Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
File:                     pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json)
Hash identifier:          R469qUgf3l3d7P3kOH3YQ7vRpVj/qEKTXA4CjeSWeis=
Subject key identifier:   38:E7:64:94:4C:7E:BD:5D:F5:DB:F7:DB:8F:61:E9:F3:50:D0:BD:8B
Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Certificate issuer:       /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Certificate serial:       01A0EC65F5DB42CF046748495000075F2F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
Manifest number:          1A7B
Signing time:             Tue 29 Sep 2026 09:01:39 +0000
Manifest this update:     Tue 29 Sep 2026 09:01:39 +0000
Manifest next update:     Wed 30 Sep 2026 09:01:39 +0000
Files and hashes:         1: _xbk6TstsNtf1uEDvwohYt6Gqmg.roa (hash: POljjhEax4aAurVZjBSXk9yYPwBhrXFZZutRKo1D0lI=)
                          2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: LjBL8XAdwx/DlUdIzL7A262xUFcYW0TGsVniP0xpUTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:65:f5:db:42:cf:04:67:48:49:50:00:07:5f:2f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
        Validity
            Not Before: Sep 29 09:01:39 2026 GMT
            Not After : Sep 30 09:01:39 2026 GMT
        Subject: CN=38e764944c7ebd5df5dbf7db8f61e9f350d0bd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:a5:43:25:80:14:85:fd:27:f6:fb:1c:40:
                    40:6b:50:2e:b2:48:df:0f:34:3d:d0:b5:2a:7a:1d:
                    9c:dc:50:ae:a8:12:b0:a2:65:cf:08:8b:60:11:b7:
                    1d:00:f9:94:05:53:7c:02:71:05:9d:33:34:8c:f2:
                    79:db:ba:a2:9f:c5:92:1d:9f:10:03:94:de:77:62:
                    43:e7:c6:d1:2c:9e:ec:61:3d:6d:93:d6:8c:57:7f:
                    93:e1:b2:f8:de:7f:ee:da:de:d0:40:bb:db:24:e9:
                    52:c5:11:d5:bf:49:ce:f8:ed:21:5e:44:f3:ec:36:
                    5a:dc:33:c9:ee:2b:db:cd:ca:64:30:03:ec:0d:bd:
                    e7:c1:7f:7f:a1:b3:14:c8:6e:17:50:ff:f9:18:34:
                    b7:85:98:a7:49:53:a5:97:87:6e:83:1f:2e:e1:f4:
                    ef:91:fe:db:71:a8:46:14:78:bb:5b:cd:dd:28:31:
                    86:03:d4:1b:00:2c:de:36:9b:5b:10:15:a1:3f:5f:
                    32:52:de:e1:7d:68:ff:e1:1c:68:d1:cd:78:0b:cd:
                    85:aa:c2:a9:02:e2:1f:40:56:1a:ef:94:d7:c6:a8:
                    2f:a3:18:2a:ce:f7:f0:ec:74:f3:49:2f:7e:48:f1:
                    cd:02:d6:7d:be:78:aa:b2:26:b6:3d:b5:82:d7:e3:
                    36:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E7:64:94:4C:7E:BD:5D:F5:DB:F7:DB:8F:61:E9:F3:50:D0:BD:8B
            X509v3 Authority Key Identifier:
                keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f4:d3:6f:bd:64:e5:54:2b:43:1d:c3:8e:51:f9:11:37:62:
         41:40:f1:9e:24:ef:01:a0:cc:d5:7c:a7:43:32:b8:65:c2:1d:
         a0:e8:2d:62:70:08:6f:f8:df:ad:8f:0c:ee:fb:32:ef:d4:8b:
         7e:47:84:cd:23:c8:33:c8:6f:11:67:14:39:12:a3:ed:c6:1c:
         17:43:c2:04:9d:9e:f2:cd:a3:02:fd:64:ae:1b:6c:ba:3a:46:
         91:5a:80:c6:0c:64:9b:f3:6b:ad:ff:ee:ae:28:de:3d:2e:62:
         3c:0f:89:22:57:7a:81:76:93:b8:29:bd:43:44:33:57:d2:f8:
         05:62:bb:e1:6b:7d:5e:d8:de:c7:41:b3:b5:bc:d6:25:05:74:
         d0:a5:8c:55:fa:b4:b3:7c:db:23:3b:4a:9f:98:c8:8e:ee:dc:
         5e:be:f0:70:55:5f:a6:f2:37:7a:b5:da:2f:1a:0f:2b:17:6f:
         f3:66:ca:77:8f:d2:9b:93:4d:e4:5f:55:2a:6d:5a:63:3a:f8:
         97:eb:cd:90:9a:ba:9f:d3:8e:47:3b:64:6a:0f:af:20:14:08:
         65:1b:8e:a3:2a:da:4f:f8:5f:c0:fb:ea:cc:43:91:be:27:83:
         a3:f1:02:a1:4a:09:17:56:97:a1:5b:f7:eb:85:a7:99:f1:29:
         79:f1:e9:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsZfXbQs8EZ0hJUAAHXy+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWI4M2Y1YmRlMWExZGM5M2RlNjk0NzY4MzdlOWUzYTM3
Nzk3YWYwHhcNMjYwOTI5MDkwMTM5WhcNMjYwOTMwMDkwMTM5WjAzMTEwLwYDVQQD
EygzOGU3NjQ5NDRjN2ViZDVkZjVkYmY3ZGI4ZjYxZTlmMzUwZDBiZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBKlQyWAFIX9J/b7HEBAa1Auskjf
DzQ90LUqeh2c3FCuqBKwomXPCItgEbcdAPmUBVN8AnEFnTM0jPJ527qin8WSHZ8Q
A5Ted2JD58bRLJ7sYT1tk9aMV3+T4bL43n/u2t7QQLvbJOlSxRHVv0nO+O0hXkTz
7DZa3DPJ7ivbzcpkMAPsDb3nwX9/obMUyG4XUP/5GDS3hZinSVOll4dugx8u4fTv
kf7bcahGFHi7W83dKDGGA9QbACzeNptbEBWhP18yUt7hfWj/4Rxo0c14C82FqsKp
AuIfQFYa75TXxqgvoxgqzvfw7HTzSS9+SPHNAtZ9vniqsia2PbWC1+M2XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjnZJRMfr1d9dv3249h6fNQ0L2LMB8GA1UdIwQY
MBaAFKSbg/W94aHck95pR2g36eOjd5evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEt
OTg3NzE5ZWU2YTBjLzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hZDFjNjktY2U1Ni00ZWRhLTg3ZWEtOTg3NzE5ZWU2YTBj
LzEvcEp1RDliM2hvZHlUM21sSGFEZnA0Nk4zbDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPTTb71k
5VQrQx3DjlH5ETdiQUDxniTvAaDM1XynQzK4ZcIdoOgtYnAIb/jfrY8M7vsy79SL
fkeEzSPIM8hvEWcUORKj7cYcF0PCBJ2e8s2jAv1krhtsujpGkVqAxgxkm/Nrrf/u
rijePS5iPA+JIld6gXaTuCm9Q0QzV9L4BWK74Wt9Xtjex0GztbzWJQV00KWMVfq0
s3zbIztKn5jIju7cXr7wcFVfpvI3erXaLxoPKxdv82bKd4/Sm5NN5F9VKm1aYzr4
l+vNkJq6n9OORztkag+vIBQIZRuOoyraT/hfwPvqzEORvieDo/ECoUoJF1aXoVv3
64WnmfEpefHpCw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:46:16 2026 by rpki-client