Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
File:                     1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft (raw, json)
Hash identifier:          EU4jmlUivKOwqOcXg7QKjGFtO+gaiHC9NhUBlVD7q6Y=
Subject key identifier:   96:83:5A:79:53:1E:72:BB:84:88:1C:76:A2:63:CF:5D:5A:C5:DE:08
Authority key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
Certificate issuer:       /CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Certificate serial:       01A0DC4D7F58204C0AED053F9CBCECD923F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
Manifest number:          03D2
Signing time:             Sat 26 Sep 2026 06:01:01 +0000
Manifest this update:     Sat 26 Sep 2026 06:01:01 +0000
Manifest next update:     Sun 27 Sep 2026 06:01:01 +0000
Files and hashes:         1: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl (hash: 5wYsymw5ibMEF1zETuPKvnbJizdLiTdpAz963oOfgOA=)
                          2: S91SpqjKHj-9za4dXEoQ07MOmwY.roa (hash: mrZK89V5wHR4TTBGwZBPy+vU+mPnk1QYo7P0So8JmRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 06:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4d:7f:58:20:4c:0a:ed:05:3f:9c:bc:ec:d9:23:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
        Validity
            Not Before: Sep 26 06:01:01 2026 GMT
            Not After : Sep 27 06:01:01 2026 GMT
        Subject: CN=96835a79531e72bb84881c76a263cf5d5ac5de08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:f1:24:39:98:8b:01:83:d6:38:42:1f:89:
                    5e:02:50:2e:f4:e6:bf:1d:46:0c:88:66:1b:32:bd:
                    96:8e:70:bb:4f:30:54:0f:89:03:53:13:9a:87:81:
                    df:2c:dd:bf:9c:2d:cb:86:4e:72:37:19:c5:f5:b8:
                    f0:79:89:ce:f8:dc:62:82:e1:61:da:15:35:e2:a4:
                    ab:2c:a7:f5:5f:42:7e:d8:0d:5e:a7:4c:9c:96:95:
                    7b:81:d9:4a:e1:e6:c8:b6:11:b8:66:f6:c8:18:a3:
                    47:7f:25:95:b0:da:dc:2a:1e:03:d6:51:53:55:cb:
                    cd:34:7c:58:3e:d8:da:9d:3d:2d:4d:4e:7e:b2:61:
                    f3:c5:42:6b:25:6a:3e:3d:bf:f8:e4:e1:02:d9:00:
                    2b:97:d9:62:2f:4c:5b:99:a1:47:78:84:14:b3:b5:
                    80:4a:ef:64:54:74:c0:8d:2f:6f:4c:d4:72:94:05:
                    67:df:ff:ed:85:82:81:09:be:12:9c:2d:32:93:f6:
                    68:4a:d8:20:a8:ca:02:5a:d8:d9:22:ed:e9:fb:d7:
                    e2:ab:61:23:e9:9d:84:c4:8e:91:d2:8b:ba:4d:3a:
                    78:cd:e6:ce:47:a7:51:4e:40:56:ec:e1:f4:10:f4:
                    e8:4b:c7:45:9a:60:18:8b:fa:f5:fd:05:47:ca:54:
                    69:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:83:5A:79:53:1E:72:BB:84:88:1C:76:A2:63:CF:5D:5A:C5:DE:08
