Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File:                     prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier:          bsxhjKv8WghcZCadtdIeu/YMVIMpOvr71aladFOj07w=
Subject key identifier:   05:EA:FA:CA:1A:98:35:EA:EB:1A:90:6E:E8:94:93:2E:F7:82:F0:88
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer:       /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial:       01A0B53FDED4A859C765EA08E3CE7500E13E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number:          0DB9
Signing time:             Fri 18 Sep 2026 16:00:56 +0000
Manifest this update:     Fri 18 Sep 2026 16:00:56 +0000
Manifest next update:     Sat 19 Sep 2026 16:00:56 +0000
Files and hashes:         1: G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa (hash: pai33aN90kyIzUMmy6nzZwQfDVVekgEOsKj6Cwhhy24=)
                          2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: jyRdEOgEDK2MNbdBvwiK/bmDaD9VRHH4B7WmWzitwBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:3f:de:d4:a8:59:c7:65:ea:08:e3:ce:75:00:e1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
        Validity
            Not Before: Sep 18 16:00:56 2026 GMT
            Not After : Sep 19 16:00:56 2026 GMT
        Subject: CN=05eafaca1a9835eaeb1a906ee894932ef782f088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:dc:d3:68:ce:04:5c:20:2d:14:88:38:fa:
                    63:81:be:12:e8:83:cd:95:69:d1:3d:2b:41:5d:11:
                    2e:4f:a0:6e:21:b1:34:ab:18:c7:93:d5:ad:b4:62:
                    8b:60:1a:89:88:f8:f8:5f:ed:15:57:8d:c9:f2:33:
                    2c:e3:66:37:6f:3c:ee:f9:18:3b:db:5b:73:b0:9e:
                    de:89:41:3c:61:e9:09:8e:ba:75:02:57:bb:14:6d:
                    65:ff:2e:bf:d5:fe:d0:fb:b4:d0:0c:36:12:d8:6b:
                    b5:10:1d:62:cc:2d:3b:94:fe:26:13:0b:03:37:6d:
                    b0:77:ac:54:99:d4:a6:71:87:e8:04:b0:a8:65:96:
                    38:3f:0f:1f:32:23:10:62:06:3d:e9:c1:25:da:87:
                    2b:71:48:a0:f0:11:11:ac:7b:dc:9d:26:06:7d:12:
                    22:db:e2:2f:35:8f:1c:39:bd:71:0b:6b:bb:4b:f0:
                    6f:1c:75:2a:15:c4:80:6c:25:c7:a9:29:fe:58:20:
                    7d:d0:43:d4:f0:5c:85:d5:d1:c9:f7:de:29:9e:33:
                    88:ee:bb:c0:5b:4f:3b:52:49:b4:a3:34:42:e7:dd:
                    de:54:f8:72:0e:25:a1:65:f9:0b:72:0e:87:2f:d5:
                    19:e3:8e:98:0a:52:68:e2:48:5d:01:31:dd:cd:44:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EA:FA:CA:1A:98:35:EA:EB:1A:90:6E:E8:94:93:2E:F7:82:F0:88
            X509v3 Authority Key Identifier:
                keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:09:88:35:d8:94:ff:7a:b6:d7:0b:eb:21:47:c0:dd:b4:1f:
         25:00:a9:1a:4e:7c:7d:99:4f:21:9c:31:13:1e:75:9e:a3:ec:
         71:85:cf:67:4c:60:b9:95:7c:92:0a:cf:33:98:5c:5e:47:ed:
         1f:87:39:29:44:7d:ab:75:7c:fd:94:74:93:5c:ae:44:1b:7a:
         18:91:50:05:41:d0:c7:18:67:74:83:f9:e7:3b:56:38:19:37:
         08:7a:08:8d:03:66:5c:51:3a:57:46:96:bb:24:94:71:11:7d:
         e7:fa:34:f8:48:c7:3a:01:f1:dc:51:8c:41:97:c3:aa:e0:76:
         af:27:32:ff:74:af:e0:19:1d:2d:86:61:fb:b0:9c:7c:0a:b2:
         73:64:a5:4e:9f:9f:85:67:bb:34:77:7d:15:9e:dc:d7:74:e5:
         51:14:d0:91:d8:4b:8d:18:42:d1:e4:8b:d8:65:72:b3:61:74:
         55:84:f9:45:91:8d:11:6c:87:6b:30:20:9e:28:b8:6a:81:73:
         c0:12:48:8a:76:96:50:41:f0:f0:15:43:31:84:a4:ab:01:d9:
         f2:4f:ff:c7:ef:fe:2c:a6:d7:fa:3c:26:ed:17:dc:d9:e0:19:
         cf:a9:33:42:a2:ed:a4:e4:98:fb:45:bc:6f:f9:a7:9f:34:62:
         8f:1a:66:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC1P97UqFnHZeoI4851AOE+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YmIzMDQ1YWVhNzhlOGZhNzY0ODEyOTcxNGZiNzM2MDY4
ZGMzN2IwHhcNMjYwOTE4MTYwMDU2WhcNMjYwOTE5MTYwMDU2WjAzMTEwLwYDVQQD
EygwNWVhZmFjYTFhOTgzNWVhZWIxYTkwNmVlODk0OTMyZWY3ODJmMDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRnc02jOBFwgLRSIOPpjgb4S6IPN
lWnRPStBXREuT6BuIbE0qxjHk9WttGKLYBqJiPj4X+0VV43J8jMs42Y3bzzu+Rg7
21tzsJ7eiUE8YekJjrp1Ale7FG1l/y6/1f7Q+7TQDDYS2Gu1EB1izC07lP4mEwsD
N22wd6xUmdSmcYfoBLCoZZY4Pw8fMiMQYgY96cEl2ocrcUig8BERrHvcnSYGfRIi
2+IvNY8cOb1xC2u7S/BvHHUqFcSAbCXHqSn+WCB90EPU8FyF1dHJ994pnjOI7rvA
W087Ukm0ozRC593eVPhyDiWhZfkLcg6HL9UZ446YClJo4khdATHdzUSg9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXq+soamDXq6xqQbuiUky73gvCIMB8GA1UdIwQY
MBaAFKa7MEWup46Pp2SBKXFPtzYGjcN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2Et
MzM0ZGUzZDc2ZmU1LzEvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2EtMzM0ZGUzZDc2ZmU1
LzEvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwmINdiU
/3q21wvrIUfA3bQfJQCpGk58fZlPIZwxEx51nqPscYXPZ0xguZV8kgrPM5hcXkft
H4c5KUR9q3V8/ZR0k1yuRBt6GJFQBUHQxxhndIP55ztWOBk3CHoIjQNmXFE6V0aW
uySUcRF95/o0+EjHOgHx3FGMQZfDquB2rycy/3Sv4BkdLYZh+7CcfAqyc2SlTp+f
hWe7NHd9FZ7c13TlURTQkdhLjRhC0eSL2GVys2F0VYT5RZGNEWyHazAgnii4aoFz
wBJIinaWUEHw8BVDMYSkqwHZ8k//x+/+LKbX+jwm7Rfc2eAZz6kzQqLtpOSY+0W8
b/mnnzRijxpmyA==
-----END CERTIFICATE-----
Generated at Fri Sep 18 23:02:06 2026 by rpki-client