Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
File:                     vE8eawEfTWMxoSeVWlSPpQUlgKU.mft (raw, json)
Hash identifier:          DAGqbK2sFpqmfyPU6k6gCstMqdtY0+f53xhprzHjXlg=
Subject key identifier:   12:A4:08:05:F4:6E:63:8A:71:AE:85:D2:A4:87:F2:9F:38:D8:8C:E9
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Certificate issuer:       /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial:       01A0D15C1A5EB563FCF72D6A33695CF93C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
Manifest number:          1A70
Signing time:             Thu 24 Sep 2026 03:01:09 +0000
Manifest this update:     Thu 24 Sep 2026 03:01:09 +0000
Manifest next update:     Fri 25 Sep 2026 03:01:09 +0000
Files and hashes:         1: Y-wzvP3OyKelpaxWEwdHMeF9K8k.roa (hash: V1H9z7tRL5qSfBvpxCwsmztKo7ytMvvx2XjMrup+mfA=)
                          2: aoYPhsTIFF-ZRbj6_xiKg3VbYUc.roa (hash: VNCClnv/XVF60bxM7vBP7Gf+3o6ieH1yV7iuVnvTEkA=)
                          3: jG4WSmG-xXEWodjP13_7K7HSQG8.roa (hash: CsZTy+c92ZJOl54ewvYtYiNxeF6FGAF7oJqgyUzk8Uk=)
                          4: vE8eawEfTWMxoSeVWlSPpQUlgKU.crl (hash: YEViD8bKjnlY+wilUFkN2/FHxAwZI9W551mteg/83pM=)
                          5: w4XW2p6ELMHxqyCP4OQW9fgfzfA.roa (hash: I0kThNaOy3rd6EMJewACkngTS9RmK2ddcj5IKnlI7p4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5c:1a:5e:b5:63:fc:f7:2d:6a:33:69:5c:f9:3c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
        Validity
            Not Before: Sep 24 03:01:09 2026 GMT
            Not After : Sep 25 03:01:09 2026 GMT
        Subject: CN=12a40805f46e638a71ae85d2a487f29f38d88ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:75:d7:f3:48:4d:80:70:81:40:ed:1a:03:
                    46:7c:95:12:4b:97:4e:2f:18:8a:e7:73:77:c9:16:
                    79:00:63:2d:6e:8d:f7:2c:93:3b:29:c2:de:ed:21:
                    09:18:44:2e:61:c7:df:e5:50:8e:fc:21:9e:cb:ec:
                    53:f2:c9:f1:51:6f:67:f4:b3:d4:93:26:30:db:95:
                    2f:cc:20:4d:a1:7f:14:f3:cb:36:a3:f8:d1:cf:00:
                    42:b4:e6:ef:b1:92:9e:5a:03:25:c7:51:2c:77:09:
                    18:f7:61:9e:5d:f0:c7:dc:03:51:93:8f:e5:40:dd:
                    00:c7:44:93:a1:10:b2:a8:4a:bc:44:bd:88:a0:3e:
                    71:b8:01:a8:cb:4e:47:66:c7:c7:5e:c2:8e:a8:d5:
                    30:c6:5a:44:55:6c:c5:ab:60:6b:6d:a4:82:91:c3:
                    17:34:2c:13:f5:2e:c4:53:f2:75:98:cd:29:ba:c2:
                    9c:06:38:8b:56:dd:43:b1:83:b0:45:52:de:58:4a:
                    07:84:36:5b:f7:9c:1e:76:2b:b7:72:17:48:23:99:
                    87:52:55:dc:ed:7e:85:ee:cc:8f:13:01:df:88:37:
                    e7:de:95:8b:87:f6:5d:0c:6f:ab:99:f8:16:d7:40:
                    2b:8c:a9:44:3a:91:bc:5f:0f:11:e7:0a:0b:75:61:
                    97:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A4:08:05:F4:6E:63:8A:71:AE:85:D2:A4:87:F2:9F:38:D8:8C:E9
            X509v3 Authority Key Identifier:
                keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f8:03:fd:fc:61:2c:24:07:86:07:03:88:8b:25:52:00:21:
         8a:95:18:20:4b:bb:60:cf:d2:8c:b4:87:0d:0f:6f:84:90:e6:
         44:c9:3e:7d:28:43:1c:42:3a:ed:a6:00:5c:91:8e:a8:e8:21:
         3f:1c:be:9e:58:93:24:f4:53:c8:28:4c:0c:f6:d3:fa:ee:2b:
         b0:e2:99:36:3a:e4:b2:f9:4f:a3:2c:6e:f6:ae:67:60:94:2a:
         8c:b1:0f:a3:c6:19:3a:cc:cb:a1:7d:77:ac:0c:bb:30:22:c3:
         32:cd:fd:54:a9:9d:8c:d3:07:14:30:a5:b5:1c:8e:0a:64:ae:
         cc:b2:c8:8d:29:74:b8:ac:52:d9:19:c7:1e:e9:92:3f:be:6b:
         32:02:be:ce:31:4a:7a:ed:70:6a:0c:2f:9a:fa:27:63:a0:dc:
         b7:e4:57:50:aa:71:ad:e7:3e:58:1e:f3:78:4a:00:f0:bd:60:
         20:5d:e7:86:e0:3f:66:2c:3d:18:44:2c:14:22:35:f4:30:76:
         bc:96:ba:43:d9:bf:b6:94:a9:76:5e:50:1d:af:ca:58:a9:49:
         29:c3:5c:7a:5a:56:69:1c:bf:2d:e4:1c:54:09:dd:8f:78:e5:
         c0:2d:82:d3:08:1a:12:6f:39:a9:00:b7:a8:98:69:14:d9:df:
         c8:85:d1:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRXBpetWP89y1qM2lc+TxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNGYxZTZiMDExZjRkNjMzMWExMjc5NTVhNTQ4ZmE1MDUy
NTgwYTUwHhcNMjYwOTI0MDMwMTA5WhcNMjYwOTI1MDMwMTA5WjAzMTEwLwYDVQQD
EygxMmE0MDgwNWY0NmU2MzhhNzFhZTg1ZDJhNDg3ZjI5ZjM4ZDg4Y2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLx11/NITYBwgUDtGgNGfJUSS5dO
LxiK53N3yRZ5AGMtbo33LJM7KcLe7SEJGEQuYcff5VCO/CGey+xT8snxUW9n9LPU
kyYw25UvzCBNoX8U88s2o/jRzwBCtObvsZKeWgMlx1EsdwkY92GeXfDH3ANRk4/l
QN0Ax0SToRCyqEq8RL2IoD5xuAGoy05HZsfHXsKOqNUwxlpEVWzFq2BrbaSCkcMX
NCwT9S7EU/J1mM0pusKcBjiLVt1DsYOwRVLeWEoHhDZb95wediu3chdII5mHUlXc
7X6F7syPEwHfiDfn3pWLh/ZdDG+rmfgW10ArjKlEOpG8Xw8R5woLdWGXMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKkCAX0bmOKca6F0qSH8p842IzpMB8GA1UdIwQY
MBaAFLxPHmsBH01jMaEnlVpUj6UFJYClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGIt
YzU1NDc2NzU5ZDBjLzEvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGItYzU1NDc2NzU5ZDBj
LzEvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/gD/fxh
LCQHhgcDiIslUgAhipUYIEu7YM/SjLSHDQ9vhJDmRMk+fShDHEI67aYAXJGOqOgh
Pxy+nliTJPRTyChMDPbT+u4rsOKZNjrksvlPoyxu9q5nYJQqjLEPo8YZOszLoX13
rAy7MCLDMs39VKmdjNMHFDCltRyOCmSuzLLIjSl0uKxS2RnHHumSP75rMgK+zjFK
eu1wagwvmvonY6Dct+RXUKpxrec+WB7zeEoA8L1gIF3nhuA/Ziw9GEQsFCI19DB2
vJa6Q9m/tpSpdl5QHa/KWKlJKcNcelpWaRy/LeQcVAndj3jlwC2C0wgaEm85qQC3
qJhpFNnfyIXRhQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:10:23 2026 by rpki-client