Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
File:                     5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft (raw, json)
Hash identifier:          02JBTLlq/Bbt+EzM9vzCZXKbunWREooYEt2m6vNWulo=
Subject key identifier:   F0:0A:28:9D:51:7B:F9:AF:BA:3E:86:2A:6D:DB:00:9A:42:C3:EF:E4
Authority key identifier: E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79
Certificate issuer:       /CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
Certificate serial:       01A0C934DF8E7C84930BB76CFF87478BE4C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
Manifest number:          16FB
Signing time:             Tue 22 Sep 2026 13:01:20 +0000
Manifest this update:     Tue 22 Sep 2026 13:01:20 +0000
Manifest next update:     Wed 23 Sep 2026 13:01:20 +0000
Files and hashes:         1: 2FfewzchtBOlT_1-bM1KbwVEptI.roa (hash: XCreExSvtYmion6efW1Ds82lk+nlI9Ef/9JOGZG0IwY=)
                          2: 5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl (hash: KfCfeBmbM0tFk443BqwzpJLI7gzhHz6kXx/zxI1SV2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:34:df:8e:7c:84:93:0b:b7:6c:ff:87:47:8b:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
        Validity
            Not Before: Sep 22 13:01:20 2026 GMT
            Not After : Sep 23 13:01:20 2026 GMT
        Subject: CN=f00a289d517bf9afba3e862a6ddb009a42c3efe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:49:f6:f7:0a:0b:53:c3:59:64:b5:29:a4:
                    8c:21:50:56:e1:8d:5f:14:4d:bf:6f:0a:e4:03:47:
                    72:d1:59:64:fb:1d:f7:ee:22:a1:05:a1:14:e5:14:
                    9f:0a:a2:74:a7:4f:2e:c9:a3:68:d4:8f:3d:d5:6b:
                    81:6c:83:8f:f3:f7:ea:b9:70:4a:e9:34:24:16:c0:
                    9e:4e:e0:e2:95:f2:69:d5:fd:28:06:c5:94:d4:46:
                    05:d2:64:dd:56:12:ba:d7:82:44:42:77:f7:8a:06:
                    11:3c:82:87:c9:d8:84:4b:58:59:54:c7:f4:1e:23:
                    17:5c:c2:f3:23:ab:cf:34:ce:c6:e9:64:77:4e:ef:
                    2b:5f:f9:ae:a9:8b:7e:ef:e1:aa:6a:36:55:ff:d9:
                    b2:59:1e:a9:75:fa:b8:c5:21:e3:6d:34:03:fd:b9:
                    a3:c9:55:c4:f7:41:55:cd:43:98:57:a5:49:f7:90:
                    33:33:c0:6d:82:61:a0:9f:da:b0:aa:a5:2e:16:0e:
                    d1:d0:fb:e5:ea:68:a4:cc:60:f0:77:38:06:07:6e:
                    2c:f3:fc:28:cb:8f:75:16:cb:01:51:80:f8:31:6c:
                    41:4c:99:91:37:69:23:aa:01:18:4f:ff:a8:ab:76:
                    ce:0e:8d:ed:ec:50:8f:03:02:67:92:a5:c9:29:0e:
                    84:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0A:28:9D:51:7B:F9:AF:BA:3E:86:2A:6D:DB:00:9A:42:C3:EF:E4
