Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft
File:                     b58jpjrWJaftMNptos3J6LW7gD4.mft (raw, json)
Hash identifier:          k8tKqmqmfuefdxeRPeZKcEGmj72tFklfOkDPbi6CeFw=
Subject key identifier:   4E:29:CA:82:1D:9E:A1:46:FD:0D:40:16:7A:F7:47:0B:D7:41