Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File:                     xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier:          Bfgh/4m5khTufoWZKHGdQcYBV3t3bvUzBaYBlaglshk=
Subject key identifier:   B7:14:48:3A:AB:A6:20:25:21:DB:48:DB:35:10:A2:F7:2E:5A:2D:37
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer:       /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial:       01A0E5F57361C5C17EA3B76116EDB1294552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number:          1A0B
Signing time:             Mon 28 Sep 2026 03:01:03 +0000
Manifest this update:     Mon 28 Sep 2026 03:01:03 +0000
Manifest next update:     Tue 29 Sep 2026 03:01:03 +0000
Files and hashes:         1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=)
                          2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=)
                          3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: 5Yt9F10hNU13maxehsfE3kq6Xf3W5VoPNycNVtZUYt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 03:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:f5:73:61:c5:c1:7e:a3:b7:61:16:ed:b1:29:45:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
        Validity
            Not Before: Sep 28 03:01:03 2026 GMT
            Not After : Sep 29 03:01:03 2026 GMT
        Subject: CN=b714483aaba6202521db48db3510a2f72e5a2d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ee:b3:20:57:14:fb:e0:54:e2:bc:bd:8d:91:
                    03:8f:ea:89:dd:2c:28:55:a9:2d:9f:fc:d8:20:92:
                    f5:5b:e2:41:07:63:db:9b:d8:06:9e:11:78:f4:13:
                    59:a0:e0:46:47:99:9c:17:57:64:12:7a:6b:2d:6f:
                    06:f7:9f:c9:24:df:4e:a7:3e:e6:a5:fd:63:1a:0b:
                    f6:ba:99:15:0d:fc:8e:b8:51:d8:e9:25:32:4f:e7:
                    1e:da:45:db:71:1b:64:79:b6:4f:28:c7:f1:69:4b:
                    63:c3:58:d9:5b:c1:f1:5f:ba:cb:94:3c:e0:e7:14:
                    0e:24:54:b6:99:a6:b6:6a:33:09:44:b2:cd:81:61:
                    4e:41:83:1b:67:df:26:25:91:54:f0:a8:4d:e6:a9:
                    81:4d:80:d7:61:8c:17:ad:d7:9f:a2:95:0e:86:60:
                    a3:49:b4:ad:63:d7:2f:56:4e:0a:ff:85:20:82:02:
                    8b:3c:c0:1c:2a:b5:de:e1:6a:ba:c5:57:00:85:87:
                    59:07:bf:12:68:66:fe:7e:81:39:41:9e:f8:f9:55:
                    21:c0:c7:91:69:8c:ee:7f:75:b1:dd:34:2b:0a:39:
                    14:2e:8f:64:e1:97:2c:33:e9:5f:cd:7c:54:05:1b:
                    ee:5c:f1:d7:9c:5d:79:46:07:27:1a:3f:da:59:68:
                    f3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:14:48:3A:AB:A6:20:25:21:DB:48:DB:35:10:A2:F7:2E:5A:2D:37
            X509v3 Authority Key Identifier:
                keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:14:46:9f:51:5f:26:f2:2e:19:ea:f0:b7:37:16:56:48:27:
         b9:ae:c4:f9:42:71:ea:46:27:5c:c7:cf:4e:f0:9a:98:d7:da:
         86:7a:99:cc:db:db:c5:96:34:49:f9:b2:c7:c0:18:6f:b0:62:
         df:0c:33:26:96:b0:06:e7:e1:89:03:25:3e:ab:b1:ca:cc:77:
         98:ea:a6:42:bb:c3:1d:5e:ca:89:b1:90:2a:70:db:5e:f9:80:
         81:5c:fb:8f:da:04:09:95:e3:bb:20:73:70:ab:60:10:8c:f6:
         c5:d1:f6:28:85:4b:42:a9:ce:97:1d:40:77:7e:ed:05:66:25:
         8a:d8:53:83:3c:40:31:86:eb:09:c1:ba:59:c5:98:58:8c:7a:
         c5:7b:d6:41:e5:42:eb:11:d5:51:a1:72:dc:10:78:fa:95:c2:
         43:e5:f1:04:a1:3e:07:da:72:72:24:af:3e:e5:ca:dd:f3:f6:
         8e:79:b7:0f:32:e4:c3:b0:64:6c:cf:38:7f:33:72:20:fc:10:
         d4:cd:c9:8d:9d:4c:2b:f8:70:fa:35:43:78:9c:16:15:c0:b1:
         91:79:a1:93:31:c9:14:43:6a:bb:93:d2:bf:6d:04:46:1a:e9:
         ea:41:ae:b1:71:08:25:46:68:0c:a2:60:9e:63:86:0e:79:c2:
         7a:7e:d4:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDl9XNhxcF+o7dhFu2xKUVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OGFmYTIyZjk4YTM3ZjZkOGQwMjkzYTliMzE5NDE2ZWM5
NGQzODYwHhcNMjYwOTI4MDMwMTAzWhcNMjYwOTI5MDMwMTAzWjAzMTEwLwYDVQQD
EyhiNzE0NDgzYWFiYTYyMDI1MjFkYjQ4ZGIzNTEwYTJmNzJlNWEyZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke6zIFcU++BU4ry9jZEDj+qJ3Swo
Vaktn/zYIJL1W+JBB2Pbm9gGnhF49BNZoOBGR5mcF1dkEnprLW8G95/JJN9Opz7m
pf1jGgv2upkVDfyOuFHY6SUyT+ce2kXbcRtkebZPKMfxaUtjw1jZW8HxX7rLlDzg
5xQOJFS2maa2ajMJRLLNgWFOQYMbZ98mJZFU8KhN5qmBTYDXYYwXrdefopUOhmCj
SbStY9cvVk4K/4UgggKLPMAcKrXe4Wq6xVcAhYdZB78SaGb+foE5QZ74+VUhwMeR
aYzuf3Wx3TQrCjkULo9k4ZcsM+lfzXxUBRvuXPHXnF15RgcnGj/aWWjzKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcUSDqrpiAlIdtI2zUQovcuWi03MB8GA1UdIwQY
MBaAFMWK+iL5ijf22NApOpsxlBbslNOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NThjOGEtNjEzZS00ZTJhLThmZTEt
OTEyMjg2MjA1NzBlLzEveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NThjOGEtNjEzZS00ZTJhLThmZTEtOTEyMjg2MjA1NzBl
LzEveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBRGn1Ff
JvIuGerwtzcWVkgnua7E+UJx6kYnXMfPTvCamNfahnqZzNvbxZY0Sfmyx8AYb7Bi
3wwzJpawBufhiQMlPquxysx3mOqmQrvDHV7KibGQKnDbXvmAgVz7j9oECZXjuyBz
cKtgEIz2xdH2KIVLQqnOlx1Ad37tBWYlithTgzxAMYbrCcG6WcWYWIx6xXvWQeVC
6xHVUaFy3BB4+pXCQ+XxBKE+B9pyciSvPuXK3fP2jnm3DzLkw7BkbM84fzNyIPwQ
1M3JjZ1MK/hw+jVDeJwWFcCxkXmhkzHJFENqu5PSv20ERhrp6kGusXEIJUZoDKJg
nmOGDnnCen7UcA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 12:02:05 2026 by rpki-client