Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
File:                     gHmvy6Wodi-3n05eDXo17oTNPfQ.mft (raw, json)
Hash identifier:          HdbGsNZA1FivUGV8j8Inr7/0o0gNHhWFNSJ204l5FFQ=
Subject key identifier:   41:E6:DF:DA:EC:DD:CC:D6:B3:67:05:7F:6D:6D:1E:50:55:AA:02:03
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Certificate issuer:       /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial:       01A0C88FE1F33196C4395B761CBC7D936392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
Manifest number:          10E4
Signing time:             Tue 22 Sep 2026 10:01:07 +0000
Manifest this update:     Tue 22 Sep 2026 10:01:07 +0000
Manifest next update:     Wed 23 Sep 2026 10:01:07 +0000
Files and hashes:         1: 3WDU47d2fLscnSW7F3hgvaXG5ss.roa (hash: BfORbJGgiA+wWZ0EeMRYkEWvSYxDk7NkNvd7Q4xSZco=)
                          2: C5clDNKWWV0HBKYFKcpzORw8EhA.roa (hash: XUJvNLXyYDdL2C6nEB+rx6DsIA04Nnq77ZyzZhlVv1Q=)
                          3: E50tmVkqcKJ8hvkMgzElVUsN-nk.roa (hash: v6/X+2RH7lba53xOm7erhTp0p/yhNOGtKRcVvRlqm6o=)
                          4: gHmvy6Wodi-3n05eDXo17oTNPfQ.crl (hash: i1UBlUh29ibdqeCM6uNjNm40bd0PtgFCN2v4wL1PnRY=)
                          5: ppKOK1k4bpVipnmImPdupSEmNC0.roa (hash: F13uVr28Hl5+Q/lhAirlIzj/fvyS+AXLflKOQ84sZ2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 10:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:8f:e1:f3:31:96:c4:39:5b:76:1c:bc:7d:93:63:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
        Validity
            Not Before: Sep 22 10:01:07 2026 GMT
            Not After : Sep 23 10:01:07 2026 GMT
        Subject: CN=41e6dfdaecddccd6b367057f6d6d1e5055aa0203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e7:db:ed:32:5a:41:83:1d:e1:8d:aa:4a:f0:
                    72:fe:d5:79:80:c2:bc:62:e8:98:ac:30:1a:6d:e6:
                    4e:26:c7:d2:0e:72:51:1c:8b:c0:b3:7b:b2:8b:1c:
                    4c:26:ec:15:b4:a5:90:ce:fc:9d:30:c5:19:3d:6d:
                    38:a0:b5:e9:49:84:ce:fc:5e:30:47:ea:36:31:98:
                    ee:99:bb:54:e8:07:7d:f3:8e:18:f1:1d:5b:8d:e4:
                    ef:ba:e2:ad:a6:02:64:cf:01:0d:ca:b0:2f:bc:c4:
                    95:e7:d2:79:2d:96:a1:dc:7a:ec:ab:22:b0:20:dc:
                    60:61:9b:66:9d:cf:15:77:4d:09:5a:65:dc:ff:bd:
                    33:c5:aa:9f:0a:25:fe:71:d2:c7:37:14:a4:2e:ba:
                    9c:27:a4:49:05:71:bb:ea:7d:31:dd:63:d6:52:88:
                    5d:7d:02:ba:c5:0b:c4:bb:c6:bb:00:42:1f:06:68:
                    61:83:e7:c1:bd:b8:c2:9d:e7:dd:da:80:16:73:f8:
                    b1:25:98:dd:b1:d2:f5:f0:eb:98:19:a2:4d:c1:e0:
                    21:3b:86:ba:fe:09:48:13:f3:6b:20:54:00:73:a7:
                    e1:70:7a:c7:91:e5:d5:b4:b7:40:1d:c9:2c:9b:fd:
                    5a:2a:af:4d:46:78:48:62:e9:28:74:69:42:32:21:
                    9c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E6:DF:DA:EC:DD:CC:D6:B3:67:05:7F:6D:6D:1E:50:55:AA:02:03
            X509v3 Authority Key Identifier:
                keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b8:b9:1f:fe:95:12:4a:df:cb:8e:e0:23:fe:8c:e2:b1:e0:
         c4:dc:87:aa:69:43:d2:e8:1e:90:58:c8:6e:0d:41:90:d2:03:
         65:e1:f5:b4:57:57:bc:9c:63:27:8e:88:3a:93:a6:f0:c0:f3:
         4f:39:08:6f:8b:3c:94:f7:24:2a:78:35:83:22:a0:f9:27:11:
         10:a3:a2:01:2e:e5:bb:64:7e:de:84:d6:3b:8d:0e:50:0b:d6:
         08:d6:51:1c:20:e9:59:4e:08:22:4f:a2:da:fe:f3:c4:e3:88:
         de:47:22:c1:ce:53:7c:7f:32:d4:a8:cb:0b:ed:89:99:71:10:
         73:44:1f:11:33:71:a5:df:a2:4d:11:37:66:07:1f:82:3f:9f:
         65:77:68:40:11:ab:6e:f1:89:6a:00:c6:d7:d7:82:87:8f:44:
         cd:46:91:6a:e3:65:a1:1d:c0:4e:86:6a:3c:5b:c8:b7:82:96:
         ff:94:23:ce:26:b2:d0:11:c4:b2:64:dc:50:00:4e:13:28:96:
         75:01:93:6d:8a:d4:6f:8e:30:30:37:d8:e8:e7:f3:0b:41:ad:
         f2:95:ad:71:bb:40:93:c8:e2:c1:09:c3:55:28:74:b5:2c:72:
         13:dc:4c:22:db:2b:a5:69:53:70:23:db:52:64:d5:a1:3e:33:
         18:a4:a2:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIj+HzMZbEOVt2HLx9k2OSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNzlhZmNiYTVhODc2MmZiNzlmNGU1ZTBkN2EzNWVlODRj
ZDNkZjQwHhcNMjYwOTIyMTAwMTA3WhcNMjYwOTIzMTAwMTA3WjAzMTEwLwYDVQQD
Eyg0MWU2ZGZkYWVjZGRjY2Q2YjM2NzA1N2Y2ZDZkMWU1MDU1YWEwMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmufb7TJaQYMd4Y2qSvBy/tV5gMK8
YuiYrDAabeZOJsfSDnJRHIvAs3uyixxMJuwVtKWQzvydMMUZPW04oLXpSYTO/F4w
R+o2MZjumbtU6Ad9844Y8R1bjeTvuuKtpgJkzwENyrAvvMSV59J5LZah3HrsqyKw
INxgYZtmnc8Vd00JWmXc/70zxaqfCiX+cdLHNxSkLrqcJ6RJBXG76n0x3WPWUohd
fQK6xQvEu8a7AEIfBmhhg+fBvbjCnefd2oAWc/ixJZjdsdL18OuYGaJNweAhO4a6
/glIE/NrIFQAc6fhcHrHkeXVtLdAHcksm/1aKq9NRnhIYukodGlCMiGcFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHm39rs3czWs2cFf21tHlBVqgIDMB8GA1UdIwQY
MBaAFIB5r8ulqHYvt59OXg16Ne6EzT30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0htdnk2V29kaS0zbjA1ZURYbzE3b1ROUGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kNWViNmYtYjc4MS00ZDUyLTgyODMt
ZDJlMTBjOTc2NDVmLzEvZ0htdnk2V29kaS0zbjA1ZURYbzE3b1ROUGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kNWViNmYtYjc4MS00ZDUyLTgyODMtZDJlMTBjOTc2NDVm
LzEvZ0htdnk2V29kaS0zbjA1ZURYbzE3b1ROUGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLi5H/6V
Ekrfy47gI/6M4rHgxNyHqmlD0ugekFjIbg1BkNIDZeH1tFdXvJxjJ46IOpOm8MDz
TzkIb4s8lPckKng1gyKg+ScREKOiAS7lu2R+3oTWO40OUAvWCNZRHCDpWU4IIk+i
2v7zxOOI3kciwc5TfH8y1KjLC+2JmXEQc0QfETNxpd+iTRE3Zgcfgj+fZXdoQBGr
bvGJagDG19eCh49EzUaRauNloR3AToZqPFvIt4KW/5Qjziay0BHEsmTcUABOEyiW
dQGTbYrUb44wMDfY6OfzC0Gt8pWtcbtAk8jiwQnDVSh0tSxyE9xMItsrpWlTcCPb
UmTVoT4zGKSiEg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:58:45 2026 by rpki-client