Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File:                     F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier:          GpyiJLUpmgetQ01VMmK3v9Gko8Blis7yXemhjEfQ/CI=
Subject key identifier:   79:8D:8D:B9:D5:E7:4F:90:0A:20:34:3C:DC:93:92:A3:FA:4F:A2:FF
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer:       /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial:       01A0CAB55F38366E89AE39B187795C7138AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number:          146C
Signing time:             Tue 22 Sep 2026 20:01:19 +0000
Manifest this update:     Tue 22 Sep 2026 20:01:19 +0000
Manifest next update:     Wed 23 Sep 2026 20:01:19 +0000
Files and hashes:         1: 1-earsS0WLz1IJKO-WJXouPRRDc.roa (hash: 0PMS6Wj9PBe3RqKaVauppM1NP8rM+o6ZHX9nxGiIcug=)
                          2: BQMAZ1-GEH5r12U7WPk6XQ_xa2o.roa (hash: hON2VcGx2tnVP3W4DtWqeENmyb4FIH7O20nZquH7iUI=)
                          3: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: BU7sORURS09VYNPh4E42/+ahV6efgFiRfkt1ToOPvOk=)
                          4: Nffyfowdb4DCXyl-CUibDbck5aw.roa (hash: +korLpH5t+ySKaX06qHUvdV0iVtoQyoQxEXvg5jMwS0=)
                          5: zYExE-CWB4WrYD1j1mlYKlry5zU.roa (hash: aQw4vgQl/XUfRZ1hivO701ANJNV8KUYzIDEJLZE7u/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:b5:5f:38:36:6e:89:ae:39:b1:87:79:5c:71:38:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
        Validity
            Not Before: Sep 22 20:01:19 2026 GMT
            Not After : Sep 23 20:01:19 2026 GMT
        Subject: CN=798d8db9d5e74f900a20343cdc9392a3fa4fa2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:f2:89:a9:99:6e:f0:66:2a:a2:12:45:57:
                    bc:18:8c:91:e2:1f:43:61:b9:de:a2:97:fd:6f:34:
                    e7:0c:67:c7:25:a2:2f:b8:c2:92:79:aa:40:a9:49:
                    6d:96:ec:5c:4a:e9:a9:41:f6:62:04:61:fd:f6:63:
                    b6:49:34:fc:ab:4e:17:71:88:d3:2c:a1:2f:ae:fe:
                    b2:e6:5e:57:e9:5e:10:8c:36:b1:ec:0e:a3:86:51:
                    7c:b6:77:07:34:5b:70:70:a5:fb:30:69:08:10:d2:
                    96:4d:27:16:60:71:af:19:3a:ef:9b:e5:e6:33:8e:
                    9b:68:e7:2d:79:41:56:02:5f:86:e1:f6:0f:08:55:
                    a4:93:34:dc:50:43:5a:03:75:fd:81:90:f1:f4:bc:
                    38:bb:e3:ef:57:97:f6:d3:8e:1e:19:4f:a6:76:c3:
                    92:fa:24:e7:f8:96:b2:26:c8:fd:95:f3:f3:cc:c5:
                    60:1e:e4:66:56:a3:04:b8:fd:ce:4e:a1:b7:2b:e4:
                    a6:f4:cb:6d:23:ea:61:ca:a0:3a:d6:fd:52:60:51:
                    d3:51:50:77:e6:4c:8f:a5:b2:df:8a:0a:bf:15:8a:
                    8b:a8:db:fb:02:c3:40:d6:74:5f:88:f1:92:dd:3d:
