Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File:                     DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier:          Op8x+ZTcrHVv20KzXijcMx0u4Zrmlfj3qslSncbpc5s=
Subject key identifier:   E9:3C:2D:74:B3:FA:02:58:14:4C:04:1C:D6:36:8B:19:B5:72:4B:DB
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer:       /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial:       01A0C66A37B4E60ADAF1936011BF8BD3056A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number:          1A69
Signing time:             Tue 22 Sep 2026 00:00:44 +0000
Manifest this update:     Tue 22 Sep 2026 00:00:44 +0000
Manifest next update:     Wed 23 Sep 2026 00:00:44 +0000
Files and hashes:         1: D32i6_dCWTSsyvln6Op_fVc7ifQ.roa (hash: Al7b3A0tyoRmZ6j5Fdgg5aD1e2Ddf8niF7ufLQSci6A=)
                          2: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: Bhwtfb3BEmpAn1NDgv0A2di789xbnLprS/VT2vTY4X0=)
                          3: cRdmmZiNILryID4MaoZH-egP0Pc.roa (hash: Tc3P5pw52D848VbuoEwG61qEEaFgbEGdqefrzUmOWZA=)
                          4: dO_oeTKff3dNZT_GL6N0iMSDLeA.roa (hash: U9kjCpU+QQfnTA2jCeD/iAdC4QIXldj/AsRqVA98Jco=)
                          5: hKslTlGWTrYnNFRq7nm02w7iSks.roa (hash: hx/Lg8Qct01wevwfLicpLCIZWwNva1xX/icDKHDKOOo=)
                          6: qsPJeU-C_65tmjEWpGQYQUIEajo.roa (hash: 1cn7hAG7OagxW4P/nzGgq4cV1HKNDko3iBj1s+1Q88U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 00:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:37:b4:e6:0a:da:f1:93:60:11:bf:8b:d3:05:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
        Validity
            Not Before: Sep 22 00:00:44 2026 GMT
            Not After : Sep 23 00:00:44 2026 GMT
        Subject: CN=e93c2d74b3fa0258144c041cd6368b19b5724bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:02:cf:b0:61:61:a5:05:60:e9:2a:ec:8e:
                    b6:aa:c3:cd:ec:5c:db:39:c4:14:88:b3:1d:78:2b:
                    fe:11:84:35:76:c0:8b:ee:25:f9:a4:cc:5c:8e:ff:
                    0a:e2:03:15:8d:53:c8:6c:d7:7d:b5:99:ee:5e:7d:
                    fc:f4:53:02:46:83:34:80:7f:05:b0:d0:42:c0:5f:
                    0e:18:e9:4a:61:79:e5:12:3c:ab:4f:5c:48:15:c4:
                    e9:d2:6f:2b:ae:8c:70:fe:dc:19:12:2e:34:b2:42:
                    1f:aa:fc:2d:f1:d9:0d:af:55:f6:87:8c:ce:17:07:
                    a3:22:fb:db:99:ff:b9:0a:99:5e:d4:a8:75:eb:b9:
                    8f:e6:eb:43:80:e5:a5:d7:e6:1c:38:0e:c0:fd:3f:
                    42:29:26:a4:01:36:d0:06:17:78:05:89:03:60:0d:
                    5a:12:c0:a0:72:8f:1b:3d:93:5b:30:2b:a6:68:98:
                    34:bb:70:e3:75:4f:e7:7a:1a:d1:a9:f4:07:3b:9b:
                    68:c7:88:44:59:93:1f:de:50:f8:5a:ae:2f:4d:1a:
                    aa:46:b7:93:79:ff:e8:d1:5f:a8:56:fc:b7:83:9a:
                    40:82:ff:a1:2f:de:55:44:b7:0b:cd:84:82:ad:bf:
                    48:1f:5e:71:d6:2b:b3:9d:5a:5b:a3:a1:a3:af:8d:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3C:2D:74:B3:FA:02:58:14:4C:04:1C:D6:36:8B:19:B5:72:4B:DB
            X509v3 Authority Key Identifier:
                keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b0:e4:4a:07:52:35:12:d0:89:ad:61:bc:dc:18:0c:1e:10:
         a1:fa:17:eb:0e:d5:de:37:39:9b:6c:df:bb:02:19:6a:28:46:
         23:2f:f4:41:11:8c:68:0e:8c:cd:9c:bf:ca:2a:66:1a:12:b5:
         10:a4:78:89:8e:1f:23:94:7b:96:78:8c:7b:58:f5:e1:8d:0b:
         6c:cd:d5:57:f3:40:e7:cd:72:38:90:89:f4:68:42:9b:2f:24:
         70:ad:43:bd:d7:c1:12:0a:ab:30:d7:0f:6c:78:95:0f:36:08:
         06:6c:aa:9e:bf:1d:90:86:6e:4a:fe:81:4d:9a:e2:dd:fe:ea:
         12:6f:1e:d5:f9:55:8e:06:35:29:f0:cd:c4:bf:8e:eb:11:3e:
         0f:a2:10:da:75:9f:02:7e:0b:b2:7a:f9:5e:4f:c1:b6:de:81:
         17:58:e6:82:04:59:96:6a:c8:5f:bb:40:5f:de:48:d8:89:06:
         f1:a7:ac:1a:99:c7:c3:e2:3d:d3:37:88:9a:ab:2e:fc:1a:f5:
         ee:10:d8:91:9d:3b:16:94:f8:c4:0a:a7:89:2f:f4:ef:5a:05:
         ac:eb:b2:ab:1b:ca:2d:69:c7:79:f9:7f:37:47:32:ef:38:7e:
         a7:85:09:94:ab:af:85:d8:59:db:5e:38:fe:df:53:63:e3:dc:
         3e:cd:cf:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGaje05gra8ZNgEb+L0wVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMGIwZGNiNmFkMGNhODE2ZDJiZDIwNGUxM2YxZWFmMTEw
NDI3NGMwHhcNMjYwOTIyMDAwMDQ0WhcNMjYwOTIzMDAwMDQ0WjAzMTEwLwYDVQQD
EyhlOTNjMmQ3NGIzZmEwMjU4MTQ0YzA0MWNkNjM2OGIxOWI1NzI0YmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquYCz7BhYaUFYOkq7I62qsPN7Fzb
OcQUiLMdeCv+EYQ1dsCL7iX5pMxcjv8K4gMVjVPIbNd9tZnuXn389FMCRoM0gH8F
sNBCwF8OGOlKYXnlEjyrT1xIFcTp0m8rroxw/twZEi40skIfqvwt8dkNr1X2h4zO
FwejIvvbmf+5Cple1Kh167mP5utDgOWl1+YcOA7A/T9CKSakATbQBhd4BYkDYA1a
EsCgco8bPZNbMCumaJg0u3DjdU/nehrRqfQHO5tox4hEWZMf3lD4Wq4vTRqqRreT
ef/o0V+oVvy3g5pAgv+hL95VRLcLzYSCrb9IH15x1iuznVpbo6Gjr40KzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOk8LXSz+gJYFEwEHNY2ixm1ckvbMB8GA1UdIwQY
MBaAFA4LDctq0MqBbSvSBOE/Hq8RBCdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMt
N2ZlMzk1MWE3MzViLzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMtN2ZlMzk1MWE3MzVi
LzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbDkSgdS
NRLQia1hvNwYDB4QofoX6w7V3jc5m2zfuwIZaihGIy/0QRGMaA6MzZy/yipmGhK1
EKR4iY4fI5R7lniMe1j14Y0LbM3VV/NA581yOJCJ9GhCmy8kcK1DvdfBEgqrMNcP
bHiVDzYIBmyqnr8dkIZuSv6BTZri3f7qEm8e1flVjgY1KfDNxL+O6xE+D6IQ2nWf
An4Lsnr5Xk/Btt6BF1jmggRZlmrIX7tAX95I2IkG8aesGpnHw+I90zeImqsu/Br1
7hDYkZ07FpT4xAqniS/071oFrOuyqxvKLWnHefl/N0cy7zh+p4UJlKuvhdhZ2144
/t9TY+PcPs3PAg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:33:14 2026 by rpki-client