Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File:                     89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier:          2oNUvS5HU70DMcW2k8BlJHjkC0Vg4GrZhSDQJuv2/Lk=
Subject key identifier:   E0:54:79:52:05:49:8E:D9:6C:BD:40:4A:2E:32:4F:44:D1:4D:B8:6D
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer:       /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial:       01A0C2C49340DB7633212A67AADEEFB37BEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number:          0FD2
Signing time:             Mon 21 Sep 2026 07:00:57 +0000
Manifest this update:     Mon 21 Sep 2026 07:00:57 +0000
Manifest next update:     Tue 22 Sep 2026 07:00:57 +0000
Files and hashes:         1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: T6uFsaNCINE3UOzmjOkY+xsKuj0K4GKCZxXAqFUwG7o=)
                          2: GJT01x6wwyCftHtrWIvsmyjBIms.roa (hash: ASc7SzAK6h3bsHuxvUa3vat9chLP4lA8Av0u9oM1Qs4=)
                          3: Mw9HiEEZk3waBmzFCokJoCJYeHU.roa (hash: 6sGwg0qogzNM4BdNuwLNu3Z3ohroqmMT+szTSBMU2DE=)
                          4: X3mascigLmZbak7QiDBSbbs3vrA.roa (hash: IylgO/sA2hsrQIbGafFY3tsGMHKTB8LlFvuICdNIo44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:c4:93:40:db:76:33:21:2a:67:aa:de:ef:b3:7b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
        Validity
            Not Before: Sep 21 07:00:57 2026 GMT
            Not After : Sep 22 07:00:57 2026 GMT
        Subject: CN=e054795205498ed96cbd404a2e324f44d14db86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:27:57:81:a2:9c:be:c9:10:79:02:07:0d:
                    06:10:a5:fc:eb:e5:d1:7e:8b:15:11:04:21:ae:a6:
                    f3:1b:69:fa:ce:20:f5:60:b4:7b:be:c9:29:5f:bc:
                    cf:01:89:f3:d5:45:88:e6:73:b7:77:bf:70:2e:6b:
                    b4:10:61:18:df:dc:67:c5:70:96:1d:2b:02:a4:4f:
                    33:ee:d2:f3:09:f8:8a:4f:85:d6:45:de:80:a2:5d:
                    13:38:70:2d:2a:15:1c:34:88:37:9e:7a:69:87:71:
                    5f:a0:cd:13:bb:d2:84:61:95:36:f8:47:28:e6:9a:
                    e2:22:2c:ca:9f:a8:e9:09:eb:db:5f:51:78:d0:a5:
                    df:6e:e3:54:ee:01:63:a2:2c:07:47:53:ed:f3:38:
                    c4:c9:88:25:0e:5d:38:b5:92:25:ec:f9:3a:10:55:
                    97:55:39:3f:89:53:32:3a:c5:c4:c7:19:78:6a:8c:
                    da:27:8f:85:ee:b0:c6:55:76:24:32:7b:bf:1e:78:
                    b9:3d:2d:cf:d0:8a:a3:c4:12:3f:fa:73:6a:91:e0:
                    56:6e:2c:85:4c:a7:3c:ef:9c:d8:2b:c9:3a:f4:c2:
                    46:f7:4d:27:7e:61:27:b9:09:27:72:1b:dc:42:29:
                    83:02:5e:13:03:67:44:74:4f:de:14:92:cb:0a:20:
