Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
File:                     l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json)
Hash identifier:          vMbc1xYLV2f/XdQXgQ07n9J45bTz4S84EYGeUazesBU=
Subject key identifier:   08:24:A2:3E:62:DC:60:16:35:7C:AB:8D:12:83:5E:84:4B:FD:5D:89
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Certificate issuer:       /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial:       01A08B9F1924B3F09A4C50DB678D02BA05CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
Manifest number:          1801
Signing time:             Thu 10 Sep 2026 14:00:54 +0000
Manifest this update:     Thu 10 Sep 2026 14:00:54 +0000
Manifest next update:     Fri 11 Sep 2026 14:00:54 +0000
Files and hashes:         1: LN8128RtX2TWg__j6TtcXwL_Eb0.roa (hash: l0oQB/ky1SV2K23tSgeEjaUc0KhSm1kwVFjEn/NMuWE=)
                          2: TVDa4jH-KePexazfdp059jjKJOw.roa (hash: 89VuNse5oJN1x+WeKQMcg+E+3+6iaiSt9KMxgJnMFJ8=)
                          3: XZy9Rg9MZLW88w93deJPs6Mbh1Q.roa (hash: CTnuJkHuEdvyE2199+HyL39pwCCPv/xCbcizmK9wVZQ=)
                          4: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: iDWYN7qHafA60eUpYeT/6x+uaqws6gBlnps75hRgUkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9f:19:24:b3:f0:9a:4c:50:db:67:8d:02:ba:05:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
        Validity
            Not Before: Sep 10 14:00:54 2026 GMT
            Not After : Sep 11 14:00:54 2026 GMT
        Subject: CN=0824a23e62dc6016357cab8d12835e844bfd5d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:8b:30:d6:1f:1a:2e:b4:14:f7:b1:e9:0f:
                    4a:cd:f2:c9:cc:de:8f:80:68:33:a9:31:51:ae:74:
                    c3:b2:e2:eb:48:49:8e:73:ba:37:44:f2:d2:eb:bd:
                    d2:66:fa:3f:d5:94:3f:6b:df:fe:cc:9e:17:a8:65:
                    76:76:66:7d:f1:8a:1e:d3:8e:04:62:08:48:26:49:
                    81:c2:7d:09:89:7c:b6:1d:c0:e7:02:b4:9b:8c:9b:
                    93:b4:5c:6a:bc:49:62:54:51:54:a5:c3:18:b2:9a:
                    93:b3:d6:7c:59:d3:9c:26:60:95:32:5f:b8:a6:d1:
                    be:a5:0e:37:14:05:00:52:f1:44:ac:68:8e:43:94:
                    69:79:22:53:c0:46:f8:46:cf:a7:ae:36:22:6e:4a:
                    0e:64:fe:88:c9:3b:fd:df:52:44:1b:7a:1a:ac:bb:
                    3f:9f:c4:72:e4:fa:24:00:bb:81:40:ba:a5:6b:e2:
                    17:bc:97:09:8a:da:5f:80:31:50:7c:22:8a:29:d4:
                    d0:3b:b4:a8:bb:b4:8f:1a:70:98:69:d9:03:15:2a:
                    08:38:f4:0c:16:8e:85:24:20:05:f0:c2:73:8e:b7:
                    ba:d0:5d:21:2a:45:c7:4e:03:6f:48:57:14:f5:95:
                    b2:81:6b:cc:64:51:d1:65:84:7f:57:1a:44:cc:07:
                    12:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:24:A2:3E:62:DC:60:16:35:7C:AB:8D:12:83:5E:84:4B:FD:5D:89
            X509v3 Authority Key Identifier:
                keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:94:63:c9:cf:27:22:16:95:83:27:c3:00:1a:06:ee:9b:81:
         1b:a0:7b:5d:9c:8b:ca:05:0d:a5:f1:a4:9e:05:4c:80:b5:2e:
         0c:5b:3d:76:3f:c1:9f:3f:36:7d:e3:7e:0d:ca:b3:74:32:05:
         e2:46:71:a7:25:ea:01:4d:c8:ed:c4:eb:ee:30:90:dc:72:b3:
         c9:e6:72:5f:28:44:34:5b:96:63:59:0f:85:05:27:4b:72:43:
         55:d5:93:28:f8:aa:0a:5c:67:19:88:70:5c:43:c5:9f:45:c5:
         56:ae:e2:43:ad:83:cd:48:9e:e4:ea:f0:f7:27:7b:56:d9:6a:
         8f:63:44:57:0d:ec:ba:57:4f:d3:b5:3f:62:41:c7:4c:34:b8:
         4d:64:1a:d5:8a:de:df:e3:09:dc:f5:37:69:1a:57:1d:d0:14:
         52:7d:5f:96:30:3e:2b:0c:b3:65:c5:fe:c8:55:bf:a4:0a:9c:
         2f:92:f5:19:15:86:8f:4a:8a:c4:94:2a:17:d9:71:25:f3:ba:
         70:76:58:54:96:f8:9e:c4:45:3f:50:ad:3d:85:fd:0b:37:9d:
         56:e2:79:11:ca:d3:82:b7:68:52:1b:13:48:af:bc:38:6f:a6:
         6a:af:48:ad:ed:6c:6f:13:eb:ed:7b:a9:e1:79:84:8f:12:36:
         b7:2b:e6:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLnxkks/CaTFDbZ40CugXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YmQ5Yjg2NTMxZTU0NGFmYTAzMDlkOGJlMmE3YmE2OTE2
M2Y5YWQwHhcNMjYwOTEwMTQwMDU0WhcNMjYwOTExMTQwMDU0WjAzMTEwLwYDVQQD
EygwODI0YTIzZTYyZGM2MDE2MzU3Y2FiOGQxMjgzNWU4NDRiZmQ1ZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyniLMNYfGi60FPex6Q9KzfLJzN6P
gGgzqTFRrnTDsuLrSEmOc7o3RPLS673SZvo/1ZQ/a9/+zJ4XqGV2dmZ98Yoe044E
YghIJkmBwn0JiXy2HcDnArSbjJuTtFxqvEliVFFUpcMYspqTs9Z8WdOcJmCVMl+4
ptG+pQ43FAUAUvFErGiOQ5RpeSJTwEb4Rs+nrjYibkoOZP6IyTv931JEG3oarLs/
n8Ry5PokALuBQLqla+IXvJcJitpfgDFQfCKKKdTQO7Sou7SPGnCYadkDFSoIOPQM
Fo6FJCAF8MJzjre60F0hKkXHTgNvSFcU9ZWygWvMZFHRZYR/VxpEzAcSPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgkoj5i3GAWNXyrjRKDXoRL/V2JMB8GA1UdIwQY
MBaAFJe9m4ZTHlRK+gMJ2L4qe6aRY/mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjIt
MzQ2MGNjMjY0ODBiLzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjItMzQ2MGNjMjY0ODBi
LzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJRjyc8n
IhaVgyfDABoG7puBG6B7XZyLygUNpfGkngVMgLUuDFs9dj/Bnz82feN+DcqzdDIF
4kZxpyXqAU3I7cTr7jCQ3HKzyeZyXyhENFuWY1kPhQUnS3JDVdWTKPiqClxnGYhw
XEPFn0XFVq7iQ62DzUie5Orw9yd7Vtlqj2NEVw3suldP07U/YkHHTDS4TWQa1Yre
3+MJ3PU3aRpXHdAUUn1fljA+KwyzZcX+yFW/pAqcL5L1GRWGj0qKxJQqF9lxJfO6
cHZYVJb4nsRFP1CtPYX9CzedVuJ5EcrTgrdoUhsTSK+8OG+maq9Ire1sbxPr7Xup
4XmEjxI2tyvmeQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:30:17 2026 by rpki-client