Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
File:                     2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json)
Hash identifier:          1XnufHLm2KxKzkmF0S7av6qS/8ZSLlKXO8TnTjxvmQg=
Subject key identifier:   53:A1:48:38:70:82:0D:D8:6E:D9:C9:A4:F7:59:12:D9:D2:10:D9:34
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Certificate issuer:       /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial:       01A119E2CDF815F0724DF1C761288D31F065
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
Manifest number:          11ED
Signing time:             Thu 08 Oct 2026 05:00:56 +0000
Manifest this update:     Thu 08 Oct 2026 05:00:56 +0000
Manifest next update:     Fri 09 Oct 2026 05:00:56 +0000
Files and hashes:         1: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: 9Xxa4X5o6YIFNiSboNGCuNQaD5kejtVw6EYBjNTnt98=)
                          2: 5O4Qywr4G5vGR4CnllsAHoHXE3c.roa (hash: 6B27b88IAgFkDxTqELlXG1aRObgI7R0ZM10hy8DvOwQ=)
                          3: WBH_fF6t3I2iXHzxgrxzCAX-XRA.roa (hash: cYtszWc1seVCwv311jPJcm6UWAtEmkWFzWyQin67xig=)
                          4: bfxZ3U8LPQDqD4igv8w1c53B7_g.roa (hash: wODIH/0xkpwmueRo+Rlw/VFlBWpKNaGnZK/vy02MrTM=)
                          5: e-YXzSqo-diMNWfq4Z-TzhdMAKc.roa (hash: oC+ocV09AXnxKxFBaBEAaFvyphxKhACRBYHFRB7YC5U=)
                          6: g6sf18n3xZl1TALCvAHdOtQxRg4.roa (hash: xF4qc4vWFwiPiBXPNEqALg9dNoI0YkOYJ4CNgjIGAJ4=)
                          7: jZ-HAFHoEaDuBKep-75Ui8JNmsU.roa (hash: FONWYkgA1dLto5X/Omv5HI8QNgMouzq0GwMPGBqkdRM=)
                          8: y8v5nA8clWvNSibTRhJn-18_5r4.roa (hash: QFjv2ebqxu/9Ku6e2ADrvhpZM5hc5qGrf6vLHAbvmic=)
                          9: zyd8uSkjKcRLHzmFPeh-k40bdgw.roa (hash: Z+xUSGJvLfcezS9srOZIqvbsKOYqYqGNXUZ1rB4SeYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:e2:cd:f8:15:f0:72:4d:f1:c7:61:28:8d:31:f0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
        Validity
            Not Before: Oct  8 05:00:56 2026 GMT
            Not After : Oct  9 05:00:56 2026 GMT
        Subject: CN=53a1483870820dd86ed9c9a4f75912d9d210d934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:9e:c8:33:4d:8e:0e:ea:dd:79:00:0c:fe:
                    20:b8:01:54:46:d5:9b:10:15:75:a6:8f:fc:01:12:
                    59:06:ea:cc:3b:5b:b8:42:22:f4:44:eb:dc:ab:26:
                    5c:06:fb:b5:94:a4:a9:1e:db:7f:55:00:c5:9f:36:
                    f4:75:92:0a:e1:2a:38:3e:0f:d9:98:fb:04:44:97:
                    67:b9:ce:ed:b9:df:cb:8a:12:34:e2:c2:34:8d:56:
                    76:e7:27:ae:db:b0:7c:39:c4:00:d4:38:47:50:0a:
                    b1:93:74:d5:dc:b7:9b:62:da:5c:4f:36:58:d6:2d:
                    93:0f:f8:98:a7:04:62:5c:be:38:4b:6a:b9:85:9a:
                    38:35:18:d3:4b:70:5e:8f:79:50:5e:b1:07:9c:c0:
                    77:56:a5:cb:e7:63:f5:ac:6a:a0:dc:2f:77:f3:ab:
                    17:1a:6f:09:85:ee:c4:88:0f:43:6b:53:92:3f:fe:
