Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
File:                     tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json)
Hash identifier:          UDm4hPMmKAVwJr3rCpyYy6nLmyHyQG/mu3WSQvcdTkc=
Subject key identifier:   B3:8C:92:CB:85:D3:37:5D:12:7E:5C:BF:F9:E6:6E:47:29:94:EA:01
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Certificate issuer:       /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial:       01A0E32B71DAF30CAAA776174B46690E7242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
Manifest number:          1A76
Signing time:             Sun 27 Sep 2026 14:01:10 +0000
Manifest this update:     Sun 27 Sep 2026 14:01:10 +0000
Manifest next update:     Mon 28 Sep 2026 14:01:10 +0000
Files and hashes:         1: 9ZxAC10NuAqnXMcED-lsCy84WUc.roa (hash: 2Vs0nLDkGXSJoDb56Vxw17AmovqxUT3lVuAZuNKdDYU=)
                          2: JWBtzeLFUDlhmERoUCTbc_uAex0.roa (hash: kxreH6y2E+SNRj6sI1npU33Oy4JXyeQw/3NaAYiK4Gk=)
                          3: hbbJ0MKd5AI8GzkfAZt3l1L7uR8.roa (hash: qiesRgMfoPlRIvGxB5feazmMjwpZhmvrVOznCajAxhM=)
                          4: p-BxC3UVD_nEROYM_iUQsrzD9Gw.roa (hash: OH559fj6Vr/ZVBWmRgyMZY/pv/BDJUIdzOx8psGNE+4=)
                          5: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: 1pR0MYSbrxEjozymCATBIDxH9MPB7bU53x7XCt+KSY4=)
                          6: v7DRMSksGTlDfhs744praVhJlnw.roa (hash: whajyGy/1UYHTBKdIHCPuA5IumZDHCjke/Rcxhk8gpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:2b:71:da:f3:0c:aa:a7:76:17:4b:46:69:0e:72:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
        Validity
            Not Before: Sep 27 14:01:10 2026 GMT
            Not After : Sep 28 14:01:10 2026 GMT
        Subject: CN=b38c92cb85d3375d127e5cbff9e66e472994ea01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:75:a3:a1:5c:ca:e0:04:4e:5b:6f:66:ed:e5:
                    e9:e2:28:a8:97:f5:91:9c:31:fb:01:8c:57:a6:f5:
                    d5:1a:e8:fd:2a:fa:56:4a:23:7f:d7:4b:d0:4a:0b:
                    ff:1c:fb:f7:f6:c9:f9:51:1a:02:e5:52:0f:32:93:
                    c9:65:2c:05:5a:67:b2:70:db:ad:e1:db:7e:b4:9e:
                    65:2d:f3:d6:86:f3:50:25:81:6a:c6:85:39:d4:32:
                    7c:d3:4c:ad:e5:57:73:33:f8:8e:bf:1e:eb:95:eb:
                    d8:fd:cd:1c:ba:c6:c6:59:2e:2f:12:ea:54:22:ac:
                    54:1a:d7:5b:f9:66:96:03:82:b7:af:5e:57:c2:bb:
                    38:4d:07:31:64:c7:30:1e:1f:2a:15:16:0f:68:ed:
                    91:b1:47:34:c8:e4:e6:6c:a9:8f:52:59:ec:a0:20:
                    30:d5:20:a8:27:94:29:b3:b3:99:c8:da:6c:a9:42:
                    32:f0:c7:bf:2d:18:71:82:fc:db:5c:13:18:e4:e0:
                    36:71:b9:23:3f:b8:a0:5b:53:4b:9e:ed:b5:90:6c:
                    b8:16:56:0e:5a:61:a1:81:7e:98:75:d1:ea:1b:38:
