Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File:                     r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier:          IXnwIELdFSUSg2MtPuyRfN8MUjDrSfFEw/R9To4bwyk=
Subject key identifier:   96:1A:44:9B:BC:09:A6:A3:AB:14:34:0A:76:18:8D:F7:5F:E3:76:C2
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer:       /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial:       01A0D011E5323F290E533402CF540B18C05E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number:          1A75
Signing time:             Wed 23 Sep 2026 21:00:28 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:28 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:28 +0000
Files and hashes:         1: 4kICntJgsVWHWkY4JO35N1ABDJY.roa (hash: ENs43kJVz2bXsMKabmKE5DgKXDHmDIJ5VjejvZ/w6lU=)
                          2: 73PJtfjKOUuf0kYb-3vXjN2jUgI.roa (hash: 1XKicI3n2lKZgBn2j8dKasUw30d/M7iJpq2R4GQkhjQ=)
                          3: p__Ljf9fbtB14fFLA3bn-BJKRV0.roa (hash: 5UgXfWB96o5m7QwdXIFEVhhiyZqKscYo5S/m82Eg2zo=)
                          4: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: bUqY9E4qaOFg+V24x8DWhQy5tRQNF83Nje2s6vWJ76E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:11:e5:32:3f:29:0e:53:34:02:cf:54:0b:18:c0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
        Validity
            Not Before: Sep 23 21:00:28 2026 GMT
            Not After : Sep 24 21:00:28 2026 GMT
        Subject: CN=961a449bbc09a6a3ab14340a76188df75fe376c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:c9:86:35:8b:89:cb:5d:f8:e9:10:e4:a3:
                    f5:00:37:43:26:6d:a7:b6:3a:ce:36:ec:9d:20:bc:
                    d5:bf:a4:31:c4:54:3a:ce:04:ba:7a:af:e8:40:8d:
                    61:b3:37:d1:19:94:82:9e:b1:c5:fb:cd:22:b2:5b:
                    b6:3c:1f:70:59:98:4f:09:ff:9d:7f:9a:d6:bb:b5:
                    e8:4c:da:1a:8e:73:2d:5a:1a:c7:b0:17:6f:de:2e:
                    13:97:f8:ec:fb:d1:36:23:7c:64:ee:77:6f:0a:2f:
                    16:b0:ea:d6:81:8a:fa:48:3a:06:d1:4a:8c:07:ff:
                    00:55:95:15:9e:b6:8a:18:62:a7:00:5a:37:bb:f9:
                    b5:d4:7c:76:06:e8:44:a9:6e:e8:11:64:3f:6b:73:
                    3b:91:f3:7c:78:02:5e:90:55:ca:38:7e:bd:11:3a:
                    a7:b2:5f:6b:36:57:65:69:0c:c3:55:02:5a:e8:0f:
                    58:ef:2a:a7:c2:3a:78:8f:b7:e5:c8:88:22:fb:6c:
                    6f:46:6b:70:1d:c6:26:0d:72:28:09:87:a2:0b:45:
                    46:cb:0a:30:9f:17:a9:97:a4:64:b8:a8:79:13:f6:
                    1f:fe:09:5d:d0:95:0d:e0:4c:bb:3a:c0:c4:8f:a4:
                    c2:92:3b:fb:a2:ea:d0:df:5c:20:54:28:df:0d:c2:
                    51:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1A:44:9B:BC:09:A6:A3:AB:14:34:0A:76:18:8D:F7:5F:E3:76:C2
            X509v3 Authority Key Identifier:
                keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:89:0b:1b:5d:22:a1:0d:e8:fb:f8:90:1c:ee:2a:15:79:54:
         a6:57:52:dd:78:e3:ad:7b:f5:ad:0a:40:5b:61:7d:a4:c9:51:
         e1:9c:10:98:b4:b2:b9:fa:08:0d:45:9c:b7:76:1b:66:41:85:
         60:e1:7b:0f:86:fe:b5:58:d5:0d:ad:29:b3:22:17:a8:93:8d:
         53:21:0e:c5:be:b3:98:fc:a9:94:11:e5:0e:25:2c:3c:4b:68:
         e1:89:b0:45:19:07:83:49:37:ce:06:44:e6:26:99:85:91:6d:
         bb:18:0a:b5:d7:2f:51:1c:14:d3:39:65:44:13:17:c1:44:dd:
         d2:b7:a4:dc:f6:a1:75:a9:f2:83:ea:f6:f1:8c:23:7b:38:cd:
         cb:0a:be:15:8e:a9:d5:e6:cc:9e:2d:a6:6e:b2:b4:d8:f0:ab:
         a5:30:b8:75:7e:7e:b2:49:b7:12:1d:68:d8:64:69:ba:79:c6:
         59:79:7a:c1:2e:44:55:64:3d:dd:ae:0c:b8:46:d1:87:72:8d:
         f1:ce:49:50:b7:e6:56:a7:25:3b:c9:8c:35:8d:d8:9d:f7:5e:
         d5:66:48:e5:be:8f:4a:09:7a:cf:75:73:0e:19:48:9c:39:b9:
         e3:6d:bb:33:c3:56:08:34:7e:3e:ae:f5:6f:7d:f2:da:3d:a2:
         99:2d:09:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEeUyPykOUzQCz1QLGMBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzNmZjFlYzU1ZjQ5Mjk2ZGQ3MzQwMzlmYTAyODRjYzQw
MGViMjYwHhcNMjYwOTIzMjEwMDI4WhcNMjYwOTI0MjEwMDI4WjAzMTEwLwYDVQQD
Eyg5NjFhNDQ5YmJjMDlhNmEzYWIxNDM0MGE3NjE4OGRmNzVmZTM3NmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNnJhjWLictd+OkQ5KP1ADdDJm2n
tjrONuydILzVv6QxxFQ6zgS6eq/oQI1hszfRGZSCnrHF+80islu2PB9wWZhPCf+d
f5rWu7XoTNoajnMtWhrHsBdv3i4Tl/js+9E2I3xk7ndvCi8WsOrWgYr6SDoG0UqM
B/8AVZUVnraKGGKnAFo3u/m11Hx2BuhEqW7oEWQ/a3M7kfN8eAJekFXKOH69ETqn
sl9rNldlaQzDVQJa6A9Y7yqnwjp4j7flyIgi+2xvRmtwHcYmDXIoCYeiC0VGywow
nxepl6RkuKh5E/Yf/gld0JUN4Ey7OsDEj6TCkjv7ourQ31wgVCjfDcJRdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYaRJu8CaajqxQ0CnYYjfdf43bCMB8GA1UdIwQY
MBaAFK9z/x7FX0kpbdc0A5+gKEzEAOsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZWE1ODEtNWNkZS00NTc0LWJhMGEt
MmM2MmRlN2IzZTQ1LzEvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jZWE1ODEtNWNkZS00NTc0LWJhMGEtMmM2MmRlN2IzZTQ1
LzEvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQokLG10i
oQ3o+/iQHO4qFXlUpldS3XjjrXv1rQpAW2F9pMlR4ZwQmLSyufoIDUWct3YbZkGF
YOF7D4b+tVjVDa0psyIXqJONUyEOxb6zmPyplBHlDiUsPEto4YmwRRkHg0k3zgZE
5iaZhZFtuxgKtdcvURwU0zllRBMXwUTd0rek3Pahdanyg+r28YwjezjNywq+FY6p
1ebMni2mbrK02PCrpTC4dX5+skm3Eh1o2GRpunnGWXl6wS5EVWQ93a4MuEbRh3KN
8c5JULfmVqclO8mMNY3Ynfde1WZI5b6PSgl6z3VzDhlInDm54227M8NWCDR+Pq71
b33y2j2imS0JIQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:33:43 2026 by rpki-client