Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.mft
File:                     mPrK__I6YsGQOx6Vr0DG0INOXjI.mft (raw, json)
Hash identifier:          JKntDYaXIiIKZMC0SniEc6B/DJ5AIBGhhqB+SdGiFNg=
Subject key identifier:   1E:C6:06:58:16:61:1A:A2:16:05:9A:13:19:07:5F:AA:9C:25:86:82
Authority key identifier: 98:FA:CA:FF:F2:3A:62:C1:90:3B:1E:95:AF:40:C6:D0:83:4E:5E:32
Certificate issuer:       /CN=98facafff23a62c1903b1e95af40c6d0834e5e32
Certificate serial:       01A0CC34D03400AC881651604E603D46B9B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.mft
Manifest number:          E3
Signing time:             Wed 23 Sep 2026 03:00:08 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:08 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:08 +0000
Files and hashes:         1: EXGKHVIo_osI3Gb68ip0jBzAF5U.roa (hash: R34cNQW7ksM11PmBeSLdiBzAeEJM8HIjBSNbskLK9H0=)
                          2: R2VwpfxLGkkZ_BAomobXq01wNg0.roa (hash: Tul1AZ3wqqQ37mlAynAUXK1enEBxW5/PblRblDDJnZ4=)
                          3: SJHy8Z4pgOYa2725cUU-voSbrO0.roa (hash: YQon4VLpwG8xCn9mQJ3+mnWdYaPabTWtSH7TJkq0upI=)
                          4: mPrK__I6YsGQOx6Vr0DG0INOXjI.crl (hash: n2WqATYr5/J/6cSjcywf+EZBaPN+r8wN2Dq1jbfqPEE=)
                          5: nE0kjz4gu6CKpIoLlyITIPbyA4U.roa (hash: voWdCDPQFGs2drY8xamnvDVEzZpGhMgl+be11o+sgAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:34:d0:34:00:ac:88:16:51:60:4e:60:3d:46:b9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98facafff23a62c1903b1e95af40c6d0834e5e32
        Validity
            Not Before: Sep 23 03:00:08 2026 GMT
            Not After : Sep 24 03:00:08 2026 GMT
        Subject: CN=1ec6065816611aa216059a1319075faa9c258682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:86:99:ce:c5:06:e3:56:07:5a:26:ce:dd:cf:
                    9b:05:dc:8a:44:dc:cd:22:d9:47:39:e3:59:1e:73:
                    87:e9:c4:3b:93:2f:3b:c0:a7:b3:88:fc:ed:82:5b:
                    f8:2a:ba:1f:22:04:33:44:1b:2f:73:b1:9b:ba:9d:
                    80:7a:85:29:b9:8b:eb:7a:6c:24:44:6f:70:2d:cc:
                    e9:ce:90:63:2f:63:58:8f:b6:98:6c:19:a3:f7:96:
                    a9:5b:5a:ea:ba:1c:be:8c:ad:1c:90:4f:ca:47:47:
                    73:64:5c:ed:cb:c4:90:29:31:19:0c:ee:c9:09:5b:
                    17:de:ae:36:95:75:2c:a1:8e:c9:33:60:5b:61:e6:
                    2e:77:a5:48:c5:73:f0:73:c1:22:e3:d6:5d:af:9a:
                    5b:4a:a5:5b:14:1f:ac:1d:db:c0:ba:8b:7f:8f:da:
                    79:41:92:2a:6f:7b:4a:56:81:9c:64:1a:a9:9b:e1:
                    27:02:46:da:5b:e1:b6:44:e5:98:e4:33:02:fc:3c:
                    27:e2:5f:42:24:d8:04:e6:6f:15:f3:98:0b:78:33:
                    26:30:61:a3:41:76:da:ef:27:50:c4:af:52:65:3f:
                    41:9c:43:68:19:cd:3d:a7:f2:a6:30:cf:ea:8a:25:
                    8e:02:2d:cb:43:0c:c5:c6:98:1d:2c:0c:a4:12:ff:
                    0e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C6:06:58:16:61:1A:A2:16:05:9A:13:19:07:5F:AA:9C:25:86:82
            X509v3 Authority Key Identifier:
                keyid:98:FA:CA:FF:F2:3A:62:C1:90:3B:1E:95:AF:40:C6:D0:83:4E:5E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:52:81:a8:6e:14:c3:bc:2b:3c:e2:15:bf:11:ee:e4:01:45:
         1b:af:9a:70:8d:53:c7:4b:db:01:85:94:b4:74:00:ac:29:92:
         02:eb:bd:48:57:35:ad:b1:42:bd:9a:c5:20:b7:29:31:7d:c7:
         48:07:aa:d9:4b:81:fb:13:40:4d:f0:06:9a:8f:99:c2:7c:18:
         3d:b7:14:61:1e:9c:c6:2a:8b:b0:b2:0f:d3:e3:5b:a3:32:20:
         67:51:1d:0e:2e:f4:9a:77:f3:a9:80:9d:b6:ad:cf:6a:a9:37:
         dd:b0:c3:2b:22:f8:c0:3a:ac:d2:f3:d9:20:fe:dc:4b:43:ef:
         d2:3f:41:6b:a8:9d:4c:f8:a4:cc:29:8e:5a:59:92:4f:83:8c:
         22:39:bd:a2:11:02:f1:c0:34:38:ee:b1:74:5a:52:22:13:fa:
         05:c8:b5:bd:3b:b7:8e:ef:7e:05:a1:54:30:d4:f8:46:86:dd:
         03:95:8a:23:68:48:35:b3:a5:e6:ce:08:f5:3b:c3:4f:e9:c5:
         04:1f:49:2b:62:7f:26:b9:d5:7e:4e:bb:3f:e2:28:ed:1f:13:
         47:5d:f5:d6:6b:1a:ce:f4:b7:bc:b7:0c:95:4a:82:ef:22:1e:
         b3:85:bb:96:c9:d6:44:66:4f:d1:b7:99:21:a0:d8:d0:f5:d2:
         ea:99:2f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNNA0AKyIFlFgTmA9Rrm2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZmFjYWZmZjIzYTYyYzE5MDNiMWU5NWFmNDBjNmQwODM0
ZTVlMzIwHhcNMjYwOTIzMDMwMDA4WhcNMjYwOTI0MDMwMDA4WjAzMTEwLwYDVQQD
EygxZWM2MDY1ODE2NjExYWEyMTYwNTlhMTMxOTA3NWZhYTljMjU4NjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIaZzsUG41YHWibO3c+bBdyKRNzN
ItlHOeNZHnOH6cQ7ky87wKeziPztglv4KrofIgQzRBsvc7Gbup2AeoUpuYvremwk
RG9wLczpzpBjL2NYj7aYbBmj95apW1rquhy+jK0ckE/KR0dzZFzty8SQKTEZDO7J
CVsX3q42lXUsoY7JM2BbYeYud6VIxXPwc8Ei49Zdr5pbSqVbFB+sHdvAuot/j9p5
QZIqb3tKVoGcZBqpm+EnAkbaW+G2ROWY5DMC/Dwn4l9CJNgE5m8V85gLeDMmMGGj
QXba7ydQxK9SZT9BnENoGc09p/KmMM/qiiWOAi3LQwzFxpgdLAykEv8OnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7GBlgWYRqiFgWaExkHX6qcJYaCMB8GA1UdIwQY
MBaAFJj6yv/yOmLBkDsela9AxtCDTl4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVByS19fSTZZc0dRT3g2VnIwREcwSU5PWGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wYTlhMzMtOTlkYy00YjkyLThjZWQt
ODM2YWM5N2MwMWJiLzEvbVByS19fSTZZc0dRT3g2VnIwREcwSU5PWGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wYTlhMzMtOTlkYy00YjkyLThjZWQtODM2YWM5N2MwMWJi
LzEvbVByS19fSTZZc0dRT3g2VnIwREcwSU5PWGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClKBqG4U
w7wrPOIVvxHu5AFFG6+acI1Tx0vbAYWUtHQArCmSAuu9SFc1rbFCvZrFILcpMX3H
SAeq2UuB+xNATfAGmo+ZwnwYPbcUYR6cxiqLsLIP0+NbozIgZ1EdDi70mnfzqYCd
tq3Paqk33bDDKyL4wDqs0vPZIP7cS0Pv0j9Ba6idTPikzCmOWlmST4OMIjm9ohEC
8cA0OO6xdFpSIhP6Bci1vTu3ju9+BaFUMNT4RobdA5WKI2hINbOl5s4I9TvDT+nF
BB9JK2J/JrnVfk67P+Io7R8TR1311msazvS3vLcMlUqC7yIes4W7lsnWRGZP0beZ
IaDY0PXS6pkvVQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:49:57 2026 by rpki-client