Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File:                     d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier:          4bhTR91i/RYiMb4LJKenvsjlzEa+asLyNGsfBC8WS90=
Subject key identifier:   9C:9C:85:C5:A1:6B:CF:DF:FB:B6:21:65:DB:3C:ED:5B:82:ED:1F:96
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer:       /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial:       01A0CAEB8AE9399EF7159F4FFA3F269E1A00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number:          178F
Signing time:             Tue 22 Sep 2026 21:00:28 +0000
Manifest this update:     Tue 22 Sep 2026 21:00:28 +0000
Manifest next update:     Wed 23 Sep 2026 21:00:28 +0000
Files and hashes:         1: WIBc-XhxOnD5f9bCQ8Jz0ZuTnGc.roa (hash: BEfaJedvpJl8LX0jJodXnPNHqf67lfg9OTd8BTanSlQ=)
                          2: biWMyLPxPMl5FtQJTRrTfAxg-wg.roa (hash: pNDoD30C6cU3KpMd8R/7fMFpHc25Pe1LLUHjt0eH4ZA=)
                          3: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: f5GDVN7OOhl7FhnZZqy+naEaGgEidwUg3Go1ybuf/QE=)
                          4: pInkCUNgtUwuBuyF0FBGq4Od_LA.roa (hash: 84LwnqiXuuACgBX/nkeDGPUuwEvED3Wv0F8ikRwy6Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:eb:8a:e9:39:9e:f7:15:9f:4f:fa:3f:26:9e:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
        Validity
            Not Before: Sep 22 21:00:28 2026 GMT
            Not After : Sep 23 21:00:28 2026 GMT
        Subject: CN=9c9c85c5a16bcfdffbb62165db3ced5b82ed1f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:b4:67:63:46:30:97:c8:71:c9:93:77:f0:
                    29:78:c9:84:1f:c7:92:97:11:8a:d3:fd:dc:43:d3:
                    af:2e:0f:16:29:07:ff:59:fa:1d:a4:3a:a9:90:bc:
                    6a:73:5c:94:76:d5:95:a7:81:aa:13:cf:f5:f4:2b:
                    48:17:b4:30:5e:85:a5:5b:fe:ab:3e:97:df:b1:78:
                    a6:2a:09:59:be:9e:4a:c6:b5:f4:66:b9:ca:c3:84:
                    31:49:d9:6e:dc:10:eb:25:65:7a:40:c8:60:47:d2:
                    9d:c3:0a:53:e5:ce:09:c6:2c:88:e6:d0:53:8e:65:
                    11:c8:a7:df:c8:fb:39:ba:35:00:5e:c5:06:3e:11:
                    5e:c8:e5:b1:8e:70:93:e6:06:44:42:42:88:e8:4a:
                    cb:ae:a9:4d:0b:f0:e7:97:16:4b:d9:86:aa:9d:25:
                    6a:a4:6a:e0:3e:5f:ad:03:bb:ba:e6:64:d8:88:a3:
                    16:92:6e:c3:dd:cf:70:fa:4c:ef:54:fd:c8:fd:c6:
                    c2:b9:95:b1:c9:f8:5a:28:f9:01:3d:9b:3a:83:3e:
                    d8:4c:20:2e:f2:7e:78:85:5c:f1:6c:f7:30:83:c3:
                    de:5a:d0:2b:cb:ce:d5:55:fd:0f:b2:96:cc:7a:72:
                    03:63:83:c0:06:7c:6d:d2:22:62:4d:60:21:53:c1:
                    10:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:9C:85:C5:A1:6B:CF:DF:FB:B6:21:65:DB:3C:ED:5B:82:ED:1F:96
            X509v3 Authority Key Identifier:
                keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c4:17:35:56:f7:fe:80:d7:79:81:d9:f4:a1:e9:3e:22:77:
         49:06:a7:3b:47:f6:fb:db:c0:f2:96:d8:99:87:a8:12:e8:67:
         6d:3c:db:4d:68:a0:b2:5b:0a:bc:73:c2:44:0d:7f:e9:69:31:
         42:3f:41:1d:5b:6c:b6:56:d3:46:e8:af:cc:65:a4:0d:f2:7c:
         70:9e:f1:ac:20:a4:9f:e6:51:51:a8:08:db:3f:c8:9f:c7:ee:
         6d:20:33:19:03:09:fa:6f:e3:87:5c:41:56:4b:9f:ec:f2:21:
         b5:a7:66:9b:e7:4a:94:b6:56:3f:f1:03:99:46:1c:4b:b2:73:
         25:46:b2:c6:23:c5:24:de:e0:c4:ec:f5:f5:6f:d4:89:24:99:
         35:44:4a:f1:5b:b7:38:a2:1f:67:10:97:e8:d7:39:e1:fc:30:
         30:05:26:98:c2:a4:f9:79:fb:2a:43:6f:71:0f:48:db:3d:01:
         35:ba:9f:39:e9:4c:64:be:65:44:3c:b9:dc:1c:bd:d8:bd:b4:
         2e:5d:d8:cf:45:77:ba:a6:a4:f9:44:d3:bf:fc:c0:f9:cf:b7:
         05:af:c7:48:23:0b:64:5f:72:e2:90:a9:f2:3a:24:ca:98:2e:
         34:3c:07:86:5f:0a:cf:af:21:d5:0e:1f:53:44:14:ee:4c:6d:
         52:a0:64:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDK64rpOZ73FZ9P+j8mnhoAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NmZhZTQzZjczZGEzNWZlMWEyZTQyOTY2MmFlMGI5MTc1
MWUzZmIwHhcNMjYwOTIyMjEwMDI4WhcNMjYwOTIzMjEwMDI4WjAzMTEwLwYDVQQD
Eyg5YzljODVjNWExNmJjZmRmZmJiNjIxNjVkYjNjZWQ1YjgyZWQxZjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptm0Z2NGMJfIccmTd/ApeMmEH8eS
lxGK0/3cQ9OvLg8WKQf/WfodpDqpkLxqc1yUdtWVp4GqE8/19CtIF7QwXoWlW/6r
PpffsXimKglZvp5KxrX0ZrnKw4QxSdlu3BDrJWV6QMhgR9KdwwpT5c4JxiyI5tBT
jmURyKffyPs5ujUAXsUGPhFeyOWxjnCT5gZEQkKI6ErLrqlNC/DnlxZL2YaqnSVq
pGrgPl+tA7u65mTYiKMWkm7D3c9w+kzvVP3I/cbCuZWxyfhaKPkBPZs6gz7YTCAu
8n54hVzxbPcwg8PeWtAry87VVf0PspbMenIDY4PABnxt0iJiTWAhU8EQawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJychcWha8/f+7YhZds87VuC7R+WMB8GA1UdIwQY
MBaAFHdvrkP3PaNf4aLkKWYq4LkXUeP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wYWNmMmQtNWQ2Mi00M2YzLThkMTQt
NGUwY2M1ODE2M2IwLzEvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wYWNmMmQtNWQ2Mi00M2YzLThkMTQtNGUwY2M1ODE2M2Iw
LzEvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8QXNVb3
/oDXeYHZ9KHpPiJ3SQanO0f2+9vA8pbYmYeoEuhnbTzbTWigslsKvHPCRA1/6Wkx
Qj9BHVtstlbTRuivzGWkDfJ8cJ7xrCCkn+ZRUagI2z/In8fubSAzGQMJ+m/jh1xB
Vkuf7PIhtadmm+dKlLZWP/EDmUYcS7JzJUayxiPFJN7gxOz19W/UiSSZNURK8Vu3
OKIfZxCX6Nc54fwwMAUmmMKk+Xn7KkNvcQ9I2z0BNbqfOelMZL5lRDy53By92L20
Ll3Yz0V3uqak+UTTv/zA+c+3Ba/HSCMLZF9y4pCp8jokypguNDwHhl8Kz68h1Q4f
U0QU7kxtUqBkYQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:25:54 2026 by rpki-client