Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
File:                     E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft (raw, json)
Hash identifier:          DkY5MBpCSnJFEuknTf17/99nlm1D4xEFTKLjw8VfzAc=
Subject key identifier:   35:EA:BF:00:5A:FF:85:F2:88:37:C3:82:8A:2A:06:AE:F5:D6:B9:4B
Authority key identifier: 13:E4:DD:8F:80:4F:66:37:56:81:94:E3:C7:93:95:D8:EA:60:BD:49
Certificate issuer:       /CN=13e4dd8f804f6637568194e3c79395d8ea60bd49
Certificate serial:       01A0DD97139E36EDD1A47D6634BAA3705F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
Manifest number:          EC
Signing time:             Sat 26 Sep 2026 12:01:00 +0000
Manifest this update:     Sat 26 Sep 2026 12:01:00 +0000
Manifest next update:     Sun 27 Sep 2026 12:01:00 +0000
Files and hashes:         1: E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl (hash: mr1xiv70G/C1Jl8pa+k79Nt6bVE8k48vceVFOxOr2Bc=)
                          2: O5yYrSdzsWBhXAGaJ3GbbLdJki8.roa (hash: NAJt8mOJoxYYW9MXtdTP+WC2VQ+5i9NPNpJvzgY1wPI=)
                          3: VNXUTkLhTELCHL_xYmLDqoTk_E8.roa (hash: Y3N0C2Cl9/mbPajcJg1hote0RwDtUuKBwQjft6/aYuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:97:13:9e:36:ed:d1:a4:7d:66:34:ba:a3:70:5f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e4dd8f804f6637568194e3c79395d8ea60bd49
        Validity
            Not Before: Sep 26 12:01:00 2026 GMT
            Not After : Sep 27 12:01:00 2026 GMT
        Subject: CN=35eabf005aff85f28837c3828a2a06aef5d6b94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:32:4b:5e:47:c9:d4:61:08:88:f1:98:14:
                    e7:1e:9e:33:c9:9b:6d:1b:36:df:58:9b:81:95:83:
                    f1:ff:ce:d6:25:5b:86:de:7a:f9:ab:47:98:e0:02:
                    a6:94:09:04:a7:ad:c8:54:6e:00:90:b9:20:cf:e7:
                    76:19:d4:fd:d8:6b:f4:d4:af:9d:19:13:62:af:84:
                    ea:2f:07:3d:b6:e1:d2:26:8b:62:6e:a4:4d:28:7f:
                    4b:9d:84:53:fb:35:45:bd:69:96:2d:a7:c9:a4:a4:
                    9d:d1:5b:b5:03:c3:db:df:d5:a8:f5:0e:f2:e2:19:
                    b0:dc:fe:b0:ae:5b:6e:3a:e4:61:8b:f8:61:e8:49:
                    44:77:30:de:63:9b:f1:d7:09:e4:06:34:03:62:a7:
                    a5:99:7c:d8:54:ec:da:aa:f2:c7:ef:d1:a1:67:62:
                    ae:62:91:1e:ff:ea:3e:98:63:2f:ed:17:77:07:19:
                    da:f4:fe:b3:83:77:3d:11:3c:cf:42:8c:ae:00:5b:
                    13:a4:3f:01:38:49:3c:9b:d6:cf:6d:6f:e7:6b:bd:
                    3f:43:31:1f:4a:0b:6b:23:c7:f8:04:d5:61:a1:7b:
                    86:e1:be:50:e1:37:59:89:60:ba:8e:f7:e1:ac:7c:
                    06:fb:86:3b:27:de:b4:5d:12:2d:0a:8a:89:4d:de:
                    bc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EA:BF:00:5A:FF:85:F2:88:37:C3:82:8A:2A:06:AE:F5:D6:B9:4B
