Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/V1S60jnYWp_Mr76ENS08rY5dmQA.mft
File:                     V1S60jnYWp_Mr76ENS08rY5dmQA.mft (raw, json)
Hash identifier:          WMBKkUqQ1Tv3/4xpgRnbUiQBsLzjao1HvO84lZRnRVA=
Subject key identifier:   DD:F9:63:8E:20:1D:A5:C6:68:EA:7F:12:7C:FE:7E:71:B2:AC:D2:6E
Authority key identifier: 57:54:BA:D2:39:D8:5A:9F:CC:AF:BE:84:35:2D:3C:AD:8E:5D:99:00
Certificate issuer:       /CN=5754bad239d85a9fccafbe84352d3cad8e5d9900
Certificate serial:       01A0DEAA14B89B52CBF3C70A4ACB5CA8EE20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1S60jnYWp_Mr76ENS08rY5dmQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/V1S60jnYWp_Mr76ENS08rY5dmQA.mft
Manifest number:          2B
Signing time:             Sat 26 Sep 2026 17:01:23 +0000
Manifest this update:     Sat 26 Sep 2026 17:01:23 +0000
Manifest next update:     Sun 27 Sep 2026 17:01:23 +0000
Files and hashes:         1: MEw9vJlmK8tPtfpgWCFGXg0MRC0.roa (hash: MUGq2YVJo0nJKeFlRKa8DNIyZJcjs6il92Ycne4TRGA=)
                          2: V1S60jnYWp_Mr76ENS08rY5dmQA.crl (hash: 3mpxejO9tFHcmUsTcFKoA0NAOS2ufjFzJXTTVQxnalE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/V1S60jnYWp_Mr76ENS08rY5dmQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/V1S60jnYWp_Mr76ENS08rY5dmQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1S60jnYWp_Mr76ENS08rY5dmQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:aa:14:b8:9b:52:cb:f3:c7:0a:4a:cb:5c:a8:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5754bad239d85a9fccafbe84352d3cad8e5d9900
        Validity
            Not Before: Sep 26 17:01:23 2026 GMT
            Not After : Sep 27 17:01:23 2026 GMT
        Subject: CN=ddf9638e201da5c668ea7f127cfe7e71b2acd26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:3b:ca:51:95:fe:95:9d:8e:af:d6:a6:a9:
                    c2:4f:6a:33:66:49:48:42:29:5b:6f:b0:ff:a1:4c:
                    2c:28:fe:a9:cd:f5:d1:68:65:18:8d:24:1f:75:b6:
                    31:cb:08:e5:12:13:6b:2b:8e:66:92:a7:28:4a:7d:
                    e5:21:10:3b:0e:46:e3:27:37:be:a2:8b:19:05:e2:
                    46:44:0c:3d:87:77:ed:cd:e7:78:95:09:7c:2a:92:
                    b0:cc:6a:4b:16:e0:b9:06:aa:cf:ba:80:0a:c2:e9:
                    c0:ab:77:fe:25:fd:94:9b:bf:7e:5e:94:aa:6a:26:
                    72:66:7b:82:2a:e3:46:64:57:c0:00:1a:9f:2d:02:
                    4a:75:2c:82:b0:21:8c:8c:d7:35:8c:2f:19:8a:42:
                    85:8e:67:63:ba:54:9c:b0:ad:16:a3:26:fe:e2:56:
                    45:a3:b6:c4:1b:59:5d:a7:97:e8:89:96:14:5c:a1:
                    8d:09:d9:28:ff:b6:d3:b7:3d:55:57:3d:ef:19:9b:
                    7b:2d:3c:a9:ec:06:35:3d:ec:f0:6a:16:d8:88:e7:
                    d7:34:9f:0c:00:df:f8:b8:43:af:4c:25:f1:f1:de:
                    41:05:06:0a:16:57:f2:32:9b:f1:fb:30:81:c5:fa:
                    da:9e:b1:10:c8:51:83:1a:17:10:e6:2a:22:c5:a9:
                    4c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F9:63:8E:20:1D:A5:C6:68:EA:7F:12:7C:FE:7E:71:B2:AC:D2:6E
