Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
File:                     _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json)
Hash identifier:          p/Xlys+xr/MmM2wgPjfNHO0ouHBtos1ELUbwcBhb81I=
Subject key identifier:   31:0E:2D:E5:4A:E5:D4:3C:43:0C:71:CA:50:31:A6:20:C3:AB:5D:79
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Certificate issuer:       /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial:       01A0D2DEF6448C7F87231E96ECA3E8FB213D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
Manifest number:          0B2A
Signing time:             Thu 24 Sep 2026 10:03:42 +0000
Manifest this update:     Thu 24 Sep 2026 10:03:42 +0000
Manifest next update:     Fri 25 Sep 2026 10:03:42 +0000
Files and hashes:         1: 3DdHsX6it2ap4y_VnsjWCiY07Yo.roa (hash: x9mgWA78JqU1sZIpmaNa31HOdxWPBMoH6TxC+AtVICA=)
                          2: 4gEhyOVffsgwNNWqQs_-s-LzQ50.roa (hash: SblERstdmAf0RnwlhfIldFcWcVQTo13MQsVVbWWnSUI=)
                          3: LyZiTz1VH8kyF5AmjQaEjp0W6sE.roa (hash: AelnLJhdvd0PiZ/B/iw8zmXPaSYCUu42XLVsyGcWPKo=)
                          4: WeKOa0H0czOL8IIE6VOIs9H9HXM.roa (hash: HnR5cSodno/i5GR28495C4j2bGZUas8Sx3TSjsOhefE=)
                          5: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: ZyJG1Y/dMeNCK22kUOaNrfWxUy7Fd/XnbDLmPHfUrnQ=)
                          6: p35C9ZV6N39esxEauWzz7rGEtFo.roa (hash: RDjo5E1buUUe1K1+aCg93KkPTbVXh8Coo56z6qS5TJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 10:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:de:f6:44:8c:7f:87:23:1e:96:ec:a3:e8:fb:21:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
        Validity
            Not Before: Sep 24 10:03:42 2026 GMT
            Not After : Sep 25 10:03:42 2026 GMT
        Subject: CN=310e2de54ae5d43c430c71ca5031a620c3ab5d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bd:f2:91:f3:86:69:9c:1b:63:32:ff:38:41:
                    9f:2b:b1:e7:6f:36:2a:6b:4c:31:2a:21:a2:53:b2:
                    f3:7d:a8:25:63:a5:c7:88:99:f4:24:97:c2:d0:cf:
                    12:5f:45:cd:5a:50:21:5d:34:1b:ad:e3:1e:2c:63:
                    13:ed:ba:8d:43:1e:26:28:ce:62:15:7d:7e:30:be:
                    9a:6d:3a:87:c8:98:db:a6:7c:95:e5:3e:45:43:c1:
                    49:98:95:58:2b:e8:c3:b9:f4:9c:ab:db:86:b3:6c:
                    28:1f:99:c6:47:df:d3:03:99:60:50:66:2c:c7:4f:
                    8a:58:9b:e6:37:af:b9:96:78:69:cb:90:3b:bb:f0:
                    3a:17:10:3a:b5:64:85:23:a0:00:6d:66:58:79:05:
                    0c:4b:df:10:e0:d6:b0:73:86:ae:2b:e0:46:f0:47:
                    69:93:dc:46:22:03:0c:fd:6b:6b:8f:8f:e8:b3:7a:
                    e1:f8:38:9c:fd:49:b3:f0:59:db:5b:a1:bb:fa:20:
                    3d:15:af:af:e3:f9:d1:f4:f4:56:cc:5a:d2:e0:da:
