Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File:                     g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier:          kyDJpyLtHNJd5KJk97Ypx2aXmI8zD/eeZOi5I3D5fug=
Subject key identifier:   F4:8B:E7:AE:43:FD:09:D9:FB:FF:45:F0:5E:5E:96:E4:DE:F6:B9:D3
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer:       /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial:       01A0DD2A5627D26F4EF82631CBDFD96B1CBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number:          11C3
Signing time:             Sat 26 Sep 2026 10:02:14 +0000
Manifest this update:     Sat 26 Sep 2026 10:02:14 +0000
Manifest next update:     Sun 27 Sep 2026 10:02:14 +0000
Files and hashes:         1: 3Ji8ZxtqU_lIwKa_SqT03tF5SWE.roa (hash: jTuElWfRQSD5SofMMRCQ0LeEwPmYlDKmyuYEtvYSFDY=)
                          2: C-g37o81zdQC9_zopBXPpyRUrjU.roa (hash: 2ZRtUbahVnYhC9Kf/nNbZfgsN5/nT4ars1+NMI+6Czk=)
                          3: W5VTroF4zcGApX3Giz89KR2_wWg.roa (hash: GNfQgd1tr7xOtZa17O8ZeusFNmCf6n9fTIUFI6Sv0mk=)
                          4: cWuGeJ6gM-3ve4HkKVmEZUSc7S8.roa (hash: P0kghOMwSQUMU4gKXJ4ASB+7Zwvt3QGVEmH46AdBNrw=)
                          5: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: pKPF4sLN2hdkLxyc4ECNCeAEbDkK9hG5HJUakv9/Ox8=)
                          6: mI1bOyES1SUvd3jXkMpsFL9UDNs.roa (hash: G8pWjV9esRmq6YgXU83pAW+6b6j1UXEhnMOTBHJgNSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 10:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:2a:56:27:d2:6f:4e:f8:26:31:cb:df:d9:6b:1c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
        Validity
            Not Before: Sep 26 10:02:14 2026 GMT
            Not After : Sep 27 10:02:14 2026 GMT
        Subject: CN=f48be7ae43fd09d9fbff45f05e5e96e4def6b9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:2c:86:8a:b9:76:f0:dc:74:ea:fb:a6:72:
                    16:20:cc:ac:0a:cc:42:51:5e:42:d3:e7:7b:5a:a3:
                    d6:5d:ce:13:40:4e:44:14:30:66:db:07:a2:67:53:
                    aa:66:49:20:1e:14:8f:a3:cf:cf:a7:1b:21:68:ef:
                    19:d3:1e:2e:8d:8b:81:5d:da:13:0c:bc:bb:93:ac:
                    0d:6d:e2:52:7c:83:5a:8a:2f:20:25:f6:5d:d7:0a:
                    d0:ee:8a:9b:db:dd:0c:4f:fd:b1:83:f8:a6:90:65:
                    53:b5:c8:ac:5d:3c:0d:08:b3:47:18:b6:69:75:2e:
                    c9:35:ae:a3:10:78:0f:a2:bb:44:28:a3:fd:75:0c:
                    39:1d:70:6f:c2:a3:34:78:29:e2:9f:34:ee:fb:5c:
                    84:82:e8:72:82:7f:04:86:aa:e4:04:df:1b:1e:2a:
                    1f:fd:71:e8:25:fd:7f:49:ce:87:ad:aa:e4:53:45:
                    18:b4:17:57:7d:ea:98:d7:5e:0d:98:d9:71:5a:44:
                    41:8d:ed:d6:af:7d:c4:80:d2:9f:6e:d3:41:c3:0b:
                    d0:c9:5d:28:9a:73:54:bf:8b:20:ab:94:47:be:68:
                    8a:22:81:96:5b:a4:76:11:0b:72:a0:3a:e6:6b:e6:
                    7a:d6:88:47:84:86:38:34:ff:b2:ef:c8:84:4a:d5:
                    17:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8B:E7:AE:43:FD:09:D9:FB:FF:45:F0:5E:5E:96:E4:DE:F6:B9:D3
            X509v3 Authority Key Identifier:
                keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:58:e1:49:f1:62:07:15:aa:07:07:68:93:8b:69:5c:45:5a:
         b6:6c:a4:da:b7:d2:3d:07:a3:18:8c:3f:89:40:71:f1:81:53:
         ce:f4:58:23:62:6d:93:2b:b7:9e:9a:d1:d3:b3:e1:5c:f3:29:
         c1:fb:6a:b0:98:94:b1:88:c4:4a:3b:6a:95:20:93:a8:cf:15:
         43:68:1c:b9:e4:d8:f7:91:0d:b1:27:46:f7:12:7a:6f:2c:7a:
         44:49:70:63:93:ca:f1:b8:06:36:57:47:78:81:f4:91:a3:59:
         3c:69:54:99:ef:ab:43:4f:df:0b:f4:3d:93:cc:e2:1a:04:4b:
         bd:b7:52:d7:f1:ac:f7:62:d6:7b:76:26:c7:98:41:7c:be:69:
         89:7a:96:62:73:4b:7b:5a:82:29:91:59:c1:dd:97:fa:9d:80:
         0e:9b:a8:ed:05:ef:9e:3a:06:8a:a4:85:e9:19:ea:ed:08:04:
         3b:c9:d9:28:74:15:07:fc:a8:99:a9:8a:0b:7e:7f:b8:33:02:
         51:17:0b:c3:88:ab:32:d2:4d:87:20:4a:66:03:e2:c6:48:4c:
         52:e9:ef:71:d2:db:04:46:d3:c1:0d:74:58:37:03:5a:12:bf:
         36:07:f1:6d:17:5c:83:ad:96:57:df:e8:0a:66:2b:f0:94:ba:
         21:2a:e7:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdKlYn0m9O+CYxy9/Zaxy9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzEwM2Q2NWE1NGQ2YWYxZWZiYTZhYzNlNjM3MjIwMjhh
ZjJiYjEwHhcNMjYwOTI2MTAwMjE0WhcNMjYwOTI3MTAwMjE0WjAzMTEwLwYDVQQD
EyhmNDhiZTdhZTQzZmQwOWQ5ZmJmZjQ1ZjA1ZTVlOTZlNGRlZjZiOWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP8shoq5dvDcdOr7pnIWIMysCsxC
UV5C0+d7WqPWXc4TQE5EFDBm2weiZ1OqZkkgHhSPo8/PpxshaO8Z0x4ujYuBXdoT
DLy7k6wNbeJSfINaii8gJfZd1wrQ7oqb290MT/2xg/imkGVTtcisXTwNCLNHGLZp
dS7JNa6jEHgPortEKKP9dQw5HXBvwqM0eCninzTu+1yEguhygn8EhqrkBN8bHiof
/XHoJf1/Sc6HrarkU0UYtBdXfeqY114NmNlxWkRBje3Wr33EgNKfbtNBwwvQyV0o
mnNUv4sgq5RHvmiKIoGWW6R2EQtyoDrma+Z61ohHhIY4NP+y78iEStUXWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSL565D/QnZ+/9F8F5eluTe9rnTMB8GA1UdIwQY
MBaAFIPBA9ZaVNavHvumrD5jciAoryuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQt
YjUwY2Y1ZjJhYTIyLzEvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQtYjUwY2Y1ZjJhYTIy
LzEvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFjhSfFi
BxWqBwdok4tpXEVatmyk2rfSPQejGIw/iUBx8YFTzvRYI2Jtkyu3nprR07PhXPMp
wftqsJiUsYjESjtqlSCTqM8VQ2gcueTY95ENsSdG9xJ6byx6RElwY5PK8bgGNldH
eIH0kaNZPGlUme+rQ0/fC/Q9k8ziGgRLvbdS1/Gs92LWe3Ymx5hBfL5piXqWYnNL
e1qCKZFZwd2X+p2ADpuo7QXvnjoGiqSF6Rnq7QgEO8nZKHQVB/yomamKC35/uDMC
URcLw4irMtJNhyBKZgPixkhMUunvcdLbBEbTwQ10WDcDWhK/NgfxbRdcg62WV9/o
CmYr8JS6ISrn+Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:15:52 2026 by rpki-client