Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
File:                     2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json)
Hash identifier:          nWVn4unJYTeI9hZo6qyyK9hHEO9s9BlKwL+Jtu4mueA=
Subject key identifier:   81:B3:C9:3A:55:2D:18:36:FB:72:45:5B:3B:E8:2A:04:47:D5:5E:FF
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Certificate issuer:       /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial:       01A0B8AE55F0602A1980380A2EFBAC94EF3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
Manifest number:          0922
Signing time:             Sat 19 Sep 2026 08:00:27 +0000
Manifest this update:     Sat 19 Sep 2026 08:00:27 +0000
Manifest next update:     Sun 20 Sep 2026 08:00:27 +0000
Files and hashes:         1: 1D9k8_zt5tU5xEXxx_nTvNFR14E.roa (hash: 5AizICGyxHpJw4Npr0yCLhoJ8ZzNbMev6myVVdUeGOM=)
                          2: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=)
                          3: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: lwdAc8R0/dE6wBFZrFbl3cqYjAAwUguZtW7KyXWwczw=)
                          4: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=)
                          5: NEyhwNNluRFiY1QGbFu3eQXwHPk.roa (hash: AA+74Vvem1npNtDBL+Wwimm4qpTBdkXoFA2tK525GCQ=)
                          6: QAQqyGViM6nC5i8XAnkTLj2Fjlw.roa (hash: C9pNA0dXzzng1peuC0V7+/A3P+D1i1wR3XipGNDFMzY=)
                          7: V3NHoCO2C0OIcoB4H53PpBNrUdU.roa (hash: LdoGmRo3CKC/nx9jgbFbF8C1cm/1gnONTUC2D8S2Gx0=)
                          8: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=)
                          9: YhRc3Mf3n7-3iGrExyD5C7CZBFw.roa (hash: ksdLqMhtmV2T8m4tl86Qc23Jw/2ULQtET80utRAIjT4=)
                          10: YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa (hash: /mX+AdWxuRgbJEYcF/jnfYMmQcOrnv5KIh/j9UyP9FA=)
                          11: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=)
                          12: iacNAwFg_4HGoGsTJn6LHRPtlFA.roa (hash: O2cDspTxotRdN6yj3yrsJmq7e6o/A/FbDoi7W5a9R4s=)
                          13: lrFBEKIZbBXIc9_I4zbSz4RjDmE.roa (hash: v/eVSdswkj07gsnQAoZ8DkBTrsjZAtAanAE3ZZjEf8U=)
                          14: rB-GRWPvn3oAjav-7hoWPrGNxdU.roa (hash: rPdzZUH5HWNL3o+DGYQhE29ut122q+EzGXhwG7kfgHE=)
                          15: rFlRkZEZd5Z1JSMbC-8xSLjTjKU.roa (hash: 5Ca02/lo6NUiWyGcT/F75FOvazcZn0O1kd7Dj1J0NJY=)
                          16: xeGzSDm-blUsbUt2WamIi2l7bV0.roa (hash: y6IJ/JOLtWfU6f/TY9wb28HI1chMC4cI/lZ982XG47E=)
                          17: z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa (hash: h3CtyvykuY57x41IgLYTP2ID/rzbFX3Z2i6KoIYgMWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 02:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b8:ae:55:f0:60:2a:19:80:38:0a:2e:fb:ac:94:ef:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
        Validity
            Not Before: Sep 19 08:00:27 2026 GMT
            Not After : Sep 20 08:00:27 2026 GMT
        Subject: CN=81b3c93a552d1836fb72455b3be82a0447d55eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8e:26:23:d0:99:2f:be:2b:8f:9e:47:8d:3b:
                    b9:20:a6:34:35:2d:37:92:4c:cb:6b:41:3a:96:1a:
                    b9:78:d2:33:40:df:7c:50:0a:a2:c1:10:94:0b:b7:
                    0a:ca:30:54:59:a1:18:77:61:93:d0:7b:15:45:fd:
                    bc:3c:9c:8a:a7:ec:96:3e:4e:97:87:d3:34:7b:22:
                    e7:cf:8a:da:8d:c4:ed:86:30:f0:5e:6f:fd:35:75:
                    9f:a7:cd:71:fe:78:9a:90:de:d7:4e:3b:1d:a8:4d:
                    da:f4:8b:87:ff:a5:9a:25:ce:57:fd:9c:0f:4a:0c:
                    07:98:6b:56:87:8f:72:91:8c:f6:4f:a9:77:cb:2f:
                    69:23:a8:7a:f8:70:77:b5:c0:a6:b7:df:06:ef:42:
                    84:dd:ba:27:d7:d9:05:11:36:d2:8d:8e:10:86:6c:
                    3d:65:d1:de:3d:cc:13:b1:8d:c7:3b:e6:96:92:7b:
                    66:06:57:91:94:3c:27:47:42:35:4d:33:5c:79:7b:
                    4f:7a:fc:b5:b7:93:37:96:66:6d:fc:02:cf:0e:46:
                    c4:34:ca:33:bb:50:ab:53:21:e7:2e:03:43:a0:1c:
                    a6:eb:e8:03:16:1a:31:ff:a7:ce:f5:11:88:e4:b2:
                    73:df:f2:48:6c:e2:63:cb:2d:80:80:4c:3a:78:d2:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B3:C9:3A:55:2D:18:36:FB:72:45:5B:3B:E8:2A:04:47:D5:5E:FF
            X509v3 Authority Key Identifier:
                keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:99:14:72:7f:23:82:4c:61:2d:7e:4e:0d:0f:ca:17:e8:d2:
         0f:e2:80:92:b3:b4:61:43:0f:75:53:1a:8b:31:67:f1:24:0f:
         55:4a:60:3e:b3:56:1e:37:b8:d0:5b:0c:0e:2d:d1:d2:31:5d:
         6a:d4:03:e7:be:c6:c0:36:5d:2d:83:86:10:b7:27:a9:39:3a:
         03:3f:fe:5e:d2:f2:64:6b:70:72:14:00:ea:bd:a3:5c:7f:b4:
         96:93:91:64:36:72:94:c5:93:e1:bb:97:a6:eb:08:e4:34:ac:
         bb:63:61:8e:c2:21:26:e6:78:c7:20:d7:de:93:66:e2:ab:92:
         09:b2:3d:59:a3:f1:cf:fb:76:2d:fa:8c:10:7b:aa:b8:f8:98:
         13:f2:27:9d:13:ca:f6:84:c4:42:de:b1:f7:64:88:e6:70:d1:
         f8:06:c4:7e:d5:f3:a5:a7:5f:b6:c0:36:2c:6f:ff:61:69:7d:
         2e:e4:0d:0a:c9:e3:aa:10:c4:1f:8f:47:b3:d0:0d:9a:e8:ca:
         a4:09:9e:39:b4:4c:29:b3:7d:64:9e:67:f0:d3:12:eb:4a:c5:
         77:31:c8:b2:91:c9:77:01:5c:52:28:3d:67:50:91:6f:4e:e5:
         df:a9:b8:3a:29:fb:6e:ce:dd:9c:16:77:76:25:60:42:e8:d2:
         0c:c8:b0:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC4rlXwYCoZgDgKLvuslO8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy
MDdmZDIwHhcNMjYwOTE5MDgwMDI3WhcNMjYwOTIwMDgwMDI3WjAzMTEwLwYDVQQD
Eyg4MWIzYzkzYTU1MmQxODM2ZmI3MjQ1NWIzYmU4MmEwNDQ3ZDU1ZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4I4mI9CZL74rj55HjTu5IKY0NS03
kkzLa0E6lhq5eNIzQN98UAqiwRCUC7cKyjBUWaEYd2GT0HsVRf28PJyKp+yWPk6X
h9M0eyLnz4rajcTthjDwXm/9NXWfp81x/niakN7XTjsdqE3a9IuH/6WaJc5X/ZwP
SgwHmGtWh49ykYz2T6l3yy9pI6h6+HB3tcCmt98G70KE3bon19kFETbSjY4Qhmw9
ZdHePcwTsY3HO+aWkntmBleRlDwnR0I1TTNceXtPevy1t5M3lmZt/ALPDkbENMoz
u1CrUyHnLgNDoBym6+gDFhox/6fO9RGI5LJz3/JIbOJjyy2AgEw6eNLEbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGzyTpVLRg2+3JFWzvoKgRH1V7/MB8GA1UdIwQY
MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt
MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1
LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpkUcn8j
gkxhLX5ODQ/KF+jSD+KAkrO0YUMPdVMaizFn8SQPVUpgPrNWHje40FsMDi3R0jFd
atQD577GwDZdLYOGELcnqTk6Az/+XtLyZGtwchQA6r2jXH+0lpORZDZylMWT4buX
pusI5DSsu2NhjsIhJuZ4xyDX3pNm4quSCbI9WaPxz/t2LfqMEHuquPiYE/InnRPK
9oTEQt6x92SI5nDR+AbEftXzpadftsA2LG//YWl9LuQNCsnjqhDEH49Hs9ANmujK
pAmeObRMKbN9ZJ5n8NMS60rFdzHIspHJdwFcUig9Z1CRb07l36m4Oin7bs7dnBZ3
diVgQujSDMiwzQ==
-----END CERTIFICATE-----
Generated at Sat Sep 19 09:30:23 2026 by rpki-client