                    25:6b:19:2b:46:34:1c:57:20:cf:54:ee:93:1f:24:
                    9b:27:ed:72:48:ec:2c:81:cb:1c:93:a8:fb:0b:d5:
                    e1:f4:bb:13:9a:e4:f9:5b:b5:59:3c:ea:e8:fb:eb:
                    d2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0E:2D:E5:4A:E5:D4:3C:43:0C:71:CA:50:31:A6:20:C3:AB:5D:79
            X509v3 Authority Key Identifier:
                keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e6:81:21:72:b2:d0:df:bb:15:dc:10:a5:c0:07:18:16:65:
         6e:c8:eb:f5:c0:a9:b0:6e:0a:83:7e:10:58:77:33:1b:11:a1:
         aa:60:4f:e0:db:62:9e:ec:05:dc:0f:f4:59:cb:09:0a:9d:92:
         ea:1c:ba:86:aa:db:47:f4:e1:f7:3d:80:c0:31:8d:70:b1:a7:
         6e:fd:04:cf:97:82:c3:0c:c3:a1:8e:ab:91:15:12:91:22:24:
         0d:13:60:17:1e:06:46:7c:cf:53:65:71:68:1a:ec:c6:cf:75:
         66:ec:7b:ba:1a:66:f2:44:52:c7:53:58:45:77:76:4d:1c:5c:
         60:30:d7:97:b9:96:0c:0d:d2:cf:4f:d0:f0:46:5c:18:22:e6:
         82:29:75:54:2a:e8:a7:27:f2:87:d0:f3:b5:16:58:12:40:7d:
         f3:62:c6:aa:b7:52:73:ec:4d:41:a4:7f:8e:ac:2f:b9:af:4c:
         ad:a6:5a:63:5a:de:f2:28:63:e9:68:b6:5d:42:2b:f7:c6:b2:
         28:19:6e:f7:9d:ba:3e:65:00:ec:9d:92:af:5c:05:f6:84:57:
         79:f8:ab:43:ae:89:5c:ba:85:3f:06:e9:9d:e9:6a:66:cb:04:
         b8:25:85:cb:ba:4c:ed:21:34:88:c6:0c:4f:6c:6c:d2:2f:42:
         5a:ec:79:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3vZEjH+HIx6W7KPo+yE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOGRkNWZlNDE3OWU4YmRhMjg1MzI1NjE5MTlmNmQwNzg3
N2M2M2QwHhcNMjYwOTI0MTAwMzQyWhcNMjYwOTI1MTAwMzQyWjAzMTEwLwYDVQQD
EygzMTBlMmRlNTRhZTVkNDNjNDMwYzcxY2E1MDMxYTYyMGMzYWI1ZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir3ykfOGaZwbYzL/OEGfK7HnbzYq
a0wxKiGiU7LzfaglY6XHiJn0JJfC0M8SX0XNWlAhXTQbreMeLGMT7bqNQx4mKM5i
FX1+ML6abTqHyJjbpnyV5T5FQ8FJmJVYK+jDufScq9uGs2woH5nGR9/TA5lgUGYs
x0+KWJvmN6+5lnhpy5A7u/A6FxA6tWSFI6AAbWZYeQUMS98Q4Nawc4auK+BG8Edp
k9xGIgMM/Wtrj4/os3rh+Dic/Umz8FnbW6G7+iA9Fa+v4/nR9PRWzFrS4Nolaxkr
RjQcVyDPVO6THySbJ+1ySOwsgcsck6j7C9Xh9LsTmuT5W7VZPOro++vSYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEOLeVK5dQ8QwxxylAxpiDDq115MB8GA1UdIwQY
MBaAFP+N1f5Beei9ooUyVhkZ9tB4d8Y9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQt
MDZhNDA0NDM1ZTUwLzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQtMDZhNDA0NDM1ZTUw
LzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOaBIXKy
0N+7FdwQpcAHGBZlbsjr9cCpsG4Kg34QWHczGxGhqmBP4NtinuwF3A/0WcsJCp2S
6hy6hqrbR/Th9z2AwDGNcLGnbv0Ez5eCwwzDoY6rkRUSkSIkDRNgFx4GRnzPU2Vx
aBrsxs91Zux7uhpm8kRSx1NYRXd2TRxcYDDXl7mWDA3Sz0/Q8EZcGCLmgil1VCro
pyfyh9DztRZYEkB982LGqrdSc+xNQaR/jqwvua9MraZaY1re8ihj6Wi2XUIr98ay
KBlu9526PmUA7J2Sr1wF9oRXefirQ66JXLqFPwbpnelqZssEuCWFy7pM7SE0iMYM
T2xs0i9CWux5WA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:06:54 2026 by rpki-client