Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
File:                     mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft (raw, json)
Hash identifier:          UiPuYPbd8hwUxeo6vvwGkFcSsb55EWLPgbvFtbK49DI=
Subject key identifier:   37:08:D1:F9:B7:5D:0C:FA:54:99:17:29:8A:CC:4D:96:7F:49:B7:72
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Certificate issuer:       /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial:       01A074E180385CAC9212A317F83F89237552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
Manifest number:          1928
Signing time:             Sun 06 Sep 2026 04:02:10 +0000
Manifest this update:     Sun 06 Sep 2026 04:02:10 +0000
Manifest next update:     Mon 07 Sep 2026 04:02:10 +0000
Files and hashes:         1: WigjYLiJc8DxIPkzfIDGKwp7BrQ.roa (hash: 2P6nSAZ1sPNq/s5iROpnF+sOeXvgcoADYMvtdAcO7JY=)
                          2: gcMWsBoDFkrh-EvyNxWQMNUmVIE.roa (hash: gknScLT558AwNuqdvMmD/GV256E2UaSmjDtUQzxe0LE=)
                          3: i_-V4OPL2bnrphceOdLgdtuR7V4.roa (hash: MEzcu6m3xXGlNC1nBud+d+m6w2Ubzcn12Gp6SG4lSN4=)
                          4: mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl (hash: i3VmNMcls7vwLEMFDcTHlHumBBb+PMhfy2kvpnizn6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Sep 2026 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:74:e1:80:38:5c:ac:92:12:a3:17:f8:3f:89:23:75:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
        Validity
            Not Before: Sep  6 04:02:10 2026 GMT
            Not After : Sep  7 04:02:10 2026 GMT
        Subject: CN=3708d1f9b75d0cfa549917298acc4d967f49b772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f9:da:c9:b0:98:d2:26:62:6b:bd:5f:bc:96:
                    b7:9d:b9:fd:7a:94:39:28:ea:49:0d:4c:11:08:64:
                    9e:fa:22:1a:be:47:fb:a9:95:71:e7:56:29:3c:6f:
                    55:d1:7c:82:3b:a4:4f:96:f8:1c:c3:fb:a3:9b:67:
                    aa:29:70:6b:3c:88:52:7e:fe:87:1e:ff:3e:be:a3:
                    18:f1:5a:93:b2:8a:cc:ac:22:04:ce:b9:8d:f1:51:
                    40:b2:50:7e:40:9e:a4:9e:fd:af:aa:d6:32:d9:6d:
                    98:da:03:6a:0d:9d:69:bc:1f:7e:6a:dc:a6:41:ad:
                    fd:63:8c:aa:f0:d3:81:c1:e7:fb:cc:c3:49:ea:62:
                    f7:d5:ca:0f:c8:a9:59:35:55:04:17:9d:27:1b:3c:
                    d2:aa:68:10:4c:f2:30:01:7e:5b:a3:d7:37:a5:ad:
                    50:38:4e:31:9c:65:38:11:c1:b1:80:00:65:81:f8:
                    f1:70:17:a6:a5:d6:c7:2b:72:75:14:6e:62:ba:45:
                    14:f4:4d:be:0a:fc:c6:0b:4b:fe:28:05:8e:f4:ea:
                    f1:16:50:de:71:c4:fc:21:a9:9d:77:dc:9f:39:42:
                    61:99:a5:b2:fa:7b:b7:00:2c:92:f9:3e:86:54:72:
                    3d:36:f2:77:f9:9f:28:6d:6a:98:aa:4d:53:40:31:
                    68:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:08:D1:F9:B7:5D:0C:FA:54:99:17:29:8A:CC:4D:96:7F:49:B7:72
            X509v3 Authority Key Identifier:
                keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a1:9d:45:41:a0:ea:50:fd:a3:68:d0:e9:4e:81:aa:65:38:
         b5:2e:86:4a:e9:56:d4:ae:9b:bf:65:01:ec:d7:c5:9e:8d:af:
         55:3d:61:69:d7:c3:fe:ae:91:65:22:13:99:16:57:d8:88:8d:
         a0:d7:dd:71:be:1e:9d:33:6b:91:32:cd:e2:17:ec:55:dd:c1:
         63:50:42:58:e3:0a:3f:1e:89:6c:95:c5:03:2b:8c:ff:63:38:
         1d:28:f7:c6:2a:5c:ae:4c:bd:d4:ec:8b:70:9e:b9:4c:50:5a:
         00:77:53:af:0b:11:fe:25:7e:2d:bb:39:e7:92:e2:be:69:e0:
         6b:a3:ba:b6:c5:3e:a9:0d:91:38:67:87:04:a6:9f:d8:fe:64:
         32:7e:32:36:b2:79:8d:bf:de:d6:64:bb:98:b9:1b:44:20:8b:
         cb:59:60:b9:a2:06:27:f9:80:15:6d:1d:c3:d5:f5:db:c7:a0:
         f4:f4:ac:98:e1:b9:80:31:4d:45:a0:ef:26:d8:1d:68:e1:17:
         bf:5a:c6:f4:d0:41:20:71:15:d5:62:d8:20:14:bb:9d:eb:71:
         98:fe:ff:9b:eb:54:91:d0:85:9e:23:2e:83:e9:ac:df:f6:16:
         8a:d1:49:89:f5:2d:d5:d2:48:f0:ef:fe:89:b3:7f:e3:e7:35:
         0c:2d:0e:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaB04YA4XKySEqMX+D+JI3VSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NTVjNWE3MTM3ZWI1ZDQ3ZWEyNGUxN2QyN2ZhOTJkMGI0
MmZiZDgwHhcNMjYwOTA2MDQwMjEwWhcNMjYwOTA3MDQwMjEwWjAzMTEwLwYDVQQD
EygzNzA4ZDFmOWI3NWQwY2ZhNTQ5OTE3Mjk4YWNjNGQ5NjdmNDliNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PnaybCY0iZia71fvJa3nbn9epQ5
KOpJDUwRCGSe+iIavkf7qZVx51YpPG9V0XyCO6RPlvgcw/ujm2eqKXBrPIhSfv6H
Hv8+vqMY8VqTsorMrCIEzrmN8VFAslB+QJ6knv2vqtYy2W2Y2gNqDZ1pvB9+atym
Qa39Y4yq8NOBwef7zMNJ6mL31coPyKlZNVUEF50nGzzSqmgQTPIwAX5bo9c3pa1Q
OE4xnGU4EcGxgABlgfjxcBempdbHK3J1FG5iukUU9E2+CvzGC0v+KAWO9OrxFlDe
ccT8Iamdd9yfOUJhmaWy+nu3ACyS+T6GVHI9NvJ3+Z8obWqYqk1TQDFocQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcI0fm3XQz6VJkXKYrMTZZ/SbdyMB8GA1UdIwQY
MBaAFJlVxacTfrXUfqJOF9J/qS0LQvvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85NDUzYTAtZTY1NS00ODBlLWI2YTkt
ZTM5NTI0ZTdhNmVkLzEvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy85NDUzYTAtZTY1NS00ODBlLWI2YTktZTM5NTI0ZTdhNmVk
LzEvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqGdRUGg
6lD9o2jQ6U6BqmU4tS6GSulW1K6bv2UB7NfFno2vVT1hadfD/q6RZSITmRZX2IiN
oNfdcb4enTNrkTLN4hfsVd3BY1BCWOMKPx6JbJXFAyuM/2M4HSj3xipcrky91OyL
cJ65TFBaAHdTrwsR/iV+Lbs555Livmnga6O6tsU+qQ2ROGeHBKaf2P5kMn4yNrJ5
jb/e1mS7mLkbRCCLy1lguaIGJ/mAFW0dw9X128eg9PSsmOG5gDFNRaDvJtgdaOEX
v1rG9NBBIHEV1WLYIBS7netxmP7/m+tUkdCFniMug+ms3/YWitFJifUt1dJI8O/+
ibN/4+c1DC0OIg==
-----END CERTIFICATE-----
Generated at Sun Sep 6 07:59:21 2026 by rpki-client