Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
File:                     PiWraYX3nKneBumOi52iRdhVmrY.mft (raw, json)
Hash identifier:          SbJ5q5m6+l6oRHpuE25TrGvGbXTIQDbpkU0WKDOBmIo=
Subject key identifier:   88:21:B7:B4:AB:E7:22:AF:77:1A:B0:98:64:CA:74:72:C1:50:02:82
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Certificate issuer:       /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial:       01A08B686BEF3CAF18A5D0A163034B882694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
Manifest number:          07CD
Signing time:             Thu 10 Sep 2026 13:01:11 +0000
Manifest this update:     Thu 10 Sep 2026 13:01:11 +0000
Manifest next update:     Fri 11 Sep 2026 13:01:11 +0000
Files and hashes:         1: 1oOFjZGYYwwXb_ODv4361WII64k.roa (hash: bFW1AoN4EVHakvioEa5q7RzteiQi3jCQsHyhBG7njhI=)
                          2: DsDp1Prc0x0H2dVVtCA9QfS20uc.roa (hash: IRQc9Do/rI0MlaOMAjJGDqLFlm7yPD+rM2DU9Sk0Sp8=)
                          3: HXtw_REMuYJU-uoqytyoK089wJo.roa (hash: y0auMTcaijuymINcdrlEwiSn0wKl15siQmyezHbX9Mk=)
                          4: PiWraYX3nKneBumOi52iRdhVmrY.crl (hash: ZbQkegO7scbYPJP1Wl/CMfHFGxeeV/HiaonAlA2+PyU=)
                          5: Z07tktorOBcHfE3hsn2N89eRrmM.roa (hash: 7mXHoHwif1lVmpqWPvn8rNFkNTwiLeFAHtrPjsutn9A=)
                          6: v_6hfKyRVIjeJvA7Hn7c_7uLcEI.roa (hash: AjN5pZH9Vkd0aFs/22Tncp1jiELMZjwI4H52yGKSq88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:6b:ef:3c:af:18:a5:d0:a1:63:03:4b:88:26:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
        Validity
            Not Before: Sep 10 13:01:11 2026 GMT
            Not After : Sep 11 13:01:11 2026 GMT
        Subject: CN=8821b7b4abe722af771ab09864ca7472c1500282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4d:5c:19:47:6d:6a:7e:48:8a:bf:56:38:8d:
                    a1:ca:b8:16:9a:ec:71:9e:70:b3:da:4d:29:df:82:
                    f0:7e:87:96:6b:fb:cd:54:19:00:b4:8c:9b:16:29:
                    a2:b7:25:1b:80:a9:9b:3d:41:2c:03:1a:d5:b6:e9:
                    3d:78:5d:8a:d7:75:6b:f9:87:77:3f:a1:cf:d6:b8:
                    69:23:ae:01:82:78:12:ef:97:72:d2:a3:4a:25:71:
                    1d:33:22:9b:ce:f8:a5:ff:d1:b0:c9:09:d2:cf:c8:
                    cc:cc:fb:e6:8d:73:40:f0:bd:2c:89:e4:93:8e:bc:
                    25:a0:a5:1c:ee:41:25:6c:3c:59:87:8c:91:f5:66:
                    0f:7b:b7:d8:84:fa:9b:cd:9a:21:33:7a:3c:a9:21:
                    bc:1f:b9:2a:2b:f6:0d:98:94:45:d4:10:fa:f1:f4:
                    46:37:74:17:26:8b:6c:02:9c:68:ed:b2:5a:b0:be:
                    51:c7:54:aa:b8:1a:c0:d0:c0:74:e0:37:76:27:ee:
                    47:fe:51:74:1b:85:de:f2:b8:4c:75:9d:b5:d1:d2:
                    99:a1:5b:e1:d6:ad:d5:e0:8f:60:9d:35:3f:c1:7e:
                    61:6e:5e:4b:c9:72:b7:f5:17:9a:55:7d:c6:c0:c3:
                    46:2b:90:d4:1f:fd:92:36:b1:9b:ba:53:61:48:e9:
                    7b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:21:B7:B4:AB:E7:22:AF:77:1A:B0:98:64:CA:74:72:C1:50:02:82
            X509v3 Authority Key Identifier:
                keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ce:6d:4e:30:a5:34:88:5c:b4:ef:13:8e:7e:3d:2f:64:ac:
         96:8f:9a:9c:19:38:67:c9:43:48:d0:f0:1b:b5:7e:5f:dd:4f:
         a2:3d:86:36:2a:7a:8e:a1:77:be:51:ad:8e:19:6f:54:a7:f1:
         65:00:dc:c1:ca:fe:4e:ad:46:cf:aa:e2:d4:76:de:8d:4d:03:
         a4:f3:f5:35:2f:9b:c7:cd:1f:ed:72:b7:46:96:81:5e:33:bc:
         86:bb:dd:f0:5b:80:27:ac:ae:4b:3a:79:79:63:64:b3:4f:5b:
         58:95:54:da:d5:5d:6f:34:2a:ac:a8:7e:89:f0:6c:92:4d:1b:
         44:a8:35:45:97:71:11:dd:00:b0:b7:0a:9c:c0:38:c1:50:f2:
         54:22:62:72:f5:b7:12:93:87:35:95:4a:8d:be:d4:5f:e1:57:
         6e:0f:23:d4:31:dd:26:14:a1:95:40:b3:71:eb:ac:60:ba:25:
         ba:80:03:a4:18:6b:58:e1:d2:bd:3c:25:78:f2:41:9b:0d:30:
         b6:eb:23:dc:df:fd:83:2a:37:ac:cf:e0:28:b4:52:81:fd:4b:
         2f:a0:1f:6b:c7:ff:59:f7:50:49:92:39:3f:37:e9:fa:d1:85:
         ad:07:d2:8f:0d:da:77:c4:7e:55:4a:3f:80:f4:c8:a6:9a:40:
         12:75:97:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaGvvPK8YpdChYwNLiCaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjVhYjY5ODVmNzljYTlkZTA2ZTk4ZThiOWRhMjQ1ZDg1
NTlhYjYwHhcNMjYwOTEwMTMwMTExWhcNMjYwOTExMTMwMTExWjAzMTEwLwYDVQQD
Eyg4ODIxYjdiNGFiZTcyMmFmNzcxYWIwOTg2NGNhNzQ3MmMxNTAwMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE1cGUdtan5Iir9WOI2hyrgWmuxx
nnCz2k0p34LwfoeWa/vNVBkAtIybFimityUbgKmbPUEsAxrVtuk9eF2K13Vr+Yd3
P6HP1rhpI64BgngS75dy0qNKJXEdMyKbzvil/9GwyQnSz8jMzPvmjXNA8L0sieST
jrwloKUc7kElbDxZh4yR9WYPe7fYhPqbzZohM3o8qSG8H7kqK/YNmJRF1BD68fRG
N3QXJotsApxo7bJasL5Rx1SquBrA0MB04Dd2J+5H/lF0G4Xe8rhMdZ210dKZoVvh
1q3V4I9gnTU/wX5hbl5LyXK39ReaVX3GwMNGK5DUH/2SNrGbulNhSOl7DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIght7Sr5yKvdxqwmGTKdHLBUAKCMB8GA1UdIwQY
MBaAFD4lq2mF95yp3gbpjoudokXYVZq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAt
YjE5YWQ1NDU1YmZkLzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAtYjE5YWQ1NDU1YmZk
LzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmc5tTjCl
NIhctO8Tjn49L2Sslo+anBk4Z8lDSNDwG7V+X91Poj2GNip6jqF3vlGtjhlvVKfx
ZQDcwcr+Tq1Gz6ri1HbejU0DpPP1NS+bx80f7XK3RpaBXjO8hrvd8FuAJ6yuSzp5
eWNks09bWJVU2tVdbzQqrKh+ifBskk0bRKg1RZdxEd0AsLcKnMA4wVDyVCJicvW3
EpOHNZVKjb7UX+FXbg8j1DHdJhShlUCzceusYLoluoADpBhrWOHSvTwlePJBmw0w
tusj3N/9gyo3rM/gKLRSgf1LL6Afa8f/WfdQSZI5Pzfp+tGFrQfSjw3ad8R+VUo/
gPTIpppAEnWXEQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:33:44 2026 by rpki-client