Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
File:                     mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json)
Hash identifier:          NclN2tNJ1GT+1l0BDkI6cC0b9QbJoHf8GR2KJ0lhbEY=
Subject key identifier:   39:9D:35:33:B0:A0:2D:F2:73:E4:A5:37:8E:10:61:D4:5A:9D:AF:69
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Certificate issuer:       /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial:       01A122E5FFE22B855830D0D16794C01D6C5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
Manifest number:          075B
Signing time:             Fri 09 Oct 2026 23:01:00 +0000
Manifest this update:     Fri 09 Oct 2026 23:01:00 +0000
Manifest next update:     Sat 10 Oct 2026 23:01:00 +0000
Files and hashes:         1: NfO8TWIkaxE4DaKwNuYvhzbmi90.roa (hash: 07eBVlhSt2pE8VL0qAd29LqwR9jHDzCkLPkg8sdeyGk=)
                          2: UoWE9x7yjFZiDaO-MudWtt7j5v8.roa (hash: JDYuDSxsb8TqP1khTo+IPnsAnYGiJGphoDEBMwEfni4=)
                          3: WZLWasAJTJL4NuQLzsppN-RJdv4.roa (hash: xh9deKElrPJPAsuDDFcPUr8rOJKxDjEmgaGF1/UzKKY=)
                          4: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: QHvs8+p99LsWYAjUYKaAd8yi2I/jbWX8+pf3nhFHlT0=)
                          5: xWwqlVqWd0iRwMTuQO8eVNoCWHU.roa (hash: yQKukILLOQx8xluWCSSZQ2VF3E7ijyBr1SeiIVBdBeU=)
                          6: xulzqcYhIs7PWGHWVfL4YmNhVq8.roa (hash: WAG1ujb3pAhI/q7UcuSpjvhOpci45QogtqTPG/JOxEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 17:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:22:e5:ff:e2:2b:85:58:30:d0:d1:67:94:c0:1d:6c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
        Validity
            Not Before: Oct  9 23:01:00 2026 GMT
            Not After : Oct 10 23:01:00 2026 GMT
        Subject: CN=399d3533b0a02df273e4a5378e1061d45a9daf69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e8:2a:f4:2e:f0:55:4f:94:78:51:3c:b5:44:
                    a8:dc:8a:d5:a9:22:60:a2:d3:47:f8:f2:e3:05:da:
                    bc:d9:5a:ad:e5:ad:ae:29:2d:98:5c:d4:9b:da:d7:
                    b8:1a:72:03:8a:e4:7c:95:fb:83:25:dd:0e:2b:48:
                    17:0a:aa:68:da:81:63:48:ae:01:3d:23:e5:f3:5e:
                    88:e8:33:11:d9:6d:5a:18:c9:d1:e0:cf:db:97:65:
                    9e:96:90:46:b2:e9:34:ed:46:91:d6:2d:b3:dd:70:
                    64:dd:7e:6f:bf:d4:d7:66:57:43:a7:d3:4b:12:a6:
                    e4:37:10:01:8b:c3:ce:87:ba:94:b0:2c:85:32:08:
                    15:d9:a2:f5:d5:35:23:29:c0:ca:8b:eb:34:7a:49:
                    e6:ff:df:6b:cf:ab:82:bd:3c:e5:72:38:3f:30:6c:
                    82:cb:3d:32:4d:a1:46:12:9c:52:b4:50:88:0a:60:
                    84:c3:77:fe:73:fd:ed:86:cf:c1:34:1c:71:44:1f:
                    5d:b3:f5:cb:f5:eb:93:7d:2b:44:fe:d7:f6:2d:26:
