Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
File:                     61AMkAIyHwOWRYNxC3uqRZc0EhM.mft (raw, json)
Hash identifier:          K8xSdxYl0XaxXztD8S06qfb9ESqj0SqeZDZa2Ccc8LY=
Subject key identifier:   89:DD:F4:44:62:72:E5:5B:E2:0C:0E:01:2C:08:EF:94:CD:E3:09:09
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Certificate issuer:       /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial:       01A08C0C9F7A2D67ED9348C2C427DA0F3866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
Manifest number:          1A53
Signing time:             Thu 10 Sep 2026 16:00:32 +0000
Manifest this update:     Thu 10 Sep 2026 16:00:32 +0000
Manifest next update:     Fri 11 Sep 2026 16:00:32 +0000
Files and hashes:         1: 61AMkAIyHwOWRYNxC3uqRZc0EhM.crl (hash: 55EoRy5OgH3hXHzDmbubHLnGmfMZZZmPvoKU3Lj5asY=)
                          2: JcOppFfKnPF-LMTMf0TyEZDWlPU.roa (hash: CBK5Ax4pVuwzug5rITTKmUjunN1YPA+gs80SlvReIxE=)
                          3: NBS3MDGzYGIADNWFbZYjYkdUa9s.roa (hash: v7XG+TXBJYETx2VmTgwzwAMvOODuFSiHzEpsJiItnm4=)
                          4: bmr462MOzzVfibPxeKpu-EewsJA.roa (hash: CnF+rGIRS/b/VIz1Q6MMhGy+46VVxN260juxQ8X0FSw=)
                          5: xG9W89NLTMo3zDEcMXWD8-7tuik.roa (hash: z2qG6bl0HluFOz/GCJOPJLYtdHcGTOZW8wletJFCQ5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0c:9f:7a:2d:67:ed:93:48:c2:c4:27:da:0f:38:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb500c9002321f03964583710b7baa4597341213
        Validity
            Not Before: Sep 10 16:00:32 2026 GMT
            Not After : Sep 11 16:00:32 2026 GMT
        Subject: CN=89ddf4446272e55be20c0e012c08ef94cde30909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:58:9c:ec:b8:e3:36:53:8d:ed:25:e0:db:25:
                    56:37:93:34:88:68:36:a0:0e:20:71:76:10:f7:d0:
                    19:41:54:66:9d:29:88:23:39:86:35:ad:58:08:cf:
                    52:fb:64:fe:64:b8:36:b0:11:66:a8:89:d9:53:70:
                    91:81:f8:ff:e8:65:2a:8e:d7:c1:68:bc:42:22:c2:
                    ce:df:f5:f2:10:78:a1:e2:bb:a9:b7:45:2d:1b:16:
                    d3:ba:80:60:b3:fb:5c:88:37:59:85:39:55:49:14:
                    69:66:85:b5:b9:93:51:53:63:35:07:ed:c0:e7:8c:
                    72:cf:45:b3:db:89:90:86:78:ff:5b:e3:09:a0:1c:
                    9a:b4:07:d3:87:5e:1e:a9:37:99:b1:98:6f:a6:e0:
                    96:02:32:4e:35:c6:15:4b:99:b1:5f:20:37:0f:fd:
                    8a:5a:0b:97:95:57:dc:8c:4d:f6:3a:b0:a6:1a:9e:
                    4d:10:bd:4a:20:2e:53:db:e7:19:c8:62:8c:d1:d6:
                    7c:db:7b:1d:0d:dd:c9:10:c5:b1:b5:a9:04:b7:c5:
                    3b:37:57:47:df:56:21:e1:f6:b1:5f:8d:32:23:a5:
                    44:ca:25:1c:ee:da:8b:20:61:a8:d0:b6:9d:c4:80:
                    ee:45:8b:6b:17:08:1c:22:88:e8:66:df:46:46:31:
                    0c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DD:F4:44:62:72:E5:5B:E2:0C:0E:01:2C:08:EF:94:CD:E3:09:09
            X509v3 Authority Key Identifier:
                keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:91:34:3a:f8:08:bc:f8:50:7e:41:53:68:c8:14:30:6e:45:
         95:de:20:15:74:f2:ba:36:aa:2b:0f:3a:b0:50:05:28:cf:0e:
         de:27:22:d5:e2:08:16:24:fa:f2:7b:cd:ed:80:ee:e8:1e:ce:
         cb:97:60:da:e9:30:da:95:b2:8b:b9:f6:33:b8:61:7b:a6:86:
         0c:76:f0:e5:83:62:39:9d:7c:ee:2c:b3:77:ac:a5:06:60:dd:
         e5:f1:e2:25:e9:0b:41:6e:48:7b:f2:c4:7d:a6:d0:67:2b:2d:
         bc:9e:55:47:d5:a9:ba:43:10:3b:ee:a0:ed:09:58:01:9a:06:
         f3:1a:b1:1f:51:d5:03:4b:e9:58:91:20:76:35:10:20:64:cb:
         11:c7:33:7f:d6:ee:0b:64:2a:fc:09:6c:58:f0:ed:f6:96:fb:
         ec:ca:86:d9:e7:eb:c2:01:64:91:a6:96:5b:0d:af:01:f8:3c:
         b5:f6:73:9b:ff:fe:fb:78:8c:e1:0a:84:86:28:8f:03:ee:01:
         da:3d:05:05:e1:c0:3f:e1:4a:35:fe:c5:2c:31:eb:7a:80:e0:
         7b:43:46:e4:4b:ab:d5:78:0c:f9:64:42:bc:bc:ef:47:02:fe:
         2f:d6:2c:18:7e:b7:90:ee:bb:a2:36:4e:ce:90:b6:1e:95:c0:
         8d:76:13:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDJ96LWftk0jCxCfaDzhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTAwYzkwMDIzMjFmMDM5NjQ1ODM3MTBiN2JhYTQ1OTcz
NDEyMTMwHhcNMjYwOTEwMTYwMDMyWhcNMjYwOTExMTYwMDMyWjAzMTEwLwYDVQQD
Eyg4OWRkZjQ0NDYyNzJlNTViZTIwYzBlMDEyYzA4ZWY5NGNkZTMwOTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1ic7LjjNlON7SXg2yVWN5M0iGg2
oA4gcXYQ99AZQVRmnSmIIzmGNa1YCM9S+2T+ZLg2sBFmqInZU3CRgfj/6GUqjtfB
aLxCIsLO3/XyEHih4rupt0UtGxbTuoBgs/tciDdZhTlVSRRpZoW1uZNRU2M1B+3A
54xyz0Wz24mQhnj/W+MJoByatAfTh14eqTeZsZhvpuCWAjJONcYVS5mxXyA3D/2K
WguXlVfcjE32OrCmGp5NEL1KIC5T2+cZyGKM0dZ823sdDd3JEMWxtakEt8U7N1dH
31Yh4faxX40yI6VEyiUc7tqLIGGo0LadxIDuRYtrFwgcIojoZt9GRjEMCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInd9ERicuVb4gwOASwI75TN4wkJMB8GA1UdIwQY
MBaAFOtQDJACMh8DlkWDcQt7qkWXNBITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYt
NGE2ODU5NjJmM2U4LzEvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xOWMwOWEtZDc5YS00ZGU0LThhODYtNGE2ODU5NjJmM2U4
LzEvNjFBTWtBSXlId09XUllOeEMzdXFSWmMwRWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5E0OvgI
vPhQfkFTaMgUMG5Fld4gFXTyujaqKw86sFAFKM8O3ici1eIIFiT68nvN7YDu6B7O
y5dg2ukw2pWyi7n2M7hhe6aGDHbw5YNiOZ187iyzd6ylBmDd5fHiJekLQW5Ie/LE
fabQZystvJ5VR9WpukMQO+6g7QlYAZoG8xqxH1HVA0vpWJEgdjUQIGTLEcczf9bu
C2Qq/AlsWPDt9pb77MqG2efrwgFkkaaWWw2vAfg8tfZzm//++3iM4QqEhiiPA+4B
2j0FBeHAP+FKNf7FLDHreoDge0NG5Eur1XgM+WRCvLzvRwL+L9YsGH63kO67ojZO
zpC2HpXAjXYTzQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:19 2026 by rpki-client