Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
File:                     mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft (raw, json)
Hash identifier:          usVpYSNX6aDTeZqfmgLtyHMtellTyZMhuuwy9xxEh6c=
Subject key identifier:   25:67:49:01:61:0C:E5:2E:AE:A2:11:E6:CE:B8:32:2D:D7:44:A3:04
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Certificate issuer:       /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial:       01A0CAEB9A5781DEC6E90195A363D4E0C03E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
Manifest number:          17AC
Signing time:             Tue 22 Sep 2026 21:00:33 +0000
Manifest this update:     Tue 22 Sep 2026 21:00:33 +0000
Manifest next update:     Wed 23 Sep 2026 21:00:33 +0000
Files and hashes:         1: 5SVfxpykBtGisNJ_fWGkKKRqAXE.roa (hash: majDLjjox5+IIo91UtEcKltEO1Uytp4RkTkKzUgxr90=)
                          2: SEsp20Y0XXvSsNuzjgdPL2liaKA.roa (hash: 9EBYTUo7KyjxRP8OrlDLn9ulnQLVPYnZMVUIu94H7LM=)
                          3: jsoEFjjxqQANYzwZkbp4FKNWNvc.roa (hash: oqsei08QZLwI9OpLYx05MZOPBm5p1aTMIy+k0VyYQTc=)
                          4: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl (hash: sSDwulBr1j9FWsP4aBhGaLs6oFrZYtvOyGVHSps95v8=)
                          5: yJEHfcJRgkFuNVIuhioT_sp3dfg.roa (hash: bQzhx47BAwnINhp4yvgiQNvYfmYBagWvwXbBTrw311U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:eb:9a:57:81:de:c6:e9:01:95:a3:63:d4:e0:c0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
        Validity
            Not Before: Sep 22 21:00:33 2026 GMT
            Not After : Sep 23 21:00:33 2026 GMT
        Subject: CN=25674901610ce52eaea211e6ceb8322dd744a304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:8b:73:f6:88:dc:a9:d0:6d:bb:0f:de:04:
                    8e:60:37:3e:fb:e3:56:7d:47:42:2b:d7:d7:d6:f6:
                    4c:75:80:de:84:db:6a:21:39:4b:1f:61:2f:8a:56:
                    03:e3:e9:2d:91:11:91:d2:4e:a2:f0:a4:75:01:16:
                    7a:b7:61:8e:af:2b:26:6d:98:65:b6:c1:e3:0f:2d:
                    9c:f3:98:cd:18:5b:9e:6d:c6:4c:5a:6c:cd:37:69:
                    b9:5e:b3:76:68:06:a8:a6:b7:d9:98:e4:1d:4a:83:
                    02:c2:eb:e1:89:8e:3b:3d:ea:a7:f9:6a:c2:00:f8:
                    7f:9d:28:d9:7c:d9:09:76:27:87:0a:40:f2:f5:0d:
                    8b:61:30:58:83:c0:0f:54:88:3e:6a:5d:05:9c:dc:
                    88:15:51:cc:46:ae:0b:c9:8a:37:48:01:8b:f5:13:
                    1b:0e:3f:0e:fb:b6:d6:8c:b8:dc:ec:f4:a2:f9:5d:
                    93:8f:e5:4d:83:e1:96:9c:9e:a3:2f:0d:14:7b:75:
                    e8:b7:ca:63:bd:63:ee:01:ab:17:b1:7b:fc:8b:af:
                    f8:3b:c8:27:6f:9a:df:b8:91:7b:85:49:e3:a2:6f:
                    ed:82:ee:12:fe:9d:a8:f0:8d:c7:60:23:9c:16:47:
                    34:75:d5:b2:c8:d7:3d:49:79:ad:08:33:d2:44:e2:
                    71:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:67:49:01:61:0C:E5:2E:AE:A2:11:E6:CE:B8:32:2D:D7:44:A3:04
            X509v3 Authority Key Identifier:
                keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:78:b0:d5:52:91:cf:88:b9:98:e9:ff:8e:30:2d:fa:37:50:
         9b:d2:8c:df:76:a5:45:8a:9b:9c:4f:ad:60:50:22:ba:13:3a:
         42:13:fd:29:88:a3:ae:ff:27:0c:36:87:6e:e3:56:5b:1b:da:
         ea:ac:d7:c5:09:7f:32:b1:14:cc:b8:9c:1a:bc:05:da:3a:ab:
         16:de:c6:32:68:fa:dd:3e:60:67:96:96:78:8e:ed:df:01:d5:
         60:9e:36:68:b4:51:fa:7e:8b:e8:de:84:de:bc:52:99:3e:dd:
         9d:c4:49:de:60:97:d5:17:3e:da:ee:d2:1e:34:0a:15:b3:f9:
         ae:6f:1d:ef:bb:44:70:bd:94:c1:b3:35:ca:e3:63:c8:0d:02:
         be:2e:38:34:a2:a9:31:35:57:23:a1:db:13:fd:d7:09:68:7d:
         af:d6:49:ac:1c:3d:8e:3d:52:a8:c1:95:0c:8e:57:2e:fa:21:
         dd:dd:30:b5:c2:74:75:ec:94:d5:94:55:d2:01:6f:1b:ad:0d:
         f9:cd:f8:a7:e6:cc:7e:a1:2d:66:0e:86:de:7c:8d:dc:99:d5:
         c2:6d:be:ff:0e:13:c8:3f:d9:93:94:28:48:a1:ee:4a:98:13:
         c1:59:36:67:86:7d:95:04:b2:42:70:e2:c7:fc:3d:60:66:36:
         68:05:b1:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDK65pXgd7G6QGVo2PU4MA+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhN2VkZWFjMGM2YzIwZWE0OWQ0OTI5OTBlNDg1ODU0MWQx
OTBmZjEwHhcNMjYwOTIyMjEwMDMzWhcNMjYwOTIzMjEwMDMzWjAzMTEwLwYDVQQD
EygyNTY3NDkwMTYxMGNlNTJlYWVhMjExZTZjZWI4MzIyZGQ3NDRhMzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh+Lc/aI3KnQbbsP3gSOYDc+++NW
fUdCK9fX1vZMdYDehNtqITlLH2EvilYD4+ktkRGR0k6i8KR1ARZ6t2GOrysmbZhl
tsHjDy2c85jNGFuebcZMWmzNN2m5XrN2aAaoprfZmOQdSoMCwuvhiY47Peqn+WrC
APh/nSjZfNkJdieHCkDy9Q2LYTBYg8APVIg+al0FnNyIFVHMRq4LyYo3SAGL9RMb
Dj8O+7bWjLjc7PSi+V2Tj+VNg+GWnJ6jLw0Ue3Xot8pjvWPuAasXsXv8i6/4O8gn
b5rfuJF7hUnjom/tgu4S/p2o8I3HYCOcFkc0ddWyyNc9SXmtCDPSROJxZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVnSQFhDOUurqIR5s64Mi3XRKMEMB8GA1UdIwQY
MBaAFJp+3qwMbCDqSdSSmQ5IWFQdGQ/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYt
YWRlZGNhYTNkMjZlLzEvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYtYWRlZGNhYTNkMjZl
LzEvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3iw1VKR
z4i5mOn/jjAt+jdQm9KM33alRYqbnE+tYFAiuhM6QhP9KYijrv8nDDaHbuNWWxva
6qzXxQl/MrEUzLicGrwF2jqrFt7GMmj63T5gZ5aWeI7t3wHVYJ42aLRR+n6L6N6E
3rxSmT7dncRJ3mCX1Rc+2u7SHjQKFbP5rm8d77tEcL2UwbM1yuNjyA0Cvi44NKKp
MTVXI6HbE/3XCWh9r9ZJrBw9jj1SqMGVDI5XLvoh3d0wtcJ0deyU1ZRV0gFvG60N
+c34p+bMfqEtZg6G3nyN3JnVwm2+/w4TyD/Zk5QoSKHuSpgTwVk2Z4Z9lQSyQnDi
x/w9YGY2aAWxBQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 00:23:05 2026 by rpki-client