Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
File:                     mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft (raw, json)
Hash identifier:          HRCQ9FcePn47jiKiJD4fFv8BejpMkwDK9XJHfBmnP8A=
Subject key identifier:   2A:56:EC:B5:C9:E9:D1:80:62:0D:48:6A:EC:9F:08:A3:2A:CA:55:76
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Certificate issuer:       /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial:       01A08942AA8E2B3102C6FFAC529D66021F84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
Manifest number:          178A
Signing time:             Thu 10 Sep 2026 03:00:42 +0000
Manifest this update:     Thu 10 Sep 2026 03:00:42 +0000
Manifest next update:     Fri 11 Sep 2026 03:00:42 +0000
Files and hashes:         1: 5SVfxpykBtGisNJ_fWGkKKRqAXE.roa (hash: majDLjjox5+IIo91UtEcKltEO1Uytp4RkTkKzUgxr90=)
                          2: SEsp20Y0XXvSsNuzjgdPL2liaKA.roa (hash: 9EBYTUo7KyjxRP8OrlDLn9ulnQLVPYnZMVUIu94H7LM=)
                          3: jsoEFjjxqQANYzwZkbp4FKNWNvc.roa (hash: oqsei08QZLwI9OpLYx05MZOPBm5p1aTMIy+k0VyYQTc=)
                          4: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl (hash: SfSZ74dsrwjb20DJ2uOhhVsFpe4wrTzLckjRQiA52Aw=)
                          5: yJEHfcJRgkFuNVIuhioT_sp3dfg.roa (hash: bQzhx47BAwnINhp4yvgiQNvYfmYBagWvwXbBTrw311U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 21:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:42:aa:8e:2b:31:02:c6:ff:ac:52:9d:66:02:1f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
        Validity
            Not Before: Sep 10 03:00:42 2026 GMT
            Not After : Sep 11 03:00:42 2026 GMT
        Subject: CN=2a56ecb5c9e9d180620d486aec9f08a32aca5576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3d:6c:39:33:79:1e:ad:c0:13:fa:2b:1e:ec:
                    1c:17:67:b0:ff:19:24:41:72:c3:82:bd:85:d2:fb:
                    16:0e:17:98:da:ee:1f:74:59:c7:7b:32:a7:fb:18:
                    b5:0f:17:3f:e4:13:8e:ee:45:50:12:13:67:45:f5:
                    9f:b6:8b:75:f4:4e:c6:6d:8d:41:87:96:5a:50:8b:
                    d2:d2:93:0e:15:0e:54:a7:9a:71:4e:39:c3:7f:fc:
                    a8:11:f1:db:da:a7:66:11:8c:de:58:a9:62:e6:db:
                    0c:7c:5f:2c:2c:f7:ff:df:0b:8b:52:ef:89:7c:f7:
                    f8:ec:e3:b8:d6:da:85:b0:cc:90:a4:2b:ab:0d:a1:
                    79:1f:02:75:a5:47:05:12:6c:a4:10:b7:17:13:82:
                    0b:21:d4:35:cb:a6:b1:f4:13:2a:3f:16:09:be:46:
                    4d:6d:84:73:45:15:26:08:94:51:65:a3:70:61:f6:
                    b6:38:db:b4:ae:1a:ef:29:6c:39:2b:63:49:10:6a:
                    ea:86:c1:5a:5d:89:10:d0:78:61:99:fb:62:d3:5c:
                    31:4b:bf:26:d3:e8:44:91:08:09:05:16:79:4c:49:
                    ae:f9:c4:af:d7:f6:3a:d9:d8:7c:18:e4:cb:e6:e1:
                    c6:09:ea:3e:46:fb:fd:fd:d6:5c:40:6b:85:19:1e:
                    40:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:56:EC:B5:C9:E9:D1:80:62:0D:48:6A:EC:9F:08:A3:2A:CA:55:76
            X509v3 Authority Key Identifier:
                keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:57:14:09:17:64:cd:cd:5a:09:1d:6e:7a:62:fe:1f:4b:4e:
         6c:8a:dd:ce:d7:7f:42:da:79:55:f4:bd:19:7a:4a:d5:08:13:
         1e:3d:c6:e3:8e:30:a5:a3:63:b2:bf:35:87:27:67:a1:3f:a7:
         25:55:23:e3:e0:d1:2f:31:db:47:2a:a1:96:84:ca:a3:4b:71:
         ea:94:62:43:3e:f8:af:06:7f:f4:7c:e8:70:50:54:f4:cb:7e:
         c3:ba:ad:91:0a:7b:bc:9c:94:77:94:30:4d:bc:43:76:6f:49:
         8a:03:e0:a2:29:ab:a0:95:52:87:d9:72:ce:54:26:b1:1b:7c:
         92:70:2f:12:5a:e5:a1:a2:c3:31:03:74:69:32:59:3f:8e:7c:
         df:dd:9f:8f:39:5a:0c:19:da:9c:74:82:01:68:4c:88:40:92:
         d3:7c:cd:82:da:6c:21:76:36:66:7c:9d:90:55:82:ac:61:0a:
         85:15:68:db:98:94:60:e9:e1:81:08:8f:e0:0e:79:dd:f8:5a:
         bc:45:26:77:21:dd:67:12:a1:76:f2:dc:f3:6a:b0:3f:71:3c:
         7c:39:6e:fa:9e:ec:4c:cf:e8:e9:37:37:90:03:7a:fc:78:52:
         00:4b:ae:17:a7:f8:23:8a:b7:22:f7:6c:be:eb:ba:02:b9:35:
         26:ae:01:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJQqqOKzECxv+sUp1mAh+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhN2VkZWFjMGM2YzIwZWE0OWQ0OTI5OTBlNDg1ODU0MWQx
OTBmZjEwHhcNMjYwOTEwMDMwMDQyWhcNMjYwOTExMDMwMDQyWjAzMTEwLwYDVQQD
EygyYTU2ZWNiNWM5ZTlkMTgwNjIwZDQ4NmFlYzlmMDhhMzJhY2E1NTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT1sOTN5Hq3AE/orHuwcF2ew/xkk
QXLDgr2F0vsWDheY2u4fdFnHezKn+xi1Dxc/5BOO7kVQEhNnRfWftot19E7GbY1B
h5ZaUIvS0pMOFQ5Up5pxTjnDf/yoEfHb2qdmEYzeWKli5tsMfF8sLPf/3wuLUu+J
fPf47OO41tqFsMyQpCurDaF5HwJ1pUcFEmykELcXE4ILIdQ1y6ax9BMqPxYJvkZN
bYRzRRUmCJRRZaNwYfa2ONu0rhrvKWw5K2NJEGrqhsFaXYkQ0Hhhmfti01wxS78m
0+hEkQgJBRZ5TEmu+cSv1/Y62dh8GOTL5uHGCeo+Rvv9/dZcQGuFGR5AeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpW7LXJ6dGAYg1IauyfCKMqylV2MB8GA1UdIwQY
MBaAFJp+3qwMbCDqSdSSmQ5IWFQdGQ/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYt
YWRlZGNhYTNkMjZlLzEvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYtYWRlZGNhYTNkMjZl
LzEvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlcUCRdk
zc1aCR1uemL+H0tObIrdztd/Qtp5VfS9GXpK1QgTHj3G444wpaNjsr81hydnoT+n
JVUj4+DRLzHbRyqhloTKo0tx6pRiQz74rwZ/9HzocFBU9Mt+w7qtkQp7vJyUd5Qw
TbxDdm9JigPgoimroJVSh9lyzlQmsRt8knAvElrloaLDMQN0aTJZP458392fjzla
DBnanHSCAWhMiECS03zNgtpsIXY2ZnydkFWCrGEKhRVo25iUYOnhgQiP4A553fha
vEUmdyHdZxKhdvLc82qwP3E8fDlu+p7sTM/o6Tc3kAN6/HhSAEuuF6f4I4q3Ivds
vuu6Ark1Jq4BhQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 07:30:43 2026 by rpki-client