Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
File:                     mY3mCoZ7SdsppifG99IjomajIqk.mft (raw, json)
Hash identifier:          OwVUO8sUobkZkd9Ubp0cAKlV5JVm+gX5AEkKwYmSvpI=
Subject key identifier:   5A:F9:11:E1:5D:5B:2E:13:E8:A1:45:1F:83:61:F8:82:18:0B:84:2F
Authority key identifier: 99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9
Certificate issuer:       /CN=998de60a867b49db29a627c6f7d223a266a322a9
Certificate serial:       01A0B53F6B6F304CC9387F38B49893480563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
Manifest number:          0318
Signing time:             Fri 18 Sep 2026 16:00:27 +0000
Manifest this update:     Fri 18 Sep 2026 16:00:27 +0000
Manifest next update:     Sat 19 Sep 2026 16:00:27 +0000
Files and hashes:         1: GhN1yKMoFu8y6eUgkMzzqDeEy_w.roa (hash: zyNIiHMxPOjGUgXy6RCPzfPzuqWlzRBZzmEpfhP+cR4=)
                          2: UXW4TwBbqAg2KVwromTqDGJrE20.roa (hash: iC2l8xQ6yq60AZmCDOxhtpG1B+XfVb2gALUB/AI2BAQ=)
                          3: mY3mCoZ7SdsppifG99IjomajIqk.crl (hash: 8K4e4POnQLIKADlVTH6EIUJCnUguZbedvbGGCwZ9DM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:3f:6b:6f:30:4c:c9:38:7f:38:b4:98:93:48:05:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998de60a867b49db29a627c6f7d223a266a322a9
        Validity
            Not Before: Sep 18 16:00:27 2026 GMT
            Not After : Sep 19 16:00:27 2026 GMT
        Subject: CN=5af911e15d5b2e13e8a1451f8361f882180b842f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3a:18:a9:a2:66:ac:75:a2:9d:ec:16:10:f5:
                    e2:66:94:90:a9:a5:fb:65:98:62:9a:73:b4:cc:a2:
                    91:08:b2:18:41:5c:69:f9:78:26:db:aa:3a:a8:66:
                    5d:7d:64:ae:a9:8d:ba:75:8a:27:6d:9e:7c:07:cc:
                    f4:55:7c:98:75:be:dc:e9:c5:1a:13:1c:c5:37:cb:
                    7b:31:f4:be:9e:09:fb:d0:08:ed:19:0c:3e:85:e6:
                    88:4e:9a:40:bd:37:d3:e5:2d:f1:5d:23:a7:d3:17:
                    a1:01:21:07:a5:49:fc:80:24:98:81:90:6c:2c:04:
                    1c:bf:29:fb:96:e6:9e:2b:fb:40:b2:e8:ec:bf:1b:
                    52:e7:1a:4b:38:97:ab:2e:0c:a5:1b:4d:02:0d:7d:
                    f5:a9:69:96:ad:04:fe:1a:35:69:72:74:65:e8:32:
                    e1:d3:f7:cb:8d:d4:89:47:f7:4b:d5:35:df:47:99:
                    9f:9a:8b:67:fa:06:b6:bf:b9:39:ab:d8:76:3f:45:
                    6f:26:9f:53:13:b9:62:ed:0b:b3:a7:e6:19:10:fb:
                    5a:03:ed:12:12:7e:01:50:1f:db:6d:91:14:8b:c5:
                    01:ff:01:37:8c:3d:83:61:5f:7e:ac:c8:14:78:5a:
                    a4:1a:38:4e:68:dd:2f:79:db:fa:cb:c5:fa:4d:83:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F9:11:E1:5D:5B:2E:13:E8:A1:45:1F:83:61:F8:82:18:0B:84:2F
            X509v3 Authority Key Identifier:
