Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
File:                     8J3iYg0i-mnFTL68by9IUFbOL-U.mft (raw, json)
Hash identifier:          py1qJiZ+mKGoOm+lWAdsyT61QZbucyVXZPT+JnF/qpA=
Subject key identifier:   F4:78:2B:2F:0B:3C:5B:72:7C:BA:40:D6:80:EB:82:0F:04:BD:32:03
Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
Certificate issuer:       /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Certificate serial:       01A0E2F4D79D0E8BF7E4AE4925533F67BA61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
Manifest number:          0734
Signing time:             Sun 27 Sep 2026 13:01:31 +0000
Manifest this update:     Sun 27 Sep 2026 13:01:31 +0000
Manifest next update:     Mon 28 Sep 2026 13:01:31 +0000
Files and hashes:         1: 0tKNTcvutgmi05GASWx0PEyILOY.roa (hash: k6mCxAxzoTinU1/sVxlPB9SrgDwj5jJNmOfkRFaU9RA=)
                          2: 8J3iYg0i-mnFTL68by9IUFbOL-U.crl (hash: POzQ3skfL75Jz/Tym/zzHLr0BY57lyTtuE9Huz0o4Oc=)
                          3: yrmrEDHLdh4dBGFaTpIBDSACdaQ.roa (hash: hNsr3+1Zh+bCK1vX9YSv52aqxq01DCYHfc2YnV/y8Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:f4:d7:9d:0e:8b:f7:e4:ae:49:25:53:3f:67:ba:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
        Validity
            Not Before: Sep 27 13:01:31 2026 GMT
            Not After : Sep 28 13:01:31 2026 GMT
        Subject: CN=f4782b2f0b3c5b727cba40d680eb820f04bd3203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:73:47:f4:4d:73:6d:52:7e:0c:99:5e:03:bb:
                    ce:db:b8:ad:02:8d:a8:1e:26:a1:e5:38:98:dd:7d:
                    0d:4f:73:ca:3b:a0:ab:f5:b5:db:7f:32:53:61:35:
                    78:8b:41:67:17:d4:98:6b:c4:be:1f:51:0f:ad:49:
                    e0:de:5f:ec:84:36:76:03:27:31:46:ac:0c:e2:01:
                    98:1a:1a:2f:8d:52:6e:95:d6:15:7b:b3:34:48:dd:
                    49:03:a3:bf:46:2b:15:ab:73:71:1f:57:47:3b:3b:
                    2d:e8:ea:e1:d9:65:cc:74:ac:4d:3f:1e:f1:e4:5a:
                    6f:85:48:cf:1a:8c:f2:cd:ae:f0:42:a4:b3:21:52:
                    c4:35:53:08:1b:9b:1c:13:1e:0f:ff:3c:71:43:eb:
                    33:10:89:6d:07:4e:d8:60:c9:48:ee:9b:3d:4d:19:
                    b6:8c:87:b1:d5:09:90:db:93:27:75:ce:d3:1d:7e:
                    db:f4:c5:a0:0e:0f:5c:a5:df:38:c6:eb:7e:e7:d9:
                    eb:03:0c:05:6e:66:f5:9d:94:aa:f4:88:95:75:aa:
                    16:a2:17:99:99:51:22:2b:5e:d5:77:be:db:c4:1d:
                    59:f4:73:a0:a2:4c:78:66:9f:da:ab:d5:92:8a:05:
                    6f:cb:c2:f7:01:3f:48:bc:10:1c:fd:02:36:94:ac:
                    1f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:78:2B:2F:0B:3C:5B:72:7C:BA:40:D6:80:EB:82:0F:04:BD:32:03
            X509v3 Authority Key Identifier:
                keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:33:0f:e5:a8:49:b8:eb:81:7a:1b:25:d9:40:78:82:47:5f:
         7a:9e:74:c2:44:1a:83:2f:3f:a7:40:40:32:27:92:93:a1:79:
         2b:43:1d:0c:b8:1a:0e:5a:6f:f0:e6:1c:85:7c:cd:57:ab:d2:
         d0:22:71:e5:81:07:28:98:07:6c:5a:83:d2:44:e4:09:2a:93:
         d7:d8:45:4b:16:6d:af:00:3c:bf:64:d1:99:e1:61:d9:c7:66:
         eb:f5:29:11:88:e8:b6:b8:a2:22:b1:7c:27:59:9f:9e:ca:e8:
         fe:5d:78:91:62:41:c6:fa:38:e3:9d:b3:b9:25:d3:e7:86:f9:
         60:bd:28:3a:fd:ff:af:8b:de:d5:fc:84:0b:39:cd:d5:38:92:
         85:b0:3b:77:71:f2:3c:61:96:05:1f:97:d1:a6:10:96:08:ac:
         0e:f2:c5:3e:d5:ac:e8:38:d9:73:63:73:94:68:65:8f:a6:c9:
         9c:7c:90:16:08:fa:b2:95:d1:75:60:23:17:06:cf:be:bd:56:
         10:60:22:4b:67:68:f7:ad:d5:81:6c:e4:39:97:47:56:36:26:
         07:35:fa:46:3f:35:fd:e0:f3:7d:4c:61:85:58:24:bc:2a:a8:
         fa:d6:a5:ba:d9:8c:1f:fb:9c:26:e0:b0:e5:a1:85:c7:cf:db:
         36:35:12:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDi9NedDov35K5JJVM/Z7phMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOWRlMjYyMGQyMmZhNjljNTRjYmViYzZmMmY0ODUwNTZj
ZTJmZTUwHhcNMjYwOTI3MTMwMTMxWhcNMjYwOTI4MTMwMTMxWjAzMTEwLwYDVQQD
EyhmNDc4MmIyZjBiM2M1YjcyN2NiYTQwZDY4MGViODIwZjA0YmQzMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3NH9E1zbVJ+DJleA7vO27itAo2o
Hiah5TiY3X0NT3PKO6Cr9bXbfzJTYTV4i0FnF9SYa8S+H1EPrUng3l/shDZ2Aycx
RqwM4gGYGhovjVJuldYVe7M0SN1JA6O/RisVq3NxH1dHOzst6Orh2WXMdKxNPx7x
5FpvhUjPGozyza7wQqSzIVLENVMIG5scEx4P/zxxQ+szEIltB07YYMlI7ps9TRm2
jIex1QmQ25Mndc7THX7b9MWgDg9cpd84xut+59nrAwwFbmb1nZSq9IiVdaoWoheZ
mVEiK17Vd77bxB1Z9HOgokx4Zp/aq9WSigVvy8L3AT9IvBAc/QI2lKwfCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPR4Ky8LPFtyfLpA1oDrgg8EvTIDMB8GA1UdIwQY
MBaAFPCd4mINIvppxUy+vG8vSFBWzi/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTIt
ZjgyZDYwMGRkNGUyLzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85Mjg1OTMtN2EwYS00MzEyLTg2ZTItZjgyZDYwMGRkNGUy
LzEvOEozaVlnMGktbW5GVEw2OGJ5OUlVRmJPTC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDMP5ahJ
uOuBehsl2UB4gkdfep50wkQagy8/p0BAMieSk6F5K0MdDLgaDlpv8OYchXzNV6vS
0CJx5YEHKJgHbFqD0kTkCSqT19hFSxZtrwA8v2TRmeFh2cdm6/UpEYjotriiIrF8
J1mfnsro/l14kWJBxvo4452zuSXT54b5YL0oOv3/r4ve1fyECznN1TiShbA7d3Hy
PGGWBR+X0aYQlgisDvLFPtWs6DjZc2NzlGhlj6bJnHyQFgj6spXRdWAjFwbPvr1W
EGAiS2do963VgWzkOZdHVjYmBzX6Rj81/eDzfUxhhVgkvCqo+talutmMH/ucJuCw
5aGFx8/bNjUSXA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 19:46:40 2026 by rpki-client