                    9e:9b:4a:1f:d1:53:76:41:4b:2f:b8:ef:d9:b5:11:
                    ff:5a:c8:ca:19:76:12:4d:ae:55:10:2d:f5:94:56:
                    90:40:8c:b1:b9:67:55:39:c8:98:77:0b:b9:46:28:
                    95:ea:ec:75:53:a7:d1:6d:d5:79:76:7f:a6:f1:7e:
                    ae:6e:81:cd:09:81:78:64:ff:c7:86:9e:a7:87:d4:
                    d2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A1:48:38:70:82:0D:D8:6E:D9:C9:A4:F7:59:12:D9:D2:10:D9:34
            X509v3 Authority Key Identifier:
                keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:67:ce:63:b4:44:0c:a8:27:5f:0f:ce:87:cf:2e:33:e7:b2:
         05:cf:9c:a8:f7:92:aa:6a:3c:d0:05:f2:1b:f3:86:b5:30:02:
         65:e5:8b:fb:68:27:c4:9d:8f:78:91:c5:a0:b8:f0:b2:01:4d:
         7f:23:d8:2e:74:92:20:d0:a8:26:a1:7f:2d:b1:cd:8e:60:3e:
         91:a2:54:3c:96:0b:58:aa:b0:08:3b:30:c3:1f:e4:12:6c:90:
         57:27:60:4f:27:c8:8e:e5:cd:88:7f:11:ad:a5:8d:0c:9a:7e:
         97:8e:2e:5e:6e:67:25:1f:13:79:54:d8:79:8a:2a:c1:ef:bd:
         eb:c7:fc:bd:ff:6f:60:8b:dd:d8:5e:79:70:4f:53:4d:e2:ca:
         23:23:0e:83:aa:d5:23:d9:09:dd:b2:06:f4:f7:29:34:7b:8b:
         b6:b6:d6:b2:0a:f8:4f:c6:32:f9:88:00:e1:15:3e:41:0b:96:
         0b:0c:3d:70:c0:a4:5a:f4:4f:a7:5a:aa:6c:8c:00:6f:84:ea:
         fd:d0:b0:1b:9a:15:3b:df:12:5b:35:ba:d0:70:41:c7:7d:92:
         e0:ad:6f:69:a3:e6:ad:e1:4d:99:cb:4b:7e:5a:57:f1:6a:20:
         29:87:ef:57:d8:27:8c:15:57:59:ae:cf:ee:fb:fd:b3:e6:a1:
         24:d9:94:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZ4s34FfByTfHHYSiNMfBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZWZlOWQzNmY1Zjg4ZmRmMDQ3NDJjNDE0MGM3NTMyMDkw
YWI3NzAwHhcNMjYxMDA4MDUwMDU2WhcNMjYxMDA5MDUwMDU2WjAzMTEwLwYDVQQD
Eyg1M2ExNDgzODcwODIwZGQ4NmVkOWM5YTRmNzU5MTJkOWQyMTBkOTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZmeyDNNjg7q3XkADP4guAFURtWb
EBV1po/8ARJZBurMO1u4QiL0ROvcqyZcBvu1lKSpHtt/VQDFnzb0dZIK4So4Pg/Z
mPsERJdnuc7tud/LihI04sI0jVZ25yeu27B8OcQA1DhHUAqxk3TV3LebYtpcTzZY
1i2TD/iYpwRiXL44S2q5hZo4NRjTS3Bej3lQXrEHnMB3VqXL52P1rGqg3C9386sX
Gm8Jhe7EiA9Da1OSP/6em0of0VN2QUsvuO/ZtRH/WsjKGXYSTa5VEC31lFaQQIyx
uWdVOciYdwu5RiiV6ux1U6fRbdV5dn+m8X6uboHNCYF4ZP/Hhp6nh9TSfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOhSDhwgg3YbtnJpPdZEtnSENk0MB8GA1UdIwQY
MBaAFNnv6dNvX4j98EdCxBQMdTIJCrdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1Yzkt
MzlmNmQ2NDI1MzM4LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1YzktMzlmNmQ2NDI1MzM4
LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWfOY7RE
DKgnXw/Oh88uM+eyBc+cqPeSqmo80AXyG/OGtTACZeWL+2gnxJ2PeJHFoLjwsgFN
fyPYLnSSINCoJqF/LbHNjmA+kaJUPJYLWKqwCDswwx/kEmyQVydgTyfIjuXNiH8R
raWNDJp+l44uXm5nJR8TeVTYeYoqwe+968f8vf9vYIvd2F55cE9TTeLKIyMOg6rV
I9kJ3bIG9PcpNHuLtrbWsgr4T8Yy+YgA4RU+QQuWCww9cMCkWvRPp1qqbIwAb4Tq
/dCwG5oVO98SWzW60HBBx32S4K1vaaPmreFNmctLflpX8WogKYfvV9gnjBVXWa7P
7vv9s+ahJNmUXg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:43:24 2026 by rpki-client