Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File:                     _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier:          JF36CRStpAbDcqJ+vTF4/AWl1WpH88fg7cbxGa5nk84=
Subject key identifier:   38:4B:52:F5:9E:23:B4:FF:92:82:1F:0A:DA:9B:1A:48:48:2E:99:6A
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer:       /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial:       01A0C6D793641A1E50FAD490CF9643CDBDA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number:          1A69
Signing time:             Tue 22 Sep 2026 02:00:11 +0000
Manifest this update:     Tue 22 Sep 2026 02:00:11 +0000
Manifest next update:     Wed 23 Sep 2026 02:00:11 +0000
Files and hashes:         1: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: QWLw/q5ZR9hwBBqUPDRm+wieMVqcg33SoIo/N7R3CKs=)
                          2: k9c2O8_Xy_eChgcz-yhyQZaZprY.roa (hash: +knLZsYjdnVF7uKOf0qT11DuyDMhYqWK5WJnzaJ/tgc=)
                          3: r4XvX6Ei1LluIE8pavjpEdLLxJ4.roa (hash: KL22Fozq8IVy1aV+io1l46k9R+MjRQle/pBvY+h3kcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d7:93:64:1a:1e:50:fa:d4:90:cf:96:43:cd:bd:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
        Validity
            Not Before: Sep 22 02:00:11 2026 GMT
            Not After : Sep 23 02:00:11 2026 GMT
        Subject: CN=384b52f59e23b4ff92821f0ada9b1a48482e996a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:59:70:d3:d0:d1:d5:93:dc:2c:83:ac:f0:
                    fc:94:7d:a0:c3:d1:a7:89:ec:01:ce:5a:6e:cd:81:
                    89:47:c4:6f:02:b7:2f:f8:5f:52:be:ed:96:7c:cf:
                    1c:d3:14:b0:f7:c2:93:eb:40:be:b3:74:66:e5:03:
                    4a:ac:c6:c4:d6:9e:51:5c:67:de:bc:b1:6f:37:01:
                    a3:d7:59:12:42:59:ed:ab:8e:4c:dc:93:96:1b:82:
                    cb:f7:89:b3:f4:aa:fd:22:31:30:5c:f4:3b:fb:88:
                    a6:cb:04:86:e6:52:22:da:97:c6:7d:40:77:7d:50:
                    4f:e4:88:ad:e3:b4:2e:f6:30:e5:f9:dc:72:e8:ce:
                    15:90:1f:51:36:4c:ab:3e:e7:e7:3e:37:b2:17:29:
                    9a:54:24:df:8f:99:71:54:5d:86:ca:63:1c:83:87:
                    fc:53:93:27:9c:51:5d:7a:90:ef:76:5a:bf:38:79:
                    74:9d:14:7a:89:a4:98:a7:ce:91:45:9c:d0:9c:c1:
                    57:aa:f2:8c:b9:12:29:1a:de:ae:72:d3:72:f6:46:
                    0d:15:ec:58:de:c6:5b:06:46:ba:ff:4a:44:33:67:
                    8c:97:8c:2d:eb:09:02:4d:2a:57:1a:e6:6d:13:21:
                    d8:11:0c:b0:07:a1:8d:60:bd:7b:03:26:82:cd:b5:
                    35:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4B:52:F5:9E:23:B4:FF:92:82:1F:0A:DA:9B:1A:48:48:2E:99:6A
            X509v3 Authority Key Identifier:
                keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:3d:22:6b:7d:08:b4:23:a2:71:cc:61:d8:8b:f8:c3:34:41:
         11:68:dc:dd:8a:34:f8:c0:3c:d2:fa:67:16:10:b9:fe:8f:1c:
         59:d2:11:47:ba:1f:e0:01:d0:ec:40:c0:9a:b0:73:3b:39:e1:
         3a:92:08:30:75:5d:7d:e9:3e:74:c3:b0:f9:ef:95:68:a6:b6:
         08:37:57:d6:06:2e:b6:c1:4a:db:e6:eb:45:60:d3:a6:0d:b4:
         b2:80:10:9d:1c:2b:f8:02:65:ff:56:04:71:22:dc:ef:63:3d:
         84:c1:66:1c:66:ab:72:d9:4b:c3:8f:14:72:6f:67:31:33:4c:
         13:91:6f:6b:d8:e3:21:be:49:af:a8:d8:bf:7d:91:ca:c7:e0:
         ab:af:2e:22:43:41:f3:d8:74:85:18:f8:74:5a:97:43:e2:e2:
         23:1e:e0:36:b0:5d:c5:df:01:99:9f:0e:9d:5a:5a:1f:bd:90:
         27:4c:19:0c:5b:f4:03:e6:88:53:b6:ad:9b:d2:23:95:4b:1d:
         40:4f:1a:b3:6c:86:f6:d9:fc:91:da:cb:25:27:4e:23:34:02:
         60:4b:12:dd:d7:bf:7a:80:03:0d:f2:70:b8:ee:2e:c7:b8:93:
         c4:c0:2d:bd:1b:6b:a4:e4:9c:c3:5c:76:1a:ad:c6:d5:22:c9:
         20:98:4a:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG15NkGh5Q+tSQz5ZDzb2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMmFmOTA2MGMxZjQyYzYyOGZjZmI4ZjA3ODFkN2E1YmMy
MWZjMDIwHhcNMjYwOTIyMDIwMDExWhcNMjYwOTIzMDIwMDExWjAzMTEwLwYDVQQD
EygzODRiNTJmNTllMjNiNGZmOTI4MjFmMGFkYTliMWE0ODQ4MmU5OTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9dZcNPQ0dWT3CyDrPD8lH2gw9Gn
iewBzlpuzYGJR8RvArcv+F9Svu2WfM8c0xSw98KT60C+s3Rm5QNKrMbE1p5RXGfe
vLFvNwGj11kSQlntq45M3JOWG4LL94mz9Kr9IjEwXPQ7+4imywSG5lIi2pfGfUB3
fVBP5Iit47Qu9jDl+dxy6M4VkB9RNkyrPufnPjeyFymaVCTfj5lxVF2GymMcg4f8
U5MnnFFdepDvdlq/OHl0nRR6iaSYp86RRZzQnMFXqvKMuRIpGt6uctNy9kYNFexY
3sZbBka6/0pEM2eMl4wt6wkCTSpXGuZtEyHYEQywB6GNYL17AyaCzbU1dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhLUvWeI7T/koIfCtqbGkhILplqMB8GA1UdIwQY
MBaAFP0q+QYMH0LGKPz7jweB16W8IfwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDct
YmZjZjlhOTIyYThiLzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDctYmZjZjlhOTIyYThi
LzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAND0ia30I
tCOiccxh2Iv4wzRBEWjc3Yo0+MA80vpnFhC5/o8cWdIRR7of4AHQ7EDAmrBzOznh
OpIIMHVdfek+dMOw+e+VaKa2CDdX1gYutsFK2+brRWDTpg20soAQnRwr+AJl/1YE
cSLc72M9hMFmHGarctlLw48Ucm9nMTNME5Fva9jjIb5Jr6jYv32Rysfgq68uIkNB
89h0hRj4dFqXQ+LiIx7gNrBdxd8BmZ8OnVpaH72QJ0wZDFv0A+aIU7atm9IjlUsd
QE8as2yG9tn8kdrLJSdOIzQCYEsS3de/eoADDfJwuO4ux7iTxMAtvRtrpOScw1x2
Gq3G1SLJIJhKiA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:20:05 2026 by rpki-client