            X509v3 Authority Key Identifier:
                keyid:57:54:BA:D2:39:D8:5A:9F:CC:AF:BE:84:35:2D:3C:AD:8E:5D:99:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1S60jnYWp_Mr76ENS08rY5dmQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/V1S60jnYWp_Mr76ENS08rY5dmQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ce6d08-f0e9-435d-a8da-217fdb197c12/1/V1S60jnYWp_Mr76ENS08rY5dmQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:36:31:31:8f:ab:be:3e:b0:aa:a4:2d:4b:34:0b:07:ea:8a:
         75:4e:f1:34:b4:5b:0e:34:3a:a5:ed:7f:99:39:e5:4d:e3:09:
         03:8d:77:1d:c2:66:d6:da:83:bf:dd:ae:fd:3a:67:b6:8b:e9:
         50:ab:9e:4a:d2:ac:97:ee:9a:0a:8c:83:ee:3d:de:f2:85:19:
         32:b6:58:35:7c:0e:24:98:9b:e1:ba:ba:f4:bd:17:9c:11:7a:
         a5:3f:f8:30:8b:f0:0f:b1:dd:23:0c:c8:fa:86:ee:dd:58:76:
         ff:71:e3:ea:11:04:11:01:a1:a0:6a:ab:91:34:d0:8c:e6:a2:
         6f:23:25:dd:77:03:dc:96:e8:04:c6:83:d6:7f:b6:07:1c:ed:
         8f:ce:89:03:59:e1:55:7d:cc:54:17:01:56:42:45:a3:42:22:
         98:74:36:a7:8b:0c:63:2b:72:03:7a:54:c6:c7:7c:38:e4:68:
         5b:1c:7f:67:c5:a9:03:a2:8b:ac:21:96:d4:fe:2c:e2:d6:5d:
         9f:e0:32:de:f6:a1:65:06:b2:fb:7f:a6:f1:a6:25:59:29:d9:
         19:d7:83:3e:c3:f9:6d:43:d8:c9:09:09:81:56:96:76:f6:37:
         72:c2:f4:5c:47:c5:4e:2f:8a:03:14:94:d6:7f:33:7f:2f:d4:
         48:8f:94:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDeqhS4m1LL88cKSstcqO4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTRiYWQyMzlkODVhOWZjY2FmYmU4NDM1MmQzY2FkOGU1
ZDk5MDAwHhcNMjYwOTI2MTcwMTIzWhcNMjYwOTI3MTcwMTIzWjAzMTEwLwYDVQQD
EyhkZGY5NjM4ZTIwMWRhNWM2NjhlYTdmMTI3Y2ZlN2U3MWIyYWNkMjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPs7ylGV/pWdjq/WpqnCT2ozZklI
Qilbb7D/oUwsKP6pzfXRaGUYjSQfdbYxywjlEhNrK45mkqcoSn3lIRA7DkbjJze+
oosZBeJGRAw9h3ftzed4lQl8KpKwzGpLFuC5BqrPuoAKwunAq3f+Jf2Um79+XpSq
aiZyZnuCKuNGZFfAABqfLQJKdSyCsCGMjNc1jC8ZikKFjmdjulScsK0Woyb+4lZF
o7bEG1ldp5foiZYUXKGNCdko/7bTtz1VVz3vGZt7LTyp7AY1PezwahbYiOfXNJ8M
AN/4uEOvTCXx8d5BBQYKFlfyMpvx+zCBxfranrEQyFGDGhcQ5ioixalMHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN35Y44gHaXGaOp/Enz+fnGyrNJuMB8GA1UdIwQY
MBaAFFdUutI52FqfzK++hDUtPK2OXZkAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFTNjBqbllXcF9Ncjc2RU5TMDhyWTVkbVFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9jZTZkMDgtZjBlOS00MzVkLWE4ZGEt
MjE3ZmRiMTk3YzEyLzEvVjFTNjBqbllXcF9Ncjc2RU5TMDhyWTVkbVFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9jZTZkMDgtZjBlOS00MzVkLWE4ZGEtMjE3ZmRiMTk3YzEy
LzEvVjFTNjBqbllXcF9Ncjc2RU5TMDhyWTVkbVFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDYxMY+r
vj6wqqQtSzQLB+qKdU7xNLRbDjQ6pe1/mTnlTeMJA413HcJm1tqDv92u/Tpntovp
UKueStKsl+6aCoyD7j3e8oUZMrZYNXwOJJib4bq69L0XnBF6pT/4MIvwD7HdIwzI
+obu3Vh2/3Hj6hEEEQGhoGqrkTTQjOaibyMl3XcD3JboBMaD1n+2Bxztj86JA1nh
VX3MVBcBVkJFo0IimHQ2p4sMYytyA3pUxsd8OORoWxx/Z8WpA6KLrCGW1P4s4tZd
n+Ay3vahZQay+3+m8aYlWSnZGdeDPsP5bUPYyQkJgVaWdvY3csL0XEfFTi+KAxSU
1n8zfy/USI+UPQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:12:06 2026 by rpki-client