Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
File:                     sL_SyF5redRg5mDPlmTe5V3MyMw.mft (raw, json)
Hash identifier:          Ka1eJpXo1cERGPHA+uKcTVlJdf1Km4jmiPhFASr0B/4=
Subject key identifier:   0B:C0:00:D1:F1:4D:5F:DA:75:BF:7D:4D:7E:6C:9E:C3:C4:E1:78:AF
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Certificate issuer:       /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial:       01A0BEE70D43ABCD22068F1EE9FD520FEF55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
Manifest number:          133A
Signing time:             Sun 20 Sep 2026 13:00:08 +0000
Manifest this update:     Sun 20 Sep 2026 13:00:08 +0000
Manifest next update:     Mon 21 Sep 2026 13:00:08 +0000
Files and hashes:         1: 1pIm4CEu_J6GPn1TUy1UPhKMBUk.roa (hash: kC5aY81+7wV5FaAuCbcDPO88uURjqA0og191H8ou4nk=)
                          2: IArcm7KHrcc-PY-XbMM0EYnJC8o.roa (hash: D8OnazQ4CkBXy0mTUKLIq9zAP3v8FKdV/2bmVQK5YE4=)
                          3: Wsun9qUEkz7Qte-mPAle0T2WkOc.roa (hash: 3L85Zuxdwbe+qNboOx36lUzHEqWROzqfxPyAEkPek0w=)
                          4: sL_SyF5redRg5mDPlmTe5V3MyMw.crl (hash: kP6QdOFA5OXUj8TCXCoLTYQn4h8l5nRwIPO/XuBT9sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 13:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:e7:0d:43:ab:cd:22:06:8f:1e:e9:fd:52:0f:ef:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
        Validity
            Not Before: Sep 20 13:00:08 2026 GMT
            Not After : Sep 21 13:00:08 2026 GMT
        Subject: CN=0bc000d1f14d5fda75bf7d4d7e6c9ec3c4e178af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c8:1a:ba:71:63:95:a0:6a:62:35:cd:8c:13:
                    3d:d2:70:35:9e:18:9f:70:8a:d0:72:79:5c:2c:69:
                    40:e2:90:5e:a9:e5:73:db:89:ec:dc:b7:2b:87:e2:
                    e0:7e:f7:1e:48:88:5d:75:db:a3:3e:bd:93:60:12:
                    dd:c3:d6:94:a5:5a:ff:2d:29:07:cc:99:39:f6:87:
                    06:24:80:5f:06:2b:7d:27:5f:01:48:bc:46:0b:e6:
                    0e:d6:aa:64:b5:e8:3a:10:15:23:f6:e6:45:67:27:
                    e5:a9:69:f2:55:5b:4d:18:56:0d:99:0d:87:9a:44:
                    9e:d0:17:3e:a4:38:5b:c5:17:1b:cd:a6:aa:f0:5d:
                    af:d0:0c:12:09:3b:2b:6d:ce:5a:c5:c8:d6:84:ee:
                    db:39:bb:d6:f7:0e:9d:83:60:b2:5f:d5:1f:5c:18:
                    a5:0e:5e:83:79:74:d5:23:fc:bf:19:6c:1b:ea:d8:
                    47:24:dc:b2:27:04:7b:bc:76:a9:a1:3f:35:ff:98:
                    92:53:c4:ff:00:da:46:4a:64:7c:9b:5e:97:87:2f:
                    3a:c5:c6:06:71:5c:36:c8:42:a7:35:b5:ae:1d:85:
                    0f:99:2b:39:8c:be:3a:d2:4f:e8:80:4e:de:a4:94:
                    df:4f:e8:e4:7c:2a:ef:d1:22:23:af:b7:9a:74:7a:
                    56:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C0:00:D1:F1:4D:5F:DA:75:BF:7D:4D:7E:6C:9E:C3:C4:E1:78:AF
            X509v3 Authority Key Identifier:
                keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7c:ba:3e:f2:63:52:e8:24:0f:3d:1f:4d:a1:68:9e:8f:93:
         f4:81:7c:fe:c3:62:a3:03:31:b6:36:68:52:fb:ff:e8:8f:7f:
         e4:3e:0a:bf:50:44:54:33:f6:9d:6a:c4:74:5a:68:a3:de:ce:
         dc:98:ef:6d:2f:b0:53:90:f9:e6:ce:1f:32:76:85:b4:29:79:
         c4:e8:34:15:1c:bc:36:11:8d:89:21:ec:ed:1d:bc:d4:ff:10:
         26:03:17:f7:fa:55:34:3d:32:bd:9c:b7:ed:6f:fe:db:32:80:
         32:b1:2f:ff:1a:49:05:3a:eb:ce:34:f3:d5:56:73:e4:19:ca:
         65:b7:4a:df:ae:6b:58:31:e0:fe:cb:79:cd:b8:9c:ec:69:6f:
         40:06:90:32:a6:b4:42:08:07:c9:4a:a0:b0:8a:45:1c:39:df:
         19:65:4a:ee:cd:ac:f9:c4:c8:b4:f2:ee:95:17:f9:f6:00:8e:
         68:bd:e0:5e:3c:bd:79:7e:db:c8:c2:9b:fb:30:14:f8:a6:95:
         dc:30:69:23:8c:eb:7c:eb:23:85:71:ef:8a:1a:73:bd:2b:fb:
         a4:be:d1:cd:ea:9d:2d:81:f5:0b:1b:70:3a:9f:5c:db:00:47:
         4c:f8:66:54:5c:4c:b8:d3:0e:bd:03:8c:82:da:d9:7f:91:ff:
         c1:15:c1:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+5w1Dq80iBo8e6f1SD+9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmZkMmM4NWU2Yjc5ZDQ2MGU2NjBjZjk2NjRkZWU1NWRj
Y2M4Y2MwHhcNMjYwOTIwMTMwMDA4WhcNMjYwOTIxMTMwMDA4WjAzMTEwLwYDVQQD
EygwYmMwMDBkMWYxNGQ1ZmRhNzViZjdkNGQ3ZTZjOWVjM2M0ZTE3OGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcgaunFjlaBqYjXNjBM90nA1nhif
cIrQcnlcLGlA4pBeqeVz24ns3Lcrh+LgfvceSIhdddujPr2TYBLdw9aUpVr/LSkH
zJk59ocGJIBfBit9J18BSLxGC+YO1qpkteg6EBUj9uZFZyflqWnyVVtNGFYNmQ2H
mkSe0Bc+pDhbxRcbzaaq8F2v0AwSCTsrbc5axcjWhO7bObvW9w6dg2CyX9UfXBil
Dl6DeXTVI/y/GWwb6thHJNyyJwR7vHapoT81/5iSU8T/ANpGSmR8m16Xhy86xcYG
cVw2yEKnNbWuHYUPmSs5jL460k/ogE7epJTfT+jkfCrv0SIjr7eadHpWHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvAANHxTV/adb99TX5snsPE4XivMB8GA1UdIwQY
MBaAFLC/0shea3nUYOZgz5Zk3uVdzMjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xfU3lGNXJlZFJnNW1EUGxtVGU1VjNNeU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yMDNhNTMtMDU4YS00ZDVkLWE3NjEt
ZDM3MTg1NTc1NmMzLzEvc0xfU3lGNXJlZFJnNW1EUGxtVGU1VjNNeU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yMDNhNTMtMDU4YS00ZDVkLWE3NjEtZDM3MTg1NTc1NmMz
LzEvc0xfU3lGNXJlZFJnNW1EUGxtVGU1VjNNeU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHy6PvJj
UugkDz0fTaFono+T9IF8/sNiowMxtjZoUvv/6I9/5D4Kv1BEVDP2nWrEdFpoo97O
3JjvbS+wU5D55s4fMnaFtCl5xOg0FRy8NhGNiSHs7R281P8QJgMX9/pVND0yvZy3
7W/+2zKAMrEv/xpJBTrrzjTz1VZz5BnKZbdK365rWDHg/st5zbic7GlvQAaQMqa0
QggHyUqgsIpFHDnfGWVK7s2s+cTItPLulRf59gCOaL3gXjy9eX7byMKb+zAU+KaV
3DBpI4zrfOsjhXHvihpzvSv7pL7RzeqdLYH1CxtwOp9c2wBHTPhmVFxMuNMOvQOM
gtrZf5H/wRXBVg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:14:04 2026 by rpki-client