Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
File:                     n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft (raw, json)
Hash identifier:          bWh37YF2JTylFkf4ceQYqFOxfIg2q5K8suS6N+oTMlA=
Subject key identifier:   67:1E:AA:C5:61:C9:51:04:B0:23:86:B6:C9:E7:AE:63:00:57:EA:A0
Authority key identifier: 9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91
Certificate issuer:       /CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91
Certificate serial:       01A06FBAA8A3F96C96E2B57973B65244981C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
Manifest number:          02E3
Signing time:             Sat 05 Sep 2026 04:01:38 +0000
Manifest this update:     Sat 05 Sep 2026 04:01:38 +0000
Manifest next update:     Sun 06 Sep 2026 04:01:38 +0000
Files and hashes:         1: MDrbORic-T38FR83kdivFTffx_U.roa (hash: 0rj1HAHMfMHh1ezQi/n9W4biWte5hyp/X9lG/Kaw1f4=)
                          2: TayBP7whOn8uG-iZTgalyiKPGes.roa (hash: P7tnKReQ+Y3epX8ceT4jhZXneWQc4RVJRl4N9gsisuk=)
                          3: bJB2KlYnnSQctiMVw5LEcI6puPE.roa (hash: NI9BvmeAMx8yGHKi/OTTLd4uTBAvPT7/AwZXssX4nIQ=)
                          4: n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl (hash: 2ktqwT3lX5tF3QIfIREsrv9Yi+R1964rso5MMYPnKZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:ba:a8:a3:f9:6c:96:e2:b5:79:73:b6:52:44:98:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91
        Validity
            Not Before: Sep  5 04:01:38 2026 GMT
            Not After : Sep  6 04:01:38 2026 GMT
        Subject: CN=671eaac561c95104b02386b6c9e7ae630057eaa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:39:27:18:1b:04:b1:45:7c:85:c5:f4:2c:
                    b3:49:ca:fa:65:f9:54:34:b9:2b:e1:c7:d2:8e:b9:
                    7a:c7:02:d3:c8:78:17:86:5a:24:21:35:b0:97:db:
                    03:c7:9a:d3:50:72:24:8c:a1:62:15:c8:f8:f5:ab:
                    b8:28:94:87:0f:d0:64:4e:70:e1:b0:98:a7:ac:01:
                    f5:22:08:87:1b:38:a1:3d:7a:e5:95:7c:25:0a:fd:
                    7d:c9:bf:5d:59:5b:f0:f8:c3:a1:98:04:9a:e7:36:
                    a5:14:15:18:cd:44:ac:1f:bf:2a:16:e3:fa:e0:76:
                    bb:ee:b8:75:77:d3:ea:58:5f:e6:f1:13:45:1d:37:
                    ca:47:22:80:63:6c:f6:b4:d4:c4:c8:1c:5b:fa:52:
                    37:5b:06:b4:6c:eb:de:02:2b:03:d0:95:ea:6e:e1:
                    c3:b4:c4:ff:7a:6f:c8:78:64:22:6b:6e:d1:58:00:
                    37:a4:23:31:c8:85:23:8c:5c:cf:ab:4c:ad:ad:03:
                    e4:4c:45:c5:e5:0d:36:fb:77:6e:66:a0:0f:9c:12:
                    17:63:84:92:f5:24:dc:a3:bf:3d:55:9b:64:59:62:
                    6e:7e:08:3f:56:59:57:ce:43:33:b8:10:46:27:f1:
                    fa:cf:64:08:a1:16:93:8b:94:44:12:dc:52:96:3d:
                    6f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1E:AA:C5:61:C9:51:04:B0:23:86:B6:C9:E7:AE:63:00:57:EA:A0
            X509v3 Authority Key Identifier:
                keyid:9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ac:52:6a:1c:91:97:56:f8:ff:b1:fd:10:4a:01:f2:3e:29:
         23:9f:d6:4e:a2:d5:00:48:f7:03:0d:09:88:19:9e:38:8a:a0:
         08:54:58:03:10:e1:20:47:77:47:47:c4:39:c4:b2:32:c4:5a:
         1a:9d:e1:bb:c9:50:60:e5:5d:ae:46:f8:15:d2:bd:98:85:65:
         6d:52:13:40:45:e2:fd:1d:bd:c1:47:92:ad:9a:7c:7f:13:64:
         26:c9:a6:68:9a:d0:fc:6b:86:85:0e:8c:90:ae:e3:72:1a:6c:
         7f:39:07:ab:aa:6e:a4:2b:07:b4:b4:b2:02:f2:a0:c6:c0:25:
         53:be:0b:8b:b5:8d:74:52:7c:d2:71:bc:14:89:da:ec:d7:70:
         dc:8c:c9:03:5a:6e:b1:97:3a:66:d8:83:3a:43:d7:a0:b3:75:
         63:d6:44:fe:79:01:b5:e9:43:4a:0f:71:9e:e0:00:fb:c6:c6:
         de:10:86:f7:1e:24:1b:00:2b:68:fa:0a:e8:98:1a:1d:4c:5d:
         fa:66:30:df:fc:58:6c:71:5c:e8:4a:ce:59:9a:57:fb:54:ae:
         ec:1e:72:65:d7:f0:0e:90:6c:86:da:8c:b6:b4:11:c3:18:54:
         11:e1:0e:2b:57:34:c1:1d:2d:2a:84:4b:85:65:ff:45:0b:bf:
         e1:e6:22:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvuqij+WyW4rV5c7ZSRJgcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmN2E0N2JlNzczYThjYWQ2ZDc1OTgwZTczOWI3ODQxYWQ0
ZDliOTEwHhcNMjYwOTA1MDQwMTM4WhcNMjYwOTA2MDQwMTM4WjAzMTEwLwYDVQQD
Eyg2NzFlYWFjNTYxYzk1MTA0YjAyMzg2YjZjOWU3YWU2MzAwNTdlYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNM5JxgbBLFFfIXF9CyzScr6ZflU
NLkr4cfSjrl6xwLTyHgXhlokITWwl9sDx5rTUHIkjKFiFcj49au4KJSHD9BkTnDh
sJinrAH1IgiHGzihPXrllXwlCv19yb9dWVvw+MOhmASa5zalFBUYzUSsH78qFuP6
4Ha77rh1d9PqWF/m8RNFHTfKRyKAY2z2tNTEyBxb+lI3Wwa0bOveAisD0JXqbuHD
tMT/em/IeGQia27RWAA3pCMxyIUjjFzPq0ytrQPkTEXF5Q02+3duZqAPnBIXY4SS
9STco789VZtkWWJufgg/VllXzkMzuBBGJ/H6z2QIoRaTi5REEtxSlj1vKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGceqsVhyVEEsCOGtsnnrmMAV+qgMB8GA1UdIwQY
MBaAFJ96R753OoytbXWYDnObeEGtTZuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEt
ZTdmMmMwN2ZjMGY4LzEvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEtZTdmMmMwN2ZjMGY4
LzEvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqxSahyR
l1b4/7H9EEoB8j4pI5/WTqLVAEj3Aw0JiBmeOIqgCFRYAxDhIEd3R0fEOcSyMsRa
Gp3hu8lQYOVdrkb4FdK9mIVlbVITQEXi/R29wUeSrZp8fxNkJsmmaJrQ/GuGhQ6M
kK7jchpsfzkHq6pupCsHtLSyAvKgxsAlU74Li7WNdFJ80nG8FIna7Ndw3IzJA1pu
sZc6ZtiDOkPXoLN1Y9ZE/nkBtelDSg9xnuAA+8bG3hCG9x4kGwAraPoK6JgaHUxd
+mYw3/xYbHFc6ErOWZpX+1Su7B5yZdfwDpBshtqMtrQRwxhUEeEOK1c0wR0tKoRL
hWX/RQu/4eYiLA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:44:31 2026 by rpki-client