Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File:                     k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier:          E6se/UfEp/M88aAkdO2sQKc4Sqa+hY4sEZZwuPkxKt4=
Subject key identifier:   D1:2F:BA:10:66:8C:A9:A3:C4:96:67:9B:CE:F1:49:24:CA:C0:3B:57
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer:       /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial:       01A0C1B14D285D7FD6CEE58B7D2BD28956C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number:          0834
Signing time:             Mon 21 Sep 2026 02:00:17 +0000
Manifest this update:     Mon 21 Sep 2026 02:00:17 +0000
Manifest next update:     Tue 22 Sep 2026 02:00:17 +0000
Files and hashes:         1: IDdWjfqKDEDoT5owNDTMrvBAidI.roa (hash: Cun9jfihjGmUz4jQNcB3IyvoxQWP4/ccqsrygK3OW84=)
                          2: NVKj6woT-fJPaVfcr9O7EUW5AlE.roa (hash: 9pmWIL3rH5wkbK7AJiKnnwiKMYGWFVxGS8vZ/hHe2wI=)
                          3: RPKrBbNxp_9CQhYxptiK6qfqSbk.roa (hash: NUJEbh3bKvsth8HU3RWkiOC5sGfAZYVM2xyBk7b/x6I=)
                          4: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: QItrEeDSqpndY49WL2UkA7zPJAYFJLPSfndzyUmXx7I=)
                          5: rE96S2aKHeQZf0vrmquN8VX13fE.roa (hash: YrRMU2rXe7xngSe3xWiIAdBIEOfG76Z85QBRZWlUgPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:b1:4d:28:5d:7f:d6:ce:e5:8b:7d:2b:d2:89:56:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
        Validity
            Not Before: Sep 21 02:00:17 2026 GMT
            Not After : Sep 22 02:00:17 2026 GMT
        Subject: CN=d12fba10668ca9a3c496679bcef14924cac03b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:b9:1d:f6:f2:ee:48:6d:08:74:43:08:91:
                    30:ce:d6:c9:33:c8:2f:21:2f:b1:c0:f9:ca:ab:f0:
                    47:f0:c8:11:f4:04:ab:f5:40:79:0f:22:32:02:a1:
                    0c:0f:98:7c:54:87:37:b4:4e:3a:2d:a5:2c:c8:a0:
                    ba:b2:9d:e5:c5:06:52:95:aa:32:a5:9a:6e:76:5c:
                    a9:8a:b2:a8:1c:77:65:ce:01:ca:7c:a5:6b:f8:1b:
                    7f:74:6a:2c:58:56:5b:34:d1:e5:b8:7d:43:d2:91:
                    8e:8c:60:87:74:e5:8f:f0:14:e0:a4:f8:1c:ed:26:
                    92:15:b7:73:64:5b:bb:2d:ee:b9:68:e1:fc:6a:5b:
                    cf:ef:ec:46:2b:d3:7a:b5:28:0a:88:45:f1:e8:1f:
                    45:9a:70:58:fe:99:1f:9b:7c:fc:db:fd:21:82:7e:
                    3e:27:33:30:48:9b:04:77:5a:46:da:13:0c:2c:1f:
                    37:14:8a:00:5e:11:8c:00:10:11:bc:63:60:92:31:
                    34:39:0d:d9:aa:54:95:16:f9:dc:c7:cd:3f:10:ad:
                    2f:60:7d:97:c5:ef:31:87:26:09:d0:f6:00:c1:f5:
                    64:bd:9a:8d:db:b9:c7:d6:5e:6a:f4:6e:ee:40:c9:
                    d4:22:d0:97:ba:81:a5:19:3c:d7:3f:70:02:57:0e:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2F:BA:10:66:8C:A9:A3:C4:96:67:9B:CE:F1:49:24:CA:C0:3B:57
            X509v3 Authority Key Identifier:
                keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:09:e1:76:54:09:a0:aa:6e:fa:41:e6:8a:ef:f8:0a:02:e6:
         aa:ae:7d:17:99:0d:5a:1e:dc:58:97:c9:0e:58:1b:a8:68:7a:
         da:4a:d3:b0:63:39:fc:9c:f1:53:b2:81:60:30:94:f6:22:c3:
         e7:4b:59:b4:d3:f6:85:f1:63:f1:97:25:c1:86:42:9b:66:49:
         5b:86:d4:2f:16:0e:98:d2:05:06:30:3e:4c:16:60:fd:7d:e0:
         a7:1f:db:f8:34:2f:1f:91:e7:7f:cc:eb:ab:60:ee:d1:53:78:
         a8:72:8e:a8:58:6e:3a:63:1f:ba:f5:26:cc:df:3b:e0:cc:0f:
         17:8f:03:18:a1:69:50:4f:73:18:d6:48:f4:2a:61:4d:09:b7:
         fa:f3:36:a5:bc:de:e0:c8:e2:be:bd:1b:67:53:19:88:a8:77:
         5e:05:5c:96:7c:11:71:b1:2a:97:b0:c7:26:f6:70:ad:28:33:
         af:24:04:fe:06:33:84:83:94:2e:94:2a:e1:85:ca:56:be:eb:
         6e:d4:43:8c:86:56:c4:0c:ef:ad:47:d2:5f:dd:7e:d1:9b:6a:
         2a:72:71:7d:6a:11:17:70:e0:00:d0:7a:6a:58:99:b3:61:cb:
         2a:3d:ce:b7:b3:22:8b:9d:80:ec:09:0d:d6:d8:ea:29:ff:3d:
         6c:94:df:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsU0oXX/WzuWLfSvSiVbBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWZhMmJmOTBhMjM3Mjg4NTI3MjdmMTI2ZWRlNjUyODZj
M2NhNjcwHhcNMjYwOTIxMDIwMDE3WhcNMjYwOTIyMDIwMDE3WjAzMTEwLwYDVQQD
EyhkMTJmYmExMDY2OGNhOWEzYzQ5NjY3OWJjZWYxNDkyNGNhYzAzYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbq5Hfby7khtCHRDCJEwztbJM8gv
IS+xwPnKq/BH8MgR9ASr9UB5DyIyAqEMD5h8VIc3tE46LaUsyKC6sp3lxQZSlaoy
pZpudlypirKoHHdlzgHKfKVr+Bt/dGosWFZbNNHluH1D0pGOjGCHdOWP8BTgpPgc
7SaSFbdzZFu7Le65aOH8alvP7+xGK9N6tSgKiEXx6B9FmnBY/pkfm3z82/0hgn4+
JzMwSJsEd1pG2hMMLB83FIoAXhGMABARvGNgkjE0OQ3ZqlSVFvncx80/EK0vYH2X
xe8xhyYJ0PYAwfVkvZqN27nH1l5q9G7uQMnUItCXuoGlGTzXP3ACVw7rcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEvuhBmjKmjxJZnm87xSSTKwDtXMB8GA1UdIwQY
MBaAFJPvor+QojcohScn8Sbt5lKGw8pnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDkt
NmFiYjFjY2I2MTUzLzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hOTJlYjItYjJiYS00ZWZkLWJkMDktNmFiYjFjY2I2MTUz
LzEvay0taXY1Q2lOeWlGSnlmeEp1M21Vb2JEeW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgnhdlQJ
oKpu+kHmiu/4CgLmqq59F5kNWh7cWJfJDlgbqGh62krTsGM5/JzxU7KBYDCU9iLD
50tZtNP2hfFj8ZclwYZCm2ZJW4bULxYOmNIFBjA+TBZg/X3gpx/b+DQvH5Hnf8zr
q2Du0VN4qHKOqFhuOmMfuvUmzN874MwPF48DGKFpUE9zGNZI9CphTQm3+vM2pbze
4Mjivr0bZ1MZiKh3XgVclnwRcbEql7DHJvZwrSgzryQE/gYzhIOULpQq4YXKVr7r
btRDjIZWxAzvrUfSX91+0ZtqKnJxfWoRF3DgANB6aliZs2HLKj3Ot7Mii52A7AkN
1tjqKf89bJTfwQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:23:37 2026 by rpki-client