Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File:                     v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier:          1aTUW9lQLP/ihtsJH4bFOp4On1dO7hx1/gTWs42s2BA=
Subject key identifier:   51:D4:FD:EB:9A:8B:BE:B9:AB:A4:C7:A5:86:3D:D7:D4:AE:6D:25:27
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer:       /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial:       01A0C8FCE7DC39B5CEDF3D15A8D6E3FB0C68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number:          1A69
Signing time:             Tue 22 Sep 2026 12:00:12 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:12 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:12 +0000
Files and hashes:         1: 440C9nJzfAwzFQHbbTSsKGKGkig.roa (hash: 9GaUDae42NdjzGOSW1+fUpuBNX675/CDIy2pT/BeZSI=)
                          2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: c2OARw4pssmitWNUGWpBzKLW5TrplwMz/sie3zslmaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fc:e7:dc:39:b5:ce:df:3d:15:a8:d6:e3:fb:0c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
        Validity
            Not Before: Sep 22 12:00:12 2026 GMT
            Not After : Sep 23 12:00:12 2026 GMT
        Subject: CN=51d4fdeb9a8bbeb9aba4c7a5863dd7d4ae6d2527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f3:06:da:2a:5f:fa:2e:4c:d6:88:df:db:9a:
                    5d:6a:3d:6f:04:8e:ee:67:9e:ff:45:b3:f8:e4:a7:
                    85:c8:9f:c3:ed:0c:af:e2:8d:ac:bd:25:f6:0c:eb:
                    59:ec:0f:d7:13:49:b0:93:ab:79:62:d3:b7:02:ed:
                    f3:8d:eb:af:c4:b9:47:ed:6f:9a:d8:61:47:15:80:
                    20:d5:89:c2:fc:62:bc:b2:71:04:8a:cb:b4:ed:92:
                    a2:06:3c:e1:fd:1d:e6:9d:11:15:76:2a:00:68:d6:
                    11:a1:e9:45:5b:66:e4:40:fd:6d:63:6b:a5:32:30:
                    c8:84:b8:b9:f4:3a:da:8a:68:ed:59:4f:4c:77:8c:
                    45:1a:a7:05:67:f6:d9:bf:d3:e4:14:7c:ad:c2:fc:
                    08:2a:ad:63:77:ab:64:36:7a:9d:7b:37:02:06:3e:
                    e2:d9:62:ea:b3:cf:bb:7f:c8:e6:63:96:49:7e:82:
                    d2:06:f7:11:67:c6:e4:7f:be:23:44:62:40:dc:80:
                    55:76:2a:44:83:1a:fb:20:a7:3a:94:a0:af:50:f6:
                    ab:5a:8f:a7:21:73:ab:b5:e6:16:82:c3:6c:a6:fc:
                    61:c4:6b:e5:77:3d:68:31:7c:9c:81:6c:2f:07:e8:
                    b4:78:2a:93:12:66:1e:83:ae:c9:82:57:f6:98:fe:
                    aa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D4:FD:EB:9A:8B:BE:B9:AB:A4:C7:A5:86:3D:D7:D4:AE:6D:25:27
            X509v3 Authority Key Identifier:
                keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6b:02:98:28:27:52:82:0c:b0:be:f0:bf:df:92:0b:9e:e6:
         ca:c7:8c:58:dd:1e:f2:d4:d2:7c:93:39:a7:56:18:53:06:ed:
         3d:d5:ce:60:1f:cf:8f:ce:58:75:7f:ff:c2:00:a2:62:ce:7a:
         0a:61:c3:96:7a:2f:45:3a:f4:98:2a:a2:eb:c0:56:52:5b:92:
         b8:6f:ad:77:49:cb:f9:05:a2:d3:ff:4f:b3:7a:78:e4:75:2e:
         1c:72:87:5d:d3:08:fa:c0:d8:5d:e6:b9:dc:99:98:0a:92:0a:
         1a:20:71:6f:a6:fa:67:49:7d:82:f4:a6:13:98:67:05:38:da:
         b4:b4:14:75:a4:a1:1a:55:5d:19:35:8d:ce:a5:fe:85:8c:69:
         c6:db:a3:a0:7e:61:a6:e4:3c:1d:2e:42:de:ce:dd:0b:fc:95:
         f7:ea:85:25:b4:2e:ae:fc:2a:74:73:46:89:b2:4f:55:3b:d3:
         fd:75:c4:1d:c6:ba:03:c9:97:a1:0f:bd:e3:b0:7d:b0:e9:b6:
         4d:be:b1:b4:91:0e:16:8f:dd:46:88:9d:64:1a:18:aa:46:7d:
         fc:06:e6:30:e1:01:77:f0:94:51:9f:fc:67:f9:a4:01:e5:32:
         c0:07:a3:f1:0a:a6:c8:64:ac:cf:13:ea:47:e9:a4:6d:59:55:
         98:9b:05:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDI/OfcObXO3z0VqNbj+wxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNGI1MWIwYmFjNDVmYTIyNmJkMmRjZmYxMTczMGVkNDBl
YzIxNDkwHhcNMjYwOTIyMTIwMDEyWhcNMjYwOTIzMTIwMDEyWjAzMTEwLwYDVQQD
Eyg1MWQ0ZmRlYjlhOGJiZWI5YWJhNGM3YTU4NjNkZDdkNGFlNmQyNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfMG2ipf+i5M1ojf25pdaj1vBI7u
Z57/RbP45KeFyJ/D7Qyv4o2svSX2DOtZ7A/XE0mwk6t5YtO3Au3zjeuvxLlH7W+a
2GFHFYAg1YnC/GK8snEEisu07ZKiBjzh/R3mnREVdioAaNYRoelFW2bkQP1tY2ul
MjDIhLi59DraimjtWU9Md4xFGqcFZ/bZv9PkFHytwvwIKq1jd6tkNnqdezcCBj7i
2WLqs8+7f8jmY5ZJfoLSBvcRZ8bkf74jRGJA3IBVdipEgxr7IKc6lKCvUParWo+n
IXOrteYWgsNspvxhxGvldz1oMXycgWwvB+i0eCqTEmYeg67Jglf2mP6quwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHU/euai765q6THpYY919SubSUnMB8GA1UdIwQY
MBaAFL9LUbC6xF+iJr0tz/EXMO1A7CFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2Et
ZTQzNTIzOTgzNzkzLzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2EtZTQzNTIzOTgzNzkz
LzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGsCmCgn
UoIMsL7wv9+SC57myseMWN0e8tTSfJM5p1YYUwbtPdXOYB/Pj85YdX//wgCiYs56
CmHDlnovRTr0mCqi68BWUluSuG+td0nL+QWi0/9Ps3p45HUuHHKHXdMI+sDYXea5
3JmYCpIKGiBxb6b6Z0l9gvSmE5hnBTjatLQUdaShGlVdGTWNzqX+hYxpxtujoH5h
puQ8HS5C3s7dC/yV9+qFJbQurvwqdHNGibJPVTvT/XXEHca6A8mXoQ+947B9sOm2
Tb6xtJEOFo/dRoidZBoYqkZ9/AbmMOEBd/CUUZ/8Z/mkAeUywAej8QqmyGSszxPq
R+mkbVlVmJsFPQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:01:28 2026 by rpki-client