Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
File:                     ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json)
Hash identifier:          uztc5rHlTy6Cg9AW787TUlyxb0NGWTIvvDELYkbGdKE=
Subject key identifier:   39:E2:CA:FC:0B:52:4D:A8:2D:D3:0E:58:AC:69:1B:0C:D2:1E:BC:B6
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Certificate issuer:       /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial:       01A0D124A043DE64B820E5879715A8C88E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 02:00:33 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:33 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:33 +0000
Files and hashes:         1: NoeQVsGRTiyXfh1eMtf_ayztjys.roa (hash: AI/YmWAsP7YbcuYJ9yAOU2XEXLr8wONVVB+AxIjcXdo=)
                          2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: 1j451XV+3TfVaiUPuwfUWxeBX9BOZLGP6z7KaexNLD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 02:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:a0:43:de:64:b8:20:e5:87:97:15:a8:c8:8e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
        Validity
            Not Before: Sep 24 02:00:33 2026 GMT
            Not After : Sep 25 02:00:33 2026 GMT
        Subject: CN=39e2cafc0b524da82dd30e58ac691b0cd21ebcb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1f:1d:64:83:5c:04:c8:16:79:c0:a8:81:53:
                    6d:2e:19:b3:74:9b:04:83:d1:40:df:75:87:c3:81:
                    a2:12:94:8c:69:2a:a9:a0:4e:2b:15:7c:bc:88:d4:
                    56:56:7f:41:38:1a:08:0c:64:6c:41:58:ba:88:9e:
                    2d:7b:13:23:63:14:cf:be:d0:ad:9c:e8:3e:02:2e:
                    eb:82:8b:67:84:0d:91:a6:78:17:3f:ef:16:70:aa:
                    ff:e0:e7:a1:e4:b2:69:e2:f6:dd:d2:0a:a7:82:e0:
                    b8:c0:04:b0:32:cb:cd:a5:62:d1:0a:55:df:e8:7f:
                    24:82:8e:c9:15:a8:b7:8f:ec:9d:93:aa:48:8f:8a:
                    72:dd:f4:2a:e0:19:06:23:0f:70:a9:cb:69:df:03:
                    77:ad:e0:2b:85:2b:d5:89:92:2b:04:30:37:0e:a0:
                    4c:26:68:86:ae:8a:7b:fa:3e:0b:ff:47:4a:d6:a5:
                    22:46:68:1e:01:0c:f7:db:fe:29:d6:62:1e:cc:e8:
                    79:b2:13:a0:a3:95:b0:8d:0e:62:6f:8b:bf:91:be:
                    29:58:c0:29:c4:70:8c:67:5e:06:82:e7:4e:f1:f0:
                    21:f7:6c:97:55:bd:b2:b3:81:9a:a4:93:05:03:2e:
                    61:00:e9:51:b1:6c:a6:30:e5:0d:db:ba:8b:b9:13:
                    2f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E2:CA:FC:0B:52:4D:A8:2D:D3:0E:58:AC:69:1B:0C:D2:1E:BC:B6
            X509v3 Authority Key Identifier:
                keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:eb:f9:83:a5:70:96:49:a3:0a:c4:ac:7a:ed:f0:63:25:30:
         02:6e:59:c6:54:ed:74:e3:d9:9a:fd:ba:be:2b:26:8b:ab:4b:
         50:37:94:49:54:bb:58:8b:7e:79:ae:6a:de:4d:00:bd:c0:57:
         82:17:cf:61:a5:e3:30:9a:7d:ea:34:e0:b5:d5:03:ec:ba:60:
         2a:5a:56:f6:b3:23:d8:8b:c0:dd:6c:37:8a:55:64:b8:4a:a4:
         28:06:3d:40:c8:b5:e6:30:02:2a:40:6a:70:bb:4b:cc:fe:e4:
         b7:73:d4:6e:b8:16:04:2d:06:86:f4:51:d7:a9:1d:b1:99:df:
         2c:58:02:f9:f6:c8:a9:f9:d1:e6:84:a8:28:23:da:e0:ff:41:
         fc:ff:c4:30:0b:9e:87:24:0f:41:35:b9:1c:79:a2:a7:ec:2b:
         b5:89:cd:49:a7:fa:4a:a9:84:34:cd:a9:2a:c8:34:d5:6f:29:
         26:a9:fb:23:6a:a8:a5:dc:26:90:89:8b:c0:2c:95:59:93:ab:
         eb:5e:0b:63:03:21:58:1b:b2:3d:be:a3:8f:83:e1:91:6b:94:
         7b:89:c2:d1:8f:0c:d5:60:67:fc:c4:e8:75:17:20:1b:e7:92:
         27:92:f5:36:39:2c:51:3f:f3:2b:f1:c0:ea:27:59:ce:bc:cc:
         fd:a6:ec:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJKBD3mS4IOWHlxWoyI4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWVhNjk4ODQ4MWNlYTRiOTViNjUxMzFjYzQ5ODg0ZjNl
ZDBlM2YwHhcNMjYwOTI0MDIwMDMzWhcNMjYwOTI1MDIwMDMzWjAzMTEwLwYDVQQD
EygzOWUyY2FmYzBiNTI0ZGE4MmRkMzBlNThhYzY5MWIwY2QyMWViY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB8dZINcBMgWecCogVNtLhmzdJsE
g9FA33WHw4GiEpSMaSqpoE4rFXy8iNRWVn9BOBoIDGRsQVi6iJ4texMjYxTPvtCt
nOg+Ai7rgotnhA2RpngXP+8WcKr/4Oeh5LJp4vbd0gqnguC4wASwMsvNpWLRClXf
6H8kgo7JFai3j+ydk6pIj4py3fQq4BkGIw9wqctp3wN3reArhSvViZIrBDA3DqBM
JmiGrop7+j4L/0dK1qUiRmgeAQz32/4p1mIezOh5shOgo5WwjQ5ib4u/kb4pWMAp
xHCMZ14GgudO8fAh92yXVb2ys4GapJMFAy5hAOlRsWymMOUN27qLuRMvpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDniyvwLUk2oLdMOWKxpGwzSHry2MB8GA1UdIwQY
MBaAFImuppiEgc6kuVtlExzEmITz7Q4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yYTU1YTUtMzMwNC00MTA4LThkOTIt
NGQ4ZTkwZTAzMzNiLzEvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yYTU1YTUtMzMwNC00MTA4LThkOTItNGQ4ZTkwZTAzMzNi
LzEvaWE2bW1JU0J6cVM1VzJVVEhNU1loUFB0RGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZev5g6Vw
lkmjCsSseu3wYyUwAm5ZxlTtdOPZmv26vismi6tLUDeUSVS7WIt+ea5q3k0AvcBX
ghfPYaXjMJp96jTgtdUD7LpgKlpW9rMj2IvA3Ww3ilVkuEqkKAY9QMi15jACKkBq
cLtLzP7kt3PUbrgWBC0GhvRR16kdsZnfLFgC+fbIqfnR5oSoKCPa4P9B/P/EMAue
hyQPQTW5HHmip+wrtYnNSaf6SqmENM2pKsg01W8pJqn7I2qopdwmkImLwCyVWZOr
614LYwMhWBuyPb6jj4PhkWuUe4nC0Y8M1WBn/MTodRcgG+eSJ5L1NjksUT/zK/HA
6idZzrzM/absBQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:58:57 2026 by rpki-client