Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File:                     y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier:          LzH8wYXlgIzlO3Ir5j2v18UlQBhDpriNSH/ukBVwCws=
Subject key identifier:   B4:C4:32:29:2C:CF:00:19:F8:FA:22:CA:0B:EC:82:D9:E5:3C:27:EC
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer:       /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial:       01A0DF17C82527314D48EBDDC6B3684F1619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number:          1281
Signing time:             Sat 26 Sep 2026 19:01:12 +0000
Manifest this update:     Sat 26 Sep 2026 19:01:12 +0000
Manifest next update:     Sun 27 Sep 2026 19:01:12 +0000
Files and hashes:         1: FSVSgLOIDHB0tEHVWTFzxIji-0o.roa (hash: 9yWQzAfv05KEhodz5VlR9pyMWpBEu5c3XhVdOB7ou5U=)
                          2: QGfcSBUGzLQb4SyeZopBV9W3h_Y.roa (hash: Se8X87fnlsQ0jSr5BHgV/YmjxoXoJdb5PZSQdKSye9w=)
                          3: m4rs5cnwWBMbt76R1xpp4mTXG1U.roa (hash: xc1fI9WY5WV26D6LeKOgGd9/V7vnRh4zOrQlPCPXcyA=)
                          4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: eZVX3bV3KYmcTbvzmn2Ji/u/yIIsJ61YQerJ2f1FrjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:17:c8:25:27:31:4d:48:eb:dd:c6:b3:68:4f:16:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
        Validity
            Not Before: Sep 26 19:01:12 2026 GMT
            Not After : Sep 27 19:01:12 2026 GMT
        Subject: CN=b4c432292ccf0019f8fa22ca0bec82d9e53c27ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:d1:f7:dd:1e:61:4a:d0:cb:27:09:86:e8:
                    c2:c4:ee:ac:b5:02:95:e3:17:ca:98:0c:e9:93:5e:
                    7a:83:7e:b1:9d:69:d9:d0:eb:11:76:70:f3:0d:d4:
                    54:78:04:39:b4:e9:91:e8:a0:22:23:b0:7e:54:d2:
                    c8:72:f2:d9:0a:33:e9:38:9f:be:3f:41:b0:df:7c:
                    50:da:aa:02:fd:77:3c:33:1b:0e:98:b4:25:cd:e0:
                    bd:5f:26:56:e3:49:79:f1:10:5c:d1:65:36:6a:51:
                    c5:fb:e7:57:2a:65:e9:50:14:df:54:88:30:de:0c:
                    2a:05:7a:3c:de:d8:5f:4e:23:bf:7c:34:81:41:5d:
                    7c:4c:69:50:5f:88:5d:2e:d8:13:e8:f8:3e:e1:f4:
                    29:87:37:36:df:43:a3:de:57:20:66:02:97:6f:d3:
                    8b:79:85:8b:89:aa:75:84:98:84:98:af:16:ff:33:
                    9c:6d:9b:31:4a:51:b5:2e:c1:22:ba:1e:54:3d:4a:
                    8b:53:d0:f9:df:e3:8e:12:1a:b0:8c:f2:ae:53:99:
                    38:8f:35:5c:98:73:e7:a6:13:7c:11:d8:e1:24:af:
                    1c:58:3b:36:ef:7d:24:a4:37:d6:1d:27:75:0d:e4:
