Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
File:                     X75lriPyB_ppUlX1WpB6wWCL4JQ.mft (raw, json)
Hash identifier:          XfamCTSSqsGpMfXjh2Ds1dawe+Tb5Er+QZ/WYQxEQU8=
Subject key identifier:   8B:13:73:76:9C:2C:48:E1:A2:8E:94:32:82:BD:7E:44:B6:42:39:76
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Certificate issuer:       /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial:       01A08AC3669AF9E1F3616DB84FCB32540E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
Manifest number:          1A7D
Signing time:             Thu 10 Sep 2026 10:00:56 +0000
Manifest this update:     Thu 10 Sep 2026 10:00:56 +0000
Manifest next update:     Fri 11 Sep 2026 10:00:56 +0000
Files and hashes:         1: 9D820He12zEiGHJY2yEp95HuOYo.roa (hash: JgNweIsliEaUH1GQxpLBgGrSQ23iPTPHkKTdFr797ts=)
                          2: HPAT1MyeKAtUXfiwHelB0dU143I.roa (hash: MB/EaJsVrRQhtNPL6YNv0ijVFjc3MkwuTavJrFTSstk=)
                          3: P-jvPlaLL6rr2ui5e9D6YWxhu9w.roa (hash: DDSuenDK/kT9T6J/tQTGQwxbDy3mpq7Bc6isbXiDO5I=)
                          4: TieuC1DoyThjRQq3uG3ihjLScTo.roa (hash: vC9rnpVx2T8cbVOPfkfZTZYOxBuzPINUpSnwkUZDkSE=)
                          5: X75lriPyB_ppUlX1WpB6wWCL4JQ.crl (hash: PlFx6Dy+bqOrRbGEHUwU32e2EwGjHZvbegL7HpmjIV4=)
                          6: bcAIwuJO8aDrVEXNrt-8O6on-lo.roa (hash: Q91/Ln+O0FS/Y8Cqj8uQ0UCV73gOKZK5ODen/j5W9Oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:66:9a:f9:e1:f3:61:6d:b8:4f:cb:32:54:0e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
        Validity
            Not Before: Sep 10 10:00:56 2026 GMT
            Not After : Sep 11 10:00:56 2026 GMT
        Subject: CN=8b1373769c2c48e1a28e943282bd7e44b6423976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:96:16:12:05:45:65:d8:04:56:1e:78:13:14:
                    52:b2:57:17:1f:35:30:ed:98:22:c2:a4:78:85:ea:
                    0a:c8:b9:3e:db:63:00:d6:32:df:47:10:50:6b:22:
                    ef:0d:43:95:a3:46:47:cc:a3:cc:75:c8:81:80:4f:
                    d4:0a:49:2c:10:30:31:33:51:2e:8b:5c:7a:4e:10:
                    a4:bf:1e:c1:5b:70:71:a5:4d:d2:77:dc:26:86:9b:
                    08:dd:db:a0:fb:4b:a4:ed:e1:fe:d9:de:89:11:e2:
                    46:bf:22:af:d9:02:d7:7c:be:15:65:fa:af:38:52:
                    da:93:74:47:4b:f2:43:1f:a7:40:b6:b1:de:af:85:
                    ba:40:96:0d:39:d2:1d:8a:6f:a5:f6:5d:38:2e:44:
                    5d:55:bf:c6:a8:23:22:5b:b1:6c:fc:b9:70:6f:e5:
                    59:5a:68:eb:01:12:1a:54:a0:9c:17:ed:16:96:04:
                    71:03:d3:46:11:f7:23:8e:0f:4e:81:bc:10:62:46:
                    6e:d6:1c:30:75:2a:42:b5:cf:3e:f4:26:4b:7a:13:
                    8d:a4:df:d0:c2:04:0f:06:08:a8:61:25:18:94:56:
                    4b:01:34:90:c8:e5:cf:07:36:eb:14:b3:6b:71:8b:
                    3e:da:72:71:06:52:8a:0e:63:4b:33:b8:8e:f4:af:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:13:73:76:9C:2C:48:E1:A2:8E:94:32:82:BD:7E:44:B6:42:39:76
            X509v3 Authority Key Identifier:
                keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c8:76:92:41:fb:f5:2e:3e:01:c6:44:3b:84:a0:2a:65:d6:
         1d:80:9f:e1:89:6d:f1:2f:cc:a2:c8:01:cb:7d:7c:8b:46:9c:
         ee:47:ab:91:6c:36:cf:d8:4f:e7:d6:03:42:79:e7:06:27:49:
         22:a7:76:c4:63:bf:2c:03:35:60:8f:ae:28:da:fe:99:f5:f6:
         e7:8e:fa:0a:d3:9f:09:8f:25:fd:d3:95:0d:f8:2c:50:ac:cf:
         79:94:78:d7:7f:6c:d6:87:89:83:81:23:90:62:1c:70:25:04:
         7c:93:24:1d:01:25:be:32:c1:59:0e:64:1c:22:4f:b7:fd:80:
         50:4a:7e:ac:54:b0:c4:ab:05:0a:0d:4a:50:6f:5b:d8:43:4e:
         64:a1:38:12:38:c2:63:0d:65:6a:fe:5c:d9:79:f4:aa:de:89:
         25:85:bb:03:77:ec:ad:dc:a3:d2:9c:40:4e:02:94:4c:37:73:
         af:8a:72:43:eb:f7:7f:5e:8f:23:f6:09:6e:4f:25:f0:57:77:
         6f:e8:28:69:5e:43:d1:65:f0:cc:7e:d4:7d:cf:d7:6c:d8:59:
         02:be:0b:22:3a:8b:42:71:5a:db:f6:b5:85:2e:1d:a8:04:f4:
         48:a3:38:d2:26:6a:8c:f8:23:e4:a6:be:80:75:7a:6f:ee:e4:
         a9:05:3c:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKw2aa+eHzYW24T8syVA6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4
YmUwOTQwHhcNMjYwOTEwMTAwMDU2WhcNMjYwOTExMTAwMDU2WjAzMTEwLwYDVQQD
Eyg4YjEzNzM3NjljMmM0OGUxYTI4ZTk0MzI4MmJkN2U0NGI2NDIzOTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZYWEgVFZdgEVh54ExRSslcXHzUw
7ZgiwqR4heoKyLk+22MA1jLfRxBQayLvDUOVo0ZHzKPMdciBgE/UCkksEDAxM1Eu
i1x6ThCkvx7BW3BxpU3Sd9wmhpsI3dug+0uk7eH+2d6JEeJGvyKv2QLXfL4VZfqv
OFLak3RHS/JDH6dAtrHer4W6QJYNOdIdim+l9l04LkRdVb/GqCMiW7Fs/Llwb+VZ
WmjrARIaVKCcF+0WlgRxA9NGEfcjjg9OgbwQYkZu1hwwdSpCtc8+9CZLehONpN/Q
wgQPBgioYSUYlFZLATSQyOXPBzbrFLNrcYs+2nJxBlKKDmNLM7iO9K+EZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsTc3acLEjhoo6UMoK9fkS2Qjl2MB8GA1UdIwQY
MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt
NDkyYWIzNzI2ODlkLzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk
LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHch2kkH7
9S4+AcZEO4SgKmXWHYCf4Ylt8S/MosgBy318i0ac7kerkWw2z9hP59YDQnnnBidJ
Iqd2xGO/LAM1YI+uKNr+mfX25476CtOfCY8l/dOVDfgsUKzPeZR4139s1oeJg4Ej
kGIccCUEfJMkHQElvjLBWQ5kHCJPt/2AUEp+rFSwxKsFCg1KUG9b2ENOZKE4EjjC
Yw1lav5c2Xn0qt6JJYW7A3fsrdyj0pxATgKUTDdzr4pyQ+v3f16PI/YJbk8l8Fd3
b+goaV5D0WXwzH7Ufc/XbNhZAr4LIjqLQnFa2/a1hS4dqAT0SKM40iZqjPgj5Ka+
gHV6b+7kqQU87Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:50:03 2026 by rpki-client