Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
File:                     rrC3d_U3e7HFBlOISwPifc3ugo4.mft (raw, json)
Hash identifier:          LOHHwhSTYOO4YDM0u2B1Wj94i4F3eYHFavD1eAWc48c=
Subject key identifier:   1B:77:3E:D3:E4:86:46:96:08:B5:73:91:CC:0C:E7:AC:D9:DB:26:86
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Certificate issuer:       /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial:       01A0C031AF38E9E1783A93230C10B5F27523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
Manifest number:          09C7
Signing time:             Sun 20 Sep 2026 19:01:16 +0000
Manifest this update:     Sun 20 Sep 2026 19:01:16 +0000
Manifest next update:     Mon 21 Sep 2026 19:01:16 +0000
Files and hashes:         1: Nytw89CcyDRmKPPk4sKcPeBej7k.roa (hash: /jX42tEK2pmI+UdQCYDIPEu34ud01Vw41VxxvhWNQ5Q=)
                          2: TEcoleUmbWQj5i2gknCSKR9Cd0E.roa (hash: 3NdzNvymYr9jRWoDUYOh9npss+lpEBY+eYb2MluLWK0=)
                          3: rrC3d_U3e7HFBlOISwPifc3ugo4.crl (hash: nZMsdNTLtPaqEep/B0+rSJ5cJJCPmUDLKaIVDeAA9JY=)
                          4: tRjIbRYyE4lE3XylGc6ElRdu_bI.roa (hash: +1aCVbuS6QCs5ldp4V3vvlDvjiEglf2CJrOgFXepcvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:31:af:38:e9:e1:78:3a:93:23:0c:10:b5:f2:75:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
        Validity
            Not Before: Sep 20 19:01:16 2026 GMT
            Not After : Sep 21 19:01:16 2026 GMT
        Subject: CN=1b773ed3e486469608b57391cc0ce7acd9db2686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:49:e6:c3:7a:1a:d9:82:e7:d5:1e:5b:19:
                    4d:6c:73:c8:7d:15:18:a6:a9:59:a5:e4:3a:50:10:
                    b7:2d:9b:3a:89:11:08:67:f4:d0:ff:81:3d:01:1b:
                    84:c4:72:aa:54:e0:b0:f1:68:ed:e0:ca:09:68:e1:
                    fb:51:98:5d:12:0d:a3:d7:d6:c6:ae:cb:35:01:82:
                    7e:bd:c6:da:9d:7f:69:0e:ee:14:a2:31:0a:a8:1d:
                    f9:ac:30:3f:ad:64:23:89:d2:fd:40:d3:02:4b:4c:
                    0c:43:61:30:f8:9d:65:aa:3c:97:6a:92:44:b1:df:
                    80:ad:6c:c0:5c:97:04:02:db:81:5f:6d:1b:f3:ea:
                    ee:21:cc:11:66:31:55:32:ed:89:52:7a:3c:3a:4e:
                    59:66:1f:aa:2e:07:ad:e7:8f:8b:1d:10:4a:d5:c2:
                    e8:25:1e:78:3c:2f:89:ed:2b:ea:ad:ff:5f:06:e3:
                    0e:4f:07:6a:7c:33:89:55:c1:f9:f2:cd:da:03:cd:
                    23:c4:d3:00:26:ff:0c:bb:01:be:98:9d:a4:42:4c:
                    0b:9e:39:1a:ad:07:68:e8:cb:e4:ca:ae:50:27:a7:
                    63:15:50:53:b4:dc:90:a5:86:b5:9d:24:cf:6c:d2:
                    59:cf:6e:35:7a:c4:d3:fe:6f:65:8a:22:bd:e1:26:
                    08:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:77:3E:D3:E4:86:46:96:08:B5:73:91:CC:0C:E7:AC:D9:DB:26:86
            X509v3 Authority Key Identifier:
                keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c1:17:19:89:8d:0d:d0:53:fc:33:b7:7b:24:16:6b:1c:a4:
         0f:a2:b0:b4:e7:ad:43:3c:06:3b:6b:c4:ad:71:4a:88:a7:61:
         fa:7d:5a:79:85:3b:da:c8:78:b5:f4:32:6d:64:08:b9:5b:a3:
         cd:87:21:1d:66:3a:03:9b:2b:50:cc:42:20:77:81:b1:c6:87:
         41:ba:e8:ac:9b:4a:f6:a8:85:d6:14:7c:28:98:c6:20:39:06:
         ef:a0:bb:75:b4:a8:47:26:bf:b4:b3:b0:d8:d0:62:96:6e:41:
         db:2d:2f:74:e9:df:7e:f5:24:92:b5:0f:01:9e:dc:86:e0:49:
         f6:6a:14:7f:bb:9d:4e:ca:71:f5:43:e8:4d:06:04:07:df:99:
         58:58:f7:50:30:bc:3d:d8:20:90:4b:34:d4:c1:bf:e2:de:37:
         44:4e:77:c3:74:d2:b6:e1:5f:06:47:46:3b:fc:3e:b4:81:d5:
         ed:6b:b9:1c:f3:0f:b3:48:eb:1c:5e:ec:d1:4e:48:72:11:bc:
         7c:9e:9a:3a:4f:eb:26:76:07:7a:3e:85:0c:94:f8:e9:62:bd:
         3b:11:e9:ee:d4:53:25:36:8f:2c:11:5d:be:0a:fd:f9:e4:ab:
         d0:96:b9:3f:9a:76:87:14:2c:ed:81:7a:0d:02:97:e7:b1:55:
         4d:f6:fc:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDAMa846eF4OpMjDBC18nUjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjBiNzc3ZjUzNzdiYjFjNTA2NTM4ODRiMDNlMjdkY2Rl
ZTgyOGUwHhcNMjYwOTIwMTkwMTE2WhcNMjYwOTIxMTkwMTE2WjAzMTEwLwYDVQQD
EygxYjc3M2VkM2U0ODY0Njk2MDhiNTczOTFjYzBjZTdhY2Q5ZGIyNjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4pJ5sN6GtmC59UeWxlNbHPIfRUY
pqlZpeQ6UBC3LZs6iREIZ/TQ/4E9ARuExHKqVOCw8Wjt4MoJaOH7UZhdEg2j19bG
rss1AYJ+vcbanX9pDu4UojEKqB35rDA/rWQjidL9QNMCS0wMQ2Ew+J1lqjyXapJE
sd+ArWzAXJcEAtuBX20b8+ruIcwRZjFVMu2JUno8Ok5ZZh+qLget54+LHRBK1cLo
JR54PC+J7Svqrf9fBuMOTwdqfDOJVcH58s3aA80jxNMAJv8MuwG+mJ2kQkwLnjka
rQdo6Mvkyq5QJ6djFVBTtNyQpYa1nSTPbNJZz241esTT/m9liiK94SYI7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBt3PtPkhkaWCLVzkcwM56zZ2yaGMB8GA1UdIwQY
MBaAFK6wt3f1N3uxxQZTiEsD4n3N7oKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMt
OTI2YzRhMzI2ZTA4LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMtOTI2YzRhMzI2ZTA4
LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncEXGYmN
DdBT/DO3eyQWaxykD6KwtOetQzwGO2vErXFKiKdh+n1aeYU72sh4tfQybWQIuVuj
zYchHWY6A5srUMxCIHeBscaHQbrorJtK9qiF1hR8KJjGIDkG76C7dbSoRya/tLOw
2NBilm5B2y0vdOnffvUkkrUPAZ7chuBJ9moUf7udTspx9UPoTQYEB9+ZWFj3UDC8
PdggkEs01MG/4t43RE53w3TStuFfBkdGO/w+tIHV7Wu5HPMPs0jrHF7s0U5IchG8
fJ6aOk/rJnYHej6FDJT46WK9OxHp7tRTJTaPLBFdvgr9+eSr0Ja5P5p2hxQs7YF6
DQKX57FVTfb8+g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 02:03:44 2026 by rpki-client