Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
File:                     hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json)
Hash identifier:          iTRDUdD4WIY50cKRCPgz7ZzSr6f3y7aCOt3jvuauAWo=
Subject key identifier:   93:D4:9D:B7:3E:18:C9:26:0E:DA:C9:07:E5:3D:84:4A:A0:BF:9B:57
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Certificate issuer:       /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial:       01A0C2C4185456C7A60AC5274E76B2B14D5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
Manifest number:          19BD
Signing time:             Mon 21 Sep 2026 07:00:26 +0000
Manifest this update:     Mon 21 Sep 2026 07:00:26 +0000
Manifest next update:     Tue 22 Sep 2026 07:00:26 +0000
Files and hashes:         1: DRi6gZm2ApJ9zWvuSIffTh_44j0.roa (hash: NDQ8jCUezYMaYn3NL3pjn/AqInQQgH2COtpVWhCKawg=)
                          2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: zTCBfmOZZm6yvhdKPAoewnqF+EnI48Ytxx8vhafuCdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:c4:18:54:56:c7:a6:0a:c5:27:4e:76:b2:b1:4d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
        Validity
            Not Before: Sep 21 07:00:26 2026 GMT
            Not After : Sep 22 07:00:26 2026 GMT
        Subject: CN=93d49db73e18c9260edac907e53d844aa0bf9b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:c0:4e:2e:64:b0:30:83:f1:dc:c0:13:fb:
                    cd:44:53:7b:b5:be:39:14:48:fd:6b:a1:99:c4:2d:
                    f9:60:93:58:58:c6:e4:a7:7d:28:c3:98:1b:bd:13:
                    d5:e4:c9:f4:95:c5:30:6e:1b:54:ca:fd:c3:bd:13:
                    1d:20:cc:77:03:90:b0:2c:75:18:cc:d8:ab:73:f1:
                    c3:6f:7f:de:d9:d2:ce:61:dd:49:a9:a8:72:5c:cf:
                    7a:f9:47:c0:dd:79:08:63:0e:10:00:1d:ec:a6:aa:
                    ff:de:5a:96:90:90:2b:43:ad:60:16:e7:3e:9b:4b:
                    ca:9d:a7:88:b4:de:48:b6:d0:4d:a2:30:7c:9e:b9:
                    8b:97:5d:d8:42:fa:9c:ff:6f:ec:48:da:88:d1:7a:
                    4e:92:b7:0d:3c:c5:13:91:9e:a8:30:53:ec:8e:c1:
                    38:8a:4d:b6:d9:ef:52:90:03:7b:05:92:c8:77:3b:
                    96:41:a2:bc:25:b4:0b:d5:24:2a:7d:a0:39:04:fd:
                    fc:35:3b:77:62:e4:0d:aa:8a:fe:27:89:15:b9:50:
                    e9:1b:90:89:6d:8e:33:b4:d1:2f:15:49:65:ae:6e:
                    af:ce:4a:58:5f:d2:83:44:b6:ba:de:1e:ba:18:12:
                    10:38:ab:f1:67:9c:7e:12:9f:b5:4a:51:77:0d:3b:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D4:9D:B7:3E:18:C9:26:0E:DA:C9:07:E5:3D:84:4A:A0:BF:9B:57
            X509v3 Authority Key Identifier:
                keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:dc:52:de:1d:e2:d7:49:c7:c7:bc:da:e3:5f:6e:f5:34:8d:
         1b:9b:ee:8c:9d:87:dd:da:0b:51:94:2e:a1:fd:14:2c:d9:b0:
         b7:a6:e4:67:2b:ba:2a:2b:2b:48:10:c2:20:bf:bc:db:d7:0e:
         97:41:9d:5b:67:38:16:7d:73:e4:d5:99:f4:e7:ce:e4:47:e9:
         b7:4a:54:fb:75:88:cc:5d:a6:df:a1:9b:e1:7d:a4:37:ed:8c:
         17:81:12:1f:4f:d4:d8:a9:a2:a0:88:00:6b:b0:35:25:52:a1:
         dc:98:09:4a:44:0f:e3:30:4c:d9:95:aa:85:40:88:c5:38:83:
         00:8b:c3:ca:88:8f:73:3d:50:3b:dd:e2:9b:c6:fa:d9:86:02:
         50:a2:a7:0b:90:e3:30:b6:fb:b2:0d:ee:7e:bb:2d:36:1c:98:
         30:65:88:6d:47:c6:dc:34:62:17:46:4c:5d:85:03:23:c5:09:
         a7:90:ab:30:04:02:1d:5e:90:56:32:40:05:87:a6:4c:2b:7e:
         9a:ca:81:9c:f2:5b:0b:f2:80:a8:82:7d:df:71:ba:b8:79:86:
         ab:14:af:08:a2:fb:db:0b:1b:67:b6:2e:20:bd:4c:cb:07:bb:
         22:4e:00:b8:3b:85:dc:b2:87:62:33:28:54:51:56:43:fa:4d:
         68:94:3c:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxBhUVsemCsUnTnaysU1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDIyZTE2MmY2ZTZiOTc1NWNlNGNlODQ1MTIwZTYyOTM5
NTA2ZjcwHhcNMjYwOTIxMDcwMDI2WhcNMjYwOTIyMDcwMDI2WjAzMTEwLwYDVQQD
Eyg5M2Q0OWRiNzNlMThjOTI2MGVkYWM5MDdlNTNkODQ0YWEwYmY5YjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskDATi5ksDCD8dzAE/vNRFN7tb45
FEj9a6GZxC35YJNYWMbkp30ow5gbvRPV5Mn0lcUwbhtUyv3DvRMdIMx3A5CwLHUY
zNirc/HDb3/e2dLOYd1JqahyXM96+UfA3XkIYw4QAB3spqr/3lqWkJArQ61gFuc+
m0vKnaeItN5IttBNojB8nrmLl13YQvqc/2/sSNqI0XpOkrcNPMUTkZ6oMFPsjsE4
ik222e9SkAN7BZLIdzuWQaK8JbQL1SQqfaA5BP38NTt3YuQNqor+J4kVuVDpG5CJ
bY4ztNEvFUllrm6vzkpYX9KDRLa63h66GBIQOKvxZ5x+Ep+1SlF3DTumxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPUnbc+GMkmDtrJB+U9hEqgv5tXMB8GA1UdIwQY
MBaAFIYCLhYvbmuXVc5M6EUSDmKTlQb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83ODJjMDctNGJiYS00ODEwLWI5OGIt
MDU5ZGJjYzhkY2VmLzEvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC83ODJjMDctNGJiYS00ODEwLWI5OGItMDU5ZGJjYzhkY2Vm
LzEvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNxS3h3i
10nHx7za419u9TSNG5vujJ2H3doLUZQuof0ULNmwt6bkZyu6KisrSBDCIL+829cO
l0GdW2c4Fn1z5NWZ9OfO5Efpt0pU+3WIzF2m36Gb4X2kN+2MF4ESH0/U2KmioIgA
a7A1JVKh3JgJSkQP4zBM2ZWqhUCIxTiDAIvDyoiPcz1QO93im8b62YYCUKKnC5Dj
MLb7sg3ufrstNhyYMGWIbUfG3DRiF0ZMXYUDI8UJp5CrMAQCHV6QVjJABYemTCt+
msqBnPJbC/KAqIJ933G6uHmGqxSvCKL72wsbZ7YuIL1Mywe7Ik4AuDuF3LKHYjMo
VFFWQ/pNaJQ8cQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:28:07 2026 by rpki-client