Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/b1132f-9f65-4725-818d-0bc733bcdbec/1/InAnwDHEGbmties3t_J_nIZy9II.mft
File:                     InAnwDHEGbmties3t_J_nIZy9II.mft (raw, json)
Hash identifier:          TjIGPj7O46+WbHd9v/awBQFzYp9ImqwrCNJSPs1C2NQ=
Subject key identifier:   0F:DB:14:FF:8F:27:BF:80:94:56:AE:4A:59:6E:42:5D:BF:49:03:70
Authority key identifier: 22:70:27:C0:31:C4:19:B9:AD:89:EB:37:B7:F2:7F:9C:86:72:F4:82
Certificate issuer:       /CN=227027c031c419b9ad89eb37b7f27f9c8672f482
Certificate serial:       01A0E9D2869BC74CB5506108A5907ECDB919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/InAnwDHEGbmties3t_J_nIZy9II.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/b1132f-9f65-4725-818d-0bc733bcdbec/1/InAnwDHEGbmties3t_J_nIZy9II.mft
Manifest number:          0187
Signing time:             Mon 28 Sep 2026 21:01:23 +0000
Manifest this update:     Mon 28 Sep 2026 21:01:23 +0000
Manifest next update:     Tue 29 Sep 2026 21:01:23 +0000
Files and hashes:         1: 0sCu5HT-A8jPZROESYUFxpP6asM.roa (hash: nALUbJ+t8eROkLtFfrmOdOmi065ffn5EuNrtaHcvc38=)
                          2: IdkZ3UrQHah-IAAzcJNPqPEWtkY.asa (hash: dxKBJ1Bp+/e+GCumlMv/LJFCOATk9vh4jLyiXNBOTn4=)
                          3: InAnwDHEGbmties3t_J_nIZy9II.crl (hash: Ufk1IkKlr7F8kMm2WmuPW02O3DurYhcUJeOrYoFhijo=)
                          4: KUu499jW5aUG8OhinIXqufK9zKs.roa (hash: /orIVD9RY3dCs0SFyYtQgQOz1abF43yTxtMPBD67KlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/b1132f-9f65-4725-818d-0bc733bcdbec/1/InAnwDHEGbmties3t_J_nIZy9II.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/b1132f-9f65-4725-818d-0bc733bcdbec/1/InAnwDHEGbmties3t_J_nIZy9II.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/InAnwDHEGbmties3t_J_nIZy9II.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:d2:86:9b:c7:4c:b5:50:61:08:a5:90:7e:cd:b9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=227027c031c419b9ad89eb37b7f27f9c8672f482
        Validity
            Not Before: Sep 28 21:01:23 2026 GMT
            Not After : Sep 29 21:01:23 2026 GMT
        Subject: CN=0fdb14ff8f27bf809456ae4a596e425dbf490370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:89:0c:b9:82:00:4a:83:58:96:7d:5a:9d:fa:
                    2d:66:3b:13:c2:ca:8f:46:64:10:8d:cb:db:fa:c6:
                    af:2d:2d:ff:84:6a:37:11:04:98:21:5f:4f:2e:52:
                    9b:fc:f3:8e:80:73:ee:a5:d3:9e:e6:93:0b:45:34:
                    d3:38:22:31:80:dc:ff:87:f4:f9:42:aa:9f:3d:f7:
                    03:d8:fd:b0:54:3a:88:14:2c:d2:48:31:ba:c7:58:
                    8a:f8:be:4a:46:66:89:7b:ac:07:7c:39:9f:44:0a:
                    49:64:4e:19:ce:a5:cf:03:39:fb:bf:c8:d6:58:29:
                    a1:1b:91:ee:4d:6b:06:5b:5c:e1:d2:de:1e:39:61:
                    6b:4b:c2:74:80:a8:c5:f4:1b:4a:b9:b1:fc:97:3b:
                    a9:9e:3d:b3:64:e0:82:0e:09:74:2c:ec:be:1f:1c:
                    24:94:a7:a4:b3:3c:32:16:cd:c0:e6:8d:8b:0d:72:
                    99:1c:d0:70:55:e4:0f:c6:cb:30:17:f4:6b:9b:e5:
                    bb:5e:a6:58:04:0f:3d:ce:02:5c:02:bf:69:c1:5f:
                    d7:d9:42:78:68:3a:e8:3e:60:c7:87:d8:14:64:b5:
                    1c:84:70:9a:70:b8:77:e0:b4:8d:59:61:8e:12:bf:
                    ca:de:eb:d2:01:b9:10:c1:35:07:b4:28:e4:ed:a7:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DB:14:FF:8F:27:BF:80:94:56:AE:4A:59:6E:42:5D:BF:49:03:70
            X509v3 Authority Key Identifier:
                keyid:22:70:27:C0:31:C4:19:B9:AD:89:EB:37:B7:F2:7F:9C:86:72:F4:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/InAnwDHEGbmties3t_J_nIZy9II.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b1132f-9f65-4725-818d-0bc733bcdbec/1/InAnwDHEGbmties3t_J_nIZy9II.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b1132f-9f65-4725-818d-0bc733bcdbec/1/InAnwDHEGbmties3t_J_nIZy9II.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:31:15:76:b1:18:9a:f2:a6:67:3d:60:98:c6:eb:df:97:76:
         14:1f:69:d8:73:62:4e:16:3d:54:d5:1f:db:74:fa:09:9d:97:
         4a:84:67:6f:13:3b:3a:98:87:85:52:57:71:79:ca:6e:0f:c2:
         8a:ee:3e:88:b7:0d:43:3e:b3:83:36:2f:44:35:42:02:0b:a6:
         a9:56:eb:11:47:9d:1f:26:10:df:04:d5:8c:69:45:dd:e4:6e:
         f3:61:f7:de:3a:29:69:b6:ec:3e:37:42:60:c7:e8:91:0b:c6:
         04:8d:68:fd:ff:d6:77:28:94:97:34:42:06:cb:75:15:69:a6:
         e3:3e:8d:f8:72:14:ff:55:ac:27:a2:8c:32:01:44:63:93:1d:
         0f:6f:13:79:b9:db:8d:8e:27:65:57:14:f5:cd:a5:ff:cd:da:
         9f:df:6e:ba:b6:8e:a4:de:83:b2:fc:d1:9f:ac:89:0d:58:d4:
         d7:1b:65:80:1f:99:bc:28:77:55:a0:5b:37:cb:e8:50:ac:9e:
         0f:88:7a:6f:97:7a:dd:dc:ae:a8:55:07:bb:5a:77:64:a0:58:
         7a:e5:f4:99:da:27:60:22:29:c9:6e:a6:e2:17:5e:84:2f:1a:
         68:74:bc:a0:16:c5:34:42:4b:b9:1a:59:57:3f:d3:a4:11:b4:
         2f:3e:a3:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDp0oabx0y1UGEIpZB+zbkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNzAyN2MwMzFjNDE5YjlhZDg5ZWIzN2I3ZjI3ZjljODY3
MmY0ODIwHhcNMjYwOTI4MjEwMTIzWhcNMjYwOTI5MjEwMTIzWjAzMTEwLwYDVQQD
EygwZmRiMTRmZjhmMjdiZjgwOTQ1NmFlNGE1OTZlNDI1ZGJmNDkwMzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYkMuYIASoNYln1anfotZjsTwsqP
RmQQjcvb+savLS3/hGo3EQSYIV9PLlKb/POOgHPupdOe5pMLRTTTOCIxgNz/h/T5
QqqfPfcD2P2wVDqIFCzSSDG6x1iK+L5KRmaJe6wHfDmfRApJZE4ZzqXPAzn7v8jW
WCmhG5HuTWsGW1zh0t4eOWFrS8J0gKjF9BtKubH8lzupnj2zZOCCDgl0LOy+Hxwk
lKekszwyFs3A5o2LDXKZHNBwVeQPxsswF/Rrm+W7XqZYBA89zgJcAr9pwV/X2UJ4
aDroPmDHh9gUZLUchHCacLh34LSNWWGOEr/K3uvSAbkQwTUHtCjk7acjcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/bFP+PJ7+AlFauSlluQl2/SQNwMB8GA1UdIwQY
MBaAFCJwJ8AxxBm5rYnrN7fyf5yGcvSCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW5BbndESEVHYm10aWVzM3RfSl9uSVp5OUlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iMTEzMmYtOWY2NS00NzI1LTgxOGQt
MGJjNzMzYmNkYmVjLzEvSW5BbndESEVHYm10aWVzM3RfSl9uSVp5OUlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iMTEzMmYtOWY2NS00NzI1LTgxOGQtMGJjNzMzYmNkYmVj
LzEvSW5BbndESEVHYm10aWVzM3RfSl9uSVp5OUlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTEVdrEY
mvKmZz1gmMbr35d2FB9p2HNiThY9VNUf23T6CZ2XSoRnbxM7OpiHhVJXcXnKbg/C
iu4+iLcNQz6zgzYvRDVCAgumqVbrEUedHyYQ3wTVjGlF3eRu82H33jopabbsPjdC
YMfokQvGBI1o/f/WdyiUlzRCBst1FWmm4z6N+HIU/1WsJ6KMMgFEY5MdD28Tebnb
jY4nZVcU9c2l/83an99uuraOpN6DsvzRn6yJDVjU1xtlgB+ZvCh3VaBbN8voUKye
D4h6b5d63dyuqFUHu1p3ZKBYeuX0mdonYCIpyW6m4hdehC8aaHS8oBbFNEJLuRpZ
Vz/TpBG0Lz6jlg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:12:37 2026 by rpki-client