                    c6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:54:79:52:05:49:8E:D9:6C:BD:40:4A:2E:32:4F:44:D1:4D:B8:6D
            X509v3 Authority Key Identifier:
                keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3d:e7:8c:f5:b6:3f:2d:89:e5:25:25:ef:b5:5d:29:90:48:
         2d:87:55:5e:b8:91:08:61:f0:f9:e1:39:eb:d9:25:f9:3e:45:
         c7:65:36:83:45:31:73:70:a8:88:12:6b:06:d6:a4:15:8c:3e:
         05:03:81:b8:19:5c:e5:f6:3a:2c:3e:35:d9:fb:c2:ed:41:52:
         ab:c3:31:66:78:2c:92:89:fa:62:06:19:9d:06:e6:a8:60:b8:
         a9:6f:ec:78:f8:d6:3e:5c:21:5e:cc:81:a3:c3:63:fe:d6:e0:
         3b:74:a9:7a:c1:5b:26:64:c9:7c:63:6d:5c:f1:85:1e:1c:bb:
         6b:c8:7b:e9:4a:5d:fb:28:66:b3:48:13:ab:52:3a:59:7e:8a:
         5f:fb:2d:17:90:e8:ae:7e:60:69:a0:aa:45:95:41:b4:3f:f9:
         cd:21:d6:9c:03:2d:cf:d1:21:1d:85:1a:95:52:51:d0:b7:1d:
         d0:90:bb:34:18:04:bd:8a:42:48:10:33:ed:d1:a3:dc:ce:e0:
         77:c5:4e:90:b0:a2:8c:b9:d7:2d:df:b6:62:6a:f2:f4:3f:41:
         93:ae:e5:52:9d:88:18:a5:7f:36:96:ec:ac:e6:32:df:a4:53:
         b2:af:c2:fd:21:88:f1:59:e0:3f:49:53:94:61:38:07:fc:04:
         63:22:57:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxJNA23YzISpnqt7vs3vsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZDg1YzQ3ZDBiN2Q2ZGM1ZGRkYTA4NTcyYjY0NTRjMTA1
OTUxMmMwHhcNMjYwOTIxMDcwMDU3WhcNMjYwOTIyMDcwMDU3WjAzMTEwLwYDVQQD
EyhlMDU0Nzk1MjA1NDk4ZWQ5NmNiZDQwNGEyZTMyNGY0NGQxNGRiODZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVQnV4GinL7JEHkCBw0GEKX86+XR
fosVEQQhrqbzG2n6ziD1YLR7vskpX7zPAYnz1UWI5nO3d79wLmu0EGEY39xnxXCW
HSsCpE8z7tLzCfiKT4XWRd6Aol0TOHAtKhUcNIg3nnpph3FfoM0Tu9KEYZU2+Eco
5priIizKn6jpCevbX1F40KXfbuNU7gFjoiwHR1Pt8zjEyYglDl04tZIl7Pk6EFWX
VTk/iVMyOsXExxl4aozaJ4+F7rDGVXYkMnu/Hni5PS3P0IqjxBI/+nNqkeBWbiyF
TKc875zYK8k69MJG900nfmEnuQknchvcQimDAl4TA2dEdE/eFJLLCiDGMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBUeVIFSY7ZbL1ASi4yT0TRTbhtMB8GA1UdIwQY
MBaAFPPYXEfQt9bcXd2ghXK2RUwQWVEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNmZiMTEtMmQwMC00ZTdiLWIyOTct
NTIxMmRiOTc1NGY0LzEvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yNmZiMTEtMmQwMC00ZTdiLWIyOTctNTIxMmRiOTc1NGY0
LzEvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoj3njPW2
Py2J5SUl77VdKZBILYdVXriRCGHw+eE569kl+T5Fx2U2g0Uxc3CoiBJrBtakFYw+
BQOBuBlc5fY6LD412fvC7UFSq8MxZngskon6YgYZnQbmqGC4qW/sePjWPlwhXsyB
o8Nj/tbgO3SpesFbJmTJfGNtXPGFHhy7a8h76Upd+yhms0gTq1I6WX6KX/stF5Do
rn5gaaCqRZVBtD/5zSHWnAMtz9EhHYUalVJR0Lcd0JC7NBgEvYpCSBAz7dGj3M7g
d8VOkLCijLnXLd+2Ymry9D9Bk67lUp2IGKV/NpbsrOYy36RTsq/C/SGI8VngP0lT
lGE4B/wEYyJXqg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:31:37 2026 by rpki-client