            X509v3 Authority Key Identifier:
                keyid:F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:93:ab:a3:b0:2c:83:6c:c4:8c:25:da:29:d9:e1:50:92:02:
         1e:33:3e:63:6b:ba:81:e9:31:ce:f4:ff:62:94:1d:ef:84:f3:
         aa:84:e0:0a:b9:88:c0:aa:8b:f0:cc:be:a8:87:f4:39:bf:d0:
         c4:0e:eb:aa:11:78:e9:e6:b0:ab:ff:6f:07:92:a1:61:f3:0f:
         7d:a4:56:e9:ea:7b:b8:b9:20:29:c1:3a:69:53:53:d7:4d:1c:
         9c:17:2a:80:77:94:f4:2e:bd:a8:02:b4:ad:b0:18:4b:ae:91:
         86:4b:75:19:de:d9:c5:ba:f2:1e:0f:df:74:8b:1f:e5:67:b1:
         53:1e:12:58:e5:21:d7:e4:8b:1d:cb:6d:dd:db:b2:2d:00:92:
         06:08:a4:a1:30:13:9b:d0:f1:ae:0b:e8:cc:33:1d:16:77:7c:
         75:bc:65:cf:72:4b:41:47:7a:82:21:76:a1:ec:c6:ea:e9:f5:
         12:e2:57:44:af:8d:32:1e:85:2f:f3:a8:9d:0e:2c:4b:13:1c:
         9d:60:c2:72:4a:79:d7:1b:0c:c3:02:93:77:8e:37:22:98:47:
         64:62:0a:56:f2:99:dd:d7:d3:fc:ff:af:60:b8:35:0c:02:92:
         e5:c3:43:e9:bd:86:3c:1c:93:dc:e2:9c:84:0b:54:2a:ff:a2:
         4b:dd:51:7b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDcTX9YIEwK7QU/nLzs2SP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YmE0MWI2YWQ2ZTYzNzgwZWMzZjEyMTYwZTdjNGVkMGY3
NDY5YWMwHhcNMjYwOTI2MDYwMTAxWhcNMjYwOTI3MDYwMTAxWjAzMTEwLwYDVQQD
Eyg5NjgzNWE3OTUzMWU3MmJiODQ4ODFjNzZhMjYzY2Y1ZDVhYzVkZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2vxJDmYiwGD1jhCH4leAlAu9Oa/
HUYMiGYbMr2WjnC7TzBUD4kDUxOah4HfLN2/nC3Lhk5yNxnF9bjweYnO+NxiguFh
2hU14qSrLKf1X0J+2A1ep0yclpV7gdlK4ebIthG4ZvbIGKNHfyWVsNrcKh4D1lFT
VcvNNHxYPtjanT0tTU5+smHzxUJrJWo+Pb/45OEC2QArl9liL0xbmaFHeIQUs7WA
Su9kVHTAjS9vTNRylAVn3//thYKBCb4SnC0yk/ZoStggqMoCWtjZIu3p+9fiq2Ej
6Z2ExI6R0ou6TTp4zebOR6dRTkBW7OH0EPToS8dFmmAYi/r1/QVHylRptwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJaDWnlTHnK7hIgcdqJjz11axd4IMB8GA1UdIwQY
MBaAFPi6QbatbmN4DsPxIWDnxO0PdGmsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1McEJ0cTF1WTNnT3dfRWhZT2ZFN1E5MGFhdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvODNlZTZmLWVlODMtNDQ0Yi1iZGM2
LWFlNDQ5NzlmODFkZS8xLzEtTHBCdHExdVkzZ093X0VoWU9mRTdROTBhYXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M0LzgzZWU2Zi1lZTgzLTQ0NGItYmRjNi1hZTQ0OTc5Zjgx
ZGUvMS8xLUxwQnRxMXVZM2dPd19FaFlPZkU3UTkwYWF3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpOr
o7Asg2zEjCXaKdnhUJICHjM+Y2u6gekxzvT/YpQd74TzqoTgCrmIwKqL8My+qIf0
Ob/QxA7rqhF46eawq/9vB5KhYfMPfaRW6ep7uLkgKcE6aVNT100cnBcqgHeU9C69
qAK0rbAYS66Rhkt1Gd7ZxbryHg/fdIsf5WexUx4SWOUh1+SLHctt3duyLQCSBgik
oTATm9DxrgvozDMdFnd8dbxlz3JLQUd6giF2oezG6un1EuJXRK+NMh6FL/OonQ4s
SxMcnWDCckp51xsMwwKTd443IphHZGIKVvKZ3dfT/P+vYLg1DAKS5cND6b2GPByT
3OKchAtUKv+iS91Rew==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:01:53 2026 by rpki-client