Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          RZTaziZ066fbIxt9tyeqRp+VXNs3AX7Ytjndj2A/jpg=
Subject key identifier:   B2:DD:75:C0:8F:63:CC:80:55:45:6C:18:3C:24:FC:DC:F2:2D:28:F6
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       01A0C1B14669C2C069CABE1624987E6A3C7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          1A95
Signing time:             Mon 21 Sep 2026 02:00:15 +0000
Manifest this update:     Mon 21 Sep 2026 02:00:15 +0000
Manifest next update:     Tue 22 Sep 2026 02:00:15 +0000
Files and hashes:         1: 1qEKqAJdH_5JUlUOsEMtQdOuv-Q.roa (hash: OkbONL4Kv2cLwbDetNkEjbv+0531gLH+WXA/3kqlV9c=)
                          2: 9SsHjlBtd69QJ3ndqo-1KhdedKw.roa (hash: qiOm4Fr0eZzz2bsbkMUTFYSa9lmGOwKDeaQIOpLMzdY=)
                          3: JVABJxvLxkj1mSPSAUuE7d0cXpc.roa (hash: 1hA/cynNPGLtZN3nQtWNzvj3MUG4llVicN6VIwab6HU=)
                          4: gX9Z7p1Ob66YosJCGXnZh4miO-s.roa (hash: elm/BD7Osd0BcHbQbq55e8rpGxN0X0LtIG/FC4qO27s=)
                          5: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: LSZ7go4L2oNB2ogyHAXqOoGxubaYHylYLUU3m42CjcM=)
                          6: pDrr_bf7Ghe4a7lfLdGTUedQJ4s.roa (hash: hckgwXDzkDTS3YgN/PyJxO9PpMuWCR3QafiNrBSQrgA=)
                          7: sFz5mtE3Mde8lSIcx7T2y7lO-zw.roa (hash: NxGgl9GbDugZBPBW0o4P8z6yiV+CD/pDM33YvrxHjSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:b1:46:69:c2:c0:69:ca:be:16:24:98:7e:6a:3c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Sep 21 02:00:15 2026 GMT
            Not After : Sep 22 02:00:15 2026 GMT
        Subject: CN=b2dd75c08f63cc8055456c183c24fcdcf22d28f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4e:e0:54:f3:63:e7:db:59:ce:6d:42:1d:02:
                    0a:89:f8:4c:51:b4:f3:e1:ef:43:9c:e8:e5:75:89:
                    82:6e:72:77:ad:0d:69:f0:2f:31:be:20:28:37:38:
                    29:bb:f1:5d:08:df:04:ee:76:3d:a3:9e:f1:27:3e:
                    4e:eb:5c:49:75:68:18:13:23:d2:ad:ed:c5:ad:86:
                    cc:00:22:3a:8c:30:9d:c1:a7:d1:fd:d4:4a:d5:9c:
                    5b:e3:35:b8:8a:a6:6c:29:2f:b9:e8:8a:61:2d:b9:
                    68:fd:fb:87:77:62:f7:ab:2c:0d:25:f9:4b:b7:ce:
                    68:aa:84:a6:c1:64:12:20:3c:f6:00:6d:15:1a:90:
                    24:f1:81:3c:6e:86:e0:8e:27:59:d0:0a:5f:5f:36:
                    25:69:2c:46:be:5c:79:42:2c:d7:2b:0f:c2:d6:19:
                    c2:21:bf:15:6a:25:e9:97:5b:de:09:23:a4:83:ce:
                    11:67:63:2a:27:94:c9:07:21:99:1d:0f:62:c8:16:
                    d4:1c:36:2d:5d:88:38:23:62:84:87:73:8d:32:8d:
                    5d:82:b3:56:15:75:db:96:77:2f:c2:e8:67:ae:fc:
                    62:70:17:85:42:26:df:c6:14:43:5a:98:59:9a:f4:
                    fd:2f:b1:32:a9:c8:4c:97:34:c1:68:a7:9f:c4:8d:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DD:75:C0:8F:63:CC:80:55:45:6C:18:3C:24:FC:DC:F2:2D:28:F6
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:39:77:d4:65:3e:47:11:f4:a5:52:3a:16:73:e4:98:2e:66:
         eb:dd:63:72:f6:36:64:71:5c:1f:db:f5:39:4b:75:17:5c:1a:
         1e:b5:2d:40:ad:26:88:4e:8f:82:c1:3b:7d:ca:41:1b:c6:0d:
         6b:6a:45:83:3f:8f:cc:22:a8:f1:62:e9:aa:e4:dd:e8:a0:7c:
         cc:0b:96:e6:1f:b2:64:70:7a:67:34:0c:cf:5f:fd:0d:0f:5c:
         83:87:96:c4:a0:a2:16:3d:8d:1d:a0:3b:a2:2c:c6:9d:95:62:
         0e:8a:6e:77:6c:94:c1:a2:72:47:98:37:53:df:e9:8e:5d:00:
         0d:44:47:ee:09:30:ea:70:99:24:f0:7e:c6:a4:93:e7:fd:10:
         6a:84:d8:48:48:50:4d:8d:41:53:ec:4c:b3:af:39:5f:c1:38:
         dd:06:51:0d:dd:b2:02:bb:2f:8e:7d:b8:64:97:35:fb:5e:89:
         9a:8c:ae:56:d6:25:25:b5:9c:da:82:a7:7b:df:ae:fe:56:a7:
         6d:a5:ab:ba:da:41:22:c7:44:03:ff:0a:37:31:8c:8d:bf:fe:
         b9:fd:d0:06:02:0f:83:88:b7:b7:f0:59:2d:a1:11:cf:8c:67:
         98:65:64:08:65:ba:6a:d8:7d:c5:28:9c:b6:7a:c5:c8:e3:59:
         4b:a6:fc:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsUZpwsBpyr4WJJh+ajx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZGE2MGYwNDlkZmJhMzRiZTRiNGU4NDE4YjlmZjQ5MjEy
NWM0NDkwHhcNMjYwOTIxMDIwMDE1WhcNMjYwOTIyMDIwMDE1WjAzMTEwLwYDVQQD
EyhiMmRkNzVjMDhmNjNjYzgwNTU0NTZjMTgzYzI0ZmNkY2YyMmQyOGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE7gVPNj59tZzm1CHQIKifhMUbTz
4e9DnOjldYmCbnJ3rQ1p8C8xviAoNzgpu/FdCN8E7nY9o57xJz5O61xJdWgYEyPS
re3FrYbMACI6jDCdwafR/dRK1Zxb4zW4iqZsKS+56IphLblo/fuHd2L3qywNJflL
t85oqoSmwWQSIDz2AG0VGpAk8YE8bobgjidZ0ApfXzYlaSxGvlx5QizXKw/C1hnC
Ib8VaiXpl1veCSOkg84RZ2MqJ5TJByGZHQ9iyBbUHDYtXYg4I2KEh3ONMo1dgrNW
FXXblncvwuhnrvxicBeFQibfxhRDWphZmvT9L7EyqchMlzTBaKefxI0Q8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLddcCPY8yAVUVsGDwk/NzyLSj2MB8GA1UdIwQY
MBaAFInaYPBJ37o0vktOhBi5/0khJcRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUt
Njk4OTBjODI5ZTMzLzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUtNjk4OTBjODI5ZTMz
LzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzl31GU+
RxH0pVI6FnPkmC5m691jcvY2ZHFcH9v1OUt1F1waHrUtQK0miE6PgsE7fcpBG8YN
a2pFgz+PzCKo8WLpquTd6KB8zAuW5h+yZHB6ZzQMz1/9DQ9cg4eWxKCiFj2NHaA7
oizGnZViDopud2yUwaJyR5g3U9/pjl0ADURH7gkw6nCZJPB+xqST5/0QaoTYSEhQ
TY1BU+xMs685X8E43QZRDd2yArsvjn24ZJc1+16JmoyuVtYlJbWc2oKne9+u/lan
baWrutpBIsdEA/8KNzGMjb/+uf3QBgIPg4i3t/BZLaERz4xnmGVkCGW6ath9xSic
tnrFyONZS6b8eg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:33:27 2026 by rpki-client