Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
File:                     _swL85GTOSd-rWuh2VXLX2w5jd4.mft (raw, json)
Hash identifier:          Tsd3ZGguYVvF38CZ6iaw8joIOIyQ2uHVLvUVZaoxRyA=
Subject key identifier:   61:79:25:23:28:11:31:F8:5B:C1:1E:DB:5B:A9:B7:5C:EF:30:1B:25
Authority key identifier: FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE
Certificate issuer:       /CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
Certificate serial:       01A0852FD7623DA3997BABF2C33ECB4D0E17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
Manifest number:          02FD
Signing time:             Wed 09 Sep 2026 08:01:40 +0000
Manifest this update:     Wed 09 Sep 2026 08:01:40 +0000
Manifest next update:     Thu 10 Sep 2026 08:01:40 +0000
Files and hashes:         1: MHpsCZyP0IVYMoHWzqfloOQWEZE.asa (hash: hTcP8Hkd9/FsM/qMperPFuWrlLFufrbGXDvfXB44n3Y=)
                          2: _swL85GTOSd-rWuh2VXLX2w5jd4.crl (hash: OqDiU3cF7kjGDI39Q8evNRE8QR1wnyb9WOENmz8CKeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:85:2f:d7:62:3d:a3:99:7b:ab:f2:c3:3e:cb:4d:0e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecc0bf3919339277ead6ba1d955cb5f6c398dde
        Validity
            Not Before: Sep  9 08:01:40 2026 GMT
            Not After : Sep 10 08:01:40 2026 GMT
        Subject: CN=61792523281131f85bc11edb5ba9b75cef301b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:dc:d1:d1:70:a1:b1:4a:86:93:9d:de:f5:
                    4f:45:1b:85:a8:d9:82:33:47:a0:f9:52:66:69:92:
                    e7:8d:e8:59:5a:d4:b8:90:9a:db:d5:c1:38:4e:81:
                    7e:33:41:e9:4f:6f:70:41:93:1e:e9:9f:fd:59:b1:
                    b8:3e:2c:8d:d7:bf:09:d9:11:67:f3:8c:a3:80:d8:
                    d1:8f:81:fa:61:55:9a:14:87:c7:e3:b8:2c:d6:7c:
                    d0:d2:ff:28:ed:14:e6:b5:77:4b:66:60:6f:31:47:
                    ae:8c:56:aa:b4:5e:40:09:1f:65:a1:af:0c:56:9a:
                    e1:eb:da:f4:0a:0f:6c:93:ff:79:b1:bd:88:b6:6a:
                    2c:13:0d:39:2f:fd:12:23:db:30:11:0d:b0:70:ee:
                    b3:53:4f:c7:37:a5:d5:f1:d8:3f:bb:2f:7c:a2:5f:
                    72:09:e7:c0:e2:9c:72:27:fa:ce:53:07:82:6c:ea:
                    7e:3b:d1:51:52:8a:23:c5:af:01:65:7c:d6:0b:c3:
                    41:67:8c:92:c6:cc:4c:03:a0:29:b0:42:13:4c:c0:
                    3e:19:c4:89:6e:ef:31:e0:19:53:37:27:fa:12:98:
                    04:68:ab:35:6c:e4:3a:af:9a:43:0d:35:b0:7f:2b:
                    d0:1f:5d:1d:5d:ab:74:d8:54:d0:c0:6b:f4:d1:62:
                    85:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:79:25:23:28:11:31:F8:5B:C1:1E:DB:5B:A9:B7:5C:EF:30:1B:25
            X509v3 Authority Key Identifier:
