Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
File:                     pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft (raw, json)
Hash identifier:          mXkneXrXzLWTufNbUrl7Qz/pEweiKO8HK4id7GzayVw=
Subject key identifier:   BA:91:E1:BF:AB:61:C2:C5:56:10:0B:A6:1F:8C:BA:16:E6:C1:4E:B2
Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
Certificate issuer:       /CN=a4b707300e869467be5e5273222d90e0b618f924
Certificate serial:       01A0CD11766573C1190654B9B194838AB883
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
Manifest number:          045F
Signing time:             Wed 23 Sep 2026 07:01:08 +0000
Manifest this update:     Wed 23 Sep 2026 07:01:08 +0000
Manifest next update:     Thu 24 Sep 2026 07:01:08 +0000
Files and hashes:         1: 4LcrxhWHmhkvPdpuzoR7Y2DvIRU.roa (hash: R/FNqp7EeNGMZEea43bk96Q3NZeLFAovdU6R5kUDA+c=)
                          2: _rkoOQmmtVtFnbLuubGb2FPnExg.roa (hash: CzxwuD95bHpNiF0gIsEuyjsHFs3IQ3s6b3cEWVvW62w=)
                          3: bBQddLsJpMdgE7gqchwFza_jgpU.roa (hash: FUjStVoQwXDYDeRsi+A//hBH3DZhoNYwk2uCiqnGlmA=)
                          4: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl (hash: y/z2q0EasAjMFr34lKyWWSl7QBleTqdEh74MBfmjmGc=)
                          5: xJLUaEqq1ZnsryMWFK1TiSGmxHs.roa (hash: CgFHk+Ek6FTFUMY85fF8eDyesBRdCZysUJ3S3cGo/uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:11:76:65:73:c1:19:06:54:b9:b1:94:83:8a:b8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924
        Validity
            Not Before: Sep 23 07:01:08 2026 GMT
            Not After : Sep 24 07:01:08 2026 GMT
        Subject: CN=ba91e1bfab61c2c556100ba61f8cba16e6c14eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:95:58:41:5d:17:17:82:62:b8:58:7b:db:83:
                    a0:15:e0:5b:b0:ec:03:ea:9b:f1:dd:94:c7:54:50:
                    f6:d2:ba:c4:52:a5:0c:d1:dd:85:d6:44:8e:93:58:
                    32:9c:7f:dc:b9:7d:9d:a8:2a:1a:f6:5d:b3:2b:c7:
                    ec:b4:de:b3:c1:29:09:03:4f:2d:c9:da:94:f4:9b:
                    9e:fe:cc:a2:ad:83:4f:b1:9f:f2:da:48:c0:b4:a2:
                    d7:e7:98:85:41:45:32:cf:8d:f6:db:bc:8c:d8:36:
                    e8:51:88:60:1f:ea:68:12:87:99:ca:b0:88:9e:e7:
                    fe:b2:26:31:8f:e3:1b:22:51:8e:cd:e5:66:36:c5:
                    ea:15:ae:23:31:05:17:5d:4a:bf:2e:43:f1:70:58:
                    cf:fd:3a:68:10:a6:80:1a:86:2a:15:2a:e9:b1:da:
                    a0:22:66:22:b7:f2:77:84:3a:45:f5:75:94:4c:61:
                    bb:fb:cf:b2:f0:b6:13:52:af:81:38:99:4a:ff:f1:
                    48:31:20:de:30:24:64:20:b6:97:7b:0f:e2:fe:c2:
                    26:25:83:6b:80:99:3c:e8:57:6e:15:eb:62:7b:f9:
                    32:15:06:3b:8a:a9:e7:e4:ad:82:00:03:0b:bf:cb:
                    8b:70:67:9d:1d:6d:c9:fb:22:b8:d0:4a:69:77:35:
                    95:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:91:E1:BF:AB:61:C2:C5:56:10:0B:A6:1F:8C:BA:16:E6:C1:4E:B2
            X509v3 Authority Key Identifier:
                keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:05:3f:19:ca:68:83:5a:8b:bf:6a:f8:5c:16:85:3a:01:bb:
         42:cd:85:bb:ce:0c:9e:25:47:ae:76:e1:ec:30:b3:fa:05:e6:
         ae:df:2b:04:5c:9f:38:2f:35:df:72:82:83:47:83:57:a6:6a:
         e7:ba:89:02:5b:57:d6:f2:31:3d:5e:92:8d:29:40:7a:b1:42:
         06:5c:e2:54:15:69:69:34:36:a7:f2:be:94:cb:05:7e:b2:48:
         60:52:cc:1d:55:21:49:ed:31:78:88:e8:42:39:b3:08:5d:fa:
         2f:58:c2:d2:34:d2:93:3c:19:5d:6f:44:80:f2:0f:3f:a5:89:
         13:61:b3:cb:d7:ea:c6:3b:9a:9c:45:cd:87:6c:f4:4c:05:2a:
         6d:08:b7:63:30:0f:b9:d0:72:6d:9e:c8:42:e4:1f:18:72:e4:
         26:6a:30:54:e8:2b:ce:7b:7d:5b:9f:59:fd:31:45:6c:68:1f:
         dd:83:d9:ca:f3:06:09:28:ac:aa:ac:f9:ff:a2:6d:42:92:38:
         74:c9:ee:2a:39:13:45:a2:d5:9c:99:54:fa:22:7e:ac:28:3b:
         5d:85:38:4d:dd:06:70:59:d4:71:68:81:49:a3:93:91:3b:d4:
         f6:7a:6c:fa:4c:75:6d:dd:54:6f:d1:62:1c:b0:08:84:cc:25:
         be:c9:d4:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNEXZlc8EZBlS5sZSDiriDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjcwNzMwMGU4Njk0NjdiZTVlNTI3MzIyMmQ5MGUwYjYx
OGY5MjQwHhcNMjYwOTIzMDcwMTA4WhcNMjYwOTI0MDcwMTA4WjAzMTEwLwYDVQQD
EyhiYTkxZTFiZmFiNjFjMmM1NTYxMDBiYTYxZjhjYmExNmU2YzE0ZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJVYQV0XF4JiuFh724OgFeBbsOwD
6pvx3ZTHVFD20rrEUqUM0d2F1kSOk1gynH/cuX2dqCoa9l2zK8fstN6zwSkJA08t
ydqU9Jue/syirYNPsZ/y2kjAtKLX55iFQUUyz43227yM2DboUYhgH+poEoeZyrCI
nuf+siYxj+MbIlGOzeVmNsXqFa4jMQUXXUq/LkPxcFjP/TpoEKaAGoYqFSrpsdqg
ImYit/J3hDpF9XWUTGG7+8+y8LYTUq+BOJlK//FIMSDeMCRkILaXew/i/sImJYNr
gJk86FduFetie/kyFQY7iqnn5K2CAAMLv8uLcGedHW3J+yK40EppdzWVsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqR4b+rYcLFVhALph+MuhbmwU6yMB8GA1UdIwQY
MBaAFKS3BzAOhpRnvl5ScyItkOC2GPkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTct
M2U1NWM0OWYyZDRlLzEvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mYzg1MTktNjJlNC00Mjg5LTk5MTctM2U1NWM0OWYyZDRl
LzEvcExjSE1BNkdsR2UtWGxKeklpMlE0TFlZLVNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQU/Gcpo
g1qLv2r4XBaFOgG7Qs2Fu84MniVHrnbh7DCz+gXmrt8rBFyfOC8133KCg0eDV6Zq
57qJAltX1vIxPV6SjSlAerFCBlziVBVpaTQ2p/K+lMsFfrJIYFLMHVUhSe0xeIjo
QjmzCF36L1jC0jTSkzwZXW9EgPIPP6WJE2Gzy9fqxjuanEXNh2z0TAUqbQi3YzAP
udBybZ7IQuQfGHLkJmowVOgrznt9W59Z/TFFbGgf3YPZyvMGCSisqqz5/6JtQpI4
dMnuKjkTRaLVnJlU+iJ+rCg7XYU4Td0GcFnUcWiBSaOTkTvU9nps+kx1bd1Ub9Fi
HLAIhMwlvsnU3g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:56:42 2026 by rpki-client