Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
File:                     t1OsA5RSieGGvylzeyVhjTzNRDA.mft (raw, json)
Hash identifier:          3z80N0+RDdMEGyZqdvGyuLbd5Z7e8pgfHgEPASP72nU=
Subject key identifier:   52:EE:DF:2A:15:78:B7:07:DC:88:07:7D:EA:BD:7C:CC:B1:28:F9:F3
Authority key identifier: B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30
Certificate issuer:       /CN=b753ac03945289e186bf29737b25618d3ccd4430
Certificate serial:       01A0C47C807AED25130C32D7D21E39666DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
Manifest number:          DF
Signing time:             Mon 21 Sep 2026 15:01:28 +0000
Manifest this update:     Mon 21 Sep 2026 15:01:28 +0000
Manifest next update:     Tue 22 Sep 2026 15:01:28 +0000
Files and hashes:         1: 1-5yL_Q-nYPf2CLV3tjpWzClJnPw.roa (hash: k8H40R+fMFH7wBdsLB91Y9l2eozFqsIfXqragAiM93E=)
                          2: ea_Ab_KVnKlMEbYPrAJZWmJhhsc.roa (hash: 6cSn8uzwyUxMJNcnfAeGMw+pCS/UoUALDhF7qixnWRg=)
                          3: fPtQuFsuVeGkMlwHU_sA5LSJu_E.roa (hash: WDhKtqp/PbP0mGK261CVF4VxFxH7CTo0soaxOvLBySA=)
                          4: t1OsA5RSieGGvylzeyVhjTzNRDA.crl (hash: 40JT+9HxvuFVaeNL+TSsdCNg57wEYbmiCkYYLT0vXmI=)
                          5: tr8FATLSUssLeZoYd6_aJnbXdq8.roa (hash: 7GIhmLkuSFB1irvbk3E504lE/D2UrFS2bjn5VxfkzOQ=)
                          6: wrNDqIGL46GbPFlLV3ftdAx_UK4.roa (hash: 5QK1F45BImfUqKNV131htGF5A+1+6XK2Skgx/nv8vZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:80:7a:ed:25:13:0c:32:d7:d2:1e:39:66:6d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b753ac03945289e186bf29737b25618d3ccd4430
        Validity
            Not Before: Sep 21 15:01:28 2026 GMT
            Not After : Sep 22 15:01:28 2026 GMT
        Subject: CN=52eedf2a1578b707dc88077deabd7cccb128f9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:05:22:4d:4c:06:8d:ed:c3:1b:51:b1:8a:
                    1f:6e:57:23:c4:5e:b0:6a:c5:0d:7d:fb:fe:a5:dc:
                    82:3d:e4:e4:f6:cf:31:1a:22:8d:2f:d5:f4:27:3f:
                    36:76:6c:77:ff:28:0f:95:4b:3d:f6:f5:06:9d:2a:
                    c6:1d:48:3b:51:7c:99:c1:99:07:2a:09:98:6c:30:
                    86:23:20:26:9f:46:6a:d3:3f:21:0b:de:e3:23:79:
                    13:89:6a:c6:3e:28:28:1c:0b:65:35:51:57:f1:f9:
                    60:9b:b4:a7:4a:99:13:83:6c:b3:a7:35:79:87:ab:
                    79:80:0c:67:45:02:36:62:d1:66:a2:8a:9e:30:74:
                    fe:97:cd:41:c3:cd:f0:0c:4a:78:8a:15:63:ba:88:
                    2c:f1:80:7a:30:44:a1:fd:a2:26:0d:ea:28:08:83:
                    73:96:20:41:f7:0e:02:85:77:45:6d:b7:b9:7b:85:
                    72:9b:d7:5f:3b:9e:2d:4f:9d:29:e4:57:36:b2:ca:
                    c1:41:61:1e:bb:cb:d7:50:b7:30:74:9b:a7:2e:f8:
                    97:66:6f:94:c9:aa:83:dd:59:b7:97:2b:cb:a5:c7:
                    be:8f:f4:95:10:ef:9e:8d:ae:3a:0d:f9:d7:50:95:
                    09:44:17:53:80:9e:f6:c3:78:41:76:34:ed:ff:71:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EE:DF:2A:15:78:B7:07:DC:88:07:7D:EA:BD:7C:CC:B1:28:F9:F3
            X509v3 Authority Key Identifier:
                keyid:B7:53:AC:03:94:52:89:E1:86:BF:29:73:7B:25:61:8D:3C:CD:44:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1OsA5RSieGGvylzeyVhjTzNRDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/t1OsA5RSieGGvylzeyVhjTzNRDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:67:be:a4:67:94:7c:a8:ad:06:49:d9:43:c7:5f:29:35:da:
         b2:86:0a:8a:06:48:ab:f4:1a:3f:d9:ab:1c:5b:c5:d9:59:63:
         a8:63:98:e7:f3:a9:eb:d9:44:a0:f0:a9:61:b4:28:1a:3e:d7:
         75:de:f9:30:a4:a2:12:17:00:df:d7:47:0d:9a:b6:32:7e:eb:
         1a:0a:b8:a4:02:ad:3a:57:97:52:8c:bc:0a:7a:82:01:33:e6:
         03:3b:38:15:bf:9f:58:31:f2:31:d7:fd:4e:4d:51:a5:0e:2d:
         ed:f3:3c:76:74:2e:b9:24:34:a2:b3:25:46:c5:a1:a8:e1:ab:
         bf:90:a3:eb:39:c3:1f:b8:79:33:82:07:9a:79:b0:4f:6f:f0:
         63:a1:fd:c1:e6:0c:de:6b:19:51:90:6a:b1:fd:4c:17:97:18:
         3a:6b:76:18:8d:1c:47:4d:bd:e8:7c:10:eb:54:f4:83:33:6f:
         5f:b6:03:83:20:9c:16:ff:eb:bd:41:71:a4:ea:83:72:27:99:
         fe:3e:b2:03:06:d7:66:e0:8d:82:5c:17:7d:9e:16:eb:82:33:
         98:d8:68:33:71:43:7d:e6:74:ad:85:c4:c1:89:5c:d2:93:f2:
         51:64:2f:46:19:0a:ed:65:2e:4b:d5:98:15:2c:e1:37:e2:2d:
         5c:08:6d:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEfIB67SUTDDLX0h45Zm3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NTNhYzAzOTQ1Mjg5ZTE4NmJmMjk3MzdiMjU2MThkM2Nj
ZDQ0MzAwHhcNMjYwOTIxMTUwMTI4WhcNMjYwOTIyMTUwMTI4WjAzMTEwLwYDVQQD
Eyg1MmVlZGYyYTE1NzhiNzA3ZGM4ODA3N2RlYWJkN2NjY2IxMjhmOWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHkFIk1MBo3twxtRsYofblcjxF6w
asUNffv+pdyCPeTk9s8xGiKNL9X0Jz82dmx3/ygPlUs99vUGnSrGHUg7UXyZwZkH
KgmYbDCGIyAmn0Zq0z8hC97jI3kTiWrGPigoHAtlNVFX8flgm7SnSpkTg2yzpzV5
h6t5gAxnRQI2YtFmooqeMHT+l81Bw83wDEp4ihVjuogs8YB6MESh/aImDeooCINz
liBB9w4ChXdFbbe5e4Vym9dfO54tT50p5Fc2ssrBQWEeu8vXULcwdJunLviXZm+U
yaqD3Vm3lyvLpce+j/SVEO+eja46DfnXUJUJRBdTgJ72w3hBdjTt/3E52QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLu3yoVeLcH3IgHfeq9fMyxKPnzMB8GA1UdIwQY
MBaAFLdTrAOUUonhhr8pc3slYY08zUQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFPc0E1UlNpZUdHdnlsemV5VmhqVHpOUkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEvdDFPc0E1UlNpZUdHdnlsemV5VmhqVHpOUkRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvdDFPc0E1UlNpZUdHdnlsemV5VmhqVHpOUkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGe+pGeU
fKitBknZQ8dfKTXasoYKigZIq/QaP9mrHFvF2VljqGOY5/Op69lEoPCpYbQoGj7X
dd75MKSiEhcA39dHDZq2Mn7rGgq4pAKtOleXUoy8CnqCATPmAzs4Fb+fWDHyMdf9
Tk1RpQ4t7fM8dnQuuSQ0orMlRsWhqOGrv5Cj6znDH7h5M4IHmnmwT2/wY6H9weYM
3msZUZBqsf1MF5cYOmt2GI0cR0296HwQ61T0gzNvX7YDgyCcFv/rvUFxpOqDcieZ
/j6yAwbXZuCNglwXfZ4W64IzmNhoM3FDfeZ0rYXEwYlc0pPyUWQvRhkK7WUuS9WY
FSzhN+ItXAhtNA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:09:55 2026 by rpki-client