Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
File:                     8gwo0Z4N-1NIJqojqlBq9oowW3o.mft (raw, json)
Hash identifier:          6/DgKA9UFE8RKe6BijD1I5sRGfJG/Kz53HjXELtCWbM=
Subject key identifier:   97:9C:D1:69:3C:26:9A:D1:71:6F:E6:AF:A7:01:6B:EB:C6:26:71:21
Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
Certificate issuer:       /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
Certificate serial:       01A0C21F465CF44D15FADD2929582715B01D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
Manifest number:          19F7
Signing time:             Mon 21 Sep 2026 04:00:24 +0000
Manifest this update:     Mon 21 Sep 2026 04:00:24 +0000
Manifest next update:     Tue 22 Sep 2026 04:00:24 +0000
Files and hashes:         1: 4h6lcQgIZNPNn6orDQ61-yTtwWo.roa (hash: 3IoAe85ki8GRw4jFh+5yx1kZwJzMdssvyjliLQy2iM8=)
                          2: 8gwo0Z4N-1NIJqojqlBq9oowW3o.crl (hash: DsASQGAzxhb1TG3suBSId3WviyFZKLcW/9JIwkZbOb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 04:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:1f:46:5c:f4:4d:15:fa:dd:29:29:58:27:15:b0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
        Validity
            Not Before: Sep 21 04:00:24 2026 GMT
            Not After : Sep 22 04:00:24 2026 GMT
        Subject: CN=979cd1693c269ad1716fe6afa7016bebc6267121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:d8:20:b1:86:78:df:6e:c0:49:7e:50:d9:
                    9d:26:91:47:17:fb:d7:f7:7f:b4:15:f7:d3:2e:ba:
                    a3:37:63:9d:bc:10:fc:95:73:a0:06:a1:71:91:21:
                    df:28:13:e6:37:81:1b:c7:f8:3e:de:6b:d9:c6:4a:
                    8a:af:88:fc:c8:f3:98:2d:b9:44:d8:9f:d0:e2:56:
                    55:fa:67:38:45:aa:5f:f7:b4:cf:5e:36:ba:85:71:
                    f7:03:f1:ad:2f:ec:35:b3:fc:1f:5c:69:fd:fc:e4:
                    5a:b2:ae:da:f1:05:c6:16:8d:9e:03:17:ec:df:c5:
                    50:38:20:96:d4:0f:02:4c:4b:52:27:db:06:20:ce:
                    4c:01:f9:15:0d:2c:b7:2e:08:c0:de:e3:c4:3b:1d:
                    27:d6:0d:cd:5d:96:1a:20:43:77:94:17:be:2e:b1:
                    9f:b8:d1:c0:5d:f4:8b:c3:82:36:35:67:19:ad:27:
                    b9:75:9d:03:8c:d2:e4:03:fd:24:f4:40:bb:06:da:
                    09:79:e4:5d:3a:0e:69:24:90:8e:13:a9:e9:92:47:
                    b1:05:b8:2b:25:7f:2b:47:4c:a3:18:16:07:7c:09:
                    fa:25:60:53:e6:c4:cb:d7:22:ed:05:05:20:77:35:
                    23:83:f7:2e:6c:21:45:a8:af:e9:a5:b6:e3:1d:a9:
                    15:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9C:D1:69:3C:26:9A:D1:71:6F:E6:AF:A7:01:6B:EB:C6:26:71:21
            X509v3 Authority Key Identifier:
                keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:95:d2:e4:a4:d0:5f:59:b4:ca:7a:5d:f8:da:09:df:29:a3:
         fd:57:8b:42:63:2d:96:fd:cf:11:b5:72:e5:1d:3a:50:a0:7c:
         f2:2e:47:ed:8a:5c:ad:1e:aa:be:84:4f:54:4e:17:1c:15:d4:
         40:2a:4a:d0:f3:32:b1:3c:f1:19:7b:f4:d9:2f:8b:b9:86:26:
         b1:d0:5c:44:b9:3d:d6:0a:3b:54:41:be:b1:c9:ee:f9:d2:11:
         4b:34:54:5c:62:14:ec:ad:48:45:10:05:d4:51:e5:ea:6c:9f:
         28:10:23:d4:f5:57:a9:3b:14:eb:d6:03:5c:21:e8:27:30:2d:
         b0:71:82:0c:99:70:e1:fb:7e:9f:03:39:44:ef:97:96:0e:d6:
         79:f5:cf:6c:fc:10:bd:e0:64:29:82:2a:53:d1:e1:b8:18:36:
         21:c7:55:c6:7d:7e:d3:a0:ba:06:63:9c:68:eb:18:a2:a1:fc:
         21:32:5e:4b:c4:6b:d7:d9:ee:0d:c6:40:c3:e3:a0:43:cd:e9:
         dc:55:67:cb:aa:db:0c:c7:04:6a:b9:ec:31:38:09:76:02:17:
         0f:ce:a6:26:87:b9:d4:98:78:c1:77:ea:97:1d:3f:fd:f1:b1:
         61:9b:c9:01:60:ee:27:10:0b:0a:a2:2e:54:1a:80:e9:a6:2c:
         e4:bd:e4:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCH0Zc9E0V+t0pKVgnFbAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMGMyOGQxOWUwZGZiNTM0ODI2YWEyM2FhNTA2YWY2OGEz
MDViN2EwHhcNMjYwOTIxMDQwMDI0WhcNMjYwOTIyMDQwMDI0WjAzMTEwLwYDVQQD
Eyg5NzljZDE2OTNjMjY5YWQxNzE2ZmU2YWZhNzAxNmJlYmM2MjY3MTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqLYILGGeN9uwEl+UNmdJpFHF/vX
93+0FffTLrqjN2OdvBD8lXOgBqFxkSHfKBPmN4Ebx/g+3mvZxkqKr4j8yPOYLblE
2J/Q4lZV+mc4Rapf97TPXja6hXH3A/GtL+w1s/wfXGn9/ORasq7a8QXGFo2eAxfs
38VQOCCW1A8CTEtSJ9sGIM5MAfkVDSy3LgjA3uPEOx0n1g3NXZYaIEN3lBe+LrGf
uNHAXfSLw4I2NWcZrSe5dZ0DjNLkA/0k9EC7BtoJeeRdOg5pJJCOE6npkkexBbgr
JX8rR0yjGBYHfAn6JWBT5sTL1yLtBQUgdzUjg/cubCFFqK/ppbbjHakVMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJec0Wk8JprRcW/mr6cBa+vGJnEhMB8GA1UdIwQY
MBaAFPIMKNGeDftTSCaqI6pQavaKMFt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMDdlMTgtMmM2YS00OTMwLWJlMTct
ZTVkN2YyZGRkNGMyLzEvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hMDdlMTgtMmM2YS00OTMwLWJlMTctZTVkN2YyZGRkNGMy
LzEvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5XS5KTQ
X1m0ynpd+NoJ3ymj/VeLQmMtlv3PEbVy5R06UKB88i5H7YpcrR6qvoRPVE4XHBXU
QCpK0PMysTzxGXv02S+LuYYmsdBcRLk91go7VEG+scnu+dIRSzRUXGIU7K1IRRAF
1FHl6myfKBAj1PVXqTsU69YDXCHoJzAtsHGCDJlw4ft+nwM5RO+Xlg7WefXPbPwQ
veBkKYIqU9HhuBg2IcdVxn1+06C6BmOcaOsYoqH8ITJeS8Rr19nuDcZAw+OgQ83p
3FVny6rbDMcEarnsMTgJdgIXD86mJoe51Jh4wXfqlx0//fGxYZvJAWDuJxALCqIu
VBqA6aYs5L3kDQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:52:47 2026 by rpki-client