Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
File:                     dThqb64eVfV2pAW9dLfwjnpsRlM.mft (raw, json)
Hash identifier:          VPOioH0mrw7UFGLJPTa5IBZC7G4wTe/jqxIiM3LSS7c=
Subject key identifier:   1E:00:DF:E8:14:1A:9E:C1:F2:AE:D1:02:73:61:68:22:29:74:B8:C0
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Certificate issuer:       /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial:       01A0C632CAD16F716CDA29145F6D26F8935B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
Manifest number:          0D13
Signing time:             Mon 21 Sep 2026 23:00:12 +0000
Manifest this update:     Mon 21 Sep 2026 23:00:12 +0000
Manifest next update:     Tue 22 Sep 2026 23:00:12 +0000
Files and hashes:         1: EySyBrJAYfrjCqEYxsmXvPf3H5s.roa (hash: nhjndHhWgofWmTA2EVlrwEYSs042l2huk+iYyhoh+2o=)
                          2: YjThpUKY8dmKpHgsGQ94ajjW1mw.roa (hash: mU028HajfQlA+sa9l/YSlDKUMFBYx7IaDAclqqbnoIg=)
                          3: dThqb64eVfV2pAW9dLfwjnpsRlM.crl (hash: cWNhyj8NUsCT+LVWZfyXBEkmCTcfyb1GHrXRL9x0X8c=)
                          4: iC9fUn104zY4OEHwbqWBMRhqfeY.roa (hash: G+diZWtaeUYf2mFGQ7Kk9MtmoUpwbZKTbE2sRgcMjNs=)
                          5: zyy7DFvxeNDAh4pOqGvmANgdfpY.roa (hash: hmel/U2e/Q6evOOJkJluvCudwlyZpvn4SGB/ShoJCY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:32:ca:d1:6f:71:6c:da:29:14:5f:6d:26:f8:93:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
        Validity
            Not Before: Sep 21 23:00:12 2026 GMT
            Not After : Sep 22 23:00:12 2026 GMT
        Subject: CN=1e00dfe8141a9ec1f2aed102736168222974b8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8e:75:55:86:ce:12:aa:df:85:05:1e:36:0d:
                    cb:de:97:85:7e:73:14:a9:b3:6e:13:a0:ab:b2:8f:
                    4a:5b:a6:f5:97:df:36:2a:ae:75:fd:d0:c0:c8:7d:
                    0c:bc:cd:2b:40:b3:6e:f0:51:7a:d6:f6:ac:a9:bd:
                    8a:98:10:56:99:d7:67:78:f9:6e:1e:33:2f:c8:36:
                    34:73:7b:c0:b2:7d:81:80:26:b7:93:ff:9a:ae:42:
                    77:9c:4c:c8:a3:b1:df:73:b8:ee:33:c4:dc:02:1a:
                    6e:b9:02:05:ec:e0:53:9b:4c:5d:6d:92:90:5e:0e:
                    b8:1d:27:47:47:0e:85:fb:99:a9:5f:e5:69:e5:78:
                    f0:5b:5f:f7:34:3a:1c:26:08:64:94:eb:6b:26:b5:
                    62:c4:fa:3e:b9:d7:9a:5e:e7:3f:6d:5d:53:39:98:
                    78:48:94:a7:65:d0:45:25:de:e6:cb:a4:ad:65:7a:
                    ad:37:84:c9:70:2e:f5:7f:01:fa:5d:16:4c:28:9b:
                    14:36:23:01:82:31:a1:2c:81:f8:c2:89:77:e5:e9:
                    a6:a7:1f:bc:d9:d2:86:f6:c7:33:ff:46:1a:34:7a:
                    03:66:86:76:6c:37:11:4a:c0:a2:5e:c5:20:a5:21:
                    db:63:ef:34:c0:86:42:0c:56:49:3e:6b:71:df:91:
                    b4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:00:DF:E8:14:1A:9E:C1:F2:AE:D1:02:73:61:68:22:29:74:B8:C0
            X509v3 Authority Key Identifier:
                keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b0:ba:ee:cc:f5:6e:2b:5a:a1:48:b8:e8:14:3b:e6:ed:14:
         04:af:75:70:68:bd:93:b1:dd:ea:8a:11:66:03:49:ac:a2:b5:
         57:1b:01:6b:03:a8:7c:c6:e2:98:2e:56:82:93:bd:43:3f:e2:
         d7:d8:ca:54:2e:19:4e:a0:e8:51:c1:16:bd:cb:49:8d:ba:a0:
         0f:0e:fe:80:08:41:8e:18:d9:58:65:f9:f3:0b:b1:0f:72:1b:
         14:14:68:42:75:f2:f7:c2:03:bc:a1:15:e2:b8:e6:6e:26:6f:
         76:68:4d:e1:91:20:96:ef:6f:06:31:61:ee:44:74:dd:c4:47:
         38:78:48:4b:18:ca:a7:0e:a4:9e:ee:63:03:9b:6f:d5:c9:f6:
         0e:17:c2:90:2f:32:9e:cc:a9:57:6a:78:d5:7f:53:13:a1:23:
         fd:9d:a3:2c:fc:69:f9:9c:34:3a:7e:76:f4:ab:b4:12:ad:d2:
         91:65:1a:30:21:c4:dd:3c:7b:02:e9:b2:9a:25:75:e4:9b:45:
         c7:7e:bd:44:20:c0:e0:eb:3c:d3:0e:7a:ef:f3:c3:36:93:54:
         00:46:95:54:bc:2c:56:51:3f:fb:d5:80:59:8f:45:0f:72:c7:
         1a:2d:e6:44:62:bb:96:8a:8c:1e:d0:df:fc:e9:52:f8:cb:b0:
         a8:36:cd:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGMsrRb3Fs2ikUX20m+JNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Mzg2YTZmYWUxZTU1ZjU3NmE0MDViZDc0YjdmMDhlN2E2
YzQ2NTMwHhcNMjYwOTIxMjMwMDEyWhcNMjYwOTIyMjMwMDEyWjAzMTEwLwYDVQQD
EygxZTAwZGZlODE0MWE5ZWMxZjJhZWQxMDI3MzYxNjgyMjI5NzRiOGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Y51VYbOEqrfhQUeNg3L3peFfnMU
qbNuE6Crso9KW6b1l982Kq51/dDAyH0MvM0rQLNu8FF61vasqb2KmBBWmddnePlu
HjMvyDY0c3vAsn2BgCa3k/+arkJ3nEzIo7Hfc7juM8TcAhpuuQIF7OBTm0xdbZKQ
Xg64HSdHRw6F+5mpX+Vp5XjwW1/3NDocJghklOtrJrVixPo+udeaXuc/bV1TOZh4
SJSnZdBFJd7my6StZXqtN4TJcC71fwH6XRZMKJsUNiMBgjGhLIH4wol35emmpx+8
2dKG9scz/0YaNHoDZoZ2bDcRSsCiXsUgpSHbY+80wIZCDFZJPmtx35G0PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4A3+gUGp7B8q7RAnNhaCIpdLjAMB8GA1UdIwQY
MBaAFHU4am+uHlX1dqQFvXS38I56bEZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEt
Zjg3OTJmNTc3YjlhLzEvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEtZjg3OTJmNTc3Yjlh
LzEvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7C67sz1
bitaoUi46BQ75u0UBK91cGi9k7Hd6ooRZgNJrKK1VxsBawOofMbimC5WgpO9Qz/i
19jKVC4ZTqDoUcEWvctJjbqgDw7+gAhBjhjZWGX58wuxD3IbFBRoQnXy98IDvKEV
4rjmbiZvdmhN4ZEglu9vBjFh7kR03cRHOHhISxjKpw6knu5jA5tv1cn2DhfCkC8y
nsypV2p41X9TE6Ej/Z2jLPxp+Zw0On529Ku0Eq3SkWUaMCHE3Tx7AumymiV15JtF
x369RCDA4Os80w567/PDNpNUAEaVVLwsVlE/+9WAWY9FD3LHGi3mRGK7loqMHtDf
/OlS+MuwqDbNog==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:47:13 2026 by rpki-client