Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File:                     saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier:          OdkvlroIm8LiigeX0QgY9yQDt3Z8PZ5tk8I+tChjmTU=
Subject key identifier:   15:B6:7D:39:A5:61:AE:A2:CA:C7:71:22:D0:82:B2:5E:3A:00:5D:92
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer:       /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial:       01A0C4E9BF8B6D5ABC3FDB6F8BB8F80E74F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number:          12D4
Signing time:             Mon 21 Sep 2026 17:00:48 +0000
Manifest this update:     Mon 21 Sep 2026 17:00:48 +0000
Manifest next update:     Tue 22 Sep 2026 17:00:48 +0000
Files and hashes:         1: H4TlFSW9YaEptj2rG_zdsa63qRU.roa (hash: kkvqIvLa9fbZkZn/+ru+xDu0mvZ+FojOrOmiey6ddzc=)
                          2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: YidMngHeTtw0Jil8An+GOe6OCYWn0OIf+zGrwyDYIEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:e9:bf:8b:6d:5a:bc:3f:db:6f:8b:b8:f8:0e:74:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
        Validity
            Not Before: Sep 21 17:00:48 2026 GMT
            Not After : Sep 22 17:00:48 2026 GMT
        Subject: CN=15b67d39a561aea2cac77122d082b25e3a005d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:51:a5:2e:0d:5c:33:d8:2c:3c:50:c7:de:
                    77:2f:71:9a:7b:eb:52:d0:37:c0:96:8d:d9:88:48:
                    7c:2f:a2:e0:76:0f:c5:06:76:15:13:12:b4:b5:f2:
                    99:9d:28:87:2b:ad:2c:85:dd:16:28:71:18:f3:5d:
                    1e:e0:ba:6c:ac:f7:56:38:85:17:ab:75:7a:20:92:
                    3c:ed:39:22:b4:65:cb:77:41:a5:a8:7b:24:32:d2:
                    ab:6f:3f:c4:3b:68:d0:f9:a4:03:7a:2d:9e:5f:88:
                    f2:9d:bd:89:45:06:f8:80:46:2e:06:74:46:53:94:
                    b6:66:b7:22:3b:c3:e9:d5:e0:10:68:20:6c:4b:f0:
                    53:06:a9:14:26:4c:47:7b:81:5f:d5:3a:b5:cd:95:
                    8b:3c:0d:9c:c2:69:dd:23:96:6c:c0:f7:b2:f4:1d:
                    eb:1d:e1:48:79:86:ac:c0:24:63:bf:1a:15:91:11:
                    03:7a:ba:66:10:29:29:65:e8:11:7b:c4:47:cf:32:
                    06:27:07:3d:bd:5c:c2:ba:31:28:80:d6:c8:7c:e7:
                    b6:8c:5d:de:c2:f2:52:97:4d:d3:f1:d9:20:b4:76:
                    56:d9:57:56:d7:f8:4f:a7:f8:9a:01:cb:a8:c3:2d:
                    2d:85:2e:2d:1c:53:ad:75:f6:59:84:e7:c0:7d:9e:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B6:7D:39:A5:61:AE:A2:CA:C7:71:22:D0:82:B2:5E:3A:00:5D:92
            X509v3 Authority Key Identifier:
                keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c9:22:5c:34:9e:43:a7:f0:00:3d:f1:98:0f:1f:7b:36:99:
         16:17:27:43:a7:93:98:c7:6b:4f:c3:38:8f:70:79:69:0d:a7:
         96:fc:f6:92:28:84:c1:55:eb:88:b0:bc:2b:a1:5e:a0:4b:e8:
         00:4f:bd:aa:2c:de:0e:65:54:f5:77:1c:5b:bc:6c:89:fe:70:
         34:59:d8:0a:c6:3e:5e:9a:61:4c:dc:07:4e:00:dc:38:5d:c0:
         a5:17:1d:be:21:f7:b5:cc:a1:38:c5:31:c1:0b:47:e1:45:9b:
         1b:0d:f7:0a:ab:c3:f5:1f:a5:51:31:f0:55:b1:65:71:66:f2:
         46:83:e0:b8:2f:47:30:4b:41:3b:68:65:2c:34:e9:5e:84:f2:
         e2:9e:e1:cd:cc:b0:03:72:43:ab:4f:f8:34:64:49:67:dd:1c:
         fc:0b:13:18:22:b7:32:99:c9:7f:54:40:af:50:73:f1:fc:81:
         e8:b5:bc:e2:3f:7c:b1:1c:26:a2:3a:29:36:79:e9:61:99:56:
         4f:b6:4b:f5:89:e1:90:2a:d7:23:6b:0f:00:0b:e2:eb:bc:47:
         d1:d5:26:31:e4:bf:16:c8:ba:64:a4:a6:cd:1e:09:d5:7c:bb:
         0e:b0:ae:6a:6d:62:b8:4c:7f:45:89:b4:e1:36:e2:a2:b8:63:
         58:9a:3f:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDE6b+LbVq8P9tvi7j4DnT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTg5YjY3YzY2ZGViZjVkZWQzZjI4ODBiYjQ5NDFkMzA0
MTEyNTcwHhcNMjYwOTIxMTcwMDQ4WhcNMjYwOTIyMTcwMDQ4WjAzMTEwLwYDVQQD
EygxNWI2N2QzOWE1NjFhZWEyY2FjNzcxMjJkMDgyYjI1ZTNhMDA1ZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIJRpS4NXDPYLDxQx953L3Gae+tS
0DfAlo3ZiEh8L6Lgdg/FBnYVExK0tfKZnSiHK60shd0WKHEY810e4LpsrPdWOIUX
q3V6IJI87TkitGXLd0GlqHskMtKrbz/EO2jQ+aQDei2eX4jynb2JRQb4gEYuBnRG
U5S2ZrciO8Pp1eAQaCBsS/BTBqkUJkxHe4Ff1Tq1zZWLPA2cwmndI5ZswPey9B3r
HeFIeYaswCRjvxoVkREDerpmECkpZegRe8RHzzIGJwc9vVzCujEogNbIfOe2jF3e
wvJSl03T8dkgtHZW2VdW1/hPp/iaAcuowy0thS4tHFOtdfZZhOfAfZ7S7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBW2fTmlYa6iysdxItCCsl46AF2SMB8GA1UdIwQY
MBaAFLGom2fGbev13tPyiAu0lB0wQRJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTct
MjEwMGJmMGYxNDBhLzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTctMjEwMGJmMGYxNDBh
LzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoskiXDSe
Q6fwAD3xmA8fezaZFhcnQ6eTmMdrT8M4j3B5aQ2nlvz2kiiEwVXriLC8K6FeoEvo
AE+9qizeDmVU9XccW7xsif5wNFnYCsY+XpphTNwHTgDcOF3ApRcdviH3tcyhOMUx
wQtH4UWbGw33CqvD9R+lUTHwVbFlcWbyRoPguC9HMEtBO2hlLDTpXoTy4p7hzcyw
A3JDq0/4NGRJZ90c/AsTGCK3MpnJf1RAr1Bz8fyB6LW84j98sRwmojopNnnpYZlW
T7ZL9YnhkCrXI2sPAAvi67xH0dUmMeS/Fsi6ZKSmzR4J1Xy7DrCuam1iuEx/RYm0
4TbiorhjWJo/cA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:05:45 2026 by rpki-client