                    d8:b9:57:63:90:03:37:f6:98:42:41:e8:e7:d6:bc:
                    a7:aa:c7:bd:89:30:c3:64:3a:26:94:24:5f:ab:29:
                    99:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8C:92:CB:85:D3:37:5D:12:7E:5C:BF:F9:E6:6E:47:29:94:EA:01
            X509v3 Authority Key Identifier:
                keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ed:73:bc:9b:0c:db:89:57:84:92:7a:11:af:2b:30:40:8a:
         eb:5a:e6:c7:be:ab:42:91:fd:69:e2:c7:37:3d:d8:07:6c:88:
         07:6e:05:83:46:43:e0:17:30:c5:06:f4:ef:84:4c:92:02:5e:
         10:1f:cd:50:97:46:de:68:f1:58:d0:f6:59:e1:61:67:61:ac:
         45:ba:73:f6:59:3d:9c:d5:aa:bc:66:fa:6e:a5:f3:72:2b:6e:
         50:fb:29:1f:6b:0e:61:e3:7f:31:15:85:04:05:d2:48:ae:c2:
         37:1a:2a:4e:aa:34:09:e7:7b:60:5a:22:2b:6b:6e:de:ea:b2:
         ff:f6:f2:34:ba:8b:f0:98:33:e1:38:55:93:56:19:48:9e:e5:
         d6:81:56:2e:a6:9b:80:1f:21:03:c8:4b:fb:4f:ca:df:1d:db:
         60:6c:5b:ad:84:04:f0:01:db:97:b4:d6:7c:2d:d5:ba:37:ae:
         32:e8:6a:d7:ec:9b:9a:e8:30:21:e4:57:5c:eb:11:e1:7f:81:
         bf:d2:6b:64:4c:a6:29:cb:01:dc:fe:17:a7:e3:6d:34:cd:da:
         79:99:fe:d5:98:ca:91:ef:6c:99:25:e9:c7:16:72:6b:b8:5f:
         5c:39:08:11:6e:fd:86:65:56:88:5c:d9:8c:66:a3:35:b4:03:
         26:dd:10:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDjK3Ha8wyqp3YXS0ZpDnJCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTgwMDMwMGZhNDAxN2Y5NzBjOTVkNzY3ZDgxMmZkMTBk
MGRjYmMwHhcNMjYwOTI3MTQwMTEwWhcNMjYwOTI4MTQwMTEwWjAzMTEwLwYDVQQD
EyhiMzhjOTJjYjg1ZDMzNzVkMTI3ZTVjYmZmOWU2NmU0NzI5OTRlYTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83WjoVzK4AROW29m7eXp4iiol/WR
nDH7AYxXpvXVGuj9KvpWSiN/10vQSgv/HPv39sn5URoC5VIPMpPJZSwFWmeycNut
4dt+tJ5lLfPWhvNQJYFqxoU51DJ800yt5VdzM/iOvx7rlevY/c0cusbGWS4vEupU
IqxUGtdb+WaWA4K3r15Xwrs4TQcxZMcwHh8qFRYPaO2RsUc0yOTmbKmPUlnsoCAw
1SCoJ5Qps7OZyNpsqUIy8Me/LRhxgvzbXBMY5OA2cbkjP7igW1NLnu21kGy4FlYO
WmGhgX6YddHqGzjYuVdjkAM39phCQejn1rynqse9iTDDZDomlCRfqymZCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOMksuF0zddEn5cv/nmbkcplOoBMB8GA1UdIwQY
MBaAFLVYADAPpAF/lwyV12fYEv0Q0Ny8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQt
YzUyZGY0YWE1MjFkLzEvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQtYzUyZGY0YWE1MjFk
LzEvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAru1zvJsM
24lXhJJ6Ea8rMECK61rmx76rQpH9aeLHNz3YB2yIB24Fg0ZD4BcwxQb074RMkgJe
EB/NUJdG3mjxWND2WeFhZ2GsRbpz9lk9nNWqvGb6bqXzcituUPspH2sOYeN/MRWF
BAXSSK7CNxoqTqo0Ced7YFoiK2tu3uqy//byNLqL8Jgz4ThVk1YZSJ7l1oFWLqab
gB8hA8hL+0/K3x3bYGxbrYQE8AHbl7TWfC3VujeuMuhq1+ybmugwIeRXXOsR4X+B
v9JrZEymKcsB3P4Xp+NtNM3aeZn+1ZjKke9smSXpxxZya7hfXDkIEW79hmVWiFzZ
jGajNbQDJt0Qwg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 17:13:21 2026 by rpki-client