Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File:                     A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier:          uDqWO3Zxqv5b8PLcCyjJ2TgDksXyFmvFmbeK151GMKs=
Subject key identifier:   3D:FC:FA:89:69:A1:31:8F:B9:94:6B:42:B1:D3:63:67:96:76:22:DE
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer:       /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial:       01A08CB1C4131F21D39D149B1FF27A17A1AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number:          0C91
Signing time:             Thu 10 Sep 2026 19:00:55 +0000
Manifest this update:     Thu 10 Sep 2026 19:00:55 +0000
Manifest next update:     Fri 11 Sep 2026 19:00:55 +0000
Files and hashes:         1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: Vg+kzGKYMfttgR9WvFnBuEKHdXa2DHRMXCZuycIniW8=)
                          2: NU1chFo-5BLldjjUHOHACaYSPbk.roa (hash: mPNtrM0KZ13ZE9NQl/AWLpFJNMzjMXEfz7Z2RWOGx54=)
                          3: mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (hash: WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=)
                          4: n3LOmWNaywYcomz89nsEZwUgqLc.roa (hash: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c=)
                          5: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (hash: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:b1:c4:13:1f:21:d3:9d:14:9b:1f:f2:7a:17:a1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
        Validity
            Not Before: Sep 10 19:00:55 2026 GMT
            Not After : Sep 11 19:00:55 2026 GMT
        Subject: CN=3dfcfa8969a1318fb9946b42b1d36367967622de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1c:56:bd:c1:e5:2a:a3:28:a6:12:49:0e:83:
                    d1:fd:af:b1:fc:43:38:15:ed:dd:eb:1a:13:6c:81:
                    17:fa:fc:c5:8a:8f:09:d6:55:cc:77:d4:e4:30:bd:
                    34:e9:d1:31:c7:56:d2:fc:7e:79:5a:21:b8:e8:0e:
                    63:1a:e3:a6:bf:4d:4b:13:b1:0a:e3:bb:54:76:35:
                    54:f6:94:85:7f:d8:9c:c1:05:d9:61:08:3b:31:42:
                    87:42:0a:33:c2:bc:e7:77:26:83:a5:ae:b9:dd:6d:
                    1e:fb:d9:dd:4d:d1:d5:aa:f6:31:cd:c5:3c:7b:c2:
                    12:57:a3:14:56:f9:74:31:7e:f9:78:a2:01:b5:c4:
                    f1:f2:26:e4:bc:c7:d5:f9:7a:84:67:97:aa:ff:ac:
                    20:f8:e5:64:03:fa:1b:ef:d8:9c:78:83:f9:62:a5:
                    e7:89:99:4d:90:d4:8f:a4:e0:be:7a:69:98:53:15:
                    7e:86:53:57:4c:fa:80:ab:c9:71:45:0c:c8:e8:d7:
                    58:c3:71:bf:a6:8e:8b:9d:33:e9:a4:67:52:47:44:
                    8c:04:74:54:8d:41:f0:c8:69:d5:9a:56:50:21:f6:
                    86:d4:1a:83:89:ab:69:2e:39:1c:91:2c:05:ab:4e:
                    55:23:cd:52:b7:80:aa:2d:18:8d:04:7a:0f:36:67:
                    13:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FC:FA:89:69:A1:31:8F:B9:94:6B:42:B1:D3:63:67:96:76:22:DE
            X509v3 Authority Key Identifier:
                keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7a:c3:72:49:f0:75:e4:4c:ec:9d:92:27:60:2b:01:aa:21:
         92:dd:3b:c7:87:51:16:48:d5:eb:0d:b7:ba:e0:f5:32:ff:fe:
         2e:67:05:40:e7:b2:c9:81:23:6f:5a:10:3a:c5:4d:78:a4:e9:
         ac:06:b4:0d:12:c3:54:e6:28:a5:48:f1:02:86:06:ca:79:9c:
         a6:92:76:ce:28:45:64:4d:74:eb:c0:88:32:c9:f0:9b:d7:81:
         42:37:56:32:91:69:9f:e7:9a:30:fa:33:3c:7b:f3:4e:92:cf:
         31:be:90:c6:42:e7:ea:9b:69:5f:d1:82:41:20:ab:a1:b2:67:
         12:a1:b5:01:e7:65:53:a9:25:3e:21:5a:c9:17:f5:e2:b0:83:
         20:de:c9:f2:96:6d:8d:83:f3:15:6c:4a:f5:c7:36:b7:4b:ed:
         61:77:1d:47:ae:22:3b:67:10:61:8c:35:b4:9d:88:71:14:50:
         dd:19:b9:69:63:9e:4c:da:63:bf:1f:d6:d1:9a:a1:9b:a4:56:
         20:d5:51:c1:9b:8c:2f:b6:b7:a4:10:47:8c:c8:8d:aa:46:4e:
         db:85:dc:09:3a:e7:28:7b:cf:b4:c6:54:31:1d:cf:bb:f3:45:
         8f:96:8c:c9:2b:7a:40:17:da:1a:f2:f4:bd:89:43:52:d9:d6:
         6e:cf:91:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMscQTHyHTnRSbH/J6F6GvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzN2I0ODQ0OWJhMWNhZTE1YmRlMmMyZjA4NmQ5NDIxOGUw
NzIwYmIwHhcNMjYwOTEwMTkwMDU1WhcNMjYwOTExMTkwMDU1WjAzMTEwLwYDVQQD
EygzZGZjZmE4OTY5YTEzMThmYjk5NDZiNDJiMWQzNjM2Nzk2NzYyMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RxWvcHlKqMophJJDoPR/a+x/EM4
Fe3d6xoTbIEX+vzFio8J1lXMd9TkML006dExx1bS/H55WiG46A5jGuOmv01LE7EK
47tUdjVU9pSFf9icwQXZYQg7MUKHQgozwrzndyaDpa653W0e+9ndTdHVqvYxzcU8
e8ISV6MUVvl0MX75eKIBtcTx8ibkvMfV+XqEZ5eq/6wg+OVkA/ob79iceIP5YqXn
iZlNkNSPpOC+emmYUxV+hlNXTPqAq8lxRQzI6NdYw3G/po6LnTPppGdSR0SMBHRU
jUHwyGnVmlZQIfaG1BqDiatpLjkckSwFq05VI81St4CqLRiNBHoPNmcTnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD38+olpoTGPuZRrQrHTY2eWdiLeMB8GA1UdIwQY
MBaAFAN7SESbocrhW94sLwhtlCGOByC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYt
NzQwM2UxMzY3NWFiLzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYtNzQwM2UxMzY3NWFi
LzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnrDcknw
deRM7J2SJ2ArAaohkt07x4dRFkjV6w23uuD1Mv/+LmcFQOeyyYEjb1oQOsVNeKTp
rAa0DRLDVOYopUjxAoYGynmcppJ2zihFZE1068CIMsnwm9eBQjdWMpFpn+eaMPoz
PHvzTpLPMb6QxkLn6ptpX9GCQSCrobJnEqG1AedlU6klPiFayRf14rCDIN7J8pZt
jYPzFWxK9cc2t0vtYXcdR64iO2cQYYw1tJ2IcRRQ3Rm5aWOeTNpjvx/W0Zqhm6RW
INVRwZuML7a3pBBHjMiNqkZO24XcCTrnKHvPtMZUMR3Pu/NFj5aMySt6QBfaGvL0
vYlDUtnWbs+R0Q==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:05:40 2026 by rpki-client