                    a7:8c:ec:13:7e:4f:62:0f:cd:cb:53:ce:ea:8a:e9:
                    42:f1:19:58:6e:76:56:4d:b8:dc:58:25:96:93:36:
                    93:26:bb:56:77:fa:fa:ab:87:25:0a:dc:5e:0c:2f:
                    ec:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9D:35:33:B0:A0:2D:F2:73:E4:A5:37:8E:10:61:D4:5A:9D:AF:69
            X509v3 Authority Key Identifier:
                keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:94:9a:33:da:40:07:54:92:b5:34:5a:8e:35:4f:71:21:d3:
         99:56:30:60:ee:f2:96:5e:c0:54:53:90:70:6d:e1:ec:d9:c1:
         8e:f6:9a:a1:db:63:c3:e8:90:89:ac:07:57:10:67:22:21:37:
         f1:b3:2f:2c:a7:c9:33:7d:b9:a9:36:a7:9e:2e:39:0a:29:2d:
         b7:b0:2a:c5:83:7b:8d:1f:99:6e:c1:40:79:53:b9:94:33:83:
         e0:c6:b5:d7:a9:cd:b8:ca:05:6e:64:3e:48:dd:16:4f:b5:bb:
         1d:84:5d:82:ac:dc:26:c3:f8:9e:f2:60:66:02:b0:84:08:5f:
         9b:19:e9:00:7b:d9:02:f5:05:28:62:35:64:ff:36:cf:13:48:
         18:f9:03:1c:85:8b:0d:1b:00:fd:23:c3:4c:ef:40:64:82:db:
         44:7f:1b:a7:b7:24:d2:02:0b:fd:0b:e1:b3:6c:fa:a9:ac:2d:
         da:4a:bd:6d:0a:8b:1f:89:3f:05:6c:cd:a3:80:74:81:06:11:
         33:b6:3f:5d:30:29:23:8f:c8:7d:9e:e1:da:40:c8:f5:3e:ef:
         3d:63:69:5e:6e:88:3d:76:4f:ae:96:3d:e4:b1:ea:32:fd:ae:
         9e:fd:af:67:5e:c8:fe:f2:80:97:6f:b9:de:26:80:8f:e0:2e:
         e8:eb:95:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEi5f/iK4VYMNDRZ5TAHWxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTNlMmY2MzUxZDNiNGQxZTYxYWE0MDE2ZjFiMmNmYTYy
ZDdjZGYwHhcNMjYxMDA5MjMwMTAwWhcNMjYxMDEwMjMwMTAwWjAzMTEwLwYDVQQD
EygzOTlkMzUzM2IwYTAyZGYyNzNlNGE1Mzc4ZTEwNjFkNDVhOWRhZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0egq9C7wVU+UeFE8tUSo3IrVqSJg
otNH+PLjBdq82Vqt5a2uKS2YXNSb2te4GnIDiuR8lfuDJd0OK0gXCqpo2oFjSK4B
PSPl816I6DMR2W1aGMnR4M/bl2WelpBGsuk07UaR1i2z3XBk3X5vv9TXZldDp9NL
EqbkNxABi8POh7qUsCyFMggV2aL11TUjKcDKi+s0eknm/99rz6uCvTzlcjg/MGyC
yz0yTaFGEpxStFCICmCEw3f+c/3ths/BNBxxRB9ds/XL9euTfStE/tf2LSanjOwT
fk9iD83LU87qiulC8RlYbnZWTbjcWCWWkzaTJrtWd/r6q4clCtxeDC/srwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmdNTOwoC3yc+SlN44QYdRana9pMB8GA1UdIwQY
MBaAFJgT4vY1HTtNHmGqQBbxss+mLXzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzIt
Mzk1MTM3OGFhNzY2LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzItMzk1MTM3OGFhNzY2
LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5SaM9pA
B1SStTRajjVPcSHTmVYwYO7yll7AVFOQcG3h7NnBjvaaodtjw+iQiawHVxBnIiE3
8bMvLKfJM325qTanni45Ciktt7AqxYN7jR+ZbsFAeVO5lDOD4Ma116nNuMoFbmQ+
SN0WT7W7HYRdgqzcJsP4nvJgZgKwhAhfmxnpAHvZAvUFKGI1ZP82zxNIGPkDHIWL
DRsA/SPDTO9AZILbRH8bp7ck0gIL/Qvhs2z6qawt2kq9bQqLH4k/BWzNo4B0gQYR
M7Y/XTApI4/IfZ7h2kDI9T7vPWNpXm6IPXZPrpY95LHqMv2unv2vZ17I/vKAl2+5
3iaAj+Au6OuVEw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 03:12:52 2026 by rpki-client