Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File:                     xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier:          y/jQ4Pk4YUrCiBX6zUcovlDNzJBqfqgg7qbTrNch9Ww=
Subject key identifier:   F8:52:65:C4:39:4D:2F:F1:7C:4C:04:B9:66:74:21:81:05:E2:A6:80
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer:       /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial:       01A08D1FD6D21FBAD7D78E2E84D4048257BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number:          195E
Signing time:             Thu 10 Sep 2026 21:01:09 +0000
Manifest this update:     Thu 10 Sep 2026 21:01:09 +0000
Manifest next update:     Fri 11 Sep 2026 21:01:09 +0000
Files and hashes:         1: D338NBLG4gy0L0rQfLDLBBvijvs.roa (hash: xpSbCbvFe4HKnfPpEx3Bzh3tFz7qEtAGaiCairLokvk=)
                          2: QPtWU0Le-lGW94gMt-weMxaQnAs.roa (hash: 5vjcWa21i4k2fuEZMcu0bZIC3kY6Cj7yBN5sMrwLc3E=)
                          3: RdR5cSmbR14gpItKWt96zEaO0yI.roa (hash: NnRSJqZRm+JgqhvDLWWc4r16w/z5e4rD4AECWuZmvio=)
                          4: twYt6qj-wTyUeYXy66c4-gjVtXw.roa (hash: Wg1hNsEn74fIoOmvEkDupCA55dXbo6Jgxn8PskTnyqM=)
                          5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: /x0vGizVGILPqDuNdUQ+8u26J/p1eUPThJC5/X8iLxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:1f:d6:d2:1f:ba:d7:d7:8e:2e:84:d4:04:82:57:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
        Validity
            Not Before: Sep 10 21:01:09 2026 GMT
            Not After : Sep 11 21:01:09 2026 GMT
        Subject: CN=f85265c4394d2ff17c4c04b96674218105e2a680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:f6:f0:07:c3:3f:a1:86:2e:e9:5d:f0:59:
                    79:18:2a:43:5c:7c:f5:b8:19:24:42:31:9f:6f:c8:
                    91:be:76:82:74:a6:25:6f:7b:c6:8d:c4:70:2e:c0:
                    57:88:1e:c2:13:39:28:11:56:c6:22:ec:7c:3c:80:
                    c0:08:2d:93:e8:a3:c9:7e:6d:c0:17:8f:27:7a:a6:
                    10:95:9e:6b:53:7e:dd:27:85:c6:ed:f0:ab:dd:9e:
                    66:7c:4f:d7:1d:52:22:d7:6a:79:10:46:d4:70:af:
                    cb:33:91:ff:c3:66:85:0d:24:39:b4:8b:ac:79:b3:
                    aa:e7:2f:be:02:30:e5:eb:a6:c2:47:b5:00:6c:a7:
                    9e:e6:b8:7b:c6:54:97:5b:be:08:f9:a2:ea:23:9c:
                    89:20:63:4b:c1:bf:1c:d2:4e:cc:45:f4:f0:c3:5e:
                    f4:35:8b:d5:7c:9c:87:ba:f7:ea:86:b3:98:ee:f2:
                    8f:3a:5b:4e:4b:76:3c:63:05:c6:0e:d6:6a:28:39:
                    f3:9b:b9:78:d1:cd:19:0a:e5:c4:71:6a:14:e3:82:
                    9e:a7:ec:33:d1:91:fe:5a:57:eb:42:21:6c:42:80:
                    a6:e1:2e:c6:10:3b:8b:ef:24:1b:7a:45:dd:e0:32:
                    9f:b9:75:9c:4c:57:ed:83:60:3a:24:0c:d7:f0:d7:
                    40:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:52:65:C4:39:4D:2F:F1:7C:4C:04:B9:66:74:21:81:05:E2:A6:80
            X509v3 Authority Key Identifier:
                keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:62:1f:36:ef:a1:fc:6f:74:34:4a:38:20:27:ae:09:79:12:
         30:32:e5:1c:d8:e3:9b:95:53:d9:32:47:21:cb:23:36:06:2f:
         b5:50:8b:cf:23:21:d3:85:7b:95:ed:50:42:60:98:9c:99:07:
         73:8c:41:bb:ff:b0:88:0c:12:e9:d2:1d:fd:87:9d:d9:34:6b:
         46:f8:0d:1c:15:cf:6d:a6:5b:da:24:d7:28:12:3b:18:47:49:
         d8:1c:15:d8:a0:4d:36:a3:0b:b8:62:94:61:76:63:07:e1:b5:
         6e:25:c5:65:1f:28:96:e1:a3:a9:56:9c:7a:ae:e7:3e:c7:13:
         51:3d:90:16:cd:8a:97:2a:2f:bc:6f:75:ef:c3:7b:87:5c:61:
         a3:b9:c7:39:34:2f:34:bd:9e:32:ac:73:56:93:20:d7:95:0d:
         c7:da:73:09:83:7d:d3:70:fa:0f:53:01:28:5c:c2:16:ad:ac:
         59:94:64:a8:dd:99:41:6c:98:33:cf:f7:28:c9:67:84:a3:06:
         ae:ad:87:88:19:83:e0:b1:53:ad:3e:bb:ee:cb:31:ac:4a:05:
         4f:81:46:d5:b9:62:86:39:49:b0:2a:f9:f2:36:91:a2:44:9a:
         a7:c8:c7:94:8d:76:f2:29:ad:a6:0c:18:57:35:c5:c6:39:44:
         88:a3:00:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNH9bSH7rX144uhNQEgle8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3Mzg4MDdhYmI5Y2UxNWI3YTg5MjU5MmI2ZjAwM2YxYTNl
MTZiNjAwHhcNMjYwOTEwMjEwMTA5WhcNMjYwOTExMjEwMTA5WjAzMTEwLwYDVQQD
EyhmODUyNjVjNDM5NGQyZmYxN2M0YzA0Yjk2Njc0MjE4MTA1ZTJhNjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmb28AfDP6GGLuld8Fl5GCpDXHz1
uBkkQjGfb8iRvnaCdKYlb3vGjcRwLsBXiB7CEzkoEVbGIux8PIDACC2T6KPJfm3A
F48neqYQlZ5rU37dJ4XG7fCr3Z5mfE/XHVIi12p5EEbUcK/LM5H/w2aFDSQ5tIus
ebOq5y++AjDl66bCR7UAbKee5rh7xlSXW74I+aLqI5yJIGNLwb8c0k7MRfTww170
NYvVfJyHuvfqhrOY7vKPOltOS3Y8YwXGDtZqKDnzm7l40c0ZCuXEcWoU44Kep+wz
0ZH+WlfrQiFsQoCm4S7GEDuL7yQbekXd4DKfuXWcTFftg2A6JAzX8NdAVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhSZcQ5TS/xfEwEuWZ0IYEF4qaAMB8GA1UdIwQY
MBaAFMc4gHq7nOFbeoklkrbwA/Gj4WtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWIt
M2QxZjMwZTA5MjNiLzEveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xZjQ1ZTktZTgzOS00NjdiLWI1YWItM2QxZjMwZTA5MjNi
LzEveHppQWVydWM0VnQ2aVNXU3R2QUQ4YVBoYTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWIfNu+h
/G90NEo4ICeuCXkSMDLlHNjjm5VT2TJHIcsjNgYvtVCLzyMh04V7le1QQmCYnJkH
c4xBu/+wiAwS6dId/Yed2TRrRvgNHBXPbaZb2iTXKBI7GEdJ2BwV2KBNNqMLuGKU
YXZjB+G1biXFZR8oluGjqVaceq7nPscTUT2QFs2KlyovvG9178N7h1xho7nHOTQv
NL2eMqxzVpMg15UNx9pzCYN903D6D1MBKFzCFq2sWZRkqN2ZQWyYM8/3KMlnhKMG
rq2HiBmD4LFTrT677ssxrEoFT4FG1blihjlJsCr58jaRokSap8jHlI128imtpgwY
VzXFxjlEiKMAmA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 04:32:25 2026 by rpki-client