Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
File:                     29T45HYjd_hrB6h1P26Y9vS2t5I.mft (raw, json)
Hash identifier:          pq2WlMwKzwtu2SSVdJukUo3Nrhas+w3n17WZ5YIFq3s=
Subject key identifier:   DD:51:11:6F:7B:69:F9:57:28:D8:B0:35:35:8A:4C:DE:3D:03:5C:05
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Certificate issuer:       /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial:       01A08C7B37347283CE9D17E013A6F7C5AD6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
Manifest number:          1A57
Signing time:             Thu 10 Sep 2026 18:01:20 +0000
Manifest this update:     Thu 10 Sep 2026 18:01:20 +0000
Manifest next update:     Fri 11 Sep 2026 18:01:20 +0000
Files and hashes:         1: 29T45HYjd_hrB6h1P26Y9vS2t5I.crl (hash: y4ORqjud31j2vqcZrrwA0q89Z53aSgR1+K27XdRvZIc=)
                          2: 78AdnPlYxxNRvG7yIsV4H0dQ3uU.roa (hash: ZTu1Ha6s4A0bZr6OWIB0UemduSdBco4nDQ6ul5K7k/o=)
                          3: pZWv9aR-lAPmI9FegQDU1_TsJGQ.roa (hash: zi9P3PwATT1zpaHWwrjwAJyWvhGqfYUdHlC1nMks7rY=)
                          4: ws9IrMCFTsyujEnp3NM74auDbZo.roa (hash: rNmcUDMhWLisI/rUnE9X9Uz3aN70rmmRCgpG26lV2pk=)
                          5: zj5fKqmt0ZTCnTxN2MLrVwaw1lQ.roa (hash: /UJhdA7Jh+uSEIMl9lW07vSFGCaa6lBIOlAIZUdipFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:37:34:72:83:ce:9d:17:e0:13:a6:f7:c5:ad:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
        Validity
            Not Before: Sep 10 18:01:20 2026 GMT
            Not After : Sep 11 18:01:20 2026 GMT
        Subject: CN=dd51116f7b69f95728d8b035358a4cde3d035c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:a9:a0:6c:29:58:48:98:b9:52:a7:2d:60:
                    11:5b:ac:e2:fa:c2:4f:cc:a7:14:44:17:aa:25:e0:
                    da:8e:a2:e1:61:d5:70:d3:14:70:cb:81:d2:40:5e:
                    4c:b0:21:45:72:5b:22:31:f7:44:fa:05:f3:1a:42:
                    04:bd:80:58:b8:3a:b0:b4:4c:bc:d2:64:1f:83:05:
                    3c:f2:51:a5:dc:7d:b8:ec:b9:84:c1:a6:92:de:33:
                    fa:1f:fe:77:98:fc:6c:33:10:ca:0d:47:a7:e0:9b:
                    5f:01:72:0e:7d:95:df:ba:e6:72:80:f5:3f:65:96:
                    15:8c:2c:2f:8f:1f:f4:eb:d3:9d:99:cc:77:51:ea:
                    1d:90:2f:5f:67:09:7e:57:82:63:7d:49:52:a7:7e:
                    96:1b:49:8a:76:86:dc:85:b7:7c:d4:c7:2b:66:a9:
                    30:92:18:58:3d:3a:2e:49:a8:78:8a:65:05:63:75:
                    84:99:dc:aa:58:12:20:81:97:e9:1a:f6:98:e8:98:
                    cf:8e:bc:73:8f:25:0b:8f:d0:4a:66:73:cc:48:33:
                    7d:85:62:6f:b8:8a:17:d1:12:5d:e5:d9:23:39:ee:
                    be:d9:79:9c:7d:8d:d2:2c:ad:92:76:a4:4e:3d:bb:
                    be:aa:e9:6a:eb:ea:fe:23:a7:9c:fc:d4:cc:b1:ef:
                    1b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:51:11:6F:7B:69:F9:57:28:D8:B0:35:35:8A:4C:DE:3D:03:5C:05
            X509v3 Authority Key Identifier:
                keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ee:2e:c0:eb:f7:67:47:23:06:c9:aa:39:24:70:3a:66:26:
         33:b0:db:2f:b4:e9:63:fe:74:28:ee:8e:42:e7:ed:77:fa:54:
         a1:08:d2:6b:38:14:33:72:39:25:26:68:f3:b8:59:b0:8c:f9:
         19:9b:26:b1:66:9f:82:c0:62:9d:5c:43:2e:e0:35:f9:50:84:
         f9:ad:bc:63:7c:b5:4f:1e:7b:ce:e5:1c:22:12:6d:2f:75:34:
         70:32:52:6d:a7:83:18:64:f2:34:d0:24:0e:e8:ad:08:99:63:
         10:30:20:f5:aa:93:1c:f5:e9:b3:13:a3:fa:9a:8b:81:5f:1e:
         33:b9:df:a0:a4:06:90:ca:21:97:b5:2e:11:8a:8f:c9:2f:d2:
         c4:2d:a6:c3:74:60:07:21:1a:d2:af:99:da:4b:10:4e:db:c0:
         58:3b:8b:13:e0:09:f7:7e:b5:7f:97:81:09:a2:25:f2:43:eb:
         b8:fc:0b:b4:5a:a2:7c:68:62:1c:e8:1a:32:e6:01:9a:a0:01:
         3d:ac:a9:cd:c5:7b:24:b7:f0:86:d0:da:51:f5:0c:3e:64:4f:
         16:58:2d:ec:a8:9e:6f:22:d1:93:6f:32:85:3f:a1:f6:be:6a:
         7d:2b:d9:5f:60:71:00:35:d8:6b:e4:82:61:29:17:1e:5c:66:
         4c:d5:cd:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMezc0coPOnRfgE6b3xa1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZDRmOGU0NzYyMzc3Zjg2YjA3YTg3NTNmNmU5OGY2ZjRi
NmI3OTIwHhcNMjYwOTEwMTgwMTIwWhcNMjYwOTExMTgwMTIwWjAzMTEwLwYDVQQD
EyhkZDUxMTE2ZjdiNjlmOTU3MjhkOGIwMzUzNThhNGNkZTNkMDM1YzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2ipoGwpWEiYuVKnLWARW6zi+sJP
zKcURBeqJeDajqLhYdVw0xRwy4HSQF5MsCFFclsiMfdE+gXzGkIEvYBYuDqwtEy8
0mQfgwU88lGl3H247LmEwaaS3jP6H/53mPxsMxDKDUen4JtfAXIOfZXfuuZygPU/
ZZYVjCwvjx/069Odmcx3UeodkC9fZwl+V4JjfUlSp36WG0mKdobchbd81McrZqkw
khhYPTouSah4imUFY3WEmdyqWBIggZfpGvaY6JjPjrxzjyULj9BKZnPMSDN9hWJv
uIoX0RJd5dkjOe6+2XmcfY3SLK2SdqROPbu+qulq6+r+I6ec/NTMse8bkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1REW97aflXKNiwNTWKTN49A1wFMB8GA1UdIwQY
MBaAFNvU+OR2I3f4aweodT9umPb0treSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjlUNDVIWWpkX2hyQjZoMVAyNlk5dlMydDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kM2Y2NWQtYWZhYi00ZDI4LWI0NmUt
NjIwYTc5Y2Y3OTJiLzEvMjlUNDVIWWpkX2hyQjZoMVAyNlk5dlMydDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kM2Y2NWQtYWZhYi00ZDI4LWI0NmUtNjIwYTc5Y2Y3OTJi
LzEvMjlUNDVIWWpkX2hyQjZoMVAyNlk5dlMydDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANu4uwOv3
Z0cjBsmqOSRwOmYmM7DbL7TpY/50KO6OQuftd/pUoQjSazgUM3I5JSZo87hZsIz5
GZsmsWafgsBinVxDLuA1+VCE+a28Y3y1Tx57zuUcIhJtL3U0cDJSbaeDGGTyNNAk
DuitCJljEDAg9aqTHPXpsxOj+pqLgV8eM7nfoKQGkMohl7UuEYqPyS/SxC2mw3Rg
ByEa0q+Z2ksQTtvAWDuLE+AJ9361f5eBCaIl8kPruPwLtFqifGhiHOgaMuYBmqAB
PaypzcV7JLfwhtDaUfUMPmRPFlgt7KiebyLRk28yhT+h9r5qfSvZX2BxADXYa+SC
YSkXHlxmTNXNGQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:23 2026 by rpki-client