Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
File:                     _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json)
Hash identifier:          y+399glXiFKtNCb1c9oIdTCWOShdh2Z3Kd/j7+al984=
Subject key identifier:   50:FE:3C:18:30:21:69:6C:BA:C0:BE:66:69:7C:9B:08:93:C6:5E:12
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       01A0C21F30D999A2C5A26F99082F0A83ABF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
Manifest number:          1ACE
Signing time:             Mon 21 Sep 2026 04:00:19 +0000
Manifest this update:     Mon 21 Sep 2026 04:00:19 +0000
Manifest next update:     Tue 22 Sep 2026 04:00:19 +0000
Files and hashes:         1: 1onWddNgt-hbXxg-7fMMVDkSMv8.roa (hash: 6xbzz0JrjMO/4fz5zHo8PgQ0CyGaKVVD/UoDkWFGr1M=)
                          2: 4k3-HpRCXFW3j7_8C4stbYfFUYA.roa (hash: C8f2KuD10zOuLUQcMwm5C74B3yZTjBcW9yOV/aVWErg=)
                          3: 8MDk26A6HB8ESAemQVS635P3dlM.roa (hash: rxyUnW+DZGiT5coh/pmWc5vX6tfUq/igWAH5aJLS19c=)
                          4: Nsh_W4gT44WToqQeMBkvLdwLp7U.roa (hash: s1XEdXMI1+3uP5BkHw14NLcZMVjF5mmNtQSI8IR6ni8=)
                          5: OujepPxEWJf76CUpCTyqTjOXKpU.asa (hash: ThWY+hR9gmQ1aouAGBEnVouEZokSrfcbByNw6RJAbVQ=)
                          6: QKaa5M_Ls464BGXTJZlXMkecYvk.roa (hash: VYfsIkTwFvkSA3FB9Pu7FhpTVM9hzat73ShbqylONR8=)
                          7: Uhz_TUI3Hsi81u75mxMWZpekOT4.roa (hash: q9Go9HD9nYKVh+b76qK8j4mJsOQptkJ61FqLETJCZTU=)
                          8: Un_qTs_qUw6Cr9rSAjxMcB_qwIQ.roa (hash: /NZAsUlQyUhQsDytYI9yrui4/CAPCfbgRtz4l6TLnkU=)
                          9: Y1K-rQ-VX44rWAjvqhl_hw7Dweo.roa (hash: cEsowcsrRQw+N5wEyAbdQXCFdceUeFzwtiYgytJDtj8=)
                          10: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: pOsjrcIHgJ0k9n6LVasFbFAmFruz1JkTxyXJkHPYUH0=)
                          11: aKvQ03F1bR1q6-Woc8m1q6jONu8.roa (hash: LcJqfZb4sulh5jvt0J4ioSYZjOzoPCpUud+7/IHHoW8=)
                          12: hzo97s4v3GMC9JemawE_G_69_xQ.roa (hash: be6E5XX2tZu6F19eYf6ITco22ZDHl9eZTJ8uq+1gKPc=)
                          13: ip7XsN0-IlSnuEP_E--FUjD8qf0.roa (hash: CO94Nw8OySvoAWy5RjY0I0/eplwWsGb3UO5iKzV120U=)
                          14: l0uiGfn0_Ao0KJi5bVUaMaNKV8Y.asa (hash: 5p613mEjLDKXtkZwHBWoFC0KynCvj30DBewuSTWYGQ0=)
                          15: osuU6cABAT-z_og2fdV709jwbR4.asa (hash: ItbTyIqWcJVCMwjVvKdgJl+ZPlR3yuOKXNSj6k02k90=)
                          16: rjxf5Ppv88saIf4NMrBg7Lnjt88.asa (hash: 8f9M0wG41PE6ZfVDs5zv6PTV0f6czRl9ExFIm9zaW0o=)
