Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
File:                     pVz4nuVieX53WqTR0ffkX0Zqc8M.mft (raw, json)
Hash identifier:          J41YD2zTOiu3pkdcwL9nDrvTbJcD9sT0YpQUNVXlWzY=
Subject key identifier:   21:D0:AE:F5:62:5D:78:5D:BB:FA:8D:CA:0A:20:E4:FF:4D:11:6F:BF
Authority key identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
Certificate issuer:       /CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Certificate serial:       01A0ED4189855D1E528096A979CF075BC052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
Manifest number:          0EBF
Signing time:             Tue 29 Sep 2026 13:01:30 +0000
Manifest this update:     Tue 29 Sep 2026 13:01:30 +0000
Manifest next update:     Wed 30 Sep 2026 13:01:30 +0000
Files and hashes:         1: EFKhtt91L5OdB8guQ7HyKYp2_3c.roa (hash: dQPdysasv2TEU+k67rw/mLBE/IZwJp/RJi2tWgg3JKA=)
                          2: ouJaEQWtvmFumgJq9J4xuKYfm-c.roa (hash: nfdbWTCbcJ3Xc4MwIK1l68EqEVj2FxQz/gW67KQoXRI=)
                          3: pVz4nuVieX53WqTR0ffkX0Zqc8M.crl (hash: DTBwCI1k2F9A9wwyMn/DD+GVR6q2jDp8lnU4lNzFLfQ=)
                          4: vM0Fs4lnqeTssB7sagLE17VmanQ.roa (hash: 4x+J1pMCjHUu7vpTkJIKkTeMAJxCWCdEP9JbF6IKxpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:41:89:85:5d:1e:52:80:96:a9:79:cf:07:5b:c0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
        Validity
            Not Before: Sep 29 13:01:30 2026 GMT
            Not After : Sep 30 13:01:30 2026 GMT
        Subject: CN=21d0aef5625d785dbbfa8dca0a20e4ff4d116fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:2d:48:01:9f:32:cc:36:76:78:f4:7f:84:
                    89:22:e2:1c:52:ff:82:81:8b:05:d6:2b:75:d1:26:
                    62:70:89:3e:c5:cc:99:e7:0a:9d:a8:47:3b:c2:6d:
                    19:fe:ba:24:80:db:a7:35:90:e5:d0:a9:81:d2:1f:
                    3c:51:03:58:66:00:2d:55:a1:e7:10:9f:87:9f:91:
                    75:18:6d:b8:f7:16:bc:2b:ef:fd:3a:fe:b1:64:ae:
                    12:53:3a:89:fe:97:5b:c6:72:f9:09:d1:52:ac:3b:
                    39:11:d0:cb:7e:4b:c9:37:87:2d:fa:27:83:c0:a9:
                    a8:0d:15:85:de:74:d5:46:3c:fb:8d:06:92:d6:2f:
                    31:a5:e8:6a:7b:4d:46:c3:36:cf:d6:48:1d:ed:78:
                    f3:9b:60:d9:26:fa:22:6a:19:18:b0:3f:0b:0f:85:
                    a8:62:26:58:b1:05:0e:99:c4:af:e0:56:cd:b3:4b:
                    78:4a:95:af:95:47:ec:7d:60:cc:2d:28:c4:3c:44:
                    92:23:8c:b3:6d:79:47:30:3c:63:68:c5:6a:f2:b2:
                    91:dd:58:7b:dc:30:71:52:58:05:9b:05:e6:73:73:
                    6b:7d:47:15:5b:d6:36:da:75:ee:15:fa:3e:21:7a:
                    da:4a:03:9b:e4:b1:e5:d8:8a:51:16:c5:bc:13:6a:
                    41:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D0:AE:F5:62:5D:78:5D:BB:FA:8D:CA:0A:20:E4:FF:4D:11:6F:BF
            X509v3 Authority Key Identifier:
                keyid:A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:bb:2e:a0:38:d9:de:06:79:02:b8:5b:23:85:9a:61:37:97:
         51:e5:d9:f6:7f:31:c2:39:00:86:4a:5e:cc:46:9a:8c:a3:16:
         01:ed:a0:98:97:c6:be:6d:21:99:f9:12:d8:df:24:e9:16:3a:
         16:16:e1:9a:53:15:d4:f3:c5:23:d5:6e:2a:7d:84:91:13:cb:
         82:22:51:d4:a9:c1:c4:c5:69:c6:0b:a4:dd:3c:b3:cb:a4:1b:
         ad:99:f3:c9:c9:24:6e:3d:32:5a:2a:a5:75:d0:16:c6:aa:eb:
         47:5f:8e:60:9e:53:48:a6:7b:a4:cc:fc:67:17:bf:96:dd:92:
         ad:56:cb:f5:29:84:69:fc:9c:16:63:53:f7:b0:33:fd:99:0a:
         45:18:5e:ec:bc:13:03:dd:7a:6e:c2:9b:c3:a0:37:6b:32:a5:
         e7:e7:46:2c:7d:ed:53:f6:92:50:46:31:a1:df:0a:54:56:d3:
         9e:ad:5b:e3:26:dd:ea:e6:d2:ac:81:7f:84:c6:33:a9:5d:33:
         4c:06:40:42:e0:8c:9d:75:57:da:08:dc:1f:3b:a9:73:e6:d3:
         70:2b:86:bb:55:b3:8b:33:95:fb:1f:87:62:dc:1e:ea:58:2e:
         2f:0b:c6:a3:3e:f4:f7:54:e2:4c:c0:04:e5:55:a0:77:4e:2f:
         7a:98:b5:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtQYmFXR5SgJapec8HW8BSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NWNmODllZTU2Mjc5N2U3NzVhYTRkMWQxZjdlNDVmNDY2
YTczYzMwHhcNMjYwOTI5MTMwMTMwWhcNMjYwOTMwMTMwMTMwWjAzMTEwLwYDVQQD
EygyMWQwYWVmNTYyNWQ3ODVkYmJmYThkY2EwYTIwZTRmZjRkMTE2ZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsotSAGfMsw2dnj0f4SJIuIcUv+C
gYsF1it10SZicIk+xcyZ5wqdqEc7wm0Z/rokgNunNZDl0KmB0h88UQNYZgAtVaHn
EJ+Hn5F1GG249xa8K+/9Ov6xZK4SUzqJ/pdbxnL5CdFSrDs5EdDLfkvJN4ct+ieD
wKmoDRWF3nTVRjz7jQaS1i8xpehqe01GwzbP1kgd7Xjzm2DZJvoiahkYsD8LD4Wo
YiZYsQUOmcSv4FbNs0t4SpWvlUfsfWDMLSjEPESSI4yzbXlHMDxjaMVq8rKR3Vh7
3DBxUlgFmwXmc3NrfUcVW9Y22nXuFfo+IXraSgOb5LHl2IpRFsW8E2pBSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHQrvViXXhdu/qNygog5P9NEW+/MB8GA1UdIwQY
MBaAFKVc+J7lYnl+d1qk0dH35F9GanPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAt
YWJjYjFlNzU4MmIzLzEvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iNzJjYjAtMGU1Ny00NjhjLTg5ZjAtYWJjYjFlNzU4MmIz
LzEvcFZ6NG51VmllWDUzV3FUUjBmZmtYMFpxYzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbsuoDjZ
3gZ5ArhbI4WaYTeXUeXZ9n8xwjkAhkpezEaajKMWAe2gmJfGvm0hmfkS2N8k6RY6
FhbhmlMV1PPFI9VuKn2EkRPLgiJR1KnBxMVpxguk3Tyzy6QbrZnzyckkbj0yWiql
ddAWxqrrR1+OYJ5TSKZ7pMz8Zxe/lt2SrVbL9SmEafycFmNT97Az/ZkKRRhe7LwT
A916bsKbw6A3azKl5+dGLH3tU/aSUEYxod8KVFbTnq1b4ybd6ubSrIF/hMYzqV0z
TAZAQuCMnXVX2gjcHzupc+bTcCuGu1WzizOV+x+HYtwe6lguLwvGoz7091TiTMAE
5VWgd04vepi1Rg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 17:36:20 2026 by rpki-client