                    28:ed:36:88:5c:b9:3b:9a:a6:ed:c1:bb:64:01:ff:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C4:32:29:2C:CF:00:19:F8:FA:22:CA:0B:EC:82:D9:E5:3C:27:EC
            X509v3 Authority Key Identifier:
                keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e3:17:03:97:03:3d:72:b1:90:b4:09:c8:95:4f:40:bd:81:
         78:bb:36:63:a4:7b:ad:12:08:58:04:3c:1f:bf:dc:ee:ab:e1:
         ff:1f:d4:30:3b:dd:d0:21:66:09:3d:30:12:8d:fb:eb:f8:34:
         e0:8e:be:42:0c:d6:e1:dd:ad:07:bd:5b:71:17:42:8f:5a:e3:
         25:36:87:94:7c:35:e6:77:fd:d6:87:58:db:4a:bb:9c:fa:c1:
         dd:9b:90:00:ad:c4:60:7e:a4:fb:34:32:4a:cf:a0:ca:b7:33:
         9b:22:5b:7f:b5:37:a6:02:6f:5e:f0:a6:fb:27:cc:fe:fd:a5:
         5f:80:a9:33:9d:04:97:b7:9b:75:23:e3:55:8f:91:b2:45:42:
         52:d0:15:e2:f9:19:f0:49:32:4e:e3:c2:4d:f3:da:10:8f:8c:
         cd:58:0b:e9:66:5a:a7:5b:ba:47:86:49:e1:94:1b:80:0e:91:
         aa:e0:33:b2:40:b5:33:8e:8d:f8:00:3a:ef:d0:fd:10:52:e1:
         2f:92:cf:09:19:74:64:33:a6:64:d6:cd:8e:2f:1c:11:84:05:
         b6:ee:b1:44:fe:00:64:95:fa:0f:12:1e:c3:a0:c6:d7:b8:87:
         9c:4e:85:ed:15:cd:79:22:88:7a:16:cf:79:f6:25:f3:08:6b:
         d7:d5:de:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfF8glJzFNSOvdxrNoTxYZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDQxY2MxMjFlMGNiNjBhM2E5OGRiZjcyYmE0ZGJkNjNl
ZWJlOWYwHhcNMjYwOTI2MTkwMTEyWhcNMjYwOTI3MTkwMTEyWjAzMTEwLwYDVQQD
EyhiNGM0MzIyOTJjY2YwMDE5ZjhmYTIyY2EwYmVjODJkOWU1M2MyN2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF3R990eYUrQyycJhujCxO6stQKV
4xfKmAzpk156g36xnWnZ0OsRdnDzDdRUeAQ5tOmR6KAiI7B+VNLIcvLZCjPpOJ++
P0Gw33xQ2qoC/Xc8MxsOmLQlzeC9XyZW40l58RBc0WU2alHF++dXKmXpUBTfVIgw
3gwqBXo83thfTiO/fDSBQV18TGlQX4hdLtgT6Pg+4fQphzc230Oj3lcgZgKXb9OL
eYWLiap1hJiEmK8W/zOcbZsxSlG1LsEiuh5UPUqLU9D53+OOEhqwjPKuU5k4jzVc
mHPnphN8EdjhJK8cWDs2730kpDfWHSd1DeQo7TaIXLk7mqbtwbtkAf/sKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTEMikszwAZ+PoiygvsgtnlPCfsMB8GA1UdIwQY
MBaAFMvUHMEh4Mtgo6mNv3K6Tb1j7r6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83ZWI0ZTgtYmNiMS00OWVmLWI5NDQt
NTNhNWFmNzY1MzQzLzEveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny83ZWI0ZTgtYmNiMS00OWVmLWI5NDQtNTNhNWFmNzY1MzQz
LzEveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+MXA5cD
PXKxkLQJyJVPQL2BeLs2Y6R7rRIIWAQ8H7/c7qvh/x/UMDvd0CFmCT0wEo376/g0
4I6+QgzW4d2tB71bcRdCj1rjJTaHlHw15nf91odY20q7nPrB3ZuQAK3EYH6k+zQy
Ss+gyrczmyJbf7U3pgJvXvCm+yfM/v2lX4CpM50El7ebdSPjVY+RskVCUtAV4vkZ
8EkyTuPCTfPaEI+MzVgL6WZap1u6R4ZJ4ZQbgA6RquAzskC1M46N+AA679D9EFLh
L5LPCRl0ZDOmZNbNji8cEYQFtu6xRP4AZJX6DxIew6DG17iHnE6F7RXNeSKIehbP
efYl8whr19Xe9Q==
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:53:57 2026 by rpki-client