Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
File:                     fcSs7cuGzd_tf23oyt_KAEabvI4.mft (raw, json)
Hash identifier:          S92VuNLKzEHnqPGMiXeH/Ely/0B2WZ4PlVg08wLvex0=
Subject key identifier:   15:0A:CD:42:17:04:D8:B4:D2:E0:62:70:B4:C9:DA:B2:97:0C:5B:19
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Certificate issuer:       /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial:       01A08A8D778FB756330E88448BBF3750E9D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
Manifest number:          1A5F
Signing time:             Thu 10 Sep 2026 09:02:01 +0000
Manifest this update:     Thu 10 Sep 2026 09:02:01 +0000
Manifest next update:     Fri 11 Sep 2026 09:02:01 +0000
Files and hashes:         1: 8r-SXvmyY8xSeamcpDwi2q3FtQU.asa (hash: vb6RtAuj6AJepb8Z5VeJ1W39+t+GyunhQkNqyLWbWNg=)
                          2: Cl9almC-MnHRf79Rx17mqL3de4s.roa (hash: au7aQyBRsleKEfcWTbTtfB//oyWFLd+LaOHUvN6wKBA=)
                          3: CtomyEXTE0DZf-G3hXGEDs_LcTk.asa (hash: lwfxfVhmuj637uva+sVgZNEUVlG0f2LURl7fzEO3oQY=)
                          4: FRs40rH1nsbuTD3XEyCW5bV_Pds.asa (hash: cZJXay+u0fbI+PrPs4z5BwTR1CMRlGSWGEvUhPzA/As=)
                          5: G0KXXMrHyj_SfN6yM879XTrSmKw.asa (hash: QjCDa7CkqNWLlmNAHi/GInMdrUqsYZ7eya45/kmGxtk=)
                          6: JWmuS5l58_oI3gHX2Kc1MJOZwmM.asa (hash: g0CHKSUHFNoaFRlL4R5UeNrwnEpdUxGYYAXLjA8nNd8=)
                          7: KTUTCaxYQXGAP2Q2CO619vsXhAs.roa (hash: Xxd+caKVzEv01E0Ajz1dp8J3+CKdNysugtSY7+ulyW8=)
                          8: MEEpVIzgTheKFec6PoOFyaXpOWo.asa (hash: gVV6XVT4S8PV07ScolpQujEA/JfYN/a4jd7erjNdSPk=)
                          9: Pge3FHys36yCTMnr7OFTphwCI-g.asa (hash: XE66QDXYoXBZ/BEvECA6R7jkyUnI5l3VLBsSGsToEn0=)
                          10: R7AO6IcvjTtY4l0ByEe_0R_j0AU.roa (hash: MxomD2zeC9vv3+OGbCN11f0B1+3GrxfrkJYc0+4VX6I=)
                          11: Y_--MQK54naD7fpUVFPfwfY6o28.asa (hash: kg46g53Aa38snduq2UGa72Yp4mJfDgCyso9Db03AZTs=)
                          12: ZSFvFvOHpvhz9jdVYyPf-qedyuc.roa (hash: y2p8lWtao0cmGhQ7xMI9uO+GzRfpUJD6YxLs8A6673A=)
                          13: fcSs7cuGzd_tf23oyt_KAEabvI4.crl (hash: eMQIDpOpmwMdX+xx8l8lriFsmzboKIyIqgqlF5AxkSI=)
                          14: lHWMLrOWJPIs4BBwC991DrKwGo4.roa (hash: y28g4c7JhwolCgwgEN4bgF07Be1DrEjj6ZIL1k4Kjr4=)
                          15: o1NMnTzG9Moy6zwkm_w9g5A5ezI.asa (hash: cR8r10MNvnOfwuzEKhH560HlRwbDCkC/THyVeSVUNOs=)
                          16: uLwRD0x9KPEEnzN2MgZWi2x40-E.asa (hash: 1PaplIqaqZ7NhDyll0CiuYqKUbg4HgZz8hzTJAx8oF0=)
                          17: y5gnKCstj08QbZOxZlqBAhmGTdc.asa (hash: ozTLg4xL3aC+x+H/y3W2njsNr13IpvS8JUU4zkKOwL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:77:8f:b7:56:33:0e:88:44:8b:bf:37:50:e9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
        Validity
            Not Before: Sep 10 09:02:01 2026 GMT
            Not After : Sep 11 09:02:01 2026 GMT
        Subject: CN=150acd421704d8b4d2e06270b4c9dab2970c5b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:4b:21:ca:31:ae:99:ac:54:bc:b5:8c:db:
                    b0:d1:be:ae:a0:b2:d0:03:66:aa:9c:51:ac:64:0d:
                    d4:42:3f:ec:8e:a4:30:e0:e3:5b:cc:90:e9:7c:23:
                    ad:26:25:a4:69:bd:c5:fc:a9:3b:d6:36:0c:f0:a3:
                    d1:d1:73:db:6d:f8:f1:0c:00:49:ee:86:f9:e4:db:
                    5f:a3:b0:c2:ee:45:cf:68:4f:26:41:ba:97:81:ad:
                    fc:ce:88:8c:ee:27:df:65:af:fe:82:8a:bb:d2:ce:
                    07:25:a0:85:e7:d3:a0:ce:37:0b:88:39:01:15:3c:
                    ea:75:c2:1a:50:40:c8:65:3d:79:c3:b9:0c:2c:5e:
                    b0:f3:cc:0e:51:01:a2:bf:99:53:63:61:eb:41:2c:
                    7b:00:18:e3:c1:43:21:dc:c1:60:d0:b3:5a:f3:55:
                    5b:53:13:73:93:63:1e:08:10:21:b4:24:1b:41:57:
                    f1:30:1f:41:3c:10:fa:fe:2e:50:ba:5b:9d:a9:70:
                    a6:43:25:43:42:d5:22:e6:a1:6b:2c:2f:bf:9d:30:
                    8f:7e:e4:a5:22:fa:68:77:27:38:00:6f:63:e4:f1:
                    92:22:f8:73:28:91:cf:01:21:52:ac:b8:76:a3:c9:
                    06:bb:b0:2c:6e:c8:09:a1:11:01:77:92:6a:4f:7f:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0A:CD:42:17:04:D8:B4:D2:E0:62:70:B4:C9:DA:B2:97:0C:5B:19
            X509v3 Authority Key Identifier:
                keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:95:6e:13:68:d6:81:dd:5c:69:44:85:0d:49:4e:3d:c7:35:
         0f:1c:7d:94:02:56:2e:a3:86:b7:aa:43:15:12:18:35:eb:8f:
         12:b1:dd:6a:88:12:00:f9:ca:6b:70:b4:78:46:69:a8:28:76:
         d2:0f:ac:85:fb:69:28:f0:9d:bc:77:34:53:3a:19:f8:fd:be:
         b0:73:d4:85:7a:93:9b:86:17:f5:1d:1b:cd:71:df:73:cd:64:
         1c:56:d8:90:f6:8f:02:97:37:13:91:cb:ca:70:7d:b3:fa:65:
         7d:ff:c4:40:d0:03:14:31:c2:c0:2a:52:77:12:b4:78:e8:e7:
         31:a4:8d:1b:e8:cd:c8:3e:39:bd:24:eb:bf:ab:8e:66:22:16:
         46:eb:83:54:16:55:8b:42:4e:3c:87:4f:0e:29:0d:3f:4a:41:
         f0:50:c7:15:07:2d:d5:5c:a4:9f:5b:0a:22:24:b2:c9:8d:14:
         d6:df:c1:6c:5f:3c:41:be:92:88:1d:30:e0:89:ad:7f:17:91:
         4a:60:0c:5c:a1:52:55:c9:d4:52:ae:67:14:2c:a2:c8:0e:ed:
         c7:96:09:d1:13:d1:b6:20:5c:22:48:99:47:3b:90:c0:e7:ec:
         b7:63:2c:41:fb:9c:87:2c:bd:c3:4a:0e:57:33:14:ba:4a:60:
         d6:45:54:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjXePt1YzDohEi783UOnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYzRhY2VkY2I4NmNkZGZlZDdmNmRlOGNhZGZjYTAwNDY5
YmJjOGUwHhcNMjYwOTEwMDkwMjAxWhcNMjYwOTExMDkwMjAxWjAzMTEwLwYDVQQD
EygxNTBhY2Q0MjE3MDRkOGI0ZDJlMDYyNzBiNGM5ZGFiMjk3MGM1YjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ1LIcoxrpmsVLy1jNuw0b6uoLLQ
A2aqnFGsZA3UQj/sjqQw4ONbzJDpfCOtJiWkab3F/Kk71jYM8KPR0XPbbfjxDABJ
7ob55Ntfo7DC7kXPaE8mQbqXga38zoiM7iffZa/+goq70s4HJaCF59OgzjcLiDkB
FTzqdcIaUEDIZT15w7kMLF6w88wOUQGiv5lTY2HrQSx7ABjjwUMh3MFg0LNa81Vb
UxNzk2MeCBAhtCQbQVfxMB9BPBD6/i5QuludqXCmQyVDQtUi5qFrLC+/nTCPfuSl
Ivpodyc4AG9j5PGSIvhzKJHPASFSrLh2o8kGu7AsbsgJoREBd5JqT3/KhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUKzUIXBNi00uBicLTJ2rKXDFsZMB8GA1UdIwQY
MBaAFH3ErO3Lhs3f7X9t6MrfygBGm7yOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zZDJhMTQtNmI3OS00Njg5LTk1Nzkt
Mzk0ODAyODVhOTQ4LzEvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zZDJhMTQtNmI3OS00Njg5LTk1NzktMzk0ODAyODVhOTQ4
LzEvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3JVuE2jW
gd1caUSFDUlOPcc1Dxx9lAJWLqOGt6pDFRIYNeuPErHdaogSAPnKa3C0eEZpqCh2
0g+shftpKPCdvHc0UzoZ+P2+sHPUhXqTm4YX9R0bzXHfc81kHFbYkPaPApc3E5HL
ynB9s/plff/EQNADFDHCwCpSdxK0eOjnMaSNG+jNyD45vSTrv6uOZiIWRuuDVBZV
i0JOPIdPDikNP0pB8FDHFQct1Vykn1sKIiSyyY0U1t/BbF88Qb6SiB0w4ImtfxeR
SmAMXKFSVcnUUq5nFCyiyA7tx5YJ0RPRtiBcIkiZRzuQwOfst2MsQfuchyy9w0oO
VzMUukpg1kVU0Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:35:23 2026 by rpki-client