Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
File:                     SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json)
Hash identifier:          4ma9ZX67mcZg0Gm0RmAnnZc+P0CfIajtYTmTTINxtCM=
Subject key identifier:   4B:8F:33:07:D9:1B:9F:AE:87:37:C4:2F:11:37:16:1B:34:C3:6B:AD
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Certificate issuer:       /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial:       01A0FE34EB5426FED2BAE147694CD1F3DE5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
Manifest number:          196E
Signing time:             Fri 02 Oct 2026 20:01:15 +0000
Manifest this update:     Fri 02 Oct 2026 20:01:15 +0000
Manifest next update:     Sat 03 Oct 2026 20:01:15 +0000
Files and hashes:         1: 5LOGjN1Wd__9ZDS6swjA9BXI75k.roa (hash: ubLg2hQhVn8wtB0qM0jKTGRZflH411XYROdch/D1MJI=)
                          2: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: i1HoOmGWLPeFoXAuSZRWXQclUq3Own3zDnUNIVePDfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 20:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fe:34:eb:54:26:fe:d2:ba:e1:47:69:4c:d1:f3:de:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
        Validity
            Not Before: Oct  2 20:01:15 2026 GMT
            Not After : Oct  3 20:01:15 2026 GMT
        Subject: CN=4b8f3307d91b9fae8737c42f1137161b34c36bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:6f:9f:33:ac:05:22:b2:18:b3:0b:fc:91:
                    2f:ab:a2:b9:46:24:f1:df:54:8f:7c:95:4e:4d:81:
                    17:a4:e5:82:31:90:5e:86:03:c8:08:a4:6f:62:92:
                    88:f3:31:3f:fc:97:4e:7b:27:68:89:ea:52:7c:c9:
                    da:00:80:4f:7a:0f:73:15:c0:73:89:39:04:48:7c:
                    cd:bf:a3:7b:87:90:28:00:50:3b:5b:75:80:f9:09:
                    f7:b3:36:0b:55:7a:3a:f7:df:85:05:9f:97:c4:bb:
                    44:90:aa:e5:4d:50:aa:98:7e:c3:f6:8a:6a:6f:23:
                    4e:94:fd:7a:5b:e6:01:cd:fb:9e:69:6c:0c:cd:0e:
                    c8:33:9c:88:99:ee:2b:a7:68:db:1b:99:df:f5:ec:
                    57:65:17:84:14:79:17:64:e8:c0:25:2c:61:b2:0f:
                    42:3a:0d:43:19:f3:c8:43:aa:ea:7d:54:5a:c6:68:
                    0f:09:0e:03:51:d7:c4:93:01:65:eb:08:1c:ad:11:
                    eb:6e:88:91:e5:d2:05:70:dc:4d:3f:8b:40:01:af:
                    5e:61:85:8f:08:07:fe:ee:b0:2a:54:58:4e:b5:71:
                    42:7d:05:ce:d2:95:15:ad:34:67:b2:88:d9:f2:94:
                    5e:9e:b5:7f:56:db:3f:2d:98:c4:7f:f2:e6:bb:46:
                    8e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8F:33:07:D9:1B:9F:AE:87:37:C4:2F:11:37:16:1B:34:C3:6B:AD
            X509v3 Authority Key Identifier:
                keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f2:51:df:eb:e9:31:22:d1:73:99:fa:26:5d:98:10:6a:70:
         d9:72:51:15:5b:17:5e:9f:58:76:87:b2:b5:e5:1a:32:2b:c3:
         b5:a8:69:f5:2b:21:14:1f:8a:49:54:a2:91:17:2f:12:37:56:
         d5:18:c1:3e:ed:41:36:9d:69:8e:ba:39:49:cf:43:cc:d5:0d:
         2e:fe:8c:6d:5a:35:56:b3:42:0a:5f:4b:b1:ef:21:27:b0:53:
         cc:43:ba:81:3f:91:29:46:62:8c:55:69:fa:7c:e0:ee:ce:f3:
         95:1a:8b:f4:3f:1f:39:6d:cd:74:cc:03:59:08:25:bd:7f:20:
         31:fd:45:a7:65:e8:73:4c:16:98:fc:20:aa:e3:9b:fd:40:9d:
         a3:43:e0:2c:22:d1:34:9e:c7:c4:19:82:af:32:e8:63:39:b7:
         f6:0c:36:92:df:ac:a3:ac:23:3c:38:a5:50:ee:93:0d:bd:8b:
         c1:cb:c7:d3:ca:a7:04:94:75:5a:49:a6:c8:97:3e:bb:fa:24:
         7b:66:8c:1b:77:a7:8d:b0:7d:51:58:28:f8:19:5d:e5:8c:a8:
         d2:46:8c:4f:f8:d6:4f:e1:11:07:19:67:bd:13:07:61:f4:6d:
         53:cc:99:0d:48:85:59:29:a2:a1:6e:ea:0a:21:05:9b:1d:d3:
         c2:aa:a1:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD+NOtUJv7SuuFHaUzR895aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTY3ZGMxZGQyYmY5OTFkNzBjZjZlZTg3ZjQzNjFlNzVj
ZWYyMGQwHhcNMjYxMDAyMjAwMTE1WhcNMjYxMDAzMjAwMTE1WjAzMTEwLwYDVQQD
Eyg0YjhmMzMwN2Q5MWI5ZmFlODczN2M0MmYxMTM3MTYxYjM0YzM2YmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHZvnzOsBSKyGLML/JEvq6K5RiTx
31SPfJVOTYEXpOWCMZBehgPICKRvYpKI8zE//JdOeydoiepSfMnaAIBPeg9zFcBz
iTkESHzNv6N7h5AoAFA7W3WA+Qn3szYLVXo699+FBZ+XxLtEkKrlTVCqmH7D9opq
byNOlP16W+YBzfueaWwMzQ7IM5yIme4rp2jbG5nf9exXZReEFHkXZOjAJSxhsg9C
Og1DGfPIQ6rqfVRaxmgPCQ4DUdfEkwFl6wgcrRHrboiR5dIFcNxNP4tAAa9eYYWP
CAf+7rAqVFhOtXFCfQXO0pUVrTRnsojZ8pRenrV/Vts/LZjEf/Lmu0aO5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuPMwfZG5+uhzfELxE3Fhs0w2utMB8GA1UdIwQY
MBaAFEgWfcHdK/mR1wz27of0Nh51zvINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUt
OWU5MWZjYTc4ZjQ3LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82MTZjMDAtZmJlYi00YjMwLTllMjUtOWU5MWZjYTc4ZjQ3
LzEvU0JaOXdkMHItWkhYRFBidWhfUTJIblhPOGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfJR3+vp
MSLRc5n6Jl2YEGpw2XJRFVsXXp9YdoeyteUaMivDtahp9SshFB+KSVSikRcvEjdW
1RjBPu1BNp1pjro5Sc9DzNUNLv6MbVo1VrNCCl9Lse8hJ7BTzEO6gT+RKUZijFVp
+nzg7s7zlRqL9D8fOW3NdMwDWQglvX8gMf1Fp2Xoc0wWmPwgquOb/UCdo0PgLCLR
NJ7HxBmCrzLoYzm39gw2kt+so6wjPDilUO6TDb2LwcvH08qnBJR1WkmmyJc+u/ok
e2aMG3enjbB9UVgo+Bld5Yyo0kaMT/jWT+ERBxlnvRMHYfRtU8yZDUiFWSmioW7q
CiEFmx3Twqqh/Q==
-----END CERTIFICATE-----
Generated at Sat Oct 3 06:24:44 2026 by rpki-client