Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
File:                     dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft (raw, json)
Hash identifier:          /FJChAHEx5jLt2pM2bMwKvNHD1FY97F/vjjfHLD6A0Q=
Subject key identifier:   4D:05:46:22:34:52:6E:25:1B:10:79:50:7B:DE:F8:FE:D1:07:EC:43
Authority key identifier: 74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64
Certificate issuer:       /CN=749304120ce64942efb3896623b386a041dcb364
Certificate serial:       01A0BE0B95B9115BD62DC4148CA7DA0C2A3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
Manifest number:          EF
Signing time:             Sun 20 Sep 2026 09:00:25 +0000
Manifest this update:     Sun 20 Sep 2026 09:00:25 +0000
Manifest next update:     Mon 21 Sep 2026 09:00:25 +0000
Files and hashes:         1: 1-NkprLROBhIrxdMdpHs0gAbXRhI.roa (hash: OgYkvU3JluSk0A3KrSnV7EBSOaUe4dV5FbvvMxEA9E8=)
                          2: Q5a6HBab7XkMUuUmzB37I_bZ51M.roa (hash: usPWG+ZUU2Ik0VUcffT2eLkXW+tgdFOyEMe83evsQaE=)
                          3: dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl (hash: QtRktWTvfa77gnjW/f+YYLxrc7GbNI3G82VMNGk4mTU=)
                          4: x8Ef8kUk1ABUGDrdvpPX2q-sM5Y.roa (hash: eqyvuJE0kO0nJaVY9QksYF1dsyytJE+brJXIzn/oUAM=)
                          5: yn-UQ1pVJZDABMVLeJ9nhqXgCpk.roa (hash: 9X5Y2Cv2UIpJSqjKJPAjPpvZNJ4jzPmiAP1leQcKFxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 09:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:0b:95:b9:11:5b:d6:2d:c4:14:8c:a7:da:0c:2a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749304120ce64942efb3896623b386a041dcb364
        Validity
            Not Before: Sep 20 09:00:25 2026 GMT
            Not After : Sep 21 09:00:25 2026 GMT
        Subject: CN=4d05462234526e251b1079507bdef8fed107ec43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:91:68:2c:cc:0c:f6:15:b9:e6:90:73:e7:
                    dd:5a:0e:e6:61:cb:d3:36:2d:d5:3f:3e:99:4d:fc:
                    fb:38:58:8c:b4:63:3e:87:0d:07:b0:28:0a:0b:3b:
                    92:2a:35:c0:50:66:77:49:d1:af:12:40:20:a1:37:
                    6c:01:a8:71:96:e9:66:05:29:5e:17:d5:6e:86:8a:
                    8b:6a:52:d3:1e:a3:61:cd:f3:0b:90:41:6f:5c:17:
                    16:cc:e5:1e:f7:9b:dc:67:22:ac:e9:af:07:99:4c:
                    57:d1:71:80:fd:85:36:c4:51:58:c7:a7:ce:2b:f8:
                    e8:90:27:a1:2c:67:de:95:48:3f:a2:07:5e:5c:78:
                    4f:ad:a0:49:63:4b:73:b7:17:89:74:f2:0d:4f:1e:
                    14:64:90:18:06:69:f2:92:f2:f1:00:f6:8c:64:8c:
                    10:45:ed:d2:a0:1d:d4:4c:5b:25:f1:d0:75:4c:9e:
                    6b:58:74:8f:2e:d4:a5:f9:99:d4:56:7b:1a:ff:f8:
                    31:cb:62:3a:c9:db:b0:bc:18:76:78:fc:ef:00:e5:
                    8a:20:b8:76:38:97:ec:c7:6e:81:47:6d:71:12:fd:
                    ca:84:c2:93:0d:49:4f:55:b9:af:35:37:cd:1d:1d:
                    e2:3d:85:87:27:28:6c:79:b4:3f:6c:b2:06:a5:fb:
                    e8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:05:46:22:34:52:6E:25:1B:10:79:50:7B:DE:F8:FE:D1:07:EC:43
            X509v3 Authority Key Identifier:
                keyid:74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c2:2e:40:16:f5:39:f4:94:af:40:c7:aa:5c:ae:93:5c:59:
         5c:22:c6:7b:f3:dd:24:3a:a2:42:30:81:a3:3f:74:24:75:96:
         13:a6:5d:29:2d:6f:f2:4f:fb:72:1e:dd:a0:de:60:e8:f8:7e:
         14:57:c7:f4:d9:d5:44:e6:17:71:dc:6d:80:f3:ae:fe:44:71:
         7e:05:02:0a:b3:b8:b6:7e:b3:57:74:65:54:39:b1:d5:6e:9e:
         2e:53:94:03:cd:a1:ce:91:99:1c:a6:4c:e6:87:cf:2b:a6:2c:
         5d:9e:c0:dd:80:d9:da:49:e4:73:b4:20:92:fa:45:8f:91:ee:
         51:54:e9:6d:f0:44:16:2d:ea:d6:c3:b3:f8:e2:6b:26:72:34:
         b5:d8:f0:08:4b:d6:06:96:d1:28:26:5d:e5:55:f3:ba:a4:09:
         e2:9f:ff:87:68:df:70:4f:7b:97:a0:e4:cf:5f:d7:a1:53:61:
         99:b3:d4:b4:45:34:74:99:c7:ed:0a:f6:55:98:b8:7b:b3:4a:
         62:e1:d0:a6:95:2f:7e:7a:1e:49:e3:52:65:ef:f0:56:25:bd:
         5a:6b:17:44:71:49:3a:51:e3:20:98:1e:1a:f9:5a:d8:02:b3:
         26:fc:7b:97:7f:78:6b:91:6c:04:6c:12:9c:52:9b:c7:ea:6c:
         90:4a:b9:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+C5W5EVvWLcQUjKfaDCo9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTMwNDEyMGNlNjQ5NDJlZmIzODk2NjIzYjM4NmEwNDFk
Y2IzNjQwHhcNMjYwOTIwMDkwMDI1WhcNMjYwOTIxMDkwMDI1WjAzMTEwLwYDVQQD
Eyg0ZDA1NDYyMjM0NTI2ZTI1MWIxMDc5NTA3YmRlZjhmZWQxMDdlYzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5GRaCzMDPYVueaQc+fdWg7mYcvT
Ni3VPz6ZTfz7OFiMtGM+hw0HsCgKCzuSKjXAUGZ3SdGvEkAgoTdsAahxlulmBSle
F9VuhoqLalLTHqNhzfMLkEFvXBcWzOUe95vcZyKs6a8HmUxX0XGA/YU2xFFYx6fO
K/jokCehLGfelUg/ogdeXHhPraBJY0tztxeJdPINTx4UZJAYBmnykvLxAPaMZIwQ
Re3SoB3UTFsl8dB1TJ5rWHSPLtSl+ZnUVnsa//gxy2I6yduwvBh2ePzvAOWKILh2
OJfsx26BR21xEv3KhMKTDUlPVbmvNTfNHR3iPYWHJyhsebQ/bLIGpfvoWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0FRiI0Um4lGxB5UHve+P7RB+xDMB8GA1UdIwQY
MBaAFHSTBBIM5klC77OJZiOzhqBB3LNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpNRUVnem1TVUx2czRsbUk3T0dvRUhjczJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9iNjg0ZGItYjZiMy00OGRkLWFlOTIt
NDMwOGIxMDU0MTdmLzEvZEpNRUVnem1TVUx2czRsbUk3T0dvRUhjczJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9iNjg0ZGItYjZiMy00OGRkLWFlOTItNDMwOGIxMDU0MTdm
LzEvZEpNRUVnem1TVUx2czRsbUk3T0dvRUhjczJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMIuQBb1
OfSUr0DHqlyuk1xZXCLGe/PdJDqiQjCBoz90JHWWE6ZdKS1v8k/7ch7doN5g6Ph+
FFfH9NnVROYXcdxtgPOu/kRxfgUCCrO4tn6zV3RlVDmx1W6eLlOUA82hzpGZHKZM
5ofPK6YsXZ7A3YDZ2knkc7QgkvpFj5HuUVTpbfBEFi3q1sOz+OJrJnI0tdjwCEvW
BpbRKCZd5VXzuqQJ4p//h2jfcE97l6Dkz1/XoVNhmbPUtEU0dJnH7Qr2VZi4e7NK
YuHQppUvfnoeSeNSZe/wViW9WmsXRHFJOlHjIJgeGvla2AKzJvx7l394a5FsBGwS
nFKbx+pskEq5nA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:11:58 2026 by rpki-client