Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File:                     pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier:          bS8bcYBM5iKs7PlzZsDwToRSrbBp8C09scK7vtPie3o=
Subject key identifier:   0B:6D:49:DD:4F:61:2E:6C:9A:6C:4C:6B:80:C1:C4:5D:3A:CD:45:7F
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer:       /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial:       01A0BE0BC88EBF62672C2684FA2F8D17E892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number:          1520
Signing time:             Sun 20 Sep 2026 09:00:38 +0000
Manifest this update:     Sun 20 Sep 2026 09:00:38 +0000
Manifest next update:     Mon 21 Sep 2026 09:00:38 +0000
Files and hashes:         1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=)
                          2: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=)
                          3: o_KgOnMxvvekvBuPyEEYSnKNWEc.roa (hash: mk2PcWlp1oVsxXXBvuzmUNaWlANp8uf/qu/yWtEPDuk=)
                          4: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: grKR4L/cxq6sfE3+MUA3p2ZAtgLYO3NucwQMz59gmD8=)
                          5: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=)
                          6: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:0b:c8:8e:bf:62:67:2c:26:84:fa:2f:8d:17:e8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
        Validity
            Not Before: Sep 20 09:00:38 2026 GMT
            Not After : Sep 21 09:00:38 2026 GMT
        Subject: CN=0b6d49dd4f612e6c9a6c4c6b80c1c45d3acd457f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f9:cc:d9:e6:3b:52:0d:92:00:45:88:e8:bc:
                    1f:48:b4:59:80:37:c2:19:ca:27:7c:f6:f8:17:de:
                    2b:aa:b7:57:80:17:a2:25:f9:9e:d2:7b:51:58:54:
                    f7:19:9d:39:c5:7b:75:ae:7e:ab:0a:60:49:11:4f:
                    f3:1f:fb:73:f5:6f:79:33:2a:30:c2:1e:f5:fd:47:
                    5c:fc:75:59:f4:03:4a:42:3c:6c:9c:1a:66:c9:e2:
                    fb:48:e4:93:89:f0:f6:1f:5e:7f:18:a6:a3:15:40:
                    fd:b2:a6:ff:46:35:a7:2e:7e:2a:28:81:83:39:f3:
                    f7:8c:45:84:57:83:d1:6e:8c:8f:38:4c:d7:a0:26:
                    5b:04:76:07:0e:09:42:75:f3:e1:5a:7f:29:31:8d:
                    04:05:f8:59:8a:3f:c6:a1:1f:c0:c4:0f:29:6e:3e:
                    f5:17:46:38:a3:77:21:66:2b:1d:c4:a8:41:69:e0:
                    3e:18:11:51:bd:c9:41:6f:b8:10:d1:3a:c9:3c:b2:
                    3c:3d:c4:5e:95:e1:dd:ae:6c:5f:c6:0b:5a:ba:aa:
                    f8:f7:96:b9:75:42:55:39:b0:f4:61:c8:0d:85:6c:
                    d9:78:9b:99:d4:a4:16:3e:ea:c5:8a:84:48:39:61:
                    d5:7e:b3:86:da:a2:4d:49:55:98:c3:a5:10:9f:96:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6D:49:DD:4F:61:2E:6C:9A:6C:4C:6B:80:C1:C4:5D:3A:CD:45:7F
            X509v3 Authority Key Identifier:
                keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e8:80:ba:04:4d:6e:5b:b3:85:9f:2d:ee:00:3a:b3:e3:dd:
         a6:8b:95:ec:15:f6:34:e1:1b:63:16:ba:54:05:85:bd:fb:2f:
         38:27:66:26:ca:14:ac:87:89:e8:c9:bd:1b:18:76:86:0b:3b:
         8e:28:96:dc:36:79:9b:ad:2c:1b:85:c1:e8:a0:37:aa:5e:52:
         70:8f:91:c0:0e:5f:85:7a:10:bb:9e:0f:55:8e:09:09:61:f5:
         6d:28:0d:84:0d:80:c5:98:20:5a:90:30:37:79:22:c9:a9:6c:
         2d:0f:94:42:b7:bf:7a:e3:27:be:32:f5:94:fe:44:17:1c:68:
         99:60:74:c3:4e:71:2a:9e:67:ef:72:14:af:8e:05:01:7d:69:
         94:d7:81:de:94:5e:ee:3d:b2:1f:80:3d:c3:bc:c3:27:a8:d2:
         d6:b4:0b:46:55:91:06:f6:ad:d1:73:24:6b:77:64:40:da:c0:
         ce:a9:e7:8b:8c:ad:a7:cd:7f:a0:09:c3:c1:b4:fd:5c:58:98:
         a4:af:09:b9:91:f7:55:82:cb:0e:e5:8c:87:d4:27:52:41:94:
         16:ce:2c:f7:a0:8e:c5:78:c5:1c:fb:0a:de:02:09:8a:3d:03:
         03:6f:c2:3b:1d:14:2c:72:a2:05:74:39:0d:77:20:57:d4:2b:
         10:bc:24:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+C8iOv2JnLCaE+i+NF+iSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi
YWQwMzAwHhcNMjYwOTIwMDkwMDM4WhcNMjYwOTIxMDkwMDM4WjAzMTEwLwYDVQQD
EygwYjZkNDlkZDRmNjEyZTZjOWE2YzRjNmI4MGMxYzQ1ZDNhY2Q0NTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvnM2eY7Ug2SAEWI6LwfSLRZgDfC
GconfPb4F94rqrdXgBeiJfme0ntRWFT3GZ05xXt1rn6rCmBJEU/zH/tz9W95Myow
wh71/Udc/HVZ9ANKQjxsnBpmyeL7SOSTifD2H15/GKajFUD9sqb/RjWnLn4qKIGD
OfP3jEWEV4PRboyPOEzXoCZbBHYHDglCdfPhWn8pMY0EBfhZij/GoR/AxA8pbj71
F0Y4o3chZisdxKhBaeA+GBFRvclBb7gQ0TrJPLI8PcReleHdrmxfxgtauqr495a5
dUJVObD0YcgNhWzZeJuZ1KQWPurFioRIOWHVfrOG2qJNSVWYw6UQn5bu+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAttSd1PYS5smmxMa4DBxF06zUV/MB8GA1UdIwQY
MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt
YTRlYTBhNjNmNzY2LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2
LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+iAugRN
bluzhZ8t7gA6s+PdpouV7BX2NOEbYxa6VAWFvfsvOCdmJsoUrIeJ6Mm9Gxh2hgs7
jiiW3DZ5m60sG4XB6KA3ql5ScI+RwA5fhXoQu54PVY4JCWH1bSgNhA2AxZggWpAw
N3kiyalsLQ+UQre/euMnvjL1lP5EFxxomWB0w05xKp5n73IUr44FAX1plNeB3pRe
7j2yH4A9w7zDJ6jS1rQLRlWRBvat0XMka3dkQNrAzqnni4ytp81/oAnDwbT9XFiY
pK8JuZH3VYLLDuWMh9QnUkGUFs4s96COxXjFHPsK3gIJij0DA2/COx0ULHKiBXQ5
DXcgV9QrELwk+w==
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:06:04 2026 by rpki-client