Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File:                     ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier:          9NhYeU39KzNb1EmaGasMeXyUijUH4SXPOT9NswI+SJI=
Subject key identifier:   8D:91:6A:25:C2:5C:AD:34:F9:57:A9:7C:9B:21:40:68:06:CD:B0:0E
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer:       /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial:       01A0938FB5C90EC51CE64CBAA1DB049E1087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number:          1A4C
Signing time:             Sat 12 Sep 2026 03:01:03 +0000
Manifest this update:     Sat 12 Sep 2026 03:01:03 +0000
Manifest next update:     Sun 13 Sep 2026 03:01:03 +0000
Files and hashes:         1: cE-16L2hAxXo5HgqO2yQ2GX0mF4.roa (hash: WvhQ4UNcSImErueaFnqr3pwKPQOpTYhrBBdy/1NvzHc=)
                          2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: z/Be3hCvvdHUt4Bas+R/RaNIP+AG01ZCKxur3WCoaKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 21:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:93:8f:b5:c9:0e:c5:1c:e6:4c:ba:a1:db:04:9e:10:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
        Validity
            Not Before: Sep 12 03:01:03 2026 GMT
            Not After : Sep 13 03:01:03 2026 GMT
        Subject: CN=8d916a25c25cad34f957a97c9b21406806cdb00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:c7:38:00:26:e5:e6:15:78:3e:31:76:90:
                    2e:f3:02:25:eb:dc:9a:5d:4d:55:29:79:a0:82:b1:
                    7b:5e:69:3d:56:a3:b8:ae:dc:dc:bf:5e:06:97:d6:
                    e2:8a:13:e6:c4:51:4d:41:4a:73:ae:4e:eb:1d:e7:
                    64:93:34:1f:63:f1:7a:52:fb:f3:f6:86:58:90:48:
                    87:dd:24:9c:e5:ea:6c:8f:88:6a:7a:47:2d:8f:9d:
                    bd:b7:9e:46:78:f0:00:4f:a1:83:d5:87:e7:81:4e:
                    77:f5:50:40:52:b8:16:82:c3:c6:d8:ce:aa:ac:cf:
                    e6:e3:f8:ff:d6:e1:05:28:d5:0a:8e:81:34:28:d3:
                    41:4c:1e:73:a5:b6:8e:61:55:85:2f:97:fe:fc:58:
                    b6:96:03:11:63:8a:73:ce:72:03:c0:07:ba:f9:79:
                    2a:77:42:33:6f:99:44:f9:cd:18:7e:a8:47:d8:d9:
                    12:6f:c4:8e:da:9b:45:8a:01:a4:42:71:96:84:60:
                    b5:97:e5:d0:bd:47:d0:62:9c:53:d9:b6:fa:79:95:
                    58:3d:ff:b5:3f:97:f4:e5:71:5c:fe:44:c7:aa:ed:
                    93:7a:48:3d:f8:9c:83:ad:4c:10:f8:aa:ac:c0:e6:
                    25:68:d8:28:26:fb:49:42:d1:ac:ce:85:9d:e2:84:
                    b8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:91:6A:25:C2:5C:AD:34:F9:57:A9:7C:9B:21:40:68:06:CD:B0:0E
            X509v3 Authority Key Identifier:
                keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:1c:e3:12:8e:72:14:f7:f0:ae:e2:8a:5d:9b:87:97:6b:c3:
         32:56:52:be:b3:67:53:73:62:6b:24:b2:8c:40:62:61:f1:24:
         b0:29:f5:75:5f:64:7a:69:d8:6b:4c:9a:6a:d3:1a:dc:7a:ae:
         d3:51:5e:7e:59:2f:2d:2c:74:a4:a5:a9:d6:2f:40:ab:ba:77:
         0b:a4:8e:6d:24:b7:56:e4:cf:6e:a9:fa:fa:b0:9f:d0:89:e8:
         5b:5a:3c:8c:38:17:0a:91:37:57:c3:b8:94:8d:5e:4d:36:86:
         bf:08:09:d7:23:88:58:a4:fe:71:1c:21:1e:ea:4f:08:5a:fe:
         83:b5:68:01:cb:1b:77:56:11:3a:ed:2d:87:fa:17:c9:9c:a1:
         70:c1:83:97:c7:b6:19:5f:86:33:42:72:8c:d5:0d:8e:0a:81:
         56:64:35:65:72:56:f6:81:0d:65:73:33:a6:29:78:93:5a:82:
         80:a3:11:9c:95:d4:43:17:de:70:0b:5d:85:d4:a5:2e:e8:e1:
         eb:26:62:b8:ff:22:16:b8:5a:1a:8e:69:b3:56:25:3b:82:15:
         f1:58:5b:a1:26:6c:28:b3:24:ab:d8:40:1f:1b:c9:16:9a:a4:
         56:4d:ca:58:dc:74:f8:80:c1:1a:ba:e9:55:16:a1:bb:42:99:
         0a:fd:4d:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCTj7XJDsUc5ky6odsEnhCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Yzk4Y2JiMzdmZWEyZTljOWE2ZWI2ZjkyODg3YzA1YTRj
NTA2OTEwHhcNMjYwOTEyMDMwMTAzWhcNMjYwOTEzMDMwMTAzWjAzMTEwLwYDVQQD
Eyg4ZDkxNmEyNWMyNWNhZDM0Zjk1N2E5N2M5YjIxNDA2ODA2Y2RiMDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt3HOAAm5eYVeD4xdpAu8wIl69ya
XU1VKXmggrF7Xmk9VqO4rtzcv14Gl9biihPmxFFNQUpzrk7rHedkkzQfY/F6Uvvz
9oZYkEiH3SSc5epsj4hqekctj529t55GePAAT6GD1YfngU539VBAUrgWgsPG2M6q
rM/m4/j/1uEFKNUKjoE0KNNBTB5zpbaOYVWFL5f+/Fi2lgMRY4pzznIDwAe6+Xkq
d0Izb5lE+c0YfqhH2NkSb8SO2ptFigGkQnGWhGC1l+XQvUfQYpxT2bb6eZVYPf+1
P5f05XFc/kTHqu2Tekg9+JyDrUwQ+KqswOYlaNgoJvtJQtGszoWd4oS42wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2RaiXCXK00+VepfJshQGgGzbAOMB8GA1UdIwQY
MBaAFHnJjLs3/qLpyabrb5KIfAWkxQaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQt
OTE1MTc1ZTM2ZThlLzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQtOTE1MTc1ZTM2ZThl
LzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERzjEo5y
FPfwruKKXZuHl2vDMlZSvrNnU3NiaySyjEBiYfEksCn1dV9kemnYa0yaatMa3Hqu
01FeflkvLSx0pKWp1i9Aq7p3C6SObSS3VuTPbqn6+rCf0InoW1o8jDgXCpE3V8O4
lI1eTTaGvwgJ1yOIWKT+cRwhHupPCFr+g7VoAcsbd1YROu0th/oXyZyhcMGDl8e2
GV+GM0JyjNUNjgqBVmQ1ZXJW9oENZXMzpil4k1qCgKMRnJXUQxfecAtdhdSlLujh
6yZiuP8iFrhaGo5ps1YlO4IV8VhboSZsKLMkq9hAHxvJFpqkVk3KWNx0+IDBGrrp
VRahu0KZCv1NHQ==
-----END CERTIFICATE-----
Generated at Sat Sep 12 06:56:33 2026 by rpki-client