Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.mft
File:                     FvE3AfZKMRbctbspxVll5OhlJy4.mft (raw, json)
Hash identifier:          N85kftPbCLJwi/DUGu1PKqUn3zJ4vpkRsXfg4PBhsDI=
Subject key identifier:   E6:56:94:5A:12:1C:DE:01:A6:3F:CE:EC:1E:91:04:F4:E2:D2:F2:72
Authority key identifier: 16:F1:37:01:F6:4A:31:16:DC:B5:BB:29:C5:59:65:E4:E8:65:27:2E
Certificate issuer:       /CN=16f13701f64a3116dcb5bb29c55965e4e865272e
Certificate serial:       01A0BEB0FFFB2B63DDF6F4E8C29233C734DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.mft
Manifest number:          C2
Signing time:             Sun 20 Sep 2026 12:01:05 +0000
Manifest this update:     Sun 20 Sep 2026 12:01:05 +0000
Manifest next update:     Mon 21 Sep 2026 12:01:05 +0000
Files and hashes:         1: 42BDqtAQ9lcIeaUyJpKcjUQ10_0.roa (hash: +iVqlQUSZD75lSN3BubqoOzjwru6qo7Xro+7FeWxjTo=)
                          2: FvE3AfZKMRbctbspxVll5OhlJy4.crl (hash: n8ZI+FGYApab3mCR+I0oxytcSWIqSl3mg7r5Y/Ll5RU=)
                          3: JWfknnBNHDqUE3M6T3I9yPrA24o.roa (hash: IOoAUOjkIl51WKcsbMSHfbV6UaLjPVCL/lOBBYW1YHk=)
                          4: YnilPx2dZcJqh4ls6xq-N2uRQ5A.asa (hash: 3verUtS7uFBpvS0G2iTLLXTPGgLAY1LSZCEh5YEovjE=)
                          5: zV0V8DTB4694rawMjTYOOLyWN-U.roa (hash: Gx3HbT7EtEgUlyYa8PmgpRY7z4AnqrNUbdr60lJPtvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:b0:ff:fb:2b:63:dd:f6:f4:e8:c2:92:33:c7:34:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f13701f64a3116dcb5bb29c55965e4e865272e
        Validity
            Not Before: Sep 20 12:01:05 2026 GMT
            Not After : Sep 21 12:01:05 2026 GMT
        Subject: CN=e656945a121cde01a63fceec1e9104f4e2d2f272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d5:56:26:de:b7:f9:08:0b:d6:a3:03:dd:59:
                    b4:ca:1b:73:17:37:8d:ea:3a:3a:68:32:93:9d:44:
                    55:9a:48:73:4b:ce:9e:d6:7b:3e:3c:92:d3:04:fd:
                    17:db:1f:26:61:6f:90:f9:1c:6d:80:f6:af:55:aa:
                    22:2b:2e:14:cf:ff:ef:5a:2e:fc:91:3d:5b:cf:37:
                    d4:e5:89:ac:a6:4a:7f:1a:dc:15:9b:b6:b2:91:17:
                    c6:ab:3c:eb:40:fa:74:57:73:65:cb:e7:ff:66:91:
                    46:4e:25:ee:4f:e3:85:45:c8:f3:ea:13:ba:61:4c:
                    a9:52:df:99:49:1d:54:22:f3:9a:59:49:0a:e3:4d:
                    39:86:3e:6e:c0:07:f8:bb:2a:43:43:4c:7f:45:c4:
                    9c:bd:2a:37:e1:54:a8:f3:e7:e7:5d:a2:c0:20:6d:
                    4b:6b:5c:0e:b9:76:db:f6:0b:97:4b:d7:cc:aa:d3:
                    4d:3e:78:f4:32:4d:0c:25:ab:db:61:9b:b6:78:d4:
                    74:0b:31:27:cd:6d:8a:05:dd:a5:a0:2c:5d:c8:0f:
                    01:31:b9:7e:b1:78:80:b3:34:9a:2a:06:ff:ef:d9:
                    6f:8b:ff:94:72:03:7e:84:14:43:15:11:6d:98:f7:
                    5b:79:5d:4b:c2:4f:b8:b7:a9:91:51:a0:b8:b9:51:
                    36:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:56:94:5A:12:1C:DE:01:A6:3F:CE:EC:1E:91:04:F4:E2:D2:F2:72
            X509v3 Authority Key Identifier:
                keyid:16:F1:37:01:F6:4A:31:16:DC:B5:BB:29:C5:59:65:E4:E8:65:27:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f6:98:ad:d0:f7:4f:84:67:b3:fd:d1:0d:4c:e1:47:7c:08:
         9e:5a:cb:59:72:5d:11:81:8c:41:89:78:96:e7:40:1c:46:f9:
         d4:d5:f2:8e:c8:45:5e:3f:97:0b:10:1e:6e:ee:60:d6:7b:4a:
         c2:4e:65:9f:29:65:d0:61:4c:ee:4e:11:3d:14:3a:2a:7f:a7:
         71:6f:e8:72:45:c5:15:3e:05:35:b4:dd:52:b2:04:3e:a2:8d:
         09:b8:84:78:12:a2:9b:ef:6e:38:67:49:1e:d4:60:1e:40:c2:
         6d:13:d3:9d:8f:33:6b:3b:4c:00:a6:4c:07:8f:bf:8a:e6:0d:
         17:ae:5d:f0:f8:88:92:73:7b:04:34:8b:a3:5b:db:ff:82:f8:
         ff:11:86:d6:46:43:e0:30:61:db:34:83:44:86:17:3f:5a:a4:
         fa:28:16:42:eb:36:d0:6c:38:08:e2:b1:ea:82:a4:d4:bc:60:
         7a:06:14:42:e8:c6:97:ee:16:7e:68:fd:b8:54:ea:6d:fd:9e:
         50:79:cd:ee:21:f3:7e:d9:1f:ca:64:d0:23:55:b7:b4:39:3a:
         5e:65:55:20:15:8f:35:a0:6c:7e:ce:cb:cb:ba:5b:7e:bd:03:
         93:d8:cb:c4:98:b6:c2:85:3d:d5:1c:5e:e4:98:25:6b:e4:44:
         d5:3c:20:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+sP/7K2Pd9vTowpIzxzTeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZjEzNzAxZjY0YTMxMTZkY2I1YmIyOWM1NTk2NWU0ZTg2
NTI3MmUwHhcNMjYwOTIwMTIwMTA1WhcNMjYwOTIxMTIwMTA1WjAzMTEwLwYDVQQD
EyhlNjU2OTQ1YTEyMWNkZTAxYTYzZmNlZWMxZTkxMDRmNGUyZDJmMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdVWJt63+QgL1qMD3Vm0yhtzFzeN
6jo6aDKTnURVmkhzS86e1ns+PJLTBP0X2x8mYW+Q+RxtgPavVaoiKy4Uz//vWi78
kT1bzzfU5Ymspkp/GtwVm7aykRfGqzzrQPp0V3Nly+f/ZpFGTiXuT+OFRcjz6hO6
YUypUt+ZSR1UIvOaWUkK4005hj5uwAf4uypDQ0x/RcScvSo34VSo8+fnXaLAIG1L
a1wOuXbb9guXS9fMqtNNPnj0Mk0MJavbYZu2eNR0CzEnzW2KBd2loCxdyA8BMbl+
sXiAszSaKgb/79lvi/+UcgN+hBRDFRFtmPdbeV1Lwk+4t6mRUaC4uVE26wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZWlFoSHN4Bpj/O7B6RBPTi0vJyMB8GA1UdIwQY
MBaAFBbxNwH2SjEW3LW7KcVZZeToZScuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnZFM0FmWktNUmJjdGJzcHhWbGw1T2hsSnk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNDE4ZmUtNzgxOS00OGZmLTlmYzYt
ZTUwMDMxYzZiMmM1LzEvRnZFM0FmWktNUmJjdGJzcHhWbGw1T2hsSnk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNDE4ZmUtNzgxOS00OGZmLTlmYzYtZTUwMDMxYzZiMmM1
LzEvRnZFM0FmWktNUmJjdGJzcHhWbGw1T2hsSnk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofaYrdD3
T4Rns/3RDUzhR3wInlrLWXJdEYGMQYl4ludAHEb51NXyjshFXj+XCxAebu5g1ntK
wk5lnyll0GFM7k4RPRQ6Kn+ncW/ockXFFT4FNbTdUrIEPqKNCbiEeBKim+9uOGdJ
HtRgHkDCbRPTnY8zaztMAKZMB4+/iuYNF65d8PiIknN7BDSLo1vb/4L4/xGG1kZD
4DBh2zSDRIYXP1qk+igWQus20Gw4COKx6oKk1LxgegYUQujGl+4Wfmj9uFTqbf2e
UHnN7iHzftkfymTQI1W3tDk6XmVVIBWPNaBsfs7Ly7pbfr0Dk9jLxJi2woU91Rxe
5Jgla+RE1Twg0g==
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:49:49 2026 by rpki-client