Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File:                     imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier:          35gBP7CVjUH9HhkDkU4e3+zLJRd4Wn1XA/GT+7Js6AI=
Subject key identifier:   D4:93:92:D5:69:A4:99:7E:D3:F3:95:86:44:33:7F:42:2D:0C:8D:52
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer:       /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial:       01A090572DCC22401E024FC1ECE6B5AD2200
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number:          1A6D
Signing time:             Fri 11 Sep 2026 12:00:27 +0000
Manifest this update:     Fri 11 Sep 2026 12:00:27 +0000
Manifest next update:     Sat 12 Sep 2026 12:00:27 +0000
Files and hashes:         1: LpI3PyYDEsil-gJ9EybHYHEQzSw.roa (hash: Bj0/Slyl4mS0qWkcQjxpCqfI9YGYFKmWx9MPsOE7/Uk=)
                          2: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: xHsV1LMxam9EMmYtR0wCR7qY+eLpVAQy9a1WMsl45zE=)
                          3: wP0JXiaPHK1PWypoONdu1P4k-xY.roa (hash: hOHj+bHUfpcBNhAym5OZKL6pfElusgMVxMa3fRinXoc=)
                          4: zbPHBRrSSTxxm5GjBesQOmg5BOU.roa (hash: 2nuGIy4NdEBraXqbAUjxFu75DMqgnt0PJMHdEvGwETc=)
                          5: znypVRB8HdELH7t-EZvR2o9mzZ0.roa (hash: VtWRBjrQreIxKps4k8DyQN35GM7QKv0koJ0vJoZMRsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:90:57:2d:cc:22:40:1e:02:4f:c1:ec:e6:b5:ad:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
        Validity
            Not Before: Sep 11 12:00:27 2026 GMT
            Not After : Sep 12 12:00:27 2026 GMT
        Subject: CN=d49392d569a4997ed3f3958644337f422d0c8d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:0a:bd:7f:5c:e0:04:d7:8c:08:37:40:8b:
                    60:c6:26:25:08:ea:0c:0c:c7:c8:6a:57:d2:93:ae:
                    03:21:71:ce:03:70:f1:2f:9b:cc:11:e3:9f:38:3b:
                    8c:70:ae:84:99:82:25:3e:30:5e:eb:e9:64:1d:ee:
                    7e:aa:bf:94:28:7c:21:a7:2c:0c:0c:00:61:7d:44:
                    21:71:b6:ce:13:73:92:e9:78:18:36:bd:48:15:ac:
                    a3:f3:82:55:cc:82:f2:26:72:e2:f2:be:c0:7f:00:
                    5d:ee:2a:6c:06:e3:1f:cf:c7:24:55:59:a6:ae:38:
                    44:4e:37:f8:fb:36:78:02:f2:56:19:f6:57:37:13:
                    4c:81:c4:2f:69:f4:a4:64:31:6b:4e:e6:c3:9e:cd:
                    45:6f:71:ad:36:58:9c:33:ea:84:84:4d:b7:8b:ca:
                    13:be:4f:e7:99:b9:4a:89:69:05:18:b6:9d:a2:dd:
                    f4:75:0b:38:0c:c1:ee:d5:dd:3e:f6:e3:e7:4c:b7:
                    9e:ba:49:36:e7:0a:72:42:a2:43:08:c0:04:32:d6:
                    11:eb:a8:e2:cb:09:67:56:7b:9e:f4:d3:14:ae:e9:
                    ef:6e:6e:ba:74:3c:e2:bf:2f:20:3d:71:a9:0e:1f:
                    f3:31:f0:44:f4:da:98:2c:89:47:35:65:f5:e9:3b:
                    84:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:93:92:D5:69:A4:99:7E:D3:F3:95:86:44:33:7F:42:2D:0C:8D:52
            X509v3 Authority Key Identifier:
                keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:de:5c:c7:5a:0b:91:13:a2:e1:51:c3:36:d8:07:55:01:1c:
         f2:10:f4:ee:09:80:96:93:9c:15:23:0a:76:a9:f5:e8:23:81:
         f2:58:cb:be:5e:e3:c1:de:fa:7b:ab:29:50:36:73:c8:63:b0:
         2d:89:33:1b:39:ed:d2:d1:9b:82:0d:19:9f:22:37:33:ed:2f:
         ab:f2:dd:e4:37:33:a8:be:74:30:e7:25:c4:27:70:71:a7:9e:
         8a:94:f0:74:db:8e:74:4d:3c:b4:5f:a2:cb:b1:11:29:dc:91:
         c6:49:90:35:86:fa:17:0c:71:59:a8:94:47:b4:d9:78:95:9c:
         40:98:70:09:12:d2:78:b1:71:fc:e9:44:15:0b:be:92:b8:79:
         26:b8:6c:64:18:10:18:2f:2b:96:15:e3:17:5f:87:1c:de:38:
         47:58:18:87:59:f6:1a:64:a0:4f:92:da:65:b6:f3:b9:33:3a:
         1f:2f:f3:d4:f6:0b:1b:63:f8:d9:4d:6c:6d:70:24:9c:ab:3e:
         7b:ee:6a:44:d3:7e:76:b7:2d:49:11:9c:86:25:08:42:18:90:
         b6:2c:46:f7:0f:48:b5:34:46:8b:49:92:c4:5a:4f:74:f9:39:
         5c:07:6b:52:d9:f2:81:ec:2e:62:5c:d1:e3:11:df:b4:b8:3d:
         40:52:cd:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCQVy3MIkAeAk/B7Oa1rSIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjAyNGIyYzI3YTY3ZGZmNWI2NTRlZmEwNmJmN2JmYzEy
MjI2MjUwHhcNMjYwOTExMTIwMDI3WhcNMjYwOTEyMTIwMDI3WjAzMTEwLwYDVQQD
EyhkNDkzOTJkNTY5YTQ5OTdlZDNmMzk1ODY0NDMzN2Y0MjJkMGM4ZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkUKvX9c4ATXjAg3QItgxiYlCOoM
DMfIalfSk64DIXHOA3DxL5vMEeOfODuMcK6EmYIlPjBe6+lkHe5+qr+UKHwhpywM
DABhfUQhcbbOE3OS6XgYNr1IFayj84JVzILyJnLi8r7AfwBd7ipsBuMfz8ckVVmm
rjhETjf4+zZ4AvJWGfZXNxNMgcQvafSkZDFrTubDns1Fb3GtNlicM+qEhE23i8oT
vk/nmblKiWkFGLadot30dQs4DMHu1d0+9uPnTLeeukk25wpyQqJDCMAEMtYR66ji
ywlnVnue9NMUrunvbm66dDzivy8gPXGpDh/zMfBE9NqYLIlHNWX16TuE0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSTktVppJl+0/OVhkQzf0ItDI1SMB8GA1UdIwQY
MBaAFIpgJLLCemff9bZU76Br97/BIiYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEt
MDhlOGYwY2JiODQwLzEvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEtMDhlOGYwY2JiODQw
LzEvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAft5cx1oL
kROi4VHDNtgHVQEc8hD07gmAlpOcFSMKdqn16COB8ljLvl7jwd76e6spUDZzyGOw
LYkzGznt0tGbgg0ZnyI3M+0vq/Ld5DczqL50MOclxCdwcaeeipTwdNuOdE08tF+i
y7ERKdyRxkmQNYb6FwxxWaiUR7TZeJWcQJhwCRLSeLFx/OlEFQu+krh5JrhsZBgQ
GC8rlhXjF1+HHN44R1gYh1n2GmSgT5LaZbbzuTM6Hy/z1PYLG2P42U1sbXAknKs+
e+5qRNN+drctSRGchiUIQhiQtixG9w9ItTRGi0mSxFpPdPk5XAdrUtnygewuYlzR
4xHftLg9QFLNTg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 17:15:02 2026 by rpki-client