Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
File:                     61E1nJmJuWPpWUwZKcggNn3jIt0.mft (raw, json)
Hash identifier:          dNP8JsDqJwPbSJ3qonJ9vz5iyXUgdrYoL6t6SHLlcVI=
Subject key identifier:   72:12:24:61:53:D2:EF:E9:12:9A:FF:1E:6B:86:EC:EB:16:BD:24:B2
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       01A0DCBB7F66CB277CFE240E3EA57105847E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
Manifest number:          141E
Signing time:             Sat 26 Sep 2026 08:01:10 +0000
Manifest this update:     Sat 26 Sep 2026 08:01:10 +0000
Manifest next update:     Sun 27 Sep 2026 08:01:10 +0000
Files and hashes:         1: 0IdihKsaHNwSOB_nkYz44Zy65-A.roa (hash: P1MFlacPZwFpIeGNyvad4D5C+2iO9WxygrB8JB9GTSA=)
                          2: 61E1nJmJuWPpWUwZKcggNn3jIt0.crl (hash: 9A5bKR+cPayi92yBcxiIC8XcSJgc1dJpSX0h2fsHemo=)
                          3: DKzMrbgZTtWLZz6lWOGpDKUm4iE.roa (hash: e42bfo+1q4nlRcxiJWKV+DLeJhIfOdcRPKWIwpv0C6s=)
                          4: uJnEIKPWJw-326x5IBBMzolFrLM.roa (hash: moDOTpNm3tFCIAX5WqMAOpWVKX58N/OLMiWutEeF9mo=)
                          5: vy3qd6walzhl7tZubGmW08QmYpw.roa (hash: GjD8b7Cc0LKnz1abLpNBhT8sfyli2VNmhuoKhcV1ueM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 08:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:bb:7f:66:cb:27:7c:fe:24:0e:3e:a5:71:05:84:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Sep 26 08:01:10 2026 GMT
            Not After : Sep 27 08:01:10 2026 GMT
        Subject: CN=7212246153d2efe9129aff1e6b86eceb16bd24b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:49:82:d7:b5:b6:0c:b6:9d:3e:3e:34:7b:6d:
                    8c:3c:44:36:59:08:67:33:2c:fe:c6:6c:69:4d:da:
                    c7:bb:5e:6c:2e:6c:a5:ae:14:c4:7b:27:21:66:d5:
                    12:75:a3:61:fe:40:fe:31:07:80:a0:a9:e3:54:b3:
                    ff:e3:be:1f:64:97:ae:9d:50:1c:3b:5c:ce:0b:dd:
                    38:0b:ba:fd:58:c9:8e:a7:32:57:e4:6e:ec:95:4a:
                    33:6a:c1:6a:6e:f9:30:2d:ec:c5:87:1d:dc:61:fd:
                    eb:53:6f:fe:ef:80:8a:d0:c6:b8:d1:27:d6:b9:63:
                    17:a6:fe:3b:46:e5:eb:cf:1e:55:61:25:9a:c2:2c:
                    0b:6a:22:27:fe:6d:75:ff:6e:38:82:42:6d:2d:bf:
                    65:a5:b9:10:a3:ab:2c:0d:d0:c3:fe:62:8e:ab:95:
                    21:91:36:17:dd:e2:ff:c4:75:27:19:3c:d4:a6:c5:
                    b8:59:86:bd:b4:af:84:52:97:2c:91:da:6d:60:17:
                    c2:79:45:57:db:3e:ea:37:85:ac:c7:3d:67:cd:2d:
                    a4:af:b4:aa:fd:20:56:16:0c:13:72:12:dd:62:1a:
                    ee:a4:b4:f3:24:c3:fe:fe:65:c0:c8:28:c1:c2:84:
