Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File:                     s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier:          c9tz4gejZijkmiWvCR3f8Sjd545kdDoaJnwdIKC7xVE=
Subject key identifier:   1F:C7:E7:D2:6D:CD:90:6C:3B:A4:28:C4:1F:54:3E:D4:2E:8D:E2:2E
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer:       /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial:       019FF9ED5388C04FB04BBA7AF26C9DF37A34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number:          1A11
Signing time:             Thu 13 Aug 2026 07:01:47 +0000
Manifest this update:     Thu 13 Aug 2026 07:01:47 +0000
Manifest next update:     Fri 14 Aug 2026 07:01:47 +0000
Files and hashes:         1: _Hegz1VVkQxT8dMR4TPbzXidnGo.roa (hash: wCUCX/ENynsQM4yWKSMGJBVSMGdPMxR8qubJ5kFNMNc=)
                          2: rBaBGD3me64LECmMKa6dKRV8Yy0.roa (hash: K+BptzFvZJeOeMKzMOMTcV3487VC0j+Wsdpi6o13OCY=)
                          3: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: 8mTveqhBbonuwtH99APCYXNeU4eW2KcTfo6lg+p12P8=)
                          4: vvTAvxdhx3NqRY7Mg6sIRjTavUM.asa (hash: B0okjC7PiUjc05N96TAWbJ82kV+SDnSQSBLWFMRkR/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:ed:53:88:c0:4f:b0:4b:ba:7a:f2:6c:9d:f3:7a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
        Validity
            Not Before: Aug 13 07:01:47 2026 GMT
            Not After : Aug 14 07:01:47 2026 GMT
        Subject: CN=1fc7e7d26dcd906c3ba428c41f543ed42e8de22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:07:55:c9:4f:24:c5:7d:bb:6f:30:c9:77:d5:
                    cd:bd:25:86:d9:a2:05:a7:0c:e3:22:c0:6f:c5:1e:
                    a4:74:4c:78:aa:36:ca:06:19:a3:f4:ad:ca:99:c3:
                    d9:a0:d5:12:ba:f7:d2:f5:d7:fc:cf:2d:52:79:01:
                    04:a6:23:fb:b6:6b:ec:33:35:b2:47:6f:a9:b5:02:
                    d7:48:8a:43:64:50:91:c9:09:9b:99:84:d5:dc:60:
                    2a:af:9d:80:50:0e:8f:7b:6f:9f:28:b8:35:d6:f7:
                    0c:04:0d:45:43:c3:72:86:11:24:97:7c:a5:05:80:
                    f0:19:d7:dc:a8:9e:9e:ce:65:7b:a0:bf:46:6d:b5:
                    7c:ba:ff:5f:ba:da:ae:34:86:81:0b:75:2b:a5:77:
                    b6:a0:6f:6a:ac:b6:d8:57:1c:81:5b:af:ef:79:f8:
                    32:68:7b:50:e6:40:8c:d6:b3:e4:35:e4:0b:3a:5e:
                    76:a4:2f:c7:d7:c8:42:95:d2:f3:26:a9:43:e9:8f:
                    9e:a7:f4:23:1c:b9:9e:32:08:03:a6:b2:bf:cb:3b:
                    93:a7:69:fb:d5:47:9e:25:f9:ea:87:80:89:79:41:
                    67:91:54:1d:27:ba:f3:c9:ad:ca:72:b9:70:07:62:
                    76:b5:64:5d:28:51:80:17:75:b5:20:5f:68:5b:3c:
