Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
File:                     uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft (raw, json)
Hash identifier:          SQyY7GMSZrNnz28+2Hdig896GXsRN/twNkuL+nvUt+k=
Subject key identifier:   FF:AF:7C:46:52:39:2D:E3:63:6B:E0:00:9E:99:0B:58:E9:48:02:2B
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Certificate issuer:       /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial:       01A0C7B3BEF97AB444B19DAC6A68129B5CE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
Manifest number:          1A68
Signing time:             Tue 22 Sep 2026 06:00:40 +0000
Manifest this update:     Tue 22 Sep 2026 06:00:40 +0000
Manifest next update:     Wed 23 Sep 2026 06:00:40 +0000
Files and hashes:         1: AXJwwgLV20qOfdiRkcLp7cuyLa8.roa (hash: TJd1vyVMSaddwqO1mLObhJwRHoC09A1cxMdzGIXMVxA=)
                          2: JVhM3Ybetfs8u4lZCxCSpx8pJdU.roa (hash: qDG/lBnPGvBdowawU0zXsB0DnTTCTXSKOxuDVEvE+Lw=)
                          3: JciEJIGTlcBIQFyaMf4k2cUulG0.roa (hash: PsuB426mDHmj/nCSN0DLQAoyVz9KEoXVW/4qNh6n7rE=)
                          4: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl (hash: K6LtevFajY2S4AQjFNGnHWVpP6YYPCbS5oQBL5qXQtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 06:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:b3:be:f9:7a:b4:44:b1:9d:ac:6a:68:12:9b:5c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
        Validity
            Not Before: Sep 22 06:00:40 2026 GMT
            Not After : Sep 23 06:00:40 2026 GMT
        Subject: CN=ffaf7c4652392de3636be0009e990b58e948022b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:1b:8c:83:ae:55:ef:80:eb:e5:a7:44:4a:
                    3e:31:28:dd:a9:7b:ec:19:07:1c:12:95:5e:30:c1:
                    19:c7:f3:d7:fc:d7:5d:79:d5:db:f3:76:09:91:cc:
                    3e:bf:ea:a3:9a:a5:7f:cb:5f:d9:4f:9f:d5:09:9a:
                    a1:4d:6c:06:aa:35:4e:ae:3f:00:6c:bb:65:68:00:
                    d6:41:17:fc:76:60:8a:f6:1a:62:08:ee:87:75:44:
                    ab:93:87:1a:36:39:fb:db:1e:a2:07:8b:ff:04:6b:
                    16:00:9b:0a:9f:c0:c9:4f:07:80:c2:7d:a9:1c:c2:
                    e3:ef:7a:ab:dd:85:21:c7:98:eb:37:d8:94:91:73:
                    4e:62:f1:2e:ad:99:5e:69:c4:5b:83:f7:d0:22:0b:
                    a3:88:5e:5b:96:cf:a9:32:13:09:37:fd:f3:e9:df:
                    22:49:f4:66:09:5c:4a:24:67:39:10:da:dc:54:69:
                    09:e8:75:92:79:29:0c:42:1b:13:c6:11:9a:83:9f:
                    4b:31:6c:48:c8:f7:28:ea:6f:93:3f:05:b4:2b:a4:
                    ab:b5:36:19:bb:52:1c:c9:9e:33:35:dc:41:7e:37:
                    7c:d7:69:f3:c9:37:25:ee:1b:0e:c4:08:8a:78:d0:
                    40:2e:98:f6:11:db:b2:a8:36:92:0e:90:8b:12:23:
                    b8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AF:7C:46:52:39:2D:E3:63:6B:E0:00:9E:99:0B:58:E9:48:02:2B
            X509v3 Authority Key Identifier:
                keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:dc:da:bc:59:6c:83:47:6f:ab:3d:52:ca:35:fc:bf:6c:28:
         6e:10:9f:09:e2:6f:6c:33:f5:3f:3b:e7:dc:a3:ee:dc:63:69:
         aa:3c:54:1c:65:99:11:35:5a:d7:53:e9:f3:05:2a:36:66:6e:
         b9:d8:35:1b:96:fb:41:6b:8d:c0:97:66:5b:bb:87:3d:a8:29:
         4c:32:69:14:5a:7a:d4:44:ab:24:7f:5f:a2:0a:5a:28:06:cb:
         46:b5:68:c5:88:c0:03:87:51:b1:d7:e3:88:57:87:c3:ad:3c:
         9f:6b:1a:fa:58:c0:96:46:fc:c9:40:7c:4b:d8:2f:2f:55:a8:
         23:3b:b3:90:fe:fe:e4:0b:3a:0d:58:e3:f9:fe:2f:67:69:6e:
         d4:33:cf:23:f9:89:5e:03:13:e1:0e:8c:b7:32:06:13:0f:23:
         ca:05:bb:ca:e6:04:2b:e2:a4:42:47:0b:c7:9c:bc:80:82:21:
         98:f2:ae:9d:d3:45:58:c4:58:dd:f0:64:50:8a:4c:18:e8:f6:
         1a:89:cd:ba:fb:8e:19:2d:5d:72:38:0a:1c:b2:09:09:86:5b:
         58:bb:ef:2b:76:d7:b1:1d:9b:59:9a:07:34:5e:cc:65:1e:9a:
         c7:eb:74:45:fe:08:f8:b6:69:bd:f0:8c:f6:48:0e:1b:33:4a:
         28:d4:93:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHs775erREsZ2samgSm1zkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZTBmNzk4NDFjMDIxMGQ5NWI0ZWY1NmZmNjg0NDFjMmFh
OWZjMGYwHhcNMjYwOTIyMDYwMDQwWhcNMjYwOTIzMDYwMDQwWjAzMTEwLwYDVQQD
EyhmZmFmN2M0NjUyMzkyZGUzNjM2YmUwMDA5ZTk5MGI1OGU5NDgwMjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCwbjIOuVe+A6+WnREo+MSjdqXvs
GQccEpVeMMEZx/PX/NddedXb83YJkcw+v+qjmqV/y1/ZT5/VCZqhTWwGqjVOrj8A
bLtlaADWQRf8dmCK9hpiCO6HdUSrk4caNjn72x6iB4v/BGsWAJsKn8DJTweAwn2p
HMLj73qr3YUhx5jrN9iUkXNOYvEurZleacRbg/fQIgujiF5bls+pMhMJN/3z6d8i
SfRmCVxKJGc5ENrcVGkJ6HWSeSkMQhsTxhGag59LMWxIyPco6m+TPwW0K6SrtTYZ
u1IcyZ4zNdxBfjd812nzyTcl7hsOxAiKeNBALpj2EduyqDaSDpCLEiO4swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+vfEZSOS3jY2vgAJ6ZC1jpSAIrMB8GA1UdIwQY
MBaAFLjg95hBwCENlbTvVv9oRBwqqfwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2Mt
NmVhM2NiZmQzYTg0LzEvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2MtNmVhM2NiZmQzYTg0
LzEvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdzavFls
g0dvqz1SyjX8v2wobhCfCeJvbDP1Pzvn3KPu3GNpqjxUHGWZETVa11Pp8wUqNmZu
udg1G5b7QWuNwJdmW7uHPagpTDJpFFp61ESrJH9fogpaKAbLRrVoxYjAA4dRsdfj
iFeHw608n2sa+ljAlkb8yUB8S9gvL1WoIzuzkP7+5As6DVjj+f4vZ2lu1DPPI/mJ
XgMT4Q6MtzIGEw8jygW7yuYEK+KkQkcLx5y8gIIhmPKundNFWMRY3fBkUIpMGOj2
GonNuvuOGS1dcjgKHLIJCYZbWLvvK3bXsR2bWZoHNF7MZR6ax+t0Rf4I+LZpvfCM
9kgOGzNKKNSTsA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:16:59 2026 by rpki-client