                    a7:fd:f0:ef:47:3b:73:c5:4b:d7:70:10:53:ec:58:
                    cf:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:12:24:61:53:D2:EF:E9:12:9A:FF:1E:6B:86:EC:EB:16:BD:24:B2
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e4:31:61:05:d3:a8:8d:5e:93:90:78:85:49:0b:93:c9:89:
         dd:7e:18:cc:95:d7:d3:17:3f:b9:af:b0:0d:9e:2f:28:4a:b8:
         3b:2c:be:b6:4c:6e:63:98:52:07:42:a9:3f:6d:24:c9:51:0d:
         eb:38:ae:d9:d5:6d:26:a9:9a:31:3f:a2:54:29:dd:3e:4c:a5:
         64:b8:3a:be:6c:cf:cf:cf:0f:ae:1e:ae:c9:c3:4a:28:da:7b:
         2d:54:d5:63:94:12:f5:34:77:b6:d9:2d:a4:6f:a4:8c:1c:26:
         16:68:1a:5a:1e:a7:ce:46:d9:43:50:62:78:2f:c2:1f:c7:3e:
         1c:a1:e0:7c:46:32:aa:1a:fe:4d:b8:29:eb:14:87:6c:d2:55:
         77:69:a5:22:eb:4f:2f:61:0b:79:e8:c3:81:be:fb:9b:84:ad:
         36:04:25:8a:3c:37:e9:db:54:82:92:c0:60:66:09:9e:10:f3:
         5e:b7:42:4a:23:75:da:8a:18:cf:bb:c3:6b:21:58:d2:a9:2b:
         ed:dc:1d:fc:66:a2:4d:4e:58:23:f6:74:ed:17:e5:f7:e0:46:
         db:a8:b4:92:c0:b3:c3:95:44:44:4b:5c:70:fd:00:47:0c:6e:
         30:c2:6e:75:e9:6f:ed:83:94:f4:08:5b:b4:05:fa:94:d3:16:
         d8:8a:8e:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcu39myyd8/iQOPqVxBYR+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTEzNTljOTk4OWI5NjNlOTU5NGMxOTI5YzgyMDM2N2Rl
MzIyZGQwHhcNMjYwOTI2MDgwMTEwWhcNMjYwOTI3MDgwMTEwWjAzMTEwLwYDVQQD
Eyg3MjEyMjQ2MTUzZDJlZmU5MTI5YWZmMWU2Yjg2ZWNlYjE2YmQyNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kmC17W2DLadPj40e22MPEQ2WQhn
Myz+xmxpTdrHu15sLmylrhTEeychZtUSdaNh/kD+MQeAoKnjVLP/474fZJeunVAc
O1zOC904C7r9WMmOpzJX5G7slUozasFqbvkwLezFhx3cYf3rU2/+74CK0Ma40SfW
uWMXpv47RuXrzx5VYSWawiwLaiIn/m11/244gkJtLb9lpbkQo6ssDdDD/mKOq5Uh
kTYX3eL/xHUnGTzUpsW4WYa9tK+EUpcskdptYBfCeUVX2z7qN4Wsxz1nzS2kr7Sq
/SBWFgwTchLdYhrupLTzJMP+/mXAyCjBwoSn/fDvRztzxUvXcBBT7FjPJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHISJGFT0u/pEpr/HmuG7OsWvSSyMB8GA1UdIwQY
MBaAFOtRNZyZiblj6VlMGSnIIDZ94yLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAt
NTlmYzczZDYwMzIyLzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAtNTlmYzczZDYwMzIy
LzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuQxYQXT
qI1ek5B4hUkLk8mJ3X4YzJXX0xc/ua+wDZ4vKEq4Oyy+tkxuY5hSB0KpP20kyVEN
6ziu2dVtJqmaMT+iVCndPkylZLg6vmzPz88Prh6uycNKKNp7LVTVY5QS9TR3ttkt
pG+kjBwmFmgaWh6nzkbZQ1BieC/CH8c+HKHgfEYyqhr+Tbgp6xSHbNJVd2mlIutP
L2ELeejDgb77m4StNgQlijw36dtUgpLAYGYJnhDzXrdCSiN12ooYz7vDayFY0qkr
7dwd/GaiTU5YI/Z07Rfl9+BG26i0ksCzw5VEREtccP0ARwxuMMJudelv7YOU9Ahb
tAX6lNMW2IqOGQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:59:43 2026 by rpki-client