Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
File:                     MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json)
Hash identifier:          QHh4kIc0PKLFoBraRzde3F9gy83RHDI97TWs39XSVRA=
Subject key identifier:   2D:21:F0:39:0F:B6:09:81:7E:96:FA:63:E7:6C:DE:6A:B3:09:C6:BD
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Certificate issuer:       /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial:       01A08CB22A3A7FF6CD54775F335EAA7AC90A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
Manifest number:          1AEA
Signing time:             Thu 10 Sep 2026 19:01:21 +0000
Manifest this update:     Thu 10 Sep 2026 19:01:21 +0000
Manifest next update:     Fri 11 Sep 2026 19:01:21 +0000
Files and hashes:         1: EGceg2KC2veG2ubJ67lLnyLOjtI.roa (hash: wY6zYtQUbn46Y33mgpfT8vGawedlaPHOCiudGF0vIQ4=)
                          2: FGz2Azbf0AxE4zPSOoCg4bCQxHI.roa (hash: zLIxet4MNh+fLw8tWoHJ+9JWHfqaXota8sy9Ge4lA3s=)
                          3: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: fx2G6//FKMAemDomAbsRCSzuqAqXxHv5MkrcOpQ53SU=)
                          4: Mqf6CjvjiOytmfKew5wMIrFMct0.roa (hash: WNuu5876X1n/9Z35upFbegg0OHBkwV/0aP5LxFUgXqw=)
                          5: Nct5nqhjZ5MmurkxWJBHHWbRMa4.roa (hash: 33QaAZca2Ux5dbZ3qMUfSafv9njl74xnkMuofl09biU=)
                          6: XFzx0VxKKF-e5w2Lr2cCrOGeanM.roa (hash: UP6bd6FhB5DBxfN1nWdp5xVVm3xQKWBg64Qhp36elmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:b2:2a:3a:7f:f6:cd:54:77:5f:33:5e:aa:7a:c9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
        Validity
            Not Before: Sep 10 19:01:21 2026 GMT
            Not After : Sep 11 19:01:21 2026 GMT
        Subject: CN=2d21f0390fb609817e96fa63e76cde6ab309c6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d6:2b:9b:8b:44:c4:76:cc:f1:19:9b:7a:eb:
                    4d:f4:ae:e2:39:d3:ff:7c:b5:f0:93:91:0c:ed:10:
                    9f:c6:81:b9:e6:ac:d5:37:ea:d1:9d:d2:ae:ee:01:
                    7e:e8:68:a8:16:cf:c5:6e:3d:f8:66:dc:66:77:b3:
                    3c:06:60:6b:fd:da:b3:b8:7f:4e:6b:40:c2:bf:e9:
                    8b:e4:ea:7f:88:43:d3:28:cd:e5:ba:ef:88:61:86:
                    c5:ad:fa:10:15:bc:5b:7a:d8:d3:40:27:e7:95:31:
                    1c:22:61:e1:c2:8c:79:be:d3:89:48:0c:b8:bb:3b:
                    9d:73:00:54:67:9e:4f:a8:29:d7:d5:77:ba:e7:8c:
                    bb:63:de:d7:34:48:24:ac:e9:dd:90:66:90:8c:e6:
                    26:bb:76:24:f1:00:f3:70:d7:ec:21:50:bf:d8:88:
                    53:2b:4d:14:dc:22:a6:b3:89:b7:45:2c:3e:91:00:
                    07:fe:9e:bb:94:ea:e4:96:5b:9d:47:30:cb:e9:b4:
                    ed:d4:a4:b9:57:4d:60:d2:59:42:5f:63:4a:26:b9:
                    ba:49:69:c9:7e:54:11:fd:f6:83:56:55:3c:e4:80:
                    cd:ad:d6:10:b7:25:0d:dd:da:80:e3:8d:d7:2f:38:
                    95:7e:04:ce:cb:4f:ab:73:e1:1f:2f:9c:c9:5b:ff:
                    b2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:21:F0:39:0F:B6:09:81:7E:96:FA:63:E7:6C:DE:6A:B3:09:C6:BD
            X509v3 Authority Key Identifier:
                keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0f:bf:df:05:19:6f:dd:72:b0:08:d1:2f:e9:53:92:6b:a9:
         25:6e:e5:d1:d0:2d:3e:85:b4:cd:c2:d2:ea:d8:9c:57:41:bd:
         53:b0:b5:49:83:da:c9:88:b1:ab:4d:9e:1f:79:03:5e:de:65:
         df:76:9a:6e:8a:aa:80:66:5f:11:d3:ce:a7:ad:3d:fe:14:ac:
         36:2f:64:e1:8c:a9:15:8b:1b:52:ae:e6:2d:16:ef:7c:68:1d:
         f2:f1:3e:b5:c1:70:df:d6:4a:68:13:e3:c8:71:ec:42:80:bd:
         72:39:6f:a3:a3:7d:05:6c:b3:43:4c:97:0a:f5:79:1d:56:cf:
         b8:f1:63:aa:61:87:07:f2:85:dc:2d:b2:4f:29:ae:f7:c0:34:
         cb:1f:8e:58:4c:2b:9f:e7:67:63:fa:4b:f2:98:59:98:bc:e1:
         91:4d:18:1c:88:35:1b:2e:3e:54:c5:3d:37:50:c4:43:e2:e4:
         8a:d0:36:b6:96:ef:94:72:62:f3:e4:34:a9:9b:ec:1c:27:82:
         09:87:2b:f5:02:2f:a9:a3:df:2b:86:f7:b6:93:19:bd:39:f1:
         5a:8a:5d:d7:3a:e3:8c:d0:00:02:ec:d3:e9:6b:9c:0b:9e:d0:
         85:5c:ec:64:f4:cb:00:4c:3a:22:61:87:fe:7d:8e:ba:c1:01:
         01:a0:6f:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMsio6f/bNVHdfM16qeskKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYTE4NWQwZWIwY2E3ODExYzU4NjQyNWRlMGU5NjBlMWNm
ZWI2MWIwHhcNMjYwOTEwMTkwMTIxWhcNMjYwOTExMTkwMTIxWjAzMTEwLwYDVQQD
EygyZDIxZjAzOTBmYjYwOTgxN2U5NmZhNjNlNzZjZGU2YWIzMDljNmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidYrm4tExHbM8RmbeutN9K7iOdP/
fLXwk5EM7RCfxoG55qzVN+rRndKu7gF+6GioFs/Fbj34Ztxmd7M8BmBr/dqzuH9O
a0DCv+mL5Op/iEPTKM3luu+IYYbFrfoQFbxbetjTQCfnlTEcImHhwox5vtOJSAy4
uzudcwBUZ55PqCnX1Xe654y7Y97XNEgkrOndkGaQjOYmu3Yk8QDzcNfsIVC/2IhT
K00U3CKms4m3RSw+kQAH/p67lOrklludRzDL6bTt1KS5V01g0llCX2NKJrm6SWnJ
flQR/faDVlU85IDNrdYQtyUN3dqA443XLziVfgTOy0+rc+EfL5zJW/+y3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0h8DkPtgmBfpb6Y+ds3mqzCca9MB8GA1UdIwQY
MBaAFDGhhdDrDKeBHFhkJd4Olg4c/rYbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUt
MWRjYzg2YzExZTc0LzEvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUtMWRjYzg2YzExZTc0
LzEvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJw+/3wUZ
b91ysAjRL+lTkmupJW7l0dAtPoW0zcLS6ticV0G9U7C1SYPayYixq02eH3kDXt5l
33aaboqqgGZfEdPOp609/hSsNi9k4YypFYsbUq7mLRbvfGgd8vE+tcFw39ZKaBPj
yHHsQoC9cjlvo6N9BWyzQ0yXCvV5HVbPuPFjqmGHB/KF3C2yTymu98A0yx+OWEwr
n+dnY/pL8phZmLzhkU0YHIg1Gy4+VMU9N1DEQ+LkitA2tpbvlHJi8+Q0qZvsHCeC
CYcr9QIvqaPfK4b3tpMZvTnxWopd1zrjjNAAAuzT6WucC57QhVzsZPTLAEw6ImGH
/n2OusEBAaBvZQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:14:01 2026 by rpki-client