                    9a:ef:4b:b4:81:97:63:1c:97:d9:e4:9f:50:a4:f7:
                    4f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8D:8D:B9:D5:E7:4F:90:0A:20:34:3C:DC:93:92:A3:FA:4F:A2:FF
            X509v3 Authority Key Identifier:
                keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a9:92:9d:e3:27:3d:81:14:8c:d1:e3:64:b9:4b:a3:df:14:
         b3:44:ff:40:c3:b2:e7:45:1d:68:ec:79:e7:66:6f:48:38:58:
         55:07:be:a3:ee:39:3c:72:2d:6f:8e:d0:ad:72:ad:2a:15:83:
         53:3e:f5:e6:e9:c2:4f:78:b3:19:a6:99:ca:3a:6d:f1:46:0a:
         30:4f:0a:4e:05:08:03:c0:59:46:82:28:69:af:37:ea:56:84:
         22:cd:40:4e:de:e9:fd:e7:d5:10:2c:7b:4e:76:1e:b4:ea:67:
         05:02:e3:19:93:44:90:9f:f5:21:67:2e:4f:b8:ed:39:65:d5:
         7b:8f:09:6f:25:1e:e2:75:96:21:6f:45:63:62:f7:65:5f:00:
         9c:77:98:e4:4a:c3:a4:7a:db:0c:1b:02:bd:53:9e:07:cc:d6:
         ce:1a:c3:c9:7c:2d:71:b0:58:07:75:20:b9:e1:e8:6a:4f:0f:
         6e:37:cd:fe:17:d7:4d:ca:52:41:1e:3e:25:82:81:56:2e:b9:
         bd:bd:53:2c:d9:cf:16:f9:15:4b:15:c5:c4:68:a1:d7:fb:77:
         10:d2:78:d4:49:f5:ce:68:a3:59:1d:af:29:4c:52:9d:29:55:
         74:f9:d3:44:a2:b0:bb:6d:58:b1:6f:21:a2:8a:61:04:87:b9:
         c3:6f:63:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKtV84Nm6Jrjmxh3lccTisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTI2Y2NhYzRmOTA2NGUwNTg1NDliMzAxNzJjODQ0Mzk3
ODdmYmMwHhcNMjYwOTIyMjAwMTE5WhcNMjYwOTIzMjAwMTE5WjAzMTEwLwYDVQQD
Eyg3OThkOGRiOWQ1ZTc0ZjkwMGEyMDM0M2NkYzkzOTJhM2ZhNGZhMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmbyiamZbvBmKqISRVe8GIyR4h9D
Ybneopf9bzTnDGfHJaIvuMKSeapAqUltluxcSumpQfZiBGH99mO2STT8q04XcYjT
LKEvrv6y5l5X6V4QjDax7A6jhlF8tncHNFtwcKX7MGkIENKWTScWYHGvGTrvm+Xm
M46baOcteUFWAl+G4fYPCFWkkzTcUENaA3X9gZDx9Lw4u+PvV5f2044eGU+mdsOS
+iTn+JayJsj9lfPzzMVgHuRmVqMEuP3OTqG3K+Sm9MttI+phyqA61v1SYFHTUVB3
5kyPpbLfigq/FYqLqNv7AsNA1nRfiPGS3T2a70u0gZdjHJfZ5J9QpPdPaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmNjbnV50+QCiA0PNyTkqP6T6L/MB8GA1UdIwQY
MBaAFBdSbMrE+QZOBYVJswFyyEQ5eH+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYt
OTQxY2M2YTdiYWQ5LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYtOTQxY2M2YTdiYWQ5
LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKmSneMn
PYEUjNHjZLlLo98Us0T/QMOy50UdaOx552ZvSDhYVQe+o+45PHItb47QrXKtKhWD
Uz715unCT3izGaaZyjpt8UYKME8KTgUIA8BZRoIoaa836laEIs1ATt7p/efVECx7
TnYetOpnBQLjGZNEkJ/1IWcuT7jtOWXVe48JbyUe4nWWIW9FY2L3ZV8AnHeY5ErD
pHrbDBsCvVOeB8zWzhrDyXwtcbBYB3UgueHoak8PbjfN/hfXTcpSQR4+JYKBVi65
vb1TLNnPFvkVSxXFxGih1/t3ENJ41En1zmijWR2vKUxSnSlVdPnTRKKwu21YsW8h
oophBIe5w29jqw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:22:31 2026 by rpki-client