1b:a0:f6:21:c8:50:ef:f5:46:f5:0e:1f:ac:
                    07:93:5a:63:20:36:cc:d6:ba:73:a0:65:fc:a8:fa:
                    2c:37:a0:35:4c:02:00:09:4a:c9:c4:3f:fa:f2:8e:
                    75:7a:70:62:51:96:b9:7b:30:ce:55:ac:74:38:1d:
                    3c:93:fb:39:5e:30:c0:df:50:ef:be:f1:94:bc:5a:
                    6f:69:ce:fc:70:c6:a1:12:4c:05:dc:ad:14:4f:ef:
                    8c:f9:56:91:30:1d:4c:82:77:89:ab:a5:dc:22:35:
                    e1:e2:85:32:f0:8f:4f:0d:03:d6:c4:a5:83:9d:d6:
                    fa:7c:30:22:66:d3:bd:4c:a3:f4:ee:b4:d0:9c:c9:
                    2d:e5:c0:0a:8c:ea:9a:fb:ae:df:98:1f:5e:0f:47:
                    67:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CE:15:00:59:FE:F2:24:ED:6F:00:79:2A:AD:73:49:53:BB:41:DA
            X509v3 Authority Key Identifier:
                keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:1c:6e:41:d0:df:bb:74:26:2e:e4:a4:d7:4b:7d:6d:13:18:
         02:ac:21:47:91:0b:f7:2f:4c:f6:58:15:6d:dc:96:77:d5:ec:
         99:ca:15:8f:af:a0:db:f9:72:7c:ed:45:52:e9:94:b4:08:87:
         dd:d9:40:44:5f:22:c7:8c:75:f6:c3:c7:e0:ab:09:3a:fb:77:
         83:31:ba:98:74:7d:2a:dd:51:d8:4e:7b:d7:80:d2:5a:e9:37:
         cf:cf:a3:7b:3b:53:fb:c1:88:b1:e5:c5:ae:ed:6b:bb:e3:f1:
         80:f3:a0:80:37:7d:23:03:2c:27:c1:45:68:78:68:49:a0:7d:
         ec:9f:d0:01:eb:49:c5:2e:d9:ad:fe:d5:33:23:07:85:29:5f:
         b6:b2:2a:7e:8e:65:3b:84:a7:79:ad:a2:3a:92:2e:84:24:ce:
         54:ee:ea:69:71:6d:09:83:b1:89:54:eb:f4:d7:0e:8e:b4:12:
         32:cc:66:1b:7e:88:29:07:21:15:21:b5:84:8e:ea:80:36:b6:
         bd:46:e5:44:ba:ca:49:3e:d4:2c:bf:e8:0f:a1:d3:cc:90:56:
         c8:c3:4c:b5:90:1e:19:22:5c:dc:6e:1c:60:9b:40:a6:c1:ec:
         20:bd:61:cf:75:08:fd:f6:7e:ad:97:f8:cc:50:4c:f9:37:42:
         ec:62:b4:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTSmNcSxuaVK4BwsMlBB63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTJjMmVjZjU4YzQ0YjM1YTBkYTI5NTdmZjRkY2EyZTYw
YjY4NmEwHhcNMjYwOTI0MTIwMTAyWhcNMjYwOTI1MTIwMTAyWjAzMTEwLwYDVQQD
Eyg4MWNlMTUwMDU5ZmVmMjI0ZWQ2ZjAwNzkyYWFkNzM0OTUzYmI0MWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiZK3F+vIEDyg76HObCxbVoZrhCF
J5qwwoZkgQOxT/u95Zn7SNwBvai1GLF4YgDwI62twEagR39k8gaT9AmB/QG5mMME
h4TcsXIkQ5heeFOM1zVa3DDcqegTvz6ytr5TYIiM65FBJWVEsxug9iHIUO/1RvUO
H6wHk1pjIDbM1rpzoGX8qPosN6A1TAIACUrJxD/68o51enBiUZa5ezDOVax0OB08
k/s5XjDA31DvvvGUvFpvac78cMahEkwF3K0UT++M+VaRMB1MgneJq6XcIjXh4oUy
8I9PDQPWxKWDndb6fDAiZtO9TKP07rTQnMkt5cAKjOqa+67fmB9eD0dnvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHOFQBZ/vIk7W8AeSqtc0lTu0HaMB8GA1UdIwQY
MBaAFJmiwuz1jESzWg2ilX/03KLmC2hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAt
ZTVkNTA3YTgyNmJmLzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAtZTVkNTA3YTgyNmJm
LzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRxuQdDf
u3QmLuSk10t9bRMYAqwhR5EL9y9M9lgVbdyWd9XsmcoVj6+g2/lyfO1FUumUtAiH
3dlARF8ix4x19sPH4KsJOvt3gzG6mHR9Kt1R2E5714DSWuk3z8+jeztT+8GIseXF
ru1ru+PxgPOggDd9IwMsJ8FFaHhoSaB97J/QAetJxS7Zrf7VMyMHhSlftrIqfo5l
O4Snea2iOpIuhCTOVO7qaXFtCYOxiVTr9NcOjrQSMsxmG36IKQchFSG1hI7qgDa2
vUblRLrKST7ULL/oD6HTzJBWyMNMtZAeGSJc3G4cYJtApsHsIL1hz3UI/fZ+rZf4
zFBM+TdC7GK0Kw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:17:49 2026 by rpki-client