Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.mft
File:                     G1VDeLv22mSc_WBxZvZcfE921lY.mft (raw, json)
Hash identifier:          c6rdfH+xPIcK9r91laO62djy6ZxMQZ14CsrtvGe50kM=
Subject key identifier:   41:BD:91:7D:FE:0E:D0:9A:3E:09:86:67:1C:24:80:05:0B:B4:E7:B1
Authority key identifier: 1B:55:43:78:BB:F6:DA:64:9C:FD:60:71:66:F6:5C:7C:4F:76:D6:56
Certificate issuer:       /CN=1b554378bbf6da649cfd607166f65c7c4f76d656
Certificate serial:       01A0E4E2E334F73B67D7382B3CA1E59CC3AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1VDeLv22mSc_WBxZvZcfE921lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.mft
Manifest number:          10
Signing time:             Sun 27 Sep 2026 22:01:09 +0000
Manifest this update:     Sun 27 Sep 2026 22:01:09 +0000
Manifest next update:     Mon 28 Sep 2026 22:01:09 +0000
Files and hashes:         1: G1VDeLv22mSc_WBxZvZcfE921lY.crl (hash: XpGQU2HbL2+tSAB3m/zHpE2xGS98kQ6IGd7mT81A9IY=)
                          2: vpfwIrst8D-mUhYikydHJdbxWYU.roa (hash: cDSlaXYAliFmFBD60YnB9lxqeC0VbURWwjdvKxvvUyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1VDeLv22mSc_WBxZvZcfE921lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:e2:e3:34:f7:3b:67:d7:38:2b:3c:a1:e5:9c:c3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b554378bbf6da649cfd607166f65c7c4f76d656
        Validity
            Not Before: Sep 27 22:01:09 2026 GMT
            Not After : Sep 28 22:01:09 2026 GMT
        Subject: CN=41bd917dfe0ed09a3e0986671c2480050bb4e7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:fd:42:30:79:83:50:85:51:de:79:22:be:
                    dc:f0:2b:44:28:c8:71:18:35:1f:8c:fa:d7:a5:d1:
                    22:61:7a:e5:06:72:80:0f:c5:b9:8c:d7:cf:31:0b:
                    d9:54:e5:36:56:df:c8:d6:aa:69:41:96:00:63:f3:
                    a9:bf:ab:7a:66:e3:e1:d8:2e:c5:1c:95:cc:23:3d:
                    04:c7:63:55:f9:6a:b6:f4:41:c6:c2:76:43:d9:dc:
                    7c:c2:32:02:b5:3a:dd:52:07:af:30:e6:20:fe:64:
                    74:a8:06:14:08:1b:fc:c9:41:8d:ab:20:1b:f2:9a:
                    43:62:9e:cd:cb:78:18:cc:b7:f1:fe:e0:39:ba:db:
                    bd:0d:1a:35:bd:80:9b:a0:0e:ca:85:9a:8d:34:63:
                    f5:76:ea:e2:fa:52:b2:48:af:fd:5d:c9:f2:eb:04:
                    a7:7d:08:b9:c9:c6:1f:8c:48:b6:dd:08:b8:c7:31:
                    9d:2e:42:00:e1:23:de:b2:41:04:48:e3:9e:f5:97:
                    ae:cf:67:89:44:4d:50:0f:5b:96:53:8a:14:5d:fe:
                    45:81:72:d2:62:87:59:a1:cf:bd:9a:28:ce:41:bc:
                    2f:bc:23:9d:d2:ae:9f:81:59:6d:0c:78:7f:d2:26:
                    7b:1c:d8:1a:78:63:b8:1e:4a:57:57:83:e0:b5:50:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BD:91:7D:FE:0E:D0:9A:3E:09:86:67:1C:24:80:05:0B:B4:E7:B1
            X509v3 Authority Key Identifier:
                keyid:1B:55:43:78:BB:F6:DA:64:9C:FD:60:71:66:F6:5C:7C:4F:76:D6:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1VDeLv22mSc_WBxZvZcfE921lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0e:2c:61:4a:1c:45:da:2c:5a:90:1e:9e:09:66:df:ba:96:
         dc:d7:31:b0:23:4e:2b:15:bb:73:4d:8d:28:c5:66:0c:7d:12:
         f2:6a:da:9b:78:4c:16:48:15:27:8e:88:b6:b3:2c:f3:14:f7:
         a6:bb:7b:c5:24:91:b2:7b:be:35:a4:ef:43:bc:c1:f3:42:3a:
         81:8a:89:59:5a:58:eb:d9:d6:c1:95:78:91:61:61:f8:4e:8d:
         1b:a3:a8:6f:39:f3:1a:c4:32:21:1b:1a:f4:97:17:a5:cc:43:
         6c:0b:12:e0:c8:7a:ab:26:a3:d3:73:6e:1e:b3:fa:8a:5e:ca:
         5d:f6:6e:84:bd:2b:2d:ea:b4:8e:a5:db:c4:7d:5b:24:aa:ce:
         1e:5e:0c:21:e4:ee:11:97:23:ce:e5:10:b7:25:c3:c3:e0:63:
         20:dd:51:5e:9a:ca:6b:50:18:f2:ca:0a:d8:b9:0f:03:24:cb:
         cd:f2:74:52:1a:62:dc:67:92:17:93:dc:82:8a:fc:d7:18:3f:
         be:51:7d:d2:65:0f:ae:93:05:46:36:6a:c9:63:95:73:f3:a1:
         fc:59:0d:04:8a:3f:77:09:9c:a1:a6:07:7c:c2:a2:a7:49:07:
         72:4b:d5:d8:d0:57:0b:b7:a1:64:56:af:38:67:4f:a9:d9:40:
         75:b7:fa:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDk4uM09ztn1zgrPKHlnMOuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNTU0Mzc4YmJmNmRhNjQ5Y2ZkNjA3MTY2ZjY1YzdjNGY3
NmQ2NTYwHhcNMjYwOTI3MjIwMTA5WhcNMjYwOTI4MjIwMTA5WjAzMTEwLwYDVQQD
Eyg0MWJkOTE3ZGZlMGVkMDlhM2UwOTg2NjcxYzI0ODAwNTBiYjRlN2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDf9QjB5g1CFUd55Ir7c8CtEKMhx
GDUfjPrXpdEiYXrlBnKAD8W5jNfPMQvZVOU2Vt/I1qppQZYAY/Opv6t6ZuPh2C7F
HJXMIz0Ex2NV+Wq29EHGwnZD2dx8wjICtTrdUgevMOYg/mR0qAYUCBv8yUGNqyAb
8ppDYp7Ny3gYzLfx/uA5utu9DRo1vYCboA7KhZqNNGP1duri+lKySK/9Xcny6wSn
fQi5ycYfjEi23Qi4xzGdLkIA4SPeskEESOOe9Zeuz2eJRE1QD1uWU4oUXf5FgXLS
YodZoc+9mijOQbwvvCOd0q6fgVltDHh/0iZ7HNgaeGO4HkpXV4PgtVC4aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEG9kX3+DtCaPgmGZxwkgAULtOexMB8GA1UdIwQY
MBaAFBtVQ3i79tpknP1gcWb2XHxPdtZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzFWRGVMdjIybVNjX1dCeFp2WmNmRTkyMWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zN2U2YmMtM2JiNi00MDI1LTkwNjct
ZWUxNDM4MmIxYmJiLzEvRzFWRGVMdjIybVNjX1dCeFp2WmNmRTkyMWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zN2U2YmMtM2JiNi00MDI1LTkwNjctZWUxNDM4MmIxYmJi
LzEvRzFWRGVMdjIybVNjX1dCeFp2WmNmRTkyMWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXw4sYUoc
RdosWpAenglm37qW3NcxsCNOKxW7c02NKMVmDH0S8mram3hMFkgVJ46ItrMs8xT3
prt7xSSRsnu+NaTvQ7zB80I6gYqJWVpY69nWwZV4kWFh+E6NG6OobznzGsQyIRsa
9JcXpcxDbAsS4Mh6qyaj03NuHrP6il7KXfZuhL0rLeq0jqXbxH1bJKrOHl4MIeTu
EZcjzuUQtyXDw+BjIN1RXprKa1AY8soK2LkPAyTLzfJ0Uhpi3GeSF5Pcgor81xg/
vlF90mUPrpMFRjZqyWOVc/Oh/FkNBIo/dwmcoaYHfMKip0kHckvV2NBXC7ehZFav
OGdPqdlAdbf6cg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:38:32 2026 by rpki-client