                          17: t0cVkqPZjARFv36ftR5F1LXB_P8.roa (hash: aH1VNEGWBhfBG6pKNECJ5Njp4Dom+Xvfv76b48XldZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:1f:30:d9:99:a2:c5:a2:6f:99:08:2f:0a:83:ab:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Sep 21 04:00:19 2026 GMT
            Not After : Sep 22 04:00:19 2026 GMT
        Subject: CN=50fe3c183021696cbac0be66697c9b0893c65e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:63:a9:1b:ed:21:4f:e1:4e:e0:4d:d5:9d:56:
                    73:63:db:36:ee:20:e6:dd:d8:35:be:eb:85:5b:75:
                    f4:21:e6:be:ec:86:c0:77:ab:e9:f9:1d:f3:c0:ee:
                    27:c8:a6:13:9c:f6:ac:ee:e0:c8:31:dc:1e:bc:8a:
                    45:79:7c:7e:e8:e4:e6:0e:1f:22:14:4f:49:78:ca:
                    76:f1:44:25:48:c6:a4:fc:46:6b:11:ef:4c:85:67:
                    0e:38:0c:20:1b:8e:9a:43:97:98:2e:86:dd:00:c0:
                    a3:74:d4:cc:ae:ac:d8:99:f9:11:ab:7d:53:fd:7a:
                    ae:11:89:7e:94:da:d1:92:43:c1:85:85:e2:e9:4f:
                    9f:35:5c:b8:93:d4:4e:d4:4b:de:82:61:d3:81:46:
                    94:56:1d:f1:13:f6:6a:5c:93:87:99:b2:30:f6:0a:
                    d4:91:c7:36:50:50:24:82:98:02:77:f0:7e:ed:0e:
                    5f:2d:a8:83:80:57:58:26:29:7c:36:a3:b5:62:40:
                    6e:71:5a:61:ec:fd:b0:34:81:d8:d7:a4:28:9b:70:
                    90:d5:86:f4:6e:f3:3b:1b:17:e1:d0:26:ec:f7:78:
                    6a:ea:5a:21:b6:fa:3e:d8:ba:82:f1:eb:70:73:05:
                    89:ce:d6:80:49:5d:6d:f4:aa:b1:6b:e4:67:99:08:
                    fa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FE:3C:18:30:21:69:6C:BA:C0:BE:66:69:7C:9B:08:93:C6:5E:12
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bd:34:eb:23:83:f5:2f:bc:b2:04:6f:ab:b3:db:a8:fe:be:
         45:12:e2:d3:57:6c:71:3b:02:96:64:ab:35:42:77:b0:c0:3a:
         5a:78:2d:ec:57:87:38:71:5f:cc:ad:95:7f:b3:0e:4f:87:56:
         dc:1c:db:59:54:84:3a:88:30:cc:56:99:f7:b7:9e:89:63:da:
         5c:fc:07:1f:d3:e0:37:80:2d:f6:ac:15:6e:90:d1:ab:86:68:
         3d:43:38:3b:58:46:79:c1:c1:3b:84:1e:e5:3c:5d:26:ed:92:
         1c:ce:4f:79:ca:94:65:f5:a5:57:e5:7a:19:18:f2:c0:45:43:
         81:7d:22:81:90:31:b6:3e:f4:c2:75:81:e7:60:48:97:b3:19:
         38:30:0b:07:c6:26:24:f5:c8:ca:42:cf:b9:3d:37:61:a8:cc:
         cd:fa:5c:99:03:70:46:58:8c:e9:39:fd:91:10:11:2b:5d:0b:
         9d:e7:12:97:c0:8d:e4:08:fd:c3:d8:1d:2e:e1:69:2f:bc:35:
         31:29:29:c4:e7:49:f0:05:05:c6:2c:89:a5:7e:a9:df:7d:9e:
         9c:d2:ff:07:c0:c3:39:3a:e3:69:42:c6:53:52:5c:7e:e8:bd:
         1e:e0:0f:dc:0a:92:20:48:09:86:50:57:73:48:f9:f8:a9:3f:
         ed:41:e1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:07:21 2026 by rpki-client