Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File:                     5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier:          /JfejFHQ2xzDfGHhMMpIRPHggVPeBA2DMSmMhrJYK/c=
Subject key identifier:   63:F5:76:FF:F3:24:F2:51:96:0B:A9:BD:15:32:6A:12:D6:97:E5:60
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer:       /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial:       01A0C8FD106DA601EF2FC2DE5461C0AD82DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number:          1A6A
Signing time:             Tue 22 Sep 2026 12:00:22 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:22 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:22 +0000
Files and hashes:         1: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: Ih084fDpAIg59NTscqzqtulLVAV3tqlf84sGi5pjjA4=)
                          2: Ir27xg9dLc2jCmst038CD7aSTUE.roa (hash: oSA2uezGmOSkDFovORRhwQlbzwF4ltfNZW/lvc676ZY=)
                          3: WDTYJfU4GmC_Z6SmZBDA6liuL48.roa (hash: FJHas3EZqiie/GgKCvyAh7bXL6nc+V2NXzO+Cw5KyLA=)
                          4: pwYTinLuDu67XvmsuR-F4t51_KA.roa (hash: eNI+YaNU/hzM1s49lx5C1dDOoIT3b4beF5vq3z+7/TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:10:6d:a6:01:ef:2f:c2:de:54:61:c0:ad:82:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
        Validity
            Not Before: Sep 22 12:00:22 2026 GMT
            Not After : Sep 23 12:00:22 2026 GMT
        Subject: CN=63f576fff324f251960ba9bd15326a12d697e560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:d1:cf:b2:27:5f:02:50:71:2c:ea:b3:47:
                    2f:7a:f9:ea:63:84:a1:d3:55:1f:5d:70:89:26:f3:
                    8b:01:2a:03:a2:47:44:6a:f9:bc:1b:de:1f:e7:77:
                    ab:a6:9d:03:f1:a3:56:63:02:ae:f7:9e:87:d7:69:
                    e9:44:ad:93:98:2c:47:22:61:f2:75:19:68:9d:d9:
                    3c:69:42:82:a2:28:5c:62:8f:36:90:be:37:cb:43:
                    1d:b5:36:0f:af:38:c3:d1:04:54:21:31:0f:99:08:
                    bd:6e:86:7e:9f:c3:77:43:5e:9d:8c:00:76:22:41:
                    d5:35:77:40:cc:d2:02:30:22:2d:a4:2d:c5:8f:05:
                    1c:af:5d:33:89:30:35:be:1f:bd:7f:fb:8c:4e:eb:
                    a3:68:d8:36:5f:5e:68:06:96:7e:67:3b:7f:61:01:
                    06:b7:fe:51:14:83:c4:d4:7e:97:83:3a:72:34:07:
                    75:0d:da:e9:b7:37:be:81:14:80:4c:e8:3d:98:23:
                    35:2a:c3:68:0d:d1:15:ae:69:f4:07:e8:38:c6:0c:
                    ba:df:74:af:de:8f:ce:ae:af:0b:fa:ad:fe:a4:28:
                    3c:c5:6a:12:a6:d0:5f:8e:2c:ad:6f:61:97:a3:2e:
                    ec:fa:ae:82:6f:07:e1:93:6b:b7:50:af:59:63:85:
                    1f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F5:76:FF:F3:24:F2:51:96:0B:A9:BD:15:32:6A:12:D6:97:E5:60
            X509v3 Authority Key Identifier:
                keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d5:76:5a:e3:49:7a:62:9e:a7:ea:40:cb:1d:7e:4f:09:7c:
         10:2d:3b:b1:e2:85:54:ee:31:f7:18:9f:68:58:c1:6e:39:0d:
         0c:62:1d:3d:74:a3:96:5a:52:e1:ec:a2:22:07:43:16:f9:ab:
         31:c2:f4:7f:be:e8:1d:c8:32:ee:87:3e:3d:57:96:62:2f:73:
         d3:44:c9:36:39:a6:a6:c7:3e:1f:dc:8a:78:cc:ab:26:c9:b3:
         9b:25:67:8c:45:56:0d:b2:cb:f0:90:6c:e3:a4:70:26:1c:16:
         c4:8a:17:3e:79:a0:25:7e:3a:6f:45:93:44:61:c2:ff:ba:d0:
         b5:a8:34:b9:9a:33:bb:61:ac:02:9c:8e:1c:d0:10:95:61:f3:
         7d:c2:32:af:0b:14:2d:a3:76:9f:0f:d0:6a:ba:06:16:03:c2:
         30:55:66:d1:b0:f9:18:3e:4c:5a:93:b5:c8:2b:1e:74:bd:06:
         8a:90:9e:8b:6c:ee:80:79:01:22:88:37:af:2b:29:ce:f9:64:
         fc:4c:26:58:d2:d4:d3:d6:29:dd:44:76:ae:e8:f6:2e:b1:18:
         4f:fb:e7:d7:b7:e9:54:02:77:96:c0:9b:f7:55:e9:ba:6a:25:
         7d:41:4d:53:fb:fa:31:e0:35:7b:5d:17:be:a2:9a:5c:cb:cb:
         39:4f:ac:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDI/RBtpgHvL8LeVGHArYLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2YyM2Q2ODkzNzQ5NDI4OGRmY2M3YTBlZmUxZmU3NGEy
MDM2ZTEwHhcNMjYwOTIyMTIwMDIyWhcNMjYwOTIzMTIwMDIyWjAzMTEwLwYDVQQD
Eyg2M2Y1NzZmZmYzMjRmMjUxOTYwYmE5YmQxNTMyNmExMmQ2OTdlNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZnRz7InXwJQcSzqs0cvevnqY4Sh
01UfXXCJJvOLASoDokdEavm8G94f53erpp0D8aNWYwKu956H12npRK2TmCxHImHy
dRlondk8aUKCoihcYo82kL43y0MdtTYPrzjD0QRUITEPmQi9boZ+n8N3Q16djAB2
IkHVNXdAzNICMCItpC3FjwUcr10ziTA1vh+9f/uMTuujaNg2X15oBpZ+Zzt/YQEG
t/5RFIPE1H6XgzpyNAd1Ddrptze+gRSATOg9mCM1KsNoDdEVrmn0B+g4xgy633Sv
3o/Orq8L+q3+pCg8xWoSptBfjiytb2GXoy7s+q6Cbwfhk2u3UK9ZY4UfgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGP1dv/zJPJRlgupvRUyahLWl+VgMB8GA1UdIwQY
MBaAFOQ/I9aJN0lCiN/Meg7+H+dKIDbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMt
OWQxODVmNzM4MjExLzEvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMtOWQxODVmNzM4MjEx
LzEvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNV2WuNJ
emKep+pAyx1+Twl8EC07seKFVO4x9xifaFjBbjkNDGIdPXSjllpS4eyiIgdDFvmr
McL0f77oHcgy7oc+PVeWYi9z00TJNjmmpsc+H9yKeMyrJsmzmyVnjEVWDbLL8JBs
46RwJhwWxIoXPnmgJX46b0WTRGHC/7rQtag0uZozu2GsApyOHNAQlWHzfcIyrwsU
LaN2nw/QaroGFgPCMFVm0bD5GD5MWpO1yCsedL0GipCei2zugHkBIog3ryspzvlk
/EwmWNLU09Yp3UR2ruj2LrEYT/vn17fpVAJ3lsCb91XpumolfUFNU/v6MeA1e10X
vqKaXMvLOU+sFA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:29:24 2026 by rpki-client