Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File:                     a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier:          vfYpHRFKHiobrhjy90DEcO/p49AEtBMsGi+CiRFRgSQ=
Subject key identifier:   93:E8:43:56:61:59:19:33:60:18:79:8F:EC:26:6C:02:D3:68:3C:B0
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer:       /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial:       01A0C1E86B9BEDD601AFFC9BE50A7EC14A64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number:          14F3
Signing time:             Mon 21 Sep 2026 03:00:29 +0000
Manifest this update:     Mon 21 Sep 2026 03:00:29 +0000
Manifest next update:     Tue 22 Sep 2026 03:00:29 +0000
Files and hashes:         1: T66u3sAZ1h5lcd7CohPfojjoGXM.roa (hash: b1dlk+UCa27l6BBCa3opEOMqOQC7JiJWknd1DaHG0Vo=)
                          2: Ud3In0OaskIaLWIkC7KZsdF241I.roa (hash: AB7KnYKNBO0Ndoa3Ocgqa4UpFDUV3mhvx0miDDfBz5E=)
                          3: WBUV1KvDkb2jOcRdkjFWIVt7ErY.roa (hash: ajrXPdqhe0OAtEgCrpBNnNMpZPGjD6DwlNl7HI0x0zY=)
                          4: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: XqGx+szDS0EDMt9feDDu7sWe4W5W1kspLL0gEP3g8wI=)
                          5: kJEyi9t8ewQAOML32QKelXRnNQw.roa (hash: qisABknNXytALeoXTgeNFHWe1rQRJTNgqfs59Mw/Lek=)
                          6: n_fghfm4yvkyJN0aLgQKMYifpk8.roa (hash: s8M9V6kInMrZ8SN7cdYOAnlXWHjxa+Mtfe0ezUCITCc=)
                          7: zHv_4yLb29OZEPsryzQwrsubCmY.roa (hash: bf6GHsA4iW8nNCo3qaxOx39ntbWsQ60VlVEmI5fRZwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:e8:6b:9b:ed:d6:01:af:fc:9b:e5:0a:7e:c1:4a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
        Validity
            Not Before: Sep 21 03:00:29 2026 GMT
            Not After : Sep 22 03:00:29 2026 GMT
        Subject: CN=93e84356615919336018798fec266c02d3683cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ae:c3:52:76:cd:bb:ae:33:24:b3:ac:b0:8f:
                    38:9d:86:75:20:47:56:d9:51:b7:a3:2f:69:f1:67:
                    78:20:10:09:0c:9f:d7:36:bc:e1:97:d1:37:6e:95:
                    37:2e:cc:9a:a2:a6:db:ff:c9:d3:16:ec:b1:09:4f:
                    2b:1e:67:c7:89:b7:95:fb:f5:1c:d4:e2:11:55:73:
                    db:fc:48:e7:6e:7a:c2:a4:87:64:82:0e:a0:1d:d9:
                    e1:4d:93:ef:89:3a:8d:bf:8c:74:97:7e:ef:0f:64:
                    5c:b4:09:75:17:b3:01:ee:68:77:4e:b7:c9:b8:f5:
                    c1:81:aa:59:fb:aa:c2:8d:2d:51:40:d5:b2:30:07:
                    c5:ab:39:02:c4:4a:80:6a:3e:e2:5b:f3:c3:d2:d9:
                    e0:a0:18:ac:8c:05:2a:80:a4:aa:9e:52:45:e3:66:
                    8e:4f:ba:1a:1e:5c:0d:a7:19:f1:9f:6e:38:b6:f5:
                    50:12:3f:f8:60:6c:03:73:bc:cd:4c:50:8d:0e:15:
                    b4:9a:37:90:a2:55:3f:c9:94:fc:2c:8a:cf:c0:b8:
                    8b:45:4a:13:ae:78:bc:f5:4f:d4:29:bf:2b:06:69:
                    d9:b0:d4:d1:73:47:5f:1e:76:75:a1:a2:7a:46:85:
                    5a:32:69:e9:ba:d6:90:a0:66:71:db:a1:8a:46:20:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E8:43:56:61:59:19:33:60:18:79:8F:EC:26:6C:02:D3:68:3C:B0
            X509v3 Authority Key Identifier:
                keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:4d:fb:e9:19:ab:db:d9:0b:90:47:41:0d:f1:e6:5b:94:c1:
         d5:5e:53:b6:ce:d7:95:dc:b2:7b:3d:ed:aa:da:2f:f0:83:20:
         e7:cf:2b:59:21:31:46:4d:bd:40:9d:c7:ee:c6:26:2c:55:88:
         d2:8f:b0:66:b8:3a:44:28:c4:4c:ab:e0:13:43:af:bd:bb:74:
         33:8c:78:05:d0:09:79:dd:07:03:63:56:fe:0e:ff:a5:e6:d0:
         79:91:b9:51:ff:c8:d9:3c:fe:df:df:20:00:f7:00:fa:34:f1:
         79:e6:1e:91:a6:de:22:ac:62:cb:15:c0:f0:fa:c4:8a:ac:d5:
         70:2f:e0:f2:0b:cb:eb:22:ed:42:05:a7:59:2d:de:19:9c:1f:
         e3:c2:9e:21:1d:55:ab:bb:e7:94:74:85:ad:3e:f1:1e:8a:11:
         74:25:46:5c:9c:dd:fa:64:a9:ee:6b:1b:9c:1c:13:28:a4:06:
         4a:04:7c:4d:04:5d:3b:c8:1b:ca:90:e8:39:66:64:98:4a:54:
         0c:bc:1e:0b:10:cf:57:36:6c:c9:40:ed:84:40:66:50:ed:82:
         f9:9b:e5:ce:69:1f:aa:d9:d7:20:4e:f3:50:44:5a:cb:a2:40:
         5c:a4:cb:26:6f:f2:56:92:3e:0e:96:f8:b7:4d:21:20:0a:08:
         72:9b:b5:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDB6Gub7dYBr/yb5Qp+wUpkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2QxZjFlODc3YzEyNzk4Mjc0ZTAxMzM0NTU0Zjg5OWYz
OGVhYzEwHhcNMjYwOTIxMDMwMDI5WhcNMjYwOTIyMDMwMDI5WjAzMTEwLwYDVQQD
Eyg5M2U4NDM1NjYxNTkxOTMzNjAxODc5OGZlYzI2NmMwMmQzNjgzY2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq7DUnbNu64zJLOssI84nYZ1IEdW
2VG3oy9p8Wd4IBAJDJ/XNrzhl9E3bpU3Lsyaoqbb/8nTFuyxCU8rHmfHibeV+/Uc
1OIRVXPb/EjnbnrCpIdkgg6gHdnhTZPviTqNv4x0l37vD2RctAl1F7MB7mh3TrfJ
uPXBgapZ+6rCjS1RQNWyMAfFqzkCxEqAaj7iW/PD0tngoBisjAUqgKSqnlJF42aO
T7oaHlwNpxnxn244tvVQEj/4YGwDc7zNTFCNDhW0mjeQolU/yZT8LIrPwLiLRUoT
rni89U/UKb8rBmnZsNTRc0dfHnZ1oaJ6RoVaMmnputaQoGZx26GKRiAH9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPoQ1ZhWRkzYBh5j+wmbALTaDywMB8GA1UdIwQY
MBaAFGt9Hx6HfBJ5gnTgEzRVT4mfOOrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUt
MmZhZDlhMmZjM2VmLzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUtMmZhZDlhMmZjM2Vm
LzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqk376Rmr
29kLkEdBDfHmW5TB1V5Tts7Xldyyez3tqtov8IMg588rWSExRk29QJ3H7sYmLFWI
0o+wZrg6RCjETKvgE0Ovvbt0M4x4BdAJed0HA2NW/g7/pebQeZG5Uf/I2Tz+398g
APcA+jTxeeYekabeIqxiyxXA8PrEiqzVcC/g8gvL6yLtQgWnWS3eGZwf48KeIR1V
q7vnlHSFrT7xHooRdCVGXJzd+mSp7msbnBwTKKQGSgR8TQRdO8gbypDoOWZkmEpU
DLweCxDPVzZsyUDthEBmUO2C+ZvlzmkfqtnXIE7zUERay6JAXKTLJm/yVpI+Dpb4
t00hIAoIcpu1CQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:35:25 2026 by rpki-client