Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
File:                     ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft (raw, json)
Hash identifier:          nzOu8VsjyI5ENvaXB81u0LfU8NiVHUQLq5/HlTlNVDg=
Subject key identifier:   40:D1:DC:29:B8:DC:4F:6E:D4:E6:94:26:5D:D8:C0:A2:22:59:B2:24
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Certificate issuer:       /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial:       01A0C40E81F080A934734157A9758FA34EB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
Manifest number:          110B
Signing time:             Mon 21 Sep 2026 13:01:20 +0000
Manifest this update:     Mon 21 Sep 2026 13:01:20 +0000
Manifest next update:     Tue 22 Sep 2026 13:01:20 +0000
Files and hashes:         1: 7-wWVh2ShqOjXRU3C5_nLCV8Taw.roa (hash: yBmho6Hc+8S+AZOf8tb5d8VX1stt/f9ql0bZ3I/nuA4=)
                          2: KHUoX9iRMr8MWj7KrZX1ErQ1SGU.roa (hash: 4gBgum5MWPlAQtpHYeC2hA4pL23ODMXf31DF5ppTdUI=)
                          3: f9rNCsFzObsmXufIGxfL6R-yFCk.roa (hash: si6wauF3TBoV3pmRSTWHYOpsqar2slO37/4OV4jqMcA=)
                          4: ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl (hash: eMBb3E9o9W9u7+iMrS6UEmUc/wiwHaXkEnPgAFEXM+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0e:81:f0:80:a9:34:73:41:57:a9:75:8f:a3:4e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
        Validity
            Not Before: Sep 21 13:01:20 2026 GMT
            Not After : Sep 22 13:01:20 2026 GMT
        Subject: CN=40d1dc29b8dc4f6ed4e694265dd8c0a22259b224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:25:61:64:66:8d:93:0b:f9:66:50:18:5d:d4:
                    38:db:2f:67:4c:2c:1b:02:dc:95:4e:6e:c8:33:57:
                    3e:bc:70:26:5f:79:77:ed:69:91:28:e6:9e:ec:25:
                    11:6f:85:0e:c0:f0:2e:93:0a:e9:3d:15:48:4e:27:
                    0f:97:fe:26:b3:77:3c:bc:c1:58:cb:a5:5f:ba:71:
                    6c:40:c1:be:67:08:7f:f5:85:a4:cd:87:d6:3d:9b:
                    46:7a:cf:62:19:09:52:9c:ea:94:93:78:a1:37:fe:
                    a3:2f:47:30:8c:ed:27:4b:66:0f:b4:05:03:97:e5:
                    67:e5:f0:36:11:0c:78:30:f6:1b:47:b3:18:90:0a:
                    d1:0f:2e:db:cd:b0:07:5f:78:04:2d:8c:26:4b:6c:
                    bc:74:52:b3:e6:4b:59:c9:fa:7f:fb:df:a0:46:ab:
                    41:ab:06:76:02:ea:b9:11:02:7d:f2:4c:05:18:39:
                    eb:ab:40:d0:e3:e4:ee:d0:be:10:95:3f:46:8f:f4:
                    46:63:8d:fd:b9:60:ac:ca:1b:ed:6e:12:e7:7d:ea:
                    d5:1d:da:f2:50:f7:6d:30:f0:f6:cd:c3:f9:3f:e0:
                    2b:41:98:74:32:a4:bf:51:c6:6f:d9:50:0c:b5:c1:
                    62:b0:0a:0b:e1:32:ea:88:8e:4a:37:6d:aa:6d:0d:
                    f7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D1:DC:29:B8:DC:4F:6E:D4:E6:94:26:5D:D8:C0:A2:22:59:B2:24
            X509v3 Authority Key Identifier:
                keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9f:ef:c8:6a:e4:4a:6d:e7:1e:7b:83:d9:81:c0:de:88:8f:
         6c:eb:26:59:54:23:3d:70:77:a5:63:ff:36:df:89:3c:1a:cd:
         2d:69:30:fc:4b:7c:63:07:8b:bf:c7:ef:26:a8:3e:41:89:d0:
         e8:fa:31:5c:ab:1d:06:6e:d0:28:29:6c:09:89:17:7e:7e:29:
         d7:40:c2:0d:05:54:d9:3c:cd:9f:0a:e8:34:18:4a:d8:f3:08:
         45:da:80:54:3d:fd:b6:f1:ee:da:17:e9:82:c4:70:3d:7f:fa:
         b1:70:2b:25:00:d5:11:bb:ab:af:23:d9:42:c2:d3:25:22:98:
         e8:2e:7e:96:b2:70:03:c7:d3:3d:21:09:4e:aa:3a:56:ac:65:
         e5:ed:66:a0:c8:da:bb:9c:a3:e9:59:91:da:a5:5e:15:37:f6:
         ec:a1:22:7c:cf:5b:52:a9:97:d9:f6:6f:c2:8b:3e:f0:0b:93:
         94:64:03:1e:32:ef:ae:23:6b:3c:ef:98:f3:ed:56:93:5c:d4:
         04:51:03:e0:df:17:49:0e:7f:32:c0:1f:e2:54:23:d8:cd:f2:
         30:ee:22:17:ad:45:7e:e9:ba:25:c8:0f:a6:e7:8c:05:99:a6:
         28:1f:4a:bb:0d:60:98:97:be:00:4a:7a:25:c1:93:dd:86:51:
         0c:09:5f:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDoHwgKk0c0FXqXWPo061MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYmRjMjZjZGRjMGJiY2ZhMzU0ZjExYTAxZTZmZjAxMjk2
YjNjN2IwHhcNMjYwOTIxMTMwMTIwWhcNMjYwOTIyMTMwMTIwWjAzMTEwLwYDVQQD
Eyg0MGQxZGMyOWI4ZGM0ZjZlZDRlNjk0MjY1ZGQ4YzBhMjIyNTliMjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCVhZGaNkwv5ZlAYXdQ42y9nTCwb
AtyVTm7IM1c+vHAmX3l37WmRKOae7CURb4UOwPAukwrpPRVITicPl/4ms3c8vMFY
y6VfunFsQMG+Zwh/9YWkzYfWPZtGes9iGQlSnOqUk3ihN/6jL0cwjO0nS2YPtAUD
l+Vn5fA2EQx4MPYbR7MYkArRDy7bzbAHX3gELYwmS2y8dFKz5ktZyfp/+9+gRqtB
qwZ2Auq5EQJ98kwFGDnrq0DQ4+Tu0L4QlT9Gj/RGY439uWCsyhvtbhLnferVHdry
UPdtMPD2zcP5P+ArQZh0MqS/UcZv2VAMtcFisAoL4TLqiI5KN22qbQ33FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDR3Cm43E9u1OaUJl3YwKIiWbIkMB8GA1UdIwQY
MBaAFIq9wmzdwLvPo1TxGgHm/wEpazx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNWMwYTMtNzM3OC00NTQyLTg5N2Qt
ZDNhNThiNWNiMGMwLzEvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8wNWMwYTMtNzM3OC00NTQyLTg5N2QtZDNhNThiNWNiMGMw
LzEvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZ/vyGrk
Sm3nHnuD2YHA3oiPbOsmWVQjPXB3pWP/Nt+JPBrNLWkw/Et8YweLv8fvJqg+QYnQ
6PoxXKsdBm7QKClsCYkXfn4p10DCDQVU2TzNnwroNBhK2PMIRdqAVD39tvHu2hfp
gsRwPX/6sXArJQDVEburryPZQsLTJSKY6C5+lrJwA8fTPSEJTqo6Vqxl5e1moMja
u5yj6VmR2qVeFTf27KEifM9bUqmX2fZvwos+8AuTlGQDHjLvriNrPO+Y8+1Wk1zU
BFED4N8XSQ5/MsAf4lQj2M3yMO4iF61Ffum6JcgPpueMBZmmKB9Kuw1gmJe+AEp6
JcGT3YZRDAlfnA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:55:05 2026 by rpki-client