                keyid:99:8D:E6:0A:86:7B:49:DB:29:A6:27:C6:F7:D2:23:A2:66:A3:22:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mY3mCoZ7SdsppifG99IjomajIqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/de171b-5b3c-4b76-b065-20d34e18e270/1/mY3mCoZ7SdsppifG99IjomajIqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0c:0a:66:87:de:a0:85:85:d1:58:09:4e:aa:13:26:1b:ab:
         12:05:c7:21:9b:64:cf:98:15:00:c4:11:56:88:a4:c7:02:5f:
         d1:5c:80:52:3b:66:7e:9b:1c:b8:1c:3a:3b:9f:6d:26:05:83:
         98:8c:86:ea:6d:df:f4:4d:ce:96:df:e4:96:ea:08:aa:0c:8a:
         a6:f1:55:10:ed:cc:16:f8:c5:74:16:b8:1d:38:17:d8:3f:15:
         80:60:75:b3:54:7d:e1:ed:e5:ea:41:0c:b5:0a:25:9f:28:f4:
         5e:64:8e:02:1d:de:d4:76:f4:4a:f9:29:8c:10:47:66:df:32:
         b0:86:bb:4e:6e:3e:50:62:cb:0d:ee:a6:dd:4d:c2:53:dd:8e:
         5f:0d:2e:77:5d:5c:ce:d9:65:a2:28:77:e6:9d:b5:49:69:6b:
         52:06:23:28:1b:ca:e7:b9:43:fa:bb:f1:dd:fb:c1:97:80:06:
         eb:80:47:6c:ad:4f:8d:08:9a:c5:86:71:c0:28:ed:70:d9:f5:
         c6:f2:9b:58:78:c0:bc:09:42:f6:b5:cb:75:54:67:d0:14:bb:
         b1:2d:a7:57:41:5e:bb:5f:3d:cf:57:b2:54:58:73:93:db:71:
         be:11:ee:8b:9b:bc:f2:86:ab:f6:c7:8f:4e:12:82:31:b4:88:
         70:50:eb:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC1P2tvMEzJOH84tJiTSAVjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OGRlNjBhODY3YjQ5ZGIyOWE2MjdjNmY3ZDIyM2EyNjZh
MzIyYTkwHhcNMjYwOTE4MTYwMDI3WhcNMjYwOTE5MTYwMDI3WjAzMTEwLwYDVQQD
Eyg1YWY5MTFlMTVkNWIyZTEzZThhMTQ1MWY4MzYxZjg4MjE4MGI4NDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ToYqaJmrHWinewWEPXiZpSQqaX7
ZZhimnO0zKKRCLIYQVxp+Xgm26o6qGZdfWSuqY26dYonbZ58B8z0VXyYdb7c6cUa
ExzFN8t7MfS+ngn70AjtGQw+heaITppAvTfT5S3xXSOn0xehASEHpUn8gCSYgZBs
LAQcvyn7luaeK/tAsujsvxtS5xpLOJerLgylG00CDX31qWmWrQT+GjVpcnRl6DLh
0/fLjdSJR/dL1TXfR5mfmotn+ga2v7k5q9h2P0VvJp9TE7li7Quzp+YZEPtaA+0S
En4BUB/bbZEUi8UB/wE3jD2DYV9+rMgUeFqkGjhOaN0vedv6y8X6TYPCcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFr5EeFdWy4T6KFFH4Nh+IIYC4QvMB8GA1UdIwQY
MBaAFJmN5gqGe0nbKaYnxvfSI6JmoyKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kZTE3MWItNWIzYy00Yjc2LWIwNjUt
MjBkMzRlMThlMjcwLzEvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kZTE3MWItNWIzYy00Yjc2LWIwNjUtMjBkMzRlMThlMjcw
LzEvbVkzbUNvWjdTZHNwcGlmRzk5SWpvbWFqSXFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewwKZofe
oIWF0VgJTqoTJhurEgXHIZtkz5gVAMQRVoikxwJf0VyAUjtmfpscuBw6O59tJgWD
mIyG6m3f9E3Olt/kluoIqgyKpvFVEO3MFvjFdBa4HTgX2D8VgGB1s1R94e3l6kEM
tQolnyj0XmSOAh3e1Hb0SvkpjBBHZt8ysIa7Tm4+UGLLDe6m3U3CU92OXw0ud11c
ztlloih35p21SWlrUgYjKBvK57lD+rvx3fvBl4AG64BHbK1PjQiaxYZxwCjtcNn1
xvKbWHjAvAlC9rXLdVRn0BS7sS2nV0Feu189z1eyVFhzk9txvhHui5u88oar9seP
ThKCMbSIcFDrnQ==
-----END CERTIFICATE-----
Generated at Fri Sep 18 21:53:37 2026 by rpki-client