Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
File:                     bc0iYSmgbEho-hD-gtImFrsvZps.mft (raw, json)
Hash identifier:          XZE1mSYUUY28Pgg5yqInz+tMhvCa1MhWSig8j+2Uo54=
Subject key identifier:   EB:40:12:74:F3:43:46:62:89:CC:3B:17:A4:09:2E:E3:F7:AE:BD:9B
Authority key identifier: 6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
Certificate issuer:       /CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Certificate serial:       01A0CA7DDF1FF65A99752DFF56090B349665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
Manifest number:          0234
Signing time:             Tue 22 Sep 2026 19:00:41 +0000
Manifest this update:     Tue 22 Sep 2026 19:00:41 +0000
Manifest next update:     Wed 23 Sep 2026 19:00:41 +0000
Files and hashes:         1: 4GwizHDiJW34eVbsS1zqAhW5bAA.asa (hash: tIiey6tQSs3tmmWNU2xS6Ra9dn48lRK3oxZupZMUgQ8=)
                          2: bc0iYSmgbEho-hD-gtImFrsvZps.crl (hash: QZc9zCluV13lE9S2NG7FDTxowUkm5jUY+qWIc+WrH0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:7d:df:1f:f6:5a:99:75:2d:ff:56:09:0b:34:96:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
        Validity
            Not Before: Sep 22 19:00:41 2026 GMT
            Not After : Sep 23 19:00:41 2026 GMT
        Subject: CN=eb401274f343466289cc3b17a4092ee3f7aebd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:88:36:e8:ab:0d:09:a3:16:d8:67:44:dc:
                    00:e4:36:ad:24:ff:5f:d3:f7:27:94:83:2f:25:72:
                    55:7f:51:b7:6e:93:fd:71:63:bf:90:38:08:20:5a:
                    cd:e9:d6:7e:fe:63:6b:ca:79:dd:12:b1:a7:fc:38:
                    61:b0:eb:a1:fa:03:16:a0:43:df:72:4d:c5:ff:19:
                    04:e9:24:f1:37:1b:e5:10:7f:16:0f:57:bf:a1:16:
                    3f:33:6b:01:ed:45:d6:b4:a4:e5:2d:07:f7:e5:ca:
                    01:6c:d0:11:4f:d1:b8:ff:b4:40:aa:b9:1a:6f:d8:
                    f2:06:35:cf:6e:b5:f2:40:09:0d:a9:d0:8c:30:a9:
                    31:3d:c3:4a:fe:d7:20:b0:c1:1d:b3:4c:be:25:92:
                    28:84:44:44:7b:4b:fc:ac:50:49:bd:b3:65:43:11:
                    6d:6a:19:d3:b9:b9:62:11:01:14:ee:cb:94:fa:58:
                    8f:c3:67:82:be:13:99:fa:8a:a6:97:2b:06:80:61:
                    c8:3f:1a:f5:cc:11:f0:82:a9:f0:bb:1b:96:8c:90:
                    ce:9d:80:71:95:b7:19:37:8a:7f:e6:12:46:b1:e6:
                    d7:93:f5:20:d7:16:e0:32:c2:5d:7c:d8:4e:4e:18:
                    e0:6a:b2:8a:71:5e:d2:16:bd:48:e7:4d:5e:45:b4:
                    63:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:40:12:74:F3:43:46:62:89:CC:3B:17:A4:09:2E:E3:F7:AE:BD:9B
            X509v3 Authority Key Identifier:
                keyid:6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c8:d5:a3:8f:11:27:a8:65:a3:bf:73:b5:59:53:92:de:00:
         e8:18:2e:8f:bd:ba:35:54:d8:3b:26:ea:71:47:8a:07:05:cf:
         04:49:a4:67:5f:81:1d:df:04:8a:18:56:f2:e4:80:d8:48:77:
         fa:18:22:5e:dc:b7:18:ec:dc:ae:8b:e7:d6:2f:34:53:67:14:
         a9:1c:1c:63:37:1e:5e:51:38:f6:c7:99:e6:a5:2e:8f:91:bf:
         48:4b:e4:19:b9:b1:54:22:e4:9b:ea:3d:85:49:9e:bd:cf:41:
         6e:45:6d:16:a0:13:8b:09:fa:c8:35:21:ed:80:cf:2d:50:0b:
         bd:67:11:d9:72:26:a3:0e:8a:00:35:b5:c2:39:be:37:4f:97:
         8a:77:47:9f:88:37:11:8e:3e:0a:79:c8:39:aa:c2:50:50:58:
         c2:1b:39:8d:61:8a:b3:4c:4c:54:29:96:cf:8e:81:ad:9a:75:
         78:95:06:3f:0f:1f:0f:ef:2b:78:0e:32:ce:d3:9e:e4:16:41:
         83:8e:86:62:3a:69:6d:aa:1b:97:19:62:4d:1c:8f:c2:3e:cd:
         24:90:10:d5:23:54:0c:f7:5d:d3:fd:54:05:4f:45:69:b0:62:
         01:18:2b:c3:86:1f:72:a9:9f:e7:93:69:bb:74:a9:65:05:89:
         53:93:3d:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKfd8f9lqZdS3/VgkLNJZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkY2QyMjYxMjlhMDZjNDg2OGZhMTBmZTgyZDIyNjE2YmIy
ZjY2OWIwHhcNMjYwOTIyMTkwMDQxWhcNMjYwOTIzMTkwMDQxWjAzMTEwLwYDVQQD
EyhlYjQwMTI3NGYzNDM0NjYyODljYzNiMTdhNDA5MmVlM2Y3YWViZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+WINuirDQmjFthnRNwA5DatJP9f
0/cnlIMvJXJVf1G3bpP9cWO/kDgIIFrN6dZ+/mNrynndErGn/DhhsOuh+gMWoEPf
ck3F/xkE6STxNxvlEH8WD1e/oRY/M2sB7UXWtKTlLQf35coBbNART9G4/7RAqrka
b9jyBjXPbrXyQAkNqdCMMKkxPcNK/tcgsMEds0y+JZIohEREe0v8rFBJvbNlQxFt
ahnTubliEQEU7suU+liPw2eCvhOZ+oqmlysGgGHIPxr1zBHwgqnwuxuWjJDOnYBx
lbcZN4p/5hJGsebXk/Ug1xbgMsJdfNhOThjgarKKcV7SFr1I501eRbRjbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtAEnTzQ0Ziicw7F6QJLuP3rr2bMB8GA1UdIwQY
MBaAFG3NImEpoGxIaPoQ/oLSJha7L2abMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmMwaVlTbWdiRWhvLWhELWd0SW1GcnN2WnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hZGZhZWEtYjdkNy00NmU1LTg0ZGUt
MTYwMmJmZWYzN2U5LzEvYmMwaVlTbWdiRWhvLWhELWd0SW1GcnN2WnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9hZGZhZWEtYjdkNy00NmU1LTg0ZGUtMTYwMmJmZWYzN2U5
LzEvYmMwaVlTbWdiRWhvLWhELWd0SW1GcnN2WnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacjVo48R
J6hlo79ztVlTkt4A6Bguj726NVTYOybqcUeKBwXPBEmkZ1+BHd8EihhW8uSA2Eh3
+hgiXty3GOzcrovn1i80U2cUqRwcYzceXlE49seZ5qUuj5G/SEvkGbmxVCLkm+o9
hUmevc9BbkVtFqATiwn6yDUh7YDPLVALvWcR2XImow6KADW1wjm+N0+XindHn4g3
EY4+CnnIOarCUFBYwhs5jWGKs0xMVCmWz46BrZp1eJUGPw8fD+8reA4yztOe5BZB
g46GYjppbaoblxliTRyPwj7NJJAQ1SNUDPdd0/1UBU9FabBiARgrw4Yfcqmf55Np
u3SpZQWJU5M9lQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:16:32 2026 by rpki-client