Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.mft
File:                     0jhBasikxn8MHXSqHFwe_SmC3Zg.mft (raw, json)
Hash identifier:          lAGwoSU1T7KhT8owRaif2wZVVjvcomAMyYp83BfAFZc=
Subject key identifier:   46:A1:98:06:37:B6:89:1B:5A:92:33:3E:C4:2C:BF:6D:2B:F9:29:C6
Authority key identifier: D2:38:41:6A:C8:A4:C6:7F:0C:1D:74:AA:1C:5C:1E:FD:29:82:DD:98
Certificate issuer:       /CN=d238416ac8a4c67f0c1d74aa1c5c1efd2982dd98
Certificate serial:       01A0CE2371D8CE988A4B761CCE3E9F3BF0A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jhBasikxn8MHXSqHFwe_SmC3Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 12:00:24 +0000
Manifest this update:     Wed 23 Sep 2026 12:00:24 +0000
Manifest next update:     Thu 24 Sep 2026 12:00:24 +0000
Files and hashes:         1: 0jhBasikxn8MHXSqHFwe_SmC3Zg.crl (hash: 9fo+RCUWuSeCWtnt0A3O675LYNObxW6ZIMKdqegkkNg=)
                          2: z4scIEhsai2SiPvFPY8Jm70JBSM.roa (hash: qL/WQ7181fmgrfOQNCVUM/gFKkB/ThaOziSxysnkWrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jhBasikxn8MHXSqHFwe_SmC3Zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:23:71:d8:ce:98:8a:4b:76:1c:ce:3e:9f:3b:f0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d238416ac8a4c67f0c1d74aa1c5c1efd2982dd98
        Validity
            Not Before: Sep 23 12:00:24 2026 GMT
            Not After : Sep 24 12:00:24 2026 GMT
        Subject: CN=46a1980637b6891b5a92333ec42cbf6d2bf929c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:1f:c3:1f:08:54:a2:c5:c4:7b:d0:a6:a9:
                    4f:c8:f0:61:a2:d2:08:56:4d:7c:52:9b:e3:f5:91:
                    1e:33:c2:68:de:38:de:60:cd:a4:56:87:f6:82:86:
                    80:15:eb:b5:47:52:44:31:dd:e1:29:1a:3d:da:3a:
                    ef:3c:3b:d4:77:2f:25:bd:c7:6e:d2:26:eb:fc:64:
                    4f:31:91:8e:18:02:6e:f2:e5:87:da:ab:54:dc:5b:
                    c2:87:22:e6:21:ad:be:a2:33:83:33:a2:99:e4:b5:
                    27:70:25:cc:08:8f:eb:16:24:66:30:3a:65:81:9a:
                    a6:63:42:04:ac:35:54:f9:85:89:88:36:e9:49:f8:
                    fb:c1:f3:be:ee:cd:ac:fd:da:a8:70:53:ec:93:31:
                    04:ce:0f:a5:77:41:22:54:0a:76:ee:68:6a:a2:c5:
                    55:d2:69:73:0b:75:91:4d:c4:67:ee:cf:80:01:b9:
                    da:43:09:9f:11:93:73:57:88:22:6f:f1:8a:ff:85:
                    62:83:0b:02:b9:53:39:d7:19:74:ff:d2:9a:36:d3:
                    04:4d:85:fc:e5:38:b8:30:af:4a:84:2c:b7:23:42:
                    ef:31:a7:bb:46:94:59:b4:c9:93:38:37:80:aa:9f:
                    ce:ed:cb:33:ed:8f:98:69:87:41:0c:b9:41:5a:40:
                    fb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A1:98:06:37:B6:89:1B:5A:92:33:3E:C4:2C:BF:6D:2B:F9:29:C6
            X509v3 Authority Key Identifier:
                keyid:D2:38:41:6A:C8:A4:C6:7F:0C:1D:74:AA:1C:5C:1E:FD:29:82:DD:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jhBasikxn8MHXSqHFwe_SmC3Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/0jhBasikxn8MHXSqHFwe_SmC3Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6f:4f:57:1a:37:de:9c:fe:38:a0:e6:e5:ec:5c:d3:65:ed:
         8e:3c:b2:45:25:23:ed:cd:bc:8b:a9:f5:a5:d7:c7:ab:1d:e4:
         44:a5:47:6d:3a:ce:ef:76:a3:ca:a7:d9:43:84:d5:8f:09:91:
         22:2f:b7:01:d9:5e:d6:b5:e1:18:2b:59:e9:80:26:17:38:2e:
         40:21:bc:84:63:9e:8d:aa:d4:05:a2:cd:1b:8c:d4:b6:ee:c3:
         14:03:88:2b:fe:27:d9:3b:d1:da:b0:64:9f:15:3e:9d:fb:65:
         32:c7:a6:27:65:4f:19:5a:d5:28:b6:ea:29:fb:17:b2:b7:d6:
         c9:60:87:50:b2:e2:67:19:42:2a:0a:92:c5:70:bf:4e:dc:b4:
         0e:1c:22:2a:cf:7b:bb:4e:f8:9d:2a:3d:8a:ac:38:b0:dd:21:
         f9:35:e4:e4:c7:2b:1d:7c:15:f0:a4:2c:71:03:50:2d:e9:ca:
         4d:b0:2e:e8:61:c3:a0:a8:75:d8:d8:3f:2b:5d:90:d2:3c:8f:
         28:b8:77:99:bf:07:e1:3c:30:bd:48:dc:7d:97:f1:b6:23:9e:
         2e:35:1b:05:8f:5e:7b:df:55:4d:f6:d4:0a:ca:60:f3:16:26:
         98:f0:a2:61:a3:1f:c1:e8:36:3e:15:65:16:00:95:c3:a1:aa:
         9a:e8:30:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOI3HYzpiKS3Yczj6fO/CjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzg0MTZhYzhhNGM2N2YwYzFkNzRhYTFjNWMxZWZkMjk4
MmRkOTgwHhcNMjYwOTIzMTIwMDI0WhcNMjYwOTI0MTIwMDI0WjAzMTEwLwYDVQQD
Eyg0NmExOTgwNjM3YjY4OTFiNWE5MjMzM2VjNDJjYmY2ZDJiZjkyOWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouAfwx8IVKLFxHvQpqlPyPBhotII
Vk18Upvj9ZEeM8Jo3jjeYM2kVof2goaAFeu1R1JEMd3hKRo92jrvPDvUdy8lvcdu
0ibr/GRPMZGOGAJu8uWH2qtU3FvChyLmIa2+ojODM6KZ5LUncCXMCI/rFiRmMDpl
gZqmY0IErDVU+YWJiDbpSfj7wfO+7s2s/dqocFPskzEEzg+ld0EiVAp27mhqosVV
0mlzC3WRTcRn7s+AAbnaQwmfEZNzV4gib/GK/4VigwsCuVM51xl0/9KaNtMETYX8
5Ti4MK9KhCy3I0LvMae7RpRZtMmTODeAqp/O7csz7Y+YaYdBDLlBWkD7mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEahmAY3tokbWpIzPsQsv20r+SnGMB8GA1UdIwQY
MBaAFNI4QWrIpMZ/DB10qhxcHv0pgt2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpoQmFzaWt4bjhNSFhTcUhGd2VfU21DM1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83ZTJiMGEtYThlZC00N2I3LTlkNzQt
YWI5NzVmN2QzNTMzLzEvMGpoQmFzaWt4bjhNSFhTcUhGd2VfU21DM1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83ZTJiMGEtYThlZC00N2I3LTlkNzQtYWI5NzVmN2QzNTMz
LzEvMGpoQmFzaWt4bjhNSFhTcUhGd2VfU21DM1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm29PVxo3
3pz+OKDm5exc02XtjjyyRSUj7c28i6n1pdfHqx3kRKVHbTrO73ajyqfZQ4TVjwmR
Ii+3Adle1rXhGCtZ6YAmFzguQCG8hGOejarUBaLNG4zUtu7DFAOIK/4n2TvR2rBk
nxU+nftlMsemJ2VPGVrVKLbqKfsXsrfWyWCHULLiZxlCKgqSxXC/Tty0DhwiKs97
u074nSo9iqw4sN0h+TXk5McrHXwV8KQscQNQLenKTbAu6GHDoKh12Ng/K12Q0jyP
KLh3mb8H4TwwvUjcfZfxtiOeLjUbBY9ee99VTfbUCspg8xYmmPCiYaMfweg2PhVl
FgCVw6Gqmugw5w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:07 2026 by rpki-client