Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
File:                     qHvIMvQSt59zAWbsV-s2waNbBok.mft (raw, json)
Hash identifier:          Sc8NIWF3QlBuHOuDXcqpdlLFg95W7ANZjoJJe6QpI8o=
Subject key identifier:   C2:FC:5A:AD:FF:DC:0E:69:D5:5C:AF:97:09:D9:38:6D:A8:D3:66:D6
Authority key identifier: A8:7B:C8:32:F4:12:B7:9F:73:01:66:EC:57:EB:36:C1:A3:5B:06:89
Certificate issuer:       /CN=a87bc832f412b79f730166ec57eb36c1a35b0689
Certificate serial:       01A0B6F73524E343C75A4788B729318136F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
Manifest number:          0113
Signing time:             Sat 19 Sep 2026 00:00:49 +0000
Manifest this update:     Sat 19 Sep 2026 00:00:49 +0000
Manifest next update:     Sun 20 Sep 2026 00:00:49 +0000
Files and hashes:         1: 3TZvjEfkPGnfb-tMF5tui2UzMj0.roa (hash: QOEhgl7wja/sJ10iRCnuW/2g1XbkedQKiYSWjxKqvZE=)
                          2: qHvIMvQSt59zAWbsV-s2waNbBok.crl (hash: VI5g4038/9EwluK2vVTUoDLEeD3sbT61hRToSaZJQiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:f7:35:24:e3:43:c7:5a:47:88:b7:29:31:81:36:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a87bc832f412b79f730166ec57eb36c1a35b0689
        Validity
            Not Before: Sep 19 00:00:49 2026 GMT
            Not After : Sep 20 00:00:49 2026 GMT
        Subject: CN=c2fc5aadffdc0e69d55caf9709d9386da8d366d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:12:de:67:ed:fd:a3:36:45:e9:9c:fb:10:06:
                    37:e9:26:f2:c9:f6:62:d4:4b:cc:06:4e:32:e7:e1:
                    f0:39:50:c3:be:55:7c:fe:f8:5f:be:d2:f6:08:77:
                    d5:3e:d4:54:e2:3f:2b:13:6b:82:23:24:28:c3:c1:
                    e5:d2:11:ca:1d:44:ab:91:77:60:f0:32:8a:21:28:
                    80:a9:d7:ad:e0:5e:9f:58:aa:03:90:8a:7b:fe:46:
                    55:41:cb:47:bc:de:75:39:00:e4:6b:21:93:76:d3:
                    9f:48:0c:67:78:ac:82:8b:25:77:3b:0b:b8:99:04:
                    1f:1b:6d:07:fa:ef:65:6a:b6:26:03:b9:3f:d2:c0:
                    77:c5:44:5b:09:d3:99:04:45:82:e7:76:f1:1d:12:
                    fa:37:98:00:ec:86:11:f0:2c:22:3c:f5:c8:04:b2:
                    5e:bc:af:e9:5d:b4:72:d4:37:77:df:39:af:ea:a4:
                    f2:7d:af:95:89:69:f5:74:9f:06:1c:92:3e:42:17:
                    98:76:68:57:87:37:13:b9:d4:c4:1e:ae:b9:79:7c:
                    49:10:0e:76:fa:41:9b:d4:66:a7:b9:01:47:c2:69:
                    c2:b9:5b:92:7e:34:56:0e:fd:4f:e3:f7:8a:e5:4d:
                    eb:52:1a:9e:64:f6:1f:7c:e8:a0:a9:22:ac:23:15:
                    8e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FC:5A:AD:FF:DC:0E:69:D5:5C:AF:97:09:D9:38:6D:A8:D3:66:D6
            X509v3 Authority Key Identifier:
                keyid:A8:7B:C8:32:F4:12:B7:9F:73:01:66:EC:57:EB:36:C1:A3:5B:06:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:47:6e:8b:bc:a8:fe:99:2f:80:6c:34:07:9f:9e:9c:50:a1:
         8b:8c:01:e1:db:c4:2d:4c:8a:8e:53:43:d0:c7:17:43:e2:ce:
         b1:12:5a:91:be:cf:6a:e3:12:b4:0c:27:e3:ae:78:72:1f:0d:
         ea:bb:94:c0:b3:ef:ab:d1:52:db:4b:0f:21:37:1c:62:ca:a0:
         40:27:e5:a9:6c:c1:50:62:a8:68:9d:d9:17:5f:c3:70:ef:0d:
         80:7a:0c:64:cd:f0:fc:a1:c0:e7:f7:d1:45:ad:d2:16:a5:df:
         7e:21:6d:ef:03:42:13:0f:15:45:2e:02:c6:b8:f8:76:a7:66:
         c5:d5:85:75:c3:25:25:d9:d6:46:3e:a4:e9:c0:74:21:44:82:
         a7:6d:ef:a6:40:32:06:4f:2d:87:48:c8:ed:f8:df:d7:c2:b4:
         1f:ed:cb:04:a9:d6:67:16:91:12:5b:1e:89:60:7f:db:aa:8f:
         35:c8:a2:18:97:f6:26:9b:33:e2:e9:19:af:e7:9a:38:f7:3f:
         fe:59:c9:e7:a1:14:3f:b6:36:cf:5f:c2:ae:84:5b:a3:58:39:
         07:c3:d7:ea:3d:06:bd:8d:04:48:3f:0a:c6:fe:83:2d:cd:38:
         36:02:c4:8a:71:92:0f:ea:32:1e:9d:65:e7:53:b8:1e:aa:34:
         5c:1a:79:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC29zUk40PHWkeItykxgTb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4N2JjODMyZjQxMmI3OWY3MzAxNjZlYzU3ZWIzNmMxYTM1
YjA2ODkwHhcNMjYwOTE5MDAwMDQ5WhcNMjYwOTIwMDAwMDQ5WjAzMTEwLwYDVQQD
EyhjMmZjNWFhZGZmZGMwZTY5ZDU1Y2FmOTcwOWQ5Mzg2ZGE4ZDM2NmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxLeZ+39ozZF6Zz7EAY36SbyyfZi
1EvMBk4y5+HwOVDDvlV8/vhfvtL2CHfVPtRU4j8rE2uCIyQow8Hl0hHKHUSrkXdg
8DKKISiAqdet4F6fWKoDkIp7/kZVQctHvN51OQDkayGTdtOfSAxneKyCiyV3Owu4
mQQfG20H+u9larYmA7k/0sB3xURbCdOZBEWC53bxHRL6N5gA7IYR8CwiPPXIBLJe
vK/pXbRy1Dd33zmv6qTyfa+ViWn1dJ8GHJI+QheYdmhXhzcTudTEHq65eXxJEA52
+kGb1GanuQFHwmnCuVuSfjRWDv1P4/eK5U3rUhqeZPYffOigqSKsIxWOOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFML8Wq3/3A5p1VyvlwnZOG2o02bWMB8GA1UdIwQY
MBaAFKh7yDL0ErefcwFm7FfrNsGjWwaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUh2SU12UVN0NTl6QVdic1YtczJ3YU5iQm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wMzkwNTctZjFjYS00NmU0LTgyMzct
YTc2NGFkYThiOTVlLzEvcUh2SU12UVN0NTl6QVdic1YtczJ3YU5iQm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wMzkwNTctZjFjYS00NmU0LTgyMzctYTc2NGFkYThiOTVl
LzEvcUh2SU12UVN0NTl6QVdic1YtczJ3YU5iQm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUdui7yo
/pkvgGw0B5+enFChi4wB4dvELUyKjlND0McXQ+LOsRJakb7PauMStAwn4654ch8N
6ruUwLPvq9FS20sPITccYsqgQCflqWzBUGKoaJ3ZF1/DcO8NgHoMZM3w/KHA5/fR
Ra3SFqXffiFt7wNCEw8VRS4Cxrj4dqdmxdWFdcMlJdnWRj6k6cB0IUSCp23vpkAy
Bk8th0jI7fjf18K0H+3LBKnWZxaRElseiWB/26qPNciiGJf2Jpsz4ukZr+eaOPc/
/lnJ56EUP7Y2z1/CroRbo1g5B8PX6j0GvY0ESD8Kxv6DLc04NgLEinGSD+oyHp1l
51O4Hqo0XBp5Dg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 06:04:48 2026 by rpki-client