Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File:                     1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier:          8uftzyxTugeutbc1g3pom8GtdsR/23PcGBLFdC8WZ7k=
Subject key identifier:   D2:E4:44:6E:76:83:38:F0:FF:68:CE:85:94:F5:32:C4:00:94:F4:ED
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer:       /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial:       01A0DF189BCD0181373172E2525753FC906B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number:          104E
Signing time:             Sat 26 Sep 2026 19:02:06 +0000
Manifest this update:     Sat 26 Sep 2026 19:02:06 +0000
Manifest next update:     Sun 27 Sep 2026 19:02:06 +0000
Files and hashes:         1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: i6vyoCzOuWYRNu35LFQRR82H341v17iEAuAf6w8ekD4=)
                          2: qLRwkd2YTe3ugw9mUTb_30rZm1U.roa (hash: RlmstRhxEpTkCl9P39u47GrFJRHW47YR8wbbC8CphMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:18:9b:cd:01:81:37:31:72:e2:52:57:53:fc:90:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
        Validity
            Not Before: Sep 26 19:02:06 2026 GMT
            Not After : Sep 27 19:02:06 2026 GMT
        Subject: CN=d2e4446e768338f0ff68ce8594f532c40094f4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:92:41:0a:67:60:27:97:8d:7a:56:2a:4c:
                    ac:b7:40:93:df:78:bb:1f:df:98:7d:51:0a:f0:b0:
                    4d:30:2a:f9:21:3d:dc:0d:d4:08:ba:07:2c:b0:65:
                    55:0e:21:43:fd:34:ce:f6:76:57:5f:53:c3:09:50:
                    3d:1f:2d:fe:49:13:4a:2c:9a:ce:9b:2a:88:9b:c1:
                    0a:b2:6c:ea:bf:d8:cf:a0:0c:76:4a:4a:92:32:ce:
                    66:b4:6c:18:f9:93:41:8d:d1:81:92:24:34:93:70:
                    54:a2:d9:0e:be:31:2e:a9:db:e2:26:07:af:db:f4:
                    18:c4:2a:e4:7e:4b:63:6d:ae:00:2a:f4:60:d9:97:
                    0d:73:fc:0f:81:f1:f7:4c:ac:6d:58:b2:f8:4e:de:
                    9a:08:c2:4f:19:86:1b:60:2e:da:e1:b7:03:9b:50:
                    cc:30:3c:63:a5:1d:58:0b:f6:34:71:e6:a0:8e:7d:
                    52:92:7d:e8:ad:2c:ca:2f:c2:4f:e3:17:9e:7f:9e:
                    d9:0b:c8:5d:13:76:29:a9:04:94:08:8b:54:c6:80:
                    f8:cf:5c:44:ac:8e:63:1d:18:b1:cf:fb:0c:82:80:
                    d6:b2:50:a4:8c:4c:b0:c9:fd:d6:69:38:f5:6f:52:
                    15:8b:ec:cb:bb:60:e7:b3:24:26:bc:9c:ff:88:03:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E4:44:6E:76:83:38:F0:FF:68:CE:85:94:F5:32:C4:00:94:F4:ED
            X509v3 Authority Key Identifier:
                keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d4:55:10:5a:d8:18:73:34:94:a0:58:aa:f6:ae:94:99:cd:
         75:a9:fb:81:ea:59:d0:bf:69:5c:25:39:57:35:a1:c2:6b:f4:
         e0:90:38:3b:67:9e:b0:e9:9b:0e:ee:ec:c1:86:8d:65:c6:28:
         ab:1a:cd:34:92:50:9f:43:16:13:bc:fe:88:5c:33:a0:80:7e:
         1d:bd:ce:7e:d6:26:36:9a:63:ba:45:2b:25:ee:a1:8c:e2:5f:
         a3:a8:03:53:97:c2:e9:b1:b4:66:74:4d:19:3c:d9:c7:b7:99:
         50:a6:1b:b6:c4:04:c2:9a:b9:c0:d5:a4:a6:1c:5c:03:7e:24:
         07:ee:fa:5c:24:bf:bf:fd:67:4e:eb:cd:60:a8:9b:5c:ef:a6:
         42:d3:a4:a4:93:88:83:1a:23:b7:4b:5b:af:3c:73:19:8e:8e:
         dc:b2:b9:d0:6f:3b:c9:fa:42:5b:95:a4:77:66:ef:5a:89:54:
         bb:64:23:53:08:6c:27:16:f7:66:6a:a0:e5:5e:9c:d0:40:3d:
         58:b3:a4:be:0f:81:c2:52:82:14:a3:8f:5a:a0:9f:d3:c0:b5:
         61:8e:b3:fc:cb:90:ee:27:16:9a:4f:24:f1:0d:7c:06:cd:8f:
         9a:f5:bd:d2:29:b6:36:08:1b:63:aa:5d:2e:9f:5e:d4:7f:63:
         db:2b:fc:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfGJvNAYE3MXLiUldT/JBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjgwMTgwYjQwZDU4NWI3MzY2NTg3ZGZiNWRlN2JmMzA3
Nzg0M2UwHhcNMjYwOTI2MTkwMjA2WhcNMjYwOTI3MTkwMjA2WjAzMTEwLwYDVQQD
EyhkMmU0NDQ2ZTc2ODMzOGYwZmY2OGNlODU5NGY1MzJjNDAwOTRmNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfySQQpnYCeXjXpWKkyst0CT33i7
H9+YfVEK8LBNMCr5IT3cDdQIugcssGVVDiFD/TTO9nZXX1PDCVA9Hy3+SRNKLJrO
myqIm8EKsmzqv9jPoAx2SkqSMs5mtGwY+ZNBjdGBkiQ0k3BUotkOvjEuqdviJgev
2/QYxCrkfktjba4AKvRg2ZcNc/wPgfH3TKxtWLL4Tt6aCMJPGYYbYC7a4bcDm1DM
MDxjpR1YC/Y0ceagjn1Skn3orSzKL8JP4xeef57ZC8hdE3YpqQSUCItUxoD4z1xE
rI5jHRixz/sMgoDWslCkjEywyf3WaTj1b1IVi+zLu2DnsyQmvJz/iAOwkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLkRG52gzjw/2jOhZT1MsQAlPTtMB8GA1UdIwQY
MBaAFNW4AYC0DVhbc2ZYfftd578wd4Q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYt
MzE0MTFkOTE1NzZhLzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYtMzE0MTFkOTE1NzZh
LzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltRVEFrY
GHM0lKBYqvaulJnNdan7gepZ0L9pXCU5VzWhwmv04JA4O2eesOmbDu7swYaNZcYo
qxrNNJJQn0MWE7z+iFwzoIB+Hb3OftYmNppjukUrJe6hjOJfo6gDU5fC6bG0ZnRN
GTzZx7eZUKYbtsQEwpq5wNWkphxcA34kB+76XCS/v/1nTuvNYKibXO+mQtOkpJOI
gxojt0tbrzxzGY6O3LK50G87yfpCW5Wkd2bvWolUu2QjUwhsJxb3Zmqg5V6c0EA9
WLOkvg+BwlKCFKOPWqCf08C1YY6z/MuQ7icWmk8k8Q18Bs2PmvW90im2NggbY6pd
Lp9e1H9j2yv8vg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:40:38 2026 by rpki-client