            X509v3 Authority Key Identifier:
                keyid:13:E4:DD:8F:80:4F:66:37:56:81:94:E3:C7:93:95:D8:EA:60:BD:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:53:5f:2a:5e:e3:43:90:86:e7:b7:0b:b6:eb:29:eb:df:f0:
         33:bd:28:b1:06:b8:8b:dd:46:8b:ea:77:1f:64:3f:6b:c1:7f:
         d7:fc:7c:80:50:f2:57:32:31:57:2b:12:7d:fd:05:64:56:8f:
         ca:79:e2:a9:33:11:c5:21:14:af:0f:f6:41:e5:b1:b3:9b:3f:
         1e:bb:97:f9:14:f1:e5:20:a3:a5:39:08:24:2a:42:67:5e:68:
         02:30:7c:e5:c3:ad:a4:a2:0b:aa:bf:cc:c1:b9:f7:11:0e:7c:
         80:7c:bc:23:3b:ed:db:a7:88:ac:c7:e3:8e:1a:94:18:6d:fd:
         c7:ea:a2:b0:c3:7c:db:96:d1:5f:3f:3f:04:f3:7c:20:84:5f:
         a8:12:05:8e:01:10:22:86:ea:7a:f1:b7:e6:09:b7:41:d7:72:
         6a:ea:9c:7a:69:1c:4b:5e:26:32:bd:bf:e5:b0:82:f3:04:f5:
         1d:e1:8e:66:4b:67:72:4b:d2:c7:a8:fe:b3:bf:8a:de:ad:25:
         59:13:02:a8:e4:2f:92:bd:d3:0d:09:56:cc:3e:97:64:6f:7e:
         56:f7:59:47:d5:09:83:98:ae:69:fc:71:22:9d:23:d2:9e:60:
         eb:6b:3b:ed:bf:ec:ae:21:f9:1d:a1:b9:d5:5d:fb:df:1b:29:
         67:0d:52:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdlxOeNu3RpH1mNLqjcF86MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZTRkZDhmODA0ZjY2Mzc1NjgxOTRlM2M3OTM5NWQ4ZWE2
MGJkNDkwHhcNMjYwOTI2MTIwMTAwWhcNMjYwOTI3MTIwMTAwWjAzMTEwLwYDVQQD
EygzNWVhYmYwMDVhZmY4NWYyODgzN2MzODI4YTJhMDZhZWY1ZDZiOTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDcyS15HydRhCIjxmBTnHp4zyZtt
GzbfWJuBlYPx/87WJVuG3nr5q0eY4AKmlAkEp63IVG4AkLkgz+d2GdT92Gv01K+d
GRNir4TqLwc9tuHSJotibqRNKH9LnYRT+zVFvWmWLafJpKSd0Vu1A8Pb39Wo9Q7y
4hmw3P6wrltuOuRhi/hh6ElEdzDeY5vx1wnkBjQDYqelmXzYVOzaqvLH79GhZ2Ku
YpEe/+o+mGMv7Rd3Bxna9P6zg3c9ETzPQoyuAFsTpD8BOEk8m9bPbW/na70/QzEf
SgtrI8f4BNVhoXuG4b5Q4TdZiWC6jvfhrHwG+4Y7J960XRItCoqJTd68ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXqvwBa/4XyiDfDgooqBq711rlLMB8GA1UdIwQY
MBaAFBPk3Y+AT2Y3VoGU48eTldjqYL1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS1UZGo0QlBaamRXZ1pUang1T1YyT3BndlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTIt
ZDk3MzBmNWI1ODY3LzEvRS1UZGo0QlBaamRXZ1pUang1T1YyT3BndlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTItZDk3MzBmNWI1ODY3
LzEvRS1UZGo0QlBaamRXZ1pUang1T1YyT3BndlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVNfKl7j
Q5CG57cLtusp69/wM70osQa4i91Gi+p3H2Q/a8F/1/x8gFDyVzIxVysSff0FZFaP
ynniqTMRxSEUrw/2QeWxs5s/HruX+RTx5SCjpTkIJCpCZ15oAjB85cOtpKILqr/M
wbn3EQ58gHy8Izvt26eIrMfjjhqUGG39x+qisMN825bRXz8/BPN8IIRfqBIFjgEQ
IobqevG35gm3QddyauqcemkcS14mMr2/5bCC8wT1HeGOZktnckvSx6j+s7+K3q0l
WRMCqOQvkr3TDQlWzD6XZG9+VvdZR9UJg5iuafxxIp0j0p5g62s77b/sriH5HaG5
1V373xspZw1S8g==
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:36:04 2026 by rpki-client