                keyid:FE:CC:0B:F3:91:93:39:27:7E:AD:6B:A1:D9:55:CB:5F:6C:39:8D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_swL85GTOSd-rWuh2VXLX2w5jd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a707df-f876-467f-af15-e1e6e95b4b7c/1/_swL85GTOSd-rWuh2VXLX2w5jd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:75:63:40:32:09:68:b1:3a:59:71:b5:a8:b6:15:b4:5a:0d:
         4a:4d:35:b4:09:ab:58:45:13:f7:eb:25:37:04:a1:ab:c7:f2:
         ab:18:ab:cb:be:dd:84:59:b6:28:b9:53:0a:9b:b4:1f:75:28:
         07:89:b6:4a:02:dc:87:7a:25:9a:da:42:ac:13:00:f3:fe:1b:
         81:bd:98:80:bb:cc:2d:e5:10:19:ec:4f:71:87:35:e6:44:fe:
         76:5b:ad:f4:2a:4a:f5:43:ce:7f:28:18:28:cf:c8:f4:42:81:
         b9:f1:42:8a:19:bd:1c:6d:84:e0:cc:b9:76:d3:82:3c:af:eb:
         c8:b0:36:1b:4a:fd:ed:e2:63:81:25:c9:c1:7d:2a:e1:54:fb:
         1a:60:47:f5:a0:e0:57:b1:cf:b9:f3:77:29:15:a4:dd:9c:91:
         73:ab:5f:e1:69:bb:90:60:02:0f:c3:21:c9:0a:4f:c1:48:d1:
         06:30:9d:30:d5:92:a0:e9:ec:12:ee:ef:93:f5:69:fd:74:50:
         fd:3c:0c:44:b7:7e:49:20:1e:5e:67:32:e6:6d:90:cd:ae:5a:
         57:37:1e:c3:55:00:47:7d:0c:4a:63:74:2c:19:ce:4f:56:19:
         dd:b0:45:78:54:44:a9:72:74:5d:fe:b0:a5:a9:ae:a4:3f:1c:
         e3:e9:bc:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCFL9diPaOZe6vywz7LTQ4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlY2MwYmYzOTE5MzM5Mjc3ZWFkNmJhMWQ5NTVjYjVmNmMz
OThkZGUwHhcNMjYwOTA5MDgwMTQwWhcNMjYwOTEwMDgwMTQwWjAzMTEwLwYDVQQD
Eyg2MTc5MjUyMzI4MTEzMWY4NWJjMTFlZGI1YmE5Yjc1Y2VmMzAxYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmrc0dFwobFKhpOd3vVPRRuFqNmC
M0eg+VJmaZLnjehZWtS4kJrb1cE4ToF+M0HpT29wQZMe6Z/9WbG4PiyN178J2RFn
84yjgNjRj4H6YVWaFIfH47gs1nzQ0v8o7RTmtXdLZmBvMUeujFaqtF5ACR9loa8M
Vprh69r0Cg9sk/95sb2ItmosEw05L/0SI9swEQ2wcO6zU0/HN6XV8dg/uy98ol9y
CefA4pxyJ/rOUweCbOp+O9FRUoojxa8BZXzWC8NBZ4ySxsxMA6ApsEITTMA+GcSJ
bu8x4BlTNyf6EpgEaKs1bOQ6r5pDDTWwfyvQH10dXat02FTQwGv00WKFcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGF5JSMoETH4W8Ee21upt1zvMBslMB8GA1UdIwQY
MBaAFP7MC/ORkzknfq1rodlVy19sOY3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3N3TDg1R1RPU2Qtcld1aDJWWExYMnc1amQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hNzA3ZGYtZjg3Ni00NjdmLWFmMTUt
ZTFlNmU5NWI0YjdjLzEvX3N3TDg1R1RPU2Qtcld1aDJWWExYMnc1amQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9hNzA3ZGYtZjg3Ni00NjdmLWFmMTUtZTFlNmU5NWI0Yjdj
LzEvX3N3TDg1R1RPU2Qtcld1aDJWWExYMnc1amQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHVjQDIJ
aLE6WXG1qLYVtFoNSk01tAmrWEUT9+slNwShq8fyqxiry77dhFm2KLlTCpu0H3Uo
B4m2SgLch3olmtpCrBMA8/4bgb2YgLvMLeUQGexPcYc15kT+dlut9CpK9UPOfygY
KM/I9EKBufFCihm9HG2E4My5dtOCPK/ryLA2G0r97eJjgSXJwX0q4VT7GmBH9aDg
V7HPufN3KRWk3ZyRc6tf4Wm7kGACD8MhyQpPwUjRBjCdMNWSoOnsEu7vk/Vp/XRQ
/TwMRLd+SSAeXmcy5m2Qza5aVzcew1UAR30MSmN0LBnOT1YZ3bBFeFREqXJ0Xf6w
pamupD8c4+m8mw==
-----END CERTIFICATE-----
Generated at Wed Sep 9 10:13:26 2026 by rpki-client