            X509v3 Authority Key Identifier:
                keyid:E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:55:4e:9e:9e:58:46:d9:a7:5f:95:f5:83:6d:a7:ca:02:1d:
         d0:e1:de:a8:20:8d:89:56:ad:22:ca:aa:16:f7:38:78:2a:0c:
         34:85:18:55:a6:70:43:99:30:99:eb:8a:e3:2b:1b:e0:7b:10:
         f5:dd:95:6c:8e:b5:45:d9:d8:94:10:c7:44:9f:80:47:0f:dc:
         ce:8f:e0:83:4e:64:e3:1c:cf:f0:a5:c0:8e:2b:7a:27:cf:32:
         7c:46:13:34:29:36:fb:3e:f7:1e:d0:6f:ac:98:04:ef:3e:6e:
         e2:44:bd:20:03:d2:b3:df:fe:3d:76:f8:73:f8:3f:37:0b:76:
         b0:eb:c7:50:3f:a2:83:d7:13:7e:75:dd:7d:a5:78:23:96:6b:
         54:22:06:82:30:47:33:13:b1:08:27:cd:a1:10:b2:97:ea:9c:
         5d:e8:f1:e7:5d:0e:a2:85:d2:42:1a:af:7d:8d:ed:60:9b:5a:
         07:47:2c:e5:a4:71:3a:ae:3e:41:86:ff:0b:f5:0b:d0:91:96:
         81:75:10:d7:70:64:1e:3d:fe:60:51:9e:12:19:db:3d:cd:68:
         19:c7:e0:5e:5a:4f:5f:b3:27:a3:87:78:8b:26:38:a2:cd:cd:
         5f:ef:e2:47:ac:44:61:be:8b:f1:27:c4:09:59:e3:bf:7d:7b:
         3a:5a:57:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJNN+OfISTC7ds/4dHi+TAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MWJmNzhiNzBhYzI3NmNiZjY1YmI5MDlmOTkzNDA4MmY0
ZDJkNzkwHhcNMjYwOTIyMTMwMTIwWhcNMjYwOTIzMTMwMTIwWjAzMTEwLwYDVQQD
EyhmMDBhMjg5ZDUxN2JmOWFmYmEzZTg2MmE2ZGRiMDA5YTQyYzNlZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOtJ9vcKC1PDWWS1KaSMIVBW4Y1f
FE2/bwrkA0dy0Vlk+x337iKhBaEU5RSfCqJ0p08uyaNo1I891WuBbIOP8/fquXBK
6TQkFsCeTuDilfJp1f0oBsWU1EYF0mTdVhK614JEQnf3igYRPIKHydiES1hZVMf0
HiMXXMLzI6vPNM7G6WR3Tu8rX/muqYt+7+GqajZV/9myWR6pdfq4xSHjbTQD/bmj
yVXE90FVzUOYV6VJ95AzM8BtgmGgn9qwqqUuFg7R0Pvl6mikzGDwdzgGB24s8/wo
y491FssBUYD4MWxBTJmRN2kjqgEYT/+oq3bODo3t7FCPAwJnkqXJKQ6EhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAKKJ1Re/mvuj6GKm3bAJpCw+/kMB8GA1UdIwQY
MBaAFOQb94twrCdsv2W7kJ+ZNAgvTS15MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJ2M2kzQ3NKMnlfWmJ1UW41azBDQzlOTFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wY2MwNDItY2YyYi00NjE2LTkyZTAt
YWYwNTU2YzQ3YTM3LzEvNUJ2M2kzQ3NKMnlfWmJ1UW41azBDQzlOTFhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8wY2MwNDItY2YyYi00NjE2LTkyZTAtYWYwNTU2YzQ3YTM3
LzEvNUJ2M2kzQ3NKMnlfWmJ1UW41azBDQzlOTFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVVOnp5Y
RtmnX5X1g22nygId0OHeqCCNiVatIsqqFvc4eCoMNIUYVaZwQ5kwmeuK4ysb4HsQ
9d2VbI61RdnYlBDHRJ+ARw/czo/gg05k4xzP8KXAjit6J88yfEYTNCk2+z73HtBv
rJgE7z5u4kS9IAPSs9/+PXb4c/g/Nwt2sOvHUD+ig9cTfnXdfaV4I5ZrVCIGgjBH
MxOxCCfNoRCyl+qcXejx510OooXSQhqvfY3tYJtaB0cs5aRxOq4+QYb/C/UL0JGW
gXUQ13BkHj3+YFGeEhnbPc1oGcfgXlpPX7Mno4d4iyY4os3NX+/iR6xEYb6L8SfE
CVnjv317OlpXHA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:47:29 2026 by rpki-client