Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File:                     pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier:          9KRD0S/bxRKU7ipC00CFOPuoX5+bHj8+34pOFeqHtLs=
Subject key identifier:   31:47:09:92:07:03:68:78:9D:05:08:55:D1:F8:6E:39:C2:2D:EE:D9
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer:       /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial:       01A0BFFA2DC6AAEAC3FEE47305D8CDDE1C10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number:          1521
Signing time:             Sun 20 Sep 2026 18:00:39 +0000
Manifest this update:     Sun 20 Sep 2026 18:00:39 +0000
Manifest next update:     Mon 21 Sep 2026 18:00:39 +0000
Files and hashes:         1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=)
                          2: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=)
                          3: o_KgOnMxvvekvBuPyEEYSnKNWEc.roa (hash: mk2PcWlp1oVsxXXBvuzmUNaWlANp8uf/qu/yWtEPDuk=)
                          4: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: svdQZg7L9p9lqtbZCQn9xqKYBXx3TUBO99VWi/Zw1GM=)
                          5: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=)
                          6: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:fa:2d:c6:aa:ea:c3:fe:e4:73:05:d8:cd:de:1c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
        Validity
            Not Before: Sep 20 18:00:39 2026 GMT
            Not After : Sep 21 18:00:39 2026 GMT
        Subject: CN=31470992070368789d050855d1f86e39c22deed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:c0:5a:35:0f:f1:f0:de:d2:0e:0f:39:1d:
                    93:28:a7:f7:3c:6d:7e:1a:e5:8f:7e:90:97:b1:8e:
                    df:28:65:2a:5f:82:67:e4:68:15:27:2f:cf:ca:2f:
                    be:03:dd:60:11:03:4d:de:e7:5a:7d:fe:c8:5b:96:
                    00:b4:2d:af:ff:ac:af:bf:9a:ab:e7:68:56:c7:ab:
                    27:ca:4a:11:e3:73:da:ab:25:86:00:0f:ca:1f:03:
                    29:96:26:50:8c:39:1e:d9:83:08:ad:5b:4d:91:4a:
                    b2:cc:ee:de:55:ad:4e:a3:8a:95:b7:f7:d4:fe:c0:
                    46:34:10:6a:b0:90:b4:f9:7a:f9:a7:8a:78:cf:a5:
                    23:6a:a9:9e:80:eb:3e:de:85:00:b7:db:c8:e2:b2:
                    8c:6b:98:50:2a:bd:12:b2:01:c8:b9:96:1d:57:ea:
                    ca:09:f0:06:66:73:78:26:a9:27:7e:54:5e:7d:d0:
                    f7:01:06:10:b5:c8:25:71:67:2f:2e:50:23:12:1a:
                    13:e4:28:28:06:91:ba:ae:e7:60:30:8d:db:75:b6:
                    eb:78:af:6e:17:cb:4b:0f:4d:fe:49:ed:e0:88:95:
                    0f:d3:2e:e5:92:9a:98:ff:2b:0a:57:49:4a:be:c4:
                    b6:c8:26:fc:d5:7f:bc:75:69:24:fb:61:76:46:06:
                    a7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:47:09:92:07:03:68:78:9D:05:08:55:D1:F8:6E:39:C2:2D:EE:D9
            X509v3 Authority Key Identifier:
                keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:07:5a:bf:70:bc:1e:4e:82:cd:2e:5c:aa:a7:b9:a0:37:c4:
         48:33:b5:5b:4c:aa:15:b8:10:5a:75:c8:d5:da:f4:b6:00:80:
         d1:98:89:83:b2:ec:e0:fc:85:5b:f8:70:8b:ff:fb:8f:4d:3c:
         6f:db:57:e9:c5:36:7f:ca:4a:c2:74:3f:28:a5:bc:c0:f1:74:
         9c:2b:9d:c2:eb:62:cd:97:6e:ec:a0:59:ec:22:11:c4:a2:44:
         62:37:2a:18:ab:ee:d6:b1:02:ad:40:4c:8d:84:ee:f8:74:6c:
         cc:9c:c3:2a:ea:88:55:65:5e:f3:ee:41:86:36:7f:88:4f:18:
         25:8f:fd:78:ab:2a:36:57:35:5d:3d:f4:7a:fe:0d:de:0f:ea:
         58:b6:b0:85:b2:f8:f0:e6:2e:80:9a:25:b6:fa:f7:2c:51:b0:
         3c:d6:93:55:21:d3:90:8e:a5:4d:f4:35:f5:8c:8c:24:e0:5e:
         58:31:6c:8e:42:59:12:84:39:fe:da:9a:c6:b5:0d:f4:71:ce:
         4e:1a:71:d3:a2:7a:d0:c9:23:79:37:40:42:6c:5d:0e:13:6c:
         41:ae:ac:67:43:de:ae:0c:9f:04:19:f9:f4:8c:28:aa:f3:61:
         7a:1f:de:10:c8:44:e3:11:31:18:b1:43:5c:36:2b:45:d0:30:
         3a:b7:ae:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/+i3GqurD/uRzBdjN3hwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi
YWQwMzAwHhcNMjYwOTIwMTgwMDM5WhcNMjYwOTIxMTgwMDM5WjAzMTEwLwYDVQQD
EygzMTQ3MDk5MjA3MDM2ODc4OWQwNTA4NTVkMWY4NmUzOWMyMmRlZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvirAWjUP8fDe0g4POR2TKKf3PG1+
GuWPfpCXsY7fKGUqX4Jn5GgVJy/Pyi++A91gEQNN3udaff7IW5YAtC2v/6yvv5qr
52hWx6snykoR43PaqyWGAA/KHwMpliZQjDke2YMIrVtNkUqyzO7eVa1Oo4qVt/fU
/sBGNBBqsJC0+Xr5p4p4z6UjaqmegOs+3oUAt9vI4rKMa5hQKr0SsgHIuZYdV+rK
CfAGZnN4JqknflRefdD3AQYQtcglcWcvLlAjEhoT5CgoBpG6rudgMI3bdbbreK9u
F8tLD03+Se3giJUP0y7lkpqY/ysKV0lKvsS2yCb81X+8dWkk+2F2RganlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFHCZIHA2h4nQUIVdH4bjnCLe7ZMB8GA1UdIwQY
MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt
YTRlYTBhNjNmNzY2LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2
LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQdav3C8
Hk6CzS5cqqe5oDfESDO1W0yqFbgQWnXI1dr0tgCA0ZiJg7Ls4PyFW/hwi//7j008
b9tX6cU2f8pKwnQ/KKW8wPF0nCudwutizZdu7KBZ7CIRxKJEYjcqGKvu1rECrUBM
jYTu+HRszJzDKuqIVWVe8+5BhjZ/iE8YJY/9eKsqNlc1XT30ev4N3g/qWLawhbL4
8OYugJoltvr3LFGwPNaTVSHTkI6lTfQ19YyMJOBeWDFsjkJZEoQ5/tqaxrUN9HHO
Thpx06J60MkjeTdAQmxdDhNsQa6sZ0PergyfBBn59IwoqvNheh/eEMhE4xExGLFD
XDYrRdAwOreupw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:32:42 2026 by rpki-client