Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File:                     qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier:          HACXh89V6DZS9rH8idAwSUxdxKyzi/yFiJBtEOEKQDQ=
Subject key identifier:   30:7B:EC:CE:A5:ED:F0:37:9C:B1:3B:26:8C:30:08:95:88:2C:FC:36
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer:       /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial:       01A0D383DF0F201F8CDA8F392C1BB36DE21C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number:          0FB2
Signing time:             Thu 24 Sep 2026 13:03:49 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:49 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:49 +0000
Files and hashes:         1: R6fKmNiL6DPYHGHsgrQhdxRjogw.roa (hash: KlrIoUKqLYU4rd9VeTGSXIJFZfzjhsMmFKFxCnepX50=)
                          2: ThcE502VHh7nDHiwu3z750fA_jI.roa (hash: nZbm/T+Jniaq7ToA4MEmQ7fWhUfWYilhhXfFms2U7ZQ=)
                          3: VyAWND_OasnYuRme0Q6yAU_fUQw.roa (hash: c2ejCdGHIJHwK7lWa3CclVna1o7khnE1y7hWMzg9fC0=)
                          4: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: pa4l5t7Fvs58UbfrGSKTN5HkKOOI9sr2YLG5ZVW2cUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:df:0f:20:1f:8c:da:8f:39:2c:1b:b3:6d:e2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
        Validity
            Not Before: Sep 24 13:03:49 2026 GMT
            Not After : Sep 25 13:03:49 2026 GMT
        Subject: CN=307beccea5edf0379cb13b268c300895882cfc36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5d:19:ea:0e:2d:eb:03:5b:20:f7:9b:d4:ea:
                    30:82:93:2c:b1:c7:c5:93:59:c7:f6:27:8e:37:74:
                    ff:c0:79:33:a4:00:d9:06:2e:49:83:67:a6:1a:bd:
                    a0:46:53:df:d6:22:86:27:b4:5b:81:ac:5f:c5:67:
                    10:84:13:a9:21:93:00:45:ba:d8:71:aa:0b:66:4f:
                    b2:34:8f:a4:67:b7:e1:84:9a:03:b5:2b:0b:25:c5:
                    0a:20:4d:13:bd:30:f0:de:f2:8d:00:0a:e3:f4:2b:
                    8a:d7:f8:a2:41:c4:17:07:85:2f:d5:8d:c6:f0:cd:
                    9e:08:7d:ae:12:3b:91:6d:a9:03:37:bc:77:37:19:
                    20:a9:5a:4a:c6:23:d5:5c:7d:8d:af:f7:f5:52:e0:
                    a7:30:45:0b:be:7b:bd:d8:1a:1f:e8:e6:da:03:5c:
                    d7:a4:19:7a:63:09:e3:d0:a6:f4:ae:4f:61:e4:e8:
                    f0:99:99:3a:4b:89:be:09:8d:3f:5e:ec:6c:1e:2f:
                    47:ef:ae:85:74:5a:e6:15:2c:63:2a:73:2f:e0:47:
                    67:e5:14:71:22:b8:5f:9a:15:7a:3b:8a:44:32:4e:
                    d5:68:67:f0:8d:d6:7a:68:b9:68:6a:20:76:ef:69:
                    6b:46:69:85:b1:c3:a5:24:76:5f:d2:38:27:10:cf:
                    ab:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7B:EC:CE:A5:ED:F0:37:9C:B1:3B:26:8C:30:08:95:88:2C:FC:36
            X509v3 Authority Key Identifier:
                keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0b:ad:9b:cd:dd:49:99:1a:19:dc:4c:57:b6:03:30:f8:40:
         fc:fd:7f:9f:b2:8e:29:f7:6c:c6:86:cc:61:36:4b:bb:94:71:
         32:11:72:45:60:4f:73:99:c8:05:01:11:9c:42:cf:9a:d9:1e:
         be:22:21:4a:0f:3b:c9:8e:c9:c8:12:12:15:ad:ff:f1:a3:88:
         6b:71:1f:53:3a:fe:cd:29:0b:ff:7c:4b:89:99:2b:33:5c:d9:
         b5:7d:80:22:8e:e9:34:05:b9:7c:38:71:86:dd:b9:c7:a3:3d:
         ae:32:55:5d:c4:41:82:26:0a:4a:ca:59:f2:34:31:e8:46:6a:
         ab:4a:54:8b:91:d7:76:68:a9:85:75:c0:01:e9:95:0e:5b:6c:
         f0:16:ae:25:c3:82:47:60:f9:7b:80:13:51:3e:d2:79:e0:64:
         7e:1f:bf:10:e0:5e:5d:fb:0b:fa:0d:e4:7a:0a:4a:55:0a:d0:
         92:ea:80:42:01:04:78:b6:8c:e5:72:72:5c:19:ad:11:6c:4a:
         79:66:eb:c6:80:60:40:ee:56:7b:c1:53:6b:16:bc:5f:a8:c0:
         a0:1d:e6:9c:b0:b0:a6:a1:ad:b0:ab:04:ff:8c:33:f9:cc:a8:
         84:cd:ad:9a:43:6b:31:d1:01:ec:bc:c5:b6:c7:dc:3f:35:ff:
         c7:ac:7f:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTg98PIB+M2o85LBuzbeIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MDEwY2ViMjBmMmUwNzZhM2YwMDAyNzFhNWMzNzU3NjFi
ZWMyZjUwHhcNMjYwOTI0MTMwMzQ5WhcNMjYwOTI1MTMwMzQ5WjAzMTEwLwYDVQQD
EygzMDdiZWNjZWE1ZWRmMDM3OWNiMTNiMjY4YzMwMDg5NTg4MmNmYzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8V0Z6g4t6wNbIPeb1OowgpMsscfF
k1nH9ieON3T/wHkzpADZBi5Jg2emGr2gRlPf1iKGJ7RbgaxfxWcQhBOpIZMARbrY
caoLZk+yNI+kZ7fhhJoDtSsLJcUKIE0TvTDw3vKNAArj9CuK1/iiQcQXB4Uv1Y3G
8M2eCH2uEjuRbakDN7x3NxkgqVpKxiPVXH2Nr/f1UuCnMEULvnu92Bof6ObaA1zX
pBl6Ywnj0Kb0rk9h5OjwmZk6S4m+CY0/XuxsHi9H766FdFrmFSxjKnMv4Edn5RRx
IrhfmhV6O4pEMk7VaGfwjdZ6aLloaiB272lrRmmFscOlJHZf0jgnEM+roQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDB77M6l7fA3nLE7JowwCJWILPw2MB8GA1UdIwQY
MBaAFKgBDOsg8uB2o/AAJxpcN1dhvsL1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMt
NDlmNjVjNmE0OGJmLzEvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMtNDlmNjVjNmE0OGJm
LzEvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAutm83d
SZkaGdxMV7YDMPhA/P1/n7KOKfdsxobMYTZLu5RxMhFyRWBPc5nIBQERnELPmtke
viIhSg87yY7JyBISFa3/8aOIa3EfUzr+zSkL/3xLiZkrM1zZtX2AIo7pNAW5fDhx
ht25x6M9rjJVXcRBgiYKSspZ8jQx6EZqq0pUi5HXdmiphXXAAemVDlts8BauJcOC
R2D5e4ATUT7SeeBkfh+/EOBeXfsL+g3kegpKVQrQkuqAQgEEeLaM5XJyXBmtEWxK
eWbrxoBgQO5We8FTaxa8X6jAoB3mnLCwpqGtsKsE/4wz+cyohM2tmkNrMdEB7LzF
tsfcPzX/x6x/3g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:30:21 2026 by rpki-client