Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
File:                     25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json)
Hash identifier:          y1g+RaFjGSjSg/aiC8SD0WJlsStqfe1198S08ReEoF0=
Subject key identifier:   08:8B:43:81:25:9B:DC:04:86:48:01:ED:3D:0B:C3:8B:EF:D1:6A:D7
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Certificate issuer:       /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial:       01A0BDD4BED5E81AF5049C3C7B01E8EFEFAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
Manifest number:          0594
Signing time:             Sun 20 Sep 2026 08:00:31 +0000
Manifest this update:     Sun 20 Sep 2026 08:00:31 +0000
Manifest next update:     Mon 21 Sep 2026 08:00:31 +0000
Files and hashes:         1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: hDMa0ZsEgEg1g9HJzv6sJPcUe+Dne4b/UjoqzAxkfp4=)
                          2: SMH2Oc24_m72oqPVd7XOf3_OyRU.roa (hash: WsgzmpsbvE0g6zXQzhps2wgMNgXJq/ibUvwvE7MedyM=)
                          3: hS-zp-zfmueU5iHRFKC0O06b_Y8.roa (hash: bQDlMMAMtH4O8JePaz3JngoNBpURtKGCYa9QelbxBc8=)
                          4: y3w7IFJm13aGwMFCnd42KoPN8ig.asa (hash: oSsnXMHGt6Jala+OG7pBbw/pQpax41sGQUuBNahs8Gc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 08:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:d4:be:d5:e8:1a:f5:04:9c:3c:7b:01:e8:ef:ef:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
        Validity
            Not Before: Sep 20 08:00:31 2026 GMT
            Not After : Sep 21 08:00:31 2026 GMT
        Subject: CN=088b4381259bdc04864801ed3d0bc38befd16ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1f:6f:28:f0:ba:22:40:17:79:48:07:eb:88:
                    82:d5:70:b5:d4:ab:28:2f:16:08:9b:cc:24:ef:dd:
                    56:50:1d:77:4f:ac:5d:6d:f9:8f:93:cf:1c:97:e1:
                    9e:65:64:9d:8b:89:97:98:2c:a4:c5:6b:a5:1d:6e:
                    b9:6b:fe:0d:82:6d:a6:53:94:1e:a7:d5:4b:7f:c7:
                    84:a7:8c:ea:63:c7:84:fb:6f:59:d9:ae:69:e6:63:
                    7f:22:09:34:d2:8e:91:4a:c7:c6:16:a9:9f:91:dc:
                    f3:91:c5:fb:d2:7d:98:e0:6b:5e:e9:52:38:da:6f:
                    a8:04:56:d2:08:bb:08:27:55:92:bc:db:bc:92:e1:
                    66:b1:76:ae:19:6c:2d:12:b1:a7:6e:89:bc:50:4b:
                    71:91:f2:49:de:e3:1c:f5:59:c0:ec:b5:f1:3c:9e:
                    72:34:77:9b:a9:2b:1e:29:3a:46:2d:79:93:eb:e1:
                    c8:96:da:b1:24:a1:89:69:99:7d:4e:4b:d2:7b:39:
                    de:9f:33:60:dd:2a:5b:15:26:57:95:b0:a0:fe:c9:
                    63:b6:e5:45:69:a7:13:c3:58:9b:21:ad:88:b8:db:
                    98:e9:36:2c:41:ef:66:f0:70:d8:ae:cd:68:dc:6e:
                    43:0b:5b:8b:9d:9d:52:5e:40:49:9b:2e:85:2c:db:
                    5d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8B:43:81:25:9B:DC:04:86:48:01:ED:3D:0B:C3:8B:EF:D1:6A:D7
            X509v3 Authority Key Identifier:
                keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:40:8a:e1:82:b9:3e:d7:fb:87:21:65:2c:66:24:23:1f:73:
         61:6f:ab:42:41:8c:dc:c4:47:b4:60:c8:d1:54:ed:3b:1b:b4:
         73:54:6f:b1:23:a9:db:89:bf:85:d9:51:aa:8a:7e:d3:9b:30:
         53:f7:5b:43:b0:46:1a:c4:ce:8f:f7:aa:63:b6:c2:93:ed:81:
         e5:04:e2:a8:82:a9:71:1f:33:ea:ef:f8:06:4d:1a:fc:6d:a3:
         06:2d:d6:28:57:80:8e:c3:07:81:52:7f:a2:c9:6d:5a:ec:c9:
         36:3e:70:ff:99:b5:c8:02:2e:2d:bf:f8:77:a8:e6:c5:7e:1b:
         63:27:a0:5f:b4:47:ae:b3:15:69:31:25:d1:a5:96:e9:cf:7f:
         0e:81:fe:52:c1:5c:c9:ed:a8:78:d5:43:b2:d5:c2:88:c7:84:
         12:ca:76:8a:2d:01:16:3a:ef:92:0e:ca:9e:f3:c4:be:4b:b6:
         24:84:f7:a4:b0:c2:cd:16:ae:20:b3:f0:c4:ae:c5:20:da:f5:
         51:e1:9a:45:93:c5:9f:93:3e:35:a8:c5:98:87:0b:77:6f:72:
         49:1f:2f:f6:ab:80:56:ea:62:96:cc:34:92:0c:25:dd:46:2c:
         d8:ba:68:71:dc:90:f4:e8:90:65:5c:31:a2:c8:31:9f:95:13:
         61:94:01:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC91L7V6Br1BJw8ewHo7++uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOTlmMzMwYmUzMTQ3YjRkYTkwZDExNGEzY2Y0MjA1ZmE0
NTExMDMwHhcNMjYwOTIwMDgwMDMxWhcNMjYwOTIxMDgwMDMxWjAzMTEwLwYDVQQD
EygwODhiNDM4MTI1OWJkYzA0ODY0ODAxZWQzZDBiYzM4YmVmZDE2YWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B9vKPC6IkAXeUgH64iC1XC11Kso
LxYIm8wk791WUB13T6xdbfmPk88cl+GeZWSdi4mXmCykxWulHW65a/4Ngm2mU5Qe
p9VLf8eEp4zqY8eE+29Z2a5p5mN/Igk00o6RSsfGFqmfkdzzkcX70n2Y4Gte6VI4
2m+oBFbSCLsIJ1WSvNu8kuFmsXauGWwtErGnbom8UEtxkfJJ3uMc9VnA7LXxPJ5y
NHebqSseKTpGLXmT6+HIltqxJKGJaZl9TkvSeznenzNg3SpbFSZXlbCg/sljtuVF
aacTw1ibIa2IuNuY6TYsQe9m8HDYrs1o3G5DC1uLnZ1SXkBJmy6FLNtdcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiLQ4Elm9wEhkgB7T0Lw4vv0WrXMB8GA1UdIwQY
MBaAFNuZ8zC+MUe02pDRFKPPQgX6RREDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQt
ZDRkYmQ1ZTIwNGY3LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQtZDRkYmQ1ZTIwNGY3
LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMECK4YK5
Ptf7hyFlLGYkIx9zYW+rQkGM3MRHtGDI0VTtOxu0c1RvsSOp24m/hdlRqop+05sw
U/dbQ7BGGsTOj/eqY7bCk+2B5QTiqIKpcR8z6u/4Bk0a/G2jBi3WKFeAjsMHgVJ/
osltWuzJNj5w/5m1yAIuLb/4d6jmxX4bYyegX7RHrrMVaTEl0aWW6c9/DoH+UsFc
ye2oeNVDstXCiMeEEsp2ii0BFjrvkg7KnvPEvku2JIT3pLDCzRauILPwxK7FINr1
UeGaRZPFn5M+NajFmIcLd29ySR8v9quAVupilsw0kgwl3UYs2LpocdyQ9OiQZVwx
osgxn5UTYZQBSw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:43:47 2026 by rpki-client