Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File:                     _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier:          QR6/p7MXx1nRrpPOzVflmmiCSIiqYM8dhxa/CYYjN8M=
Subject key identifier:   4E:78:70:20:18:76:2B:30:E2:34:60:A4:33:95:17:B5:50:BA:35:44
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer:       /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial:       01A0BDD481F932A90C045E8CC7392ADCAA2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number:          1995
Signing time:             Sun 20 Sep 2026 08:00:15 +0000
Manifest this update:     Sun 20 Sep 2026 08:00:15 +0000
Manifest next update:     Mon 21 Sep 2026 08:00:15 +0000
Files and hashes:         1: O3VQfD378Glka9TjOO3TvAaw_nk.roa (hash: Ybj9UWECximKsng5EBE3xYs2FwI/4KcnIfFjWhvui64=)
                          2: WhbbTrjO4d6D8laBPplxh84WYVc.roa (hash: PR+nKFHG16xdl1/3mckLmj9yFgXPMBwN+ado5X/wpjk=)
                          3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: kAOlDcLh+2zTosaC7eaYUlTFByU2oQd2DAY83h/1kbs=)
                          4: kQKwgakw6fJJpqQFX4t9Q3Jjol8.asa (hash: 0NDSDQfV3NOi4CzN7cXA2+0Mse8axAaEZcFkFgHCX/U=)
                          5: trtlnARNU9GgYjNsg0NOVlqMz0s.roa (hash: oIMDX6qf+vcOR+FsuwuvFIF1QJtf1WzL/kP1bXEC8h0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:d4:81:f9:32:a9:0c:04:5e:8c:c7:39:2a:dc:aa:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
        Validity
            Not Before: Sep 20 08:00:15 2026 GMT
            Not After : Sep 21 08:00:15 2026 GMT
        Subject: CN=4e78702018762b30e23460a4339517b550ba3544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:14:67:ef:57:38:57:33:9d:db:1a:b8:1a:
                    29:c6:cf:d2:c4:25:d4:42:7f:3b:01:73:38:e0:dc:
                    9e:88:3a:ee:aa:29:16:f5:a8:23:d2:b2:a9:bb:07:
                    c1:19:6c:a3:c2:29:94:92:66:00:d3:52:10:b9:3e:
                    61:75:99:89:9a:8e:76:cb:c2:a7:62:ac:72:e4:a6:
                    e3:6a:76:a3:59:e6:5c:7a:6c:9c:f2:98:16:11:6b:
                    41:c0:24:e0:d5:fb:1a:71:db:4a:fb:40:df:5a:b5:
                    2f:4a:b2:b3:96:b0:20:29:12:df:5e:32:80:6e:15:
                    8c:99:f9:b3:9f:05:8f:3b:28:b0:38:84:eb:20:1f:
                    9f:ff:2d:d0:c2:e4:80:0a:3d:65:38:7c:75:0a:8d:
                    15:41:1a:88:ba:88:4a:8d:68:89:ba:f1:cc:18:d0:
                    c2:35:06:96:3f:6d:2b:33:74:c5:55:70:66:b1:31:
                    7f:88:85:65:81:4b:a2:85:52:02:7b:94:42:6f:9c:
                    83:b3:45:32:7c:2b:2f:93:c3:c0:73:a4:a0:d9:19:
                    a5:97:00:54:f9:a7:6e:da:3f:00:14:6a:f0:b9:4a:
                    1c:10:34:25:91:0f:2d:ea:fc:ff:14:d1:ad:a5:1f:
                    11:55:12:df:b2:8c:b6:f1:31:75:89:91:d4:ea:6a:
                    c6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:78:70:20:18:76:2B:30:E2:34:60:A4:33:95:17:B5:50:BA:35:44
            X509v3 Authority Key Identifier:
                keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3e:86:93:2e:52:a8:0a:69:55:ea:da:7a:0c:34:54:f4:db:
         4f:a7:20:ef:4f:09:63:43:38:f8:98:0d:92:1a:1a:7c:10:30:
         9d:34:b5:b4:9f:36:61:d8:90:24:24:7f:77:68:cf:8e:6d:07:
         3f:a1:68:21:06:ce:1b:fd:e1:7d:11:d9:36:f1:c2:4b:ca:26:
         1f:8a:be:c7:87:ad:1b:57:9c:e8:d1:61:9d:40:a0:3c:45:9a:
         d7:50:39:5a:20:b2:29:38:04:4c:80:c2:09:5c:09:6a:3c:6a:
         ff:16:9a:5a:26:c7:1a:86:60:39:a2:49:47:5b:fa:1c:5f:36:
         af:eb:3c:25:36:fa:9c:4c:8d:05:e6:02:e3:2c:b8:f9:3a:cb:
         56:7c:49:97:38:c5:a9:d6:e4:42:41:fe:61:bd:49:39:84:77:
         89:4b:60:f0:d2:2d:70:65:b7:8b:40:77:80:49:7b:7e:13:f3:
         06:65:ec:48:9a:2b:97:9f:2a:4e:b9:3e:9a:64:12:1c:72:11:
         7b:74:69:31:72:29:11:07:4b:4a:96:94:07:ea:90:b7:9b:bf:
         20:68:66:64:d9:ce:2b:85:29:39:37:d5:ca:e5:5b:c5:3f:dc:
         df:c1:d0:d0:72:51:11:0c:b2:97:2e:62:e1:9b:35:4a:ca:41:
         86:31:3c:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC91IH5MqkMBF6Mxzkq3KorMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYWQ2MWQ4ZThjMWFiZGE4NTk2OTMwZTIxZjE4MjExYTUx
NzY4MWYwHhcNMjYwOTIwMDgwMDE1WhcNMjYwOTIxMDgwMDE1WjAzMTEwLwYDVQQD
Eyg0ZTc4NzAyMDE4NzYyYjMwZTIzNDYwYTQzMzk1MTdiNTUwYmEzNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbIUZ+9XOFczndsauBopxs/SxCXU
Qn87AXM44NyeiDruqikW9agj0rKpuwfBGWyjwimUkmYA01IQuT5hdZmJmo52y8Kn
Yqxy5KbjanajWeZcemyc8pgWEWtBwCTg1fsacdtK+0DfWrUvSrKzlrAgKRLfXjKA
bhWMmfmznwWPOyiwOITrIB+f/y3QwuSACj1lOHx1Co0VQRqIuohKjWiJuvHMGNDC
NQaWP20rM3TFVXBmsTF/iIVlgUuihVICe5RCb5yDs0UyfCsvk8PAc6Sg2RmllwBU
+adu2j8AFGrwuUocEDQlkQ8t6vz/FNGtpR8RVRLfsoy28TF1iZHU6mrG7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE54cCAYdisw4jRgpDOVF7VQujVEMB8GA1UdIwQY
MBaAFP2tYdjowavahZaTDiHxghGlF2gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2Et
ODRlZTIyYTNlZTViLzEvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2EtODRlZTIyYTNlZTVi
LzEvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhT6Gky5S
qAppVeraegw0VPTbT6cg708JY0M4+JgNkhoafBAwnTS1tJ82YdiQJCR/d2jPjm0H
P6FoIQbOG/3hfRHZNvHCS8omH4q+x4etG1ec6NFhnUCgPEWa11A5WiCyKTgETIDC
CVwJajxq/xaaWibHGoZgOaJJR1v6HF82r+s8JTb6nEyNBeYC4yy4+TrLVnxJlzjF
qdbkQkH+Yb1JOYR3iUtg8NItcGW3i0B3gEl7fhPzBmXsSJorl58qTrk+mmQSHHIR
e3RpMXIpEQdLSpaUB+qQt5u/IGhmZNnOK4UpOTfVyuVbxT/c38HQ0HJREQyyly5i
4Zs1SspBhjE8LQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:42:33 2026 by rpki-client