Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
File:                     yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft (raw, json)
Hash identifier:          yaAVNlBmMZ8U5tJpgPwJ7BiOn932p1ElLQJapXzVvXQ=
Subject key identifier:   97:FA:D3:DD:FE:3C:5A:48:16:A5:53:FE:73:9A:5C:63:73:69:1A:54
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Certificate issuer:       /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial:       01A06D5DF5AD08F573F5D89B35C36E44E343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
Manifest number:          1A3E
Signing time:             Fri 04 Sep 2026 17:01:09 +0000
Manifest this update:     Fri 04 Sep 2026 17:01:09 +0000
Manifest next update:     Sat 05 Sep 2026 17:01:09 +0000
Files and hashes:         1: FuIBir0i-y7SEGRI15m4Ui_zA_0.roa (hash: VPkd3ytwbWG1Sl01GeIeuQbGU6zTZUHeBBof8XyrtUU=)
                          2: RAdNBg6j7IW3WOfEtgkgAVJgMjE.roa (hash: jo0fvpPNSx2y4hIOQ1O6FYntic5wvU7TSTfcrJMmjLk=)
                          3: hEKeHB_HwWdm6YwqDL4rLU_ikEo.roa (hash: +KO33p55Ic+lVnlR+TIJivqrXb9HN4n63k+7GR880Ng=)
                          4: jzWys3LhqUMk6bdrR3m0wvK8IUQ.roa (hash: eUY96707RIGkVAKREkjXDqXCVYEyY1vwd6gYVeK0EmU=)
                          5: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl (hash: duF/qs7z0z5TxFqv9NwHHVqGiIkO9s7LqPBJrc34IMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:5d:f5:ad:08:f5:73:f5:d8:9b:35:c3:6e:44:e3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
        Validity
            Not Before: Sep  4 17:01:09 2026 GMT
            Not After : Sep  5 17:01:09 2026 GMT
        Subject: CN=97fad3ddfe3c5a4816a553fe739a5c6373691a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:aa:95:d4:6c:ff:73:c1:10:66:cd:56:06:29:
                    02:c5:af:dc:a4:8a:6e:4c:b7:1a:70:7f:21:16:3c:
                    ee:37:bb:eb:10:d7:b9:ac:be:ee:1f:0c:c9:f4:9c:
                    af:f1:80:9d:43:82:c5:77:75:40:25:83:96:cc:7f:
                    0f:e4:76:63:92:b0:61:c3:b7:53:32:df:77:ff:38:
                    25:26:d2:d5:cc:4a:75:01:63:eb:0b:cf:26:cd:28:
                    42:ec:c5:8e:36:de:59:7d:10:37:a3:7e:e1:7c:d3:
                    4d:a3:44:51:68:c8:17:a7:32:f7:70:45:09:81:67:
                    2f:48:63:8a:96:73:3c:e2:cc:cc:1b:af:b9:9f:c0:
                    b3:05:34:08:b9:d7:42:79:b5:cb:e4:aa:27:72:4a:
                    3e:c6:8a:89:b8:3b:dd:d8:81:2b:33:6d:c6:6a:18:
                    b2:d7:59:20:bb:0d:2a:46:94:b3:75:22:cd:d9:7f:
                    ea:25:83:5e:22:8e:26:22:32:08:8e:32:85:62:64:
                    eb:70:c6:e4:2b:b6:9d:de:be:7c:00:a6:d9:0c:26:
                    00:27:58:5c:e6:75:2c:cb:a2:ac:90:4e:c8:a7:2e:
                    24:0d:16:ef:e5:e6:28:a1:2f:31:1d:e8:7c:19:ba:
                    69:f0:82:aa:3f:3f:e6:94:b0:1d:ea:69:ee:66:1d:
                    a5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FA:D3:DD:FE:3C:5A:48:16:A5:53:FE:73:9A:5C:63:73:69:1A:54
            X509v3 Authority Key Identifier:
                keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:60:33:31:18:40:7d:bd:8c:b4:40:4c:3d:c3:01:a6:43:65:
         0e:c1:d1:75:f8:36:c9:95:30:98:5b:f7:cc:40:44:6f:ae:ef:
         09:ee:46:5c:3c:61:69:e8:03:62:a3:e0:e1:21:2c:15:22:de:
         82:4b:6e:93:83:2d:5c:41:57:0e:10:1d:ef:d8:04:ad:1b:c6:
         54:61:8c:a0:4b:08:2e:9c:ce:2c:3b:d2:c4:90:98:6f:62:5c:
         69:f6:da:16:00:00:a9:66:be:42:73:cc:91:48:97:29:dd:d5:
         ab:a0:88:2e:e6:d5:95:1e:f5:2a:52:3b:28:d7:0b:9b:90:70:
         76:51:4c:3b:b3:fe:54:9f:9f:6f:0a:75:36:ba:fe:6c:d7:b4:
         80:d8:78:41:d0:92:2e:1b:9f:be:d2:7c:ec:bc:4b:53:7f:0f:
         79:9e:48:39:74:10:71:db:22:11:29:8d:5d:45:16:d8:3b:99:
         74:6a:3d:e6:93:06:42:90:63:d7:e5:b4:69:5a:5a:ce:fa:76:
         11:40:b3:70:e4:d2:6b:51:7b:ca:c9:ef:32:97:c9:6c:3b:0b:
         e8:ed:a2:76:d4:82:d9:8c:0f:61:9b:3a:9d:fe:62:b1:b3:44:
         a3:d2:8c:96:44:2f:99:16:c0:65:3e:f4:71:f4:41:3b:90:59:
         c0:5b:2f:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtXfWtCPVz9dibNcNuRONDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzRiMTMzODdmYWIxZGNmOGI2N2YxNmEwYTQzNzYwODYw
MGM0YzIwHhcNMjYwOTA0MTcwMTA5WhcNMjYwOTA1MTcwMTA5WjAzMTEwLwYDVQQD
Eyg5N2ZhZDNkZGZlM2M1YTQ4MTZhNTUzZmU3MzlhNWM2MzczNjkxYTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqqV1Gz/c8EQZs1WBikCxa/cpIpu
TLcacH8hFjzuN7vrENe5rL7uHwzJ9Jyv8YCdQ4LFd3VAJYOWzH8P5HZjkrBhw7dT
Mt93/zglJtLVzEp1AWPrC88mzShC7MWONt5ZfRA3o37hfNNNo0RRaMgXpzL3cEUJ
gWcvSGOKlnM84szMG6+5n8CzBTQIuddCebXL5Koncko+xoqJuDvd2IErM23Gahiy
11kguw0qRpSzdSLN2X/qJYNeIo4mIjIIjjKFYmTrcMbkK7ad3r58AKbZDCYAJ1hc
5nUsy6KskE7Ipy4kDRbv5eYooS8xHeh8Gbpp8IKqPz/mlLAd6mnuZh2lyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJf6093+PFpIFqVT/nOaXGNzaRpUMB8GA1UdIwQY
MBaAFMo0sTOH+rHc+LZ/FqCkN2CGAMTCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYt
MDQwNTIzNGFiM2YxLzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xMTdjYTMtYjYwMy00ZGI4LTk2MjYtMDQwNTIzNGFiM2Yx
LzEveWpTeE00ZjZzZHo0dG44V29LUTNZSVlBeE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGAzMRhA
fb2MtEBMPcMBpkNlDsHRdfg2yZUwmFv3zEBEb67vCe5GXDxhaegDYqPg4SEsFSLe
gktuk4MtXEFXDhAd79gErRvGVGGMoEsILpzOLDvSxJCYb2JcafbaFgAAqWa+QnPM
kUiXKd3Vq6CILubVlR71KlI7KNcLm5BwdlFMO7P+VJ+fbwp1Nrr+bNe0gNh4QdCS
LhufvtJ87LxLU38PeZ5IOXQQcdsiESmNXUUW2DuZdGo95pMGQpBj1+W0aVpazvp2
EUCzcOTSa1F7ysnvMpfJbDsL6O2idtSC2YwPYZs6nf5isbNEo9KMlkQvmRbAZT70
cfRBO5BZwFsviA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:27:42 2026 by rpki-client