Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
File:                     80YWUeW-JFCXcpdbqYxw7G7jzXs.mft (raw, json)
Hash identifier:          CIqIrW9nYZgecjj/zZKjE3fI9OWdnD6ehrERcaJbg0U=
Subject key identifier:   54:AF:3A:E3:44:3A:CB:CC:B8:FB:C4:EC:70:5E:AB:09:9B:D0:1D:2C
Authority key identifier: F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
Certificate issuer:       /CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Certificate serial:       01A0BF1E34104EAD75159D294BFE86AF7A2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
Manifest number:          04C8
Signing time:             Sun 20 Sep 2026 14:00:22 +0000
Manifest this update:     Sun 20 Sep 2026 14:00:22 +0000
Manifest next update:     Mon 21 Sep 2026 14:00:22 +0000
Files and hashes:         1: 80YWUeW-JFCXcpdbqYxw7G7jzXs.crl (hash: IPCFnw1qrf6kbuQNN0MCG0eJjTp5od2a7+UtAQ3zef0=)
                          2: Qtc_zuFzRUz7J07L37X5qvUUnhs.roa (hash: D6SdWG5JeosyZFAglIkmKFjIaBi039zmz2skeCVDiYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:1e:34:10:4e:ad:75:15:9d:29:4b:fe:86:af:7a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
        Validity
            Not Before: Sep 20 14:00:22 2026 GMT
            Not After : Sep 21 14:00:22 2026 GMT
        Subject: CN=54af3ae3443acbccb8fbc4ec705eab099bd01d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:0d:67:c6:ce:9d:71:6a:ad:6b:f5:9f:8c:
                    59:bf:b8:48:dd:51:7c:ef:26:eb:65:21:7c:5b:bc:
                    37:ac:a9:78:b5:ad:18:9d:58:fa:9c:11:c9:68:f4:
                    5e:84:04:67:a8:27:8a:fa:63:f8:48:c8:66:3a:1e:
                    f3:cd:d6:d2:18:61:79:a1:5e:39:5b:1d:27:ac:f5:
                    60:6f:48:ed:bb:1f:7c:f1:81:1d:0c:35:fe:06:20:
                    13:d7:50:bf:68:6e:da:3a:06:be:3d:ef:71:16:91:
                    2a:56:11:17:cc:ce:0f:aa:55:f8:9b:f8:64:7d:32:
                    d3:71:65:ad:30:b5:c4:4d:c8:c6:e1:be:0a:c5:35:
                    17:ab:9c:35:cc:49:ef:2d:27:7c:58:b4:fd:20:0d:
                    59:70:42:eb:24:bb:80:3b:7e:31:05:3c:6d:eb:3f:
                    c8:66:fc:24:0c:6c:1c:32:6f:7f:25:d9:58:5a:aa:
                    13:6e:87:3d:65:60:a7:13:f3:dd:62:c5:6d:50:33:
                    c2:21:1a:e4:a0:36:f8:d9:5a:f9:61:83:e1:c6:83:
                    e1:5a:dc:d6:3d:17:c7:48:42:80:d8:d8:81:1e:37:
                    08:a8:48:a7:b0:40:18:86:7d:e2:35:97:b7:ef:84:
                    9b:f0:48:9c:60:51:f0:4e:da:1f:80:1a:24:14:af:
                    16:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AF:3A:E3:44:3A:CB:CC:B8:FB:C4:EC:70:5E:AB:09:9B:D0:1D:2C
            X509v3 Authority Key Identifier:
                keyid:F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:61:4d:95:c2:82:87:87:0d:54:90:c6:51:f4:b7:ee:73:03:
         ab:22:62:64:7b:8f:8d:16:1b:b1:00:71:27:ce:46:ea:e2:cb:
         2f:bc:9f:85:47:92:57:d0:5d:b3:09:ff:bc:00:e2:1d:6c:d9:
         22:04:12:d6:fd:9f:b0:3c:bf:eb:d9:0d:9a:fc:56:e9:8f:4d:
         dd:a6:01:f4:0b:db:76:07:7e:e4:90:04:cb:c4:6d:55:f5:8b:
         ea:7d:e7:e7:85:c6:62:e0:b5:a1:ab:23:4e:84:37:f2:c7:3f:
         cb:75:77:09:e9:9b:d1:ee:2b:9a:6f:91:cd:79:4d:66:da:b2:
         cb:e9:96:6d:f5:5b:c5:7e:aa:0d:da:18:ec:4d:e1:7b:9c:6d:
         88:e2:63:ae:81:db:64:9a:0e:ae:90:0a:0e:48:82:e7:72:57:
         df:c2:0a:e8:32:2e:d5:53:5c:fd:9b:54:9a:97:9d:03:ea:0c:
         03:85:ce:62:b4:cf:70:33:74:50:75:ae:45:b8:c4:e8:91:d5:
         5a:3c:71:68:be:2f:04:76:d4:39:a2:13:1d:7c:c0:8f:05:6b:
         54:1d:80:c2:ce:50:ed:e2:82:79:cd:c7:d1:d4:49:24:e9:05:
         07:60:e9:95:77:65:93:af:c8:32:1d:a9:a5:9f:5d:f8:46:de:
         05:fc:a9:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/HjQQTq11FZ0pS/6Gr3ouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNDYxNjUxZTViZTI0NTA5NzcyOTc1YmE5OGM3MGVjNmVl
M2NkN2IwHhcNMjYwOTIwMTQwMDIyWhcNMjYwOTIxMTQwMDIyWjAzMTEwLwYDVQQD
Eyg1NGFmM2FlMzQ0M2FjYmNjYjhmYmM0ZWM3MDVlYWIwOTliZDAxZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrMNZ8bOnXFqrWv1n4xZv7hI3VF8
7ybrZSF8W7w3rKl4ta0YnVj6nBHJaPRehARnqCeK+mP4SMhmOh7zzdbSGGF5oV45
Wx0nrPVgb0jtux988YEdDDX+BiAT11C/aG7aOga+Pe9xFpEqVhEXzM4PqlX4m/hk
fTLTcWWtMLXETcjG4b4KxTUXq5w1zEnvLSd8WLT9IA1ZcELrJLuAO34xBTxt6z/I
ZvwkDGwcMm9/JdlYWqoTboc9ZWCnE/PdYsVtUDPCIRrkoDb42Vr5YYPhxoPhWtzW
PRfHSEKA2NiBHjcIqEinsEAYhn3iNZe374Sb8EicYFHwTtofgBokFK8WIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSvOuNEOsvMuPvE7HBeqwmb0B0sMB8GA1UdIwQY
MBaAFPNGFlHlviRQl3KXW6mMcOxu4817MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODBZV1VlVy1KRkNYY3BkYnFZeHc3RzdqelhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kZjIwNmItYmRiYi00ZmUwLTlmN2It
YzBhYzRlOWFmM2NiLzEvODBZV1VlVy1KRkNYY3BkYnFZeHc3RzdqelhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9kZjIwNmItYmRiYi00ZmUwLTlmN2ItYzBhYzRlOWFmM2Ni
LzEvODBZV1VlVy1KRkNYY3BkYnFZeHc3RzdqelhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWFNlcKC
h4cNVJDGUfS37nMDqyJiZHuPjRYbsQBxJ85G6uLLL7yfhUeSV9Bdswn/vADiHWzZ
IgQS1v2fsDy/69kNmvxW6Y9N3aYB9Avbdgd+5JAEy8RtVfWL6n3n54XGYuC1oasj
ToQ38sc/y3V3Cemb0e4rmm+RzXlNZtqyy+mWbfVbxX6qDdoY7E3he5xtiOJjroHb
ZJoOrpAKDkiC53JX38IK6DIu1VNc/ZtUmpedA+oMA4XOYrTPcDN0UHWuRbjE6JHV
WjxxaL4vBHbUOaITHXzAjwVrVB2Aws5Q7eKCec3H0dRJJOkFB2DplXdlk6/IMh2p
pZ9d+EbeBfypEg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:09:20 2026 by rpki-client