Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File:                     P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier:          TBGg2HhXOc1fvbrw4ifMkkcWGrfhQ3+dAchNfET+WPM=
Subject key identifier:   C7:15:7B:94:14:0F:CA:B5:1F:5A:25:19:CD:1E:A1:1C:7B:D5:B9:24
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer:       /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial:       01A08D8D4EFC512ED92EA32C2A320C25EAF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number:          1660
Signing time:             Thu 10 Sep 2026 23:00:43 +0000
Manifest this update:     Thu 10 Sep 2026 23:00:43 +0000
Manifest next update:     Fri 11 Sep 2026 23:00:43 +0000
Files and hashes:         1: 3W2kBgMIvhcXUhUq2YtKk1xN_AU.roa (hash: CAsZ3C2TdySi/ZWvlReBuoW/T5KbXTvFwU9q/tZJ4e0=)
                          2: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: 2uQEFc7oGSWeZSufkaSW5F9Kszg4L3HtRvatNLSXu+0=)
                          3: RbC01VwFxiZgBTALS-uMjRZzAhY.roa (hash: q9hSu3/IMM4HWr9vjCMGx9EywT+vVqNbYQnoN0MBA20=)
                          4: _FgKHiwZ54ey0goItnrxJYHRboo.roa (hash: sg5CvvnTfG2oD+toERRbafBqjfE3xSjzejxaJO1LxU8=)
                          5: gSlaPw018DNPuMxCsveqA8oQUsY.roa (hash: 0+yjCTwe2aAK7n4AkPNcQnffX1JuMjM0FZBSULYc1vQ=)
                          6: z2A2T1nq3TaPFhF11ccXgPg0K_M.roa (hash: FIAAHyPL1J0jzI8B5mvusigwqLIBDgZSTDh7qjXNzTM=)
                          7: zXZDjCl_wpe20vJI7Svnpaah_LM.roa (hash: Uex3ZzOS035SmbmtX2k6Jvjfz1dsWhh2Uu53J7YkHiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:8d:4e:fc:51:2e:d9:2e:a3:2c:2a:32:0c:25:ea:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
        Validity
            Not Before: Sep 10 23:00:43 2026 GMT
            Not After : Sep 11 23:00:43 2026 GMT
        Subject: CN=c7157b94140fcab51f5a2519cd1ea11c7bd5b924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:42:22:31:d8:88:e9:ab:ef:fd:63:59:97:ae:
                    1c:2e:22:95:72:05:2d:7b:1a:b2:95:9b:7a:f7:36:
                    cd:d9:ad:81:3f:2a:56:69:6e:c0:00:d9:71:32:27:
                    b6:25:85:98:29:b9:b8:cb:ef:75:30:8f:e4:e3:a9:
                    ca:09:6a:35:32:df:2c:73:03:9c:9c:33:62:96:25:
                    f0:8e:d6:5e:5a:59:f9:c6:31:7c:9a:76:9c:f0:bf:
                    fe:f9:a5:b0:35:50:26:17:c3:b6:9f:ed:ca:df:49:
                    a1:21:a6:e7:cf:f2:6f:1c:25:15:86:d8:c2:4c:52:
                    2c:1c:bc:28:b7:bb:dd:74:72:84:d7:a6:05:d5:d7:
                    3a:29:e3:ab:21:1c:47:d3:41:1b:37:9e:e1:18:bf:
                    fc:0c:b5:7d:99:cb:af:f9:2b:2a:21:21:42:da:fe:
                    45:85:4b:1e:0b:d9:20:48:70:07:48:3b:1a:ca:41:
                    dd:a4:07:03:88:68:bf:f7:95:ee:28:2f:bc:64:5e:
                    89:9c:97:e3:a0:4c:c3:28:04:89:fd:dd:6f:85:bd:
                    a6:ee:32:7c:df:9b:b3:32:2e:d4:f9:38:f0:a1:b7:
                    76:68:22:a9:65:fc:67:c6:e5:21:6c:ee:ac:4b:6c:
                    b4:9d:91:da:14:3c:d0:4d:2d:f2:1f:a5:c7:20:c4:
                    b0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:15:7B:94:14:0F:CA:B5:1F:5A:25:19:CD:1E:A1:1C:7B:D5:B9:24
            X509v3 Authority Key Identifier:
                keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:cc:03:0f:49:a8:b8:7c:ba:ee:00:fe:5b:50:f2:91:6b:20:
         b3:6a:3d:e2:ba:ec:46:66:44:54:1b:61:f4:4a:36:ff:1c:14:
         b0:40:8d:09:d4:8f:01:91:fc:bf:21:de:a0:3e:53:12:21:a1:
         91:fd:ad:ee:77:60:89:ed:96:36:f4:fb:54:78:79:67:bc:b0:
         15:63:23:db:de:d2:2f:80:61:ce:97:92:6b:7d:89:cc:7e:04:
         74:d3:19:4f:5a:e6:cb:c1:1e:80:f1:41:0f:20:a6:d0:4e:a3:
         99:f9:b9:c2:7f:ba:24:3d:c8:d8:83:f2:94:45:0e:91:3b:30:
         2d:8b:69:93:1e:24:4e:34:71:51:d5:b7:4c:b9:b9:5c:43:92:
         a4:3d:cb:c8:ed:77:31:b4:19:67:1e:a9:46:84:86:a7:5a:b8:
         ff:81:fe:1a:8d:71:32:06:c8:50:d3:5b:f7:3b:64:2c:65:3d:
         6a:0b:45:d2:22:85:5d:2e:62:9a:38:45:2b:14:07:01:e3:40:
         e4:c6:04:ae:79:0a:ac:37:ca:e8:bf:db:58:44:f8:6a:e7:45:
         7b:e8:83:6b:65:91:f6:1b:54:d0:c0:ed:24:db:04:a4:8a:b1:
         ae:64:81:71:53:16:e4:46:ce:15:8b:ba:f7:b6:08:69:ff:1f:
         03:50:be:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNjU78US7ZLqMsKjIMJerwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDRkMmZkYmVlM2FhM2UxMjE0MjhlYTcwNTBjOTQzOWQ4
ODg2YTkwHhcNMjYwOTEwMjMwMDQzWhcNMjYwOTExMjMwMDQzWjAzMTEwLwYDVQQD
EyhjNzE1N2I5NDE0MGZjYWI1MWY1YTI1MTljZDFlYTExYzdiZDViOTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kIiMdiI6avv/WNZl64cLiKVcgUt
exqylZt69zbN2a2BPypWaW7AANlxMie2JYWYKbm4y+91MI/k46nKCWo1Mt8scwOc
nDNiliXwjtZeWln5xjF8mnac8L/++aWwNVAmF8O2n+3K30mhIabnz/JvHCUVhtjC
TFIsHLwot7vddHKE16YF1dc6KeOrIRxH00EbN57hGL/8DLV9mcuv+SsqISFC2v5F
hUseC9kgSHAHSDsaykHdpAcDiGi/95XuKC+8ZF6JnJfjoEzDKASJ/d1vhb2m7jJ8
35uzMi7U+Tjwobd2aCKpZfxnxuUhbO6sS2y0nZHaFDzQTS3yH6XHIMSwIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcVe5QUD8q1H1olGc0eoRx71bkkMB8GA1UdIwQY
MBaAFD/U0v2+46o+EhQo6nBQyUOdiIapMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlUU19iN2pxajRTRkNqcWNGREpRNTJJaHFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NmI2OTItNGJiMy00NzNlLTk0MTMt
NjI2MWU1YjFmYzIwLzEvUDlUU19iN2pxajRTRkNqcWNGREpRNTJJaHFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82NmI2OTItNGJiMy00NzNlLTk0MTMtNjI2MWU1YjFmYzIw
LzEvUDlUU19iN2pxajRTRkNqcWNGREpRNTJJaHFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8wDD0mo
uHy67gD+W1DykWsgs2o94rrsRmZEVBth9Eo2/xwUsECNCdSPAZH8vyHeoD5TEiGh
kf2t7ndgie2WNvT7VHh5Z7ywFWMj297SL4BhzpeSa32JzH4EdNMZT1rmy8EegPFB
DyCm0E6jmfm5wn+6JD3I2IPylEUOkTswLYtpkx4kTjRxUdW3TLm5XEOSpD3LyO13
MbQZZx6pRoSGp1q4/4H+Go1xMgbIUNNb9ztkLGU9agtF0iKFXS5imjhFKxQHAeNA
5MYErnkKrDfK6L/bWET4audFe+iDa2WR9htU0MDtJNsEpIqxrmSBcVMW5EbOFYu6
97YIaf8fA1C+SA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:31:54 2026 by rpki-client