Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File:                     p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier:          ZvmyAJPBK8NybhKwodUoCBGthrfTCZcju+Sy23nNjBE=
Subject key identifier:   5D:1C:E8:4E:29:57:B1:8D:E3:B3:04:CE:0B:E1:BA:E0:01:87:E4:76
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer:       /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial:       01A06EDE7164385378BFB68490EB61054F71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number:          1A3A
Signing time:             Sat 05 Sep 2026 00:01:06 +0000
Manifest this update:     Sat 05 Sep 2026 00:01:06 +0000
Manifest next update:     Sun 06 Sep 2026 00:01:06 +0000
Files and hashes:         1: 6Xsm7GtWPf6sxisdeJuLCo-3tLo.roa (hash: xdyBNDU6Kuc/zF3hUM0jBGfeZpAD6Qr+9Bqu74wdbek=)
                          2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: TaRNdXjVUCltU6cVhcOnRpEz7ITXsG9263KPtZeFSBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:de:71:64:38:53:78:bf:b6:84:90:eb:61:05:4f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
        Validity
            Not Before: Sep  5 00:01:06 2026 GMT
            Not After : Sep  6 00:01:06 2026 GMT
        Subject: CN=5d1ce84e2957b18de3b304ce0be1bae00187e476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:40:9e:7b:87:e1:be:89:24:14:a1:f5:be:
                    26:19:71:af:17:3f:d4:fb:d0:c8:d7:88:e0:3b:7f:
                    29:2c:b4:bb:3a:f2:11:22:7f:f2:8a:e1:f1:02:4c:
                    61:39:38:d5:98:0d:13:ed:19:81:f0:52:5f:6d:b9:
                    16:3e:eb:ed:8d:a1:11:55:53:dc:22:02:eb:f1:71:
                    62:9e:ee:19:3f:3c:e0:08:ca:0c:a9:43:a5:5c:d4:
                    8b:13:2a:42:d1:4e:43:f6:5d:ad:fd:86:d9:7f:0a:
                    f0:92:2b:f1:20:7e:5f:fe:d9:0e:80:09:32:e1:11:
                    99:c4:28:e4:fa:0f:96:4c:08:86:35:aa:00:88:0c:
                    07:4b:7a:5e:80:a1:08:a7:df:d1:15:21:f8:7c:27:
                    31:5f:28:fa:ac:36:0c:1d:66:2d:a1:66:04:00:d2:
                    40:54:44:5e:69:14:ea:56:63:88:8e:ac:65:e0:6a:
                    7f:76:f0:27:40:9b:a8:9f:c0:90:97:1f:f0:37:32:
                    7a:ac:81:4c:49:68:be:f9:a6:1d:82:04:21:02:de:
                    10:e5:2f:a9:13:46:c7:86:14:9f:aa:8b:09:87:de:
                    41:29:4b:5f:ea:38:39:28:12:b0:ed:30:c9:a5:4e:
                    81:bf:18:e8:b3:bf:9a:9c:0e:4f:80:4b:10:7e:1f:
                    9c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1C:E8:4E:29:57:B1:8D:E3:B3:04:CE:0B:E1:BA:E0:01:87:E4:76
            X509v3 Authority Key Identifier:
                keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:62:91:97:75:9e:4b:8b:e6:ed:a7:9b:7f:7e:6f:7d:2d:7e:
         a4:86:f4:b3:b0:fb:14:b9:19:50:91:db:c6:dc:3f:c0:bd:7d:
         a7:98:19:86:f0:a2:51:88:0c:38:81:26:2c:5a:8c:36:43:4f:
         12:05:63:ee:26:ee:b3:58:d2:3f:90:1b:19:e0:bb:75:46:45:
         a9:06:b7:69:44:f1:85:7f:c1:7e:42:04:62:e3:2a:b6:79:ec:
         aa:98:12:cd:ad:60:c7:4c:94:58:bd:55:d1:bd:88:eb:70:dd:
         ce:fb:8a:5c:3a:5b:13:d2:e5:e5:69:91:32:8c:5a:4b:98:f6:
         f8:31:dd:46:8d:d1:e2:6a:a5:ed:7e:0a:30:69:0c:ec:39:c3:
         0f:31:5a:56:89:4c:13:75:00:92:42:be:bf:bd:22:d4:9d:c0:
         22:3e:10:e7:3c:ea:74:18:40:9c:5b:fb:c3:94:6e:5f:1f:e5:
         08:f7:9c:38:b6:cb:e0:00:79:19:cb:bd:08:43:9b:a1:68:9e:
         0d:33:4d:cc:11:2f:58:d1:88:2d:f8:e4:74:eb:59:69:cc:44:
         fb:25:6b:08:db:9b:03:e4:6b:b0:0f:71:28:8c:d3:2d:48:66:
         7c:d1:53:79:8e:03:b0:95:07:c1:37:6f:26:d0:d6:e7:ba:2d:
         eb:8b:65:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBu3nFkOFN4v7aEkOthBU9xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YmRiMmM3YjMzNGI5NGJjZDQzMzg4ZjIxZjgyMDkyZGI2
Y2ZkNGMwHhcNMjYwOTA1MDAwMTA2WhcNMjYwOTA2MDAwMTA2WjAzMTEwLwYDVQQD
Eyg1ZDFjZTg0ZTI5NTdiMThkZTNiMzA0Y2UwYmUxYmFlMDAxODdlNDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxxAnnuH4b6JJBSh9b4mGXGvFz/U
+9DI14jgO38pLLS7OvIRIn/yiuHxAkxhOTjVmA0T7RmB8FJfbbkWPuvtjaERVVPc
IgLr8XFinu4ZPzzgCMoMqUOlXNSLEypC0U5D9l2t/YbZfwrwkivxIH5f/tkOgAky
4RGZxCjk+g+WTAiGNaoAiAwHS3pegKEIp9/RFSH4fCcxXyj6rDYMHWYtoWYEANJA
VEReaRTqVmOIjqxl4Gp/dvAnQJuon8CQlx/wNzJ6rIFMSWi++aYdggQhAt4Q5S+p
E0bHhhSfqosJh95BKUtf6jg5KBKw7TDJpU6Bvxjos7+anA5PgEsQfh+ckwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0c6E4pV7GN47MEzgvhuuABh+R2MB8GA1UdIwQY
MBaAFKe9ssezNLlLzUM4jyH4IJLbbP1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQt
YTk1OGJmNWFjYmVhLzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQtYTk1OGJmNWFjYmVh
LzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2KRl3We
S4vm7aebf35vfS1+pIb0s7D7FLkZUJHbxtw/wL19p5gZhvCiUYgMOIEmLFqMNkNP
EgVj7ibus1jSP5AbGeC7dUZFqQa3aUTxhX/BfkIEYuMqtnnsqpgSza1gx0yUWL1V
0b2I63DdzvuKXDpbE9Ll5WmRMoxaS5j2+DHdRo3R4mql7X4KMGkM7DnDDzFaVolM
E3UAkkK+v70i1J3AIj4Q5zzqdBhAnFv7w5RuXx/lCPecOLbL4AB5Gcu9CEOboWie
DTNNzBEvWNGILfjkdOtZacxE+yVrCNubA+RrsA9xKIzTLUhmfNFTeY4DsJUHwTdv
JtDW57ot64tlOQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:07:38 2026 by rpki-client