Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File:                     fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier:          mjYLQrLhkvu0XR38AA4BqSmmrwhoB4nh5bFR2UN//Ho=
Subject key identifier:   9C:86:00:25:19:08:6A:12:6C:9D:4C:66:03:89:55:DB:BD:C6:ED:92
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer:       /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial:       01A08E31E38CCA022D4F81E7B4E7BB54C3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number:          19DC
Signing time:             Fri 11 Sep 2026 02:00:28 +0000
Manifest this update:     Fri 11 Sep 2026 02:00:28 +0000
Manifest next update:     Sat 12 Sep 2026 02:00:28 +0000
Files and hashes:         1: RO8EIzazCz5i9qCar0Fb-jUPsko.roa (hash: DUy255OTmG341QO1OT1MJtYrEowqoZ8jB65GBc6gQ8o=)
                          2: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: kONALksyUxIGTcPfy2NzaH2yI+CcGo75npOLGeNU5Hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 02:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:31:e3:8c:ca:02:2d:4f:81:e7:b4:e7:bb:54:c3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
        Validity
            Not Before: Sep 11 02:00:28 2026 GMT
            Not After : Sep 12 02:00:28 2026 GMT
        Subject: CN=9c86002519086a126c9d4c66038955dbbdc6ed92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:8a:9c:bb:ae:85:09:56:6e:20:01:ec:c9:
                    fc:55:2b:1d:39:50:88:d3:5a:da:11:58:87:a2:8e:
                    ea:26:6c:ca:95:b8:a5:b2:df:7b:e8:a5:bf:e7:b9:
                    b0:e5:03:17:36:7c:ff:27:09:dc:bd:d7:e2:e2:81:
                    e9:1e:7c:31:60:27:b9:c0:73:ed:9f:91:6f:b4:d0:
                    7b:b4:c1:cc:60:37:7c:91:6b:77:39:b6:37:b1:a1:
                    25:69:b4:55:d2:c8:0d:1d:ba:d9:52:11:36:f7:d7:
                    80:b2:c1:26:b1:20:61:7f:25:59:77:72:37:cc:03:
                    cb:2a:71:61:ce:db:1c:ec:4c:bd:6d:c6:79:35:61:
                    53:59:4a:1b:51:ea:b1:b9:d5:52:e2:53:34:ab:67:
                    af:de:2c:68:b8:aa:e5:60:da:93:a2:3d:60:2a:6f:
                    5e:cd:1b:64:93:c2:dd:3a:a6:11:ae:bb:15:14:cb:
                    bc:73:15:d6:be:4a:04:1f:83:c9:ec:38:0c:68:1f:
                    0e:6d:db:9c:5e:3a:da:ee:8e:4a:56:d2:d8:ad:83:
                    be:6f:3c:2a:3f:3a:a5:f3:69:aa:32:03:0d:b8:6d:
                    ac:1d:fc:b3:eb:27:65:81:92:b4:4b:d5:4c:67:ba:
                    e3:92:43:28:02:41:45:ae:f6:79:54:da:0f:e6:77:
                    c8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:86:00:25:19:08:6A:12:6C:9D:4C:66:03:89:55:DB:BD:C6:ED:92
            X509v3 Authority Key Identifier:
                keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d9:73:e2:9f:e1:36:9d:ff:13:df:db:1c:7c:63:83:a4:30:
         ae:09:8b:a0:e3:30:ed:2f:48:b5:eb:1c:79:10:4c:7b:3f:18:
         ca:cb:3c:65:ac:1f:5e:33:85:1c:e5:d8:f8:39:14:88:f0:fe:
         94:03:2b:e2:4b:43:4d:dc:30:63:e9:51:f7:a3:dc:c3:cc:c6:
         2c:67:b5:46:1f:6b:16:40:be:92:13:f8:22:cd:6f:3d:a2:c4:
         c5:24:dc:01:87:3b:7a:1c:b6:21:94:b7:c4:27:0c:bf:ab:b0:
         94:74:bf:65:06:b0:51:39:5f:85:fa:07:f3:cc:43:f4:56:39:
         0e:da:e6:8e:1e:e6:ce:01:cf:2b:86:b1:08:d0:a9:06:07:23:
         4c:46:7e:29:d1:2e:46:a1:0e:a3:e4:a8:ae:e9:d5:28:cf:13:
         9d:1a:0b:77:66:51:28:b0:85:ab:80:3d:ef:8c:bd:ca:e6:1d:
         36:bc:0e:d5:03:af:5e:ad:0a:21:a8:d3:90:ba:1d:bc:37:59:
         92:26:fe:09:65:65:50:2c:b7:c0:6f:ed:22:8d:b3:1c:89:e1:
         cc:46:c0:30:fd:09:d8:1d:79:cc:f9:0d:d9:0b:fb:85:00:9b:
         94:01:53:4a:a4:4c:d6:74:af:4c:a3:9a:ec:95:9b:25:80:ba:
         09:7e:77:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCOMeOMygItT4HntOe7VMPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmM2UwODc0ODllZTIzYTk0MjRkNTNmYWMyMTZlZTRiOGUw
MTI4MGUwHhcNMjYwOTExMDIwMDI4WhcNMjYwOTEyMDIwMDI4WjAzMTEwLwYDVQQD
Eyg5Yzg2MDAyNTE5MDg2YTEyNmM5ZDRjNjYwMzg5NTVkYmJkYzZlZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbiKnLuuhQlWbiAB7Mn8VSsdOVCI
01raEViHoo7qJmzKlbilst976KW/57mw5QMXNnz/Jwncvdfi4oHpHnwxYCe5wHPt
n5FvtNB7tMHMYDd8kWt3ObY3saElabRV0sgNHbrZUhE299eAssEmsSBhfyVZd3I3
zAPLKnFhztsc7Ey9bcZ5NWFTWUobUeqxudVS4lM0q2ev3ixouKrlYNqToj1gKm9e
zRtkk8LdOqYRrrsVFMu8cxXWvkoEH4PJ7DgMaB8ObducXjra7o5KVtLYrYO+bzwq
Pzql82mqMgMNuG2sHfyz6ydlgZK0S9VMZ7rjkkMoAkFFrvZ5VNoP5nfIwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyGACUZCGoSbJ1MZgOJVdu9xu2SMB8GA1UdIwQY
MBaAFH8+CHSJ7iOpQk1T+sIW7kuOASgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMmM5OWQtY2Y5MS00ZGZiLTk0ZGUt
YTdjNjNkNTYyZTU2LzEvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jMmM5OWQtY2Y5MS00ZGZiLTk0ZGUtYTdjNjNkNTYyZTU2
LzEvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndlz4p/h
Np3/E9/bHHxjg6QwrgmLoOMw7S9ItesceRBMez8Yyss8ZawfXjOFHOXY+DkUiPD+
lAMr4ktDTdwwY+lR96Pcw8zGLGe1Rh9rFkC+khP4Is1vPaLExSTcAYc7ehy2IZS3
xCcMv6uwlHS/ZQawUTlfhfoH88xD9FY5Dtrmjh7mzgHPK4axCNCpBgcjTEZ+KdEu
RqEOo+SorunVKM8TnRoLd2ZRKLCFq4A974y9yuYdNrwO1QOvXq0KIajTkLodvDdZ
kib+CWVlUCy3wG/tIo2zHInhzEbAMP0J2B15zPkN2Qv7hQCblAFTSqRM1nSvTKOa
7JWbJYC6CX531A==
-----END CERTIFICATE-----
Generated at Fri Sep 11 10:36:10 2026 by rpki-client