                    2a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C7:E7:D2:6D:CD:90:6C:3B:A4:28:C4:1F:54:3E:D4:2E:8D:E2:2E
            X509v3 Authority Key Identifier:
                keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d6:f0:f6:61:1d:91:ca:a9:f6:bf:82:9e:5c:04:3f:4f:13:
         43:e8:e2:29:3e:5e:02:7f:f6:14:fd:a0:9a:d1:a8:77:40:77:
         40:10:50:bb:4f:ad:02:c5:ff:a9:21:ca:c8:25:97:b7:d0:d3:
         ca:c1:e5:82:d3:2f:12:27:7b:ae:c7:49:65:8c:a5:37:af:16:
         0e:08:39:60:50:9c:c5:58:bf:43:0d:c6:8d:8a:bb:41:6e:58:
         97:54:ac:a4:89:fe:78:1c:69:e5:f8:d7:99:cd:86:06:f1:03:
         26:b8:4d:bd:f8:b4:08:ca:48:fb:0f:48:77:cb:87:32:37:19:
         db:f7:16:0e:0a:e0:6f:0d:df:50:a1:33:80:6b:52:37:56:5a:
         61:aa:05:ac:eb:94:c9:c3:ca:20:a0:b1:95:9f:62:05:c2:4b:
         3a:6b:1f:e3:db:6c:64:c9:58:0a:74:1f:8a:d7:90:dc:2a:4c:
         ec:8b:09:2f:12:d9:6f:4c:be:b2:d6:f7:9f:5d:df:7c:ba:d3:
         3c:40:c8:19:1c:1f:0e:a3:cb:0f:a3:c7:77:ef:82:ae:8a:da:
         3e:1c:7e:ef:2e:2a:8c:23:62:a3:68:4a:85:0c:39:ff:79:c8:
         44:4b:25:48:b6:6c:93:bb:97:6b:d5:aa:e3:04:16:10:5a:16:
         01:a3:30:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/57VOIwE+wS7p68myd83o0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZGQzNWNjZmY2YzJiODZhMWZhZDhmMTAzYmMyMDA3MGQw
OWU1MGQwHhcNMjYwODEzMDcwMTQ3WhcNMjYwODE0MDcwMTQ3WjAzMTEwLwYDVQQD
EygxZmM3ZTdkMjZkY2Q5MDZjM2JhNDI4YzQxZjU0M2VkNDJlOGRlMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAdVyU8kxX27bzDJd9XNvSWG2aIF
pwzjIsBvxR6kdEx4qjbKBhmj9K3KmcPZoNUSuvfS9df8zy1SeQEEpiP7tmvsMzWy
R2+ptQLXSIpDZFCRyQmbmYTV3GAqr52AUA6Pe2+fKLg11vcMBA1FQ8NyhhEkl3yl
BYDwGdfcqJ6ezmV7oL9GbbV8uv9futquNIaBC3UrpXe2oG9qrLbYVxyBW6/vefgy
aHtQ5kCM1rPkNeQLOl52pC/H18hCldLzJqlD6Y+ep/QjHLmeMggDprK/yzuTp2n7
1UeeJfnqh4CJeUFnkVQdJ7rzya3KcrlwB2J2tWRdKFGAF3W1IF9oWzwqeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/H59JtzZBsO6QoxB9UPtQujeIuMB8GA1UdIwQY
MBaAFLPdNcz/bCuGofrY8QO8IAcNCeUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEt
MmIxMDUwNTFiYTU5LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEtMmIxMDUwNTFiYTU5
LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNbw9mEd
kcqp9r+CnlwEP08TQ+jiKT5eAn/2FP2gmtGod0B3QBBQu0+tAsX/qSHKyCWXt9DT
ysHlgtMvEid7rsdJZYylN68WDgg5YFCcxVi/Qw3GjYq7QW5Yl1SspIn+eBxp5fjX
mc2GBvEDJrhNvfi0CMpI+w9Id8uHMjcZ2/cWDgrgbw3fUKEzgGtSN1ZaYaoFrOuU
ycPKIKCxlZ9iBcJLOmsf49tsZMlYCnQfiteQ3CpM7IsJLxLZb0y+stb3n13ffLrT
PEDIGRwfDqPLD6PHd++CroraPhx+7y4qjCNio2hKhQw5/3nIREslSLZsk7uXa9Wq
4wQWEFoWAaMwCQ==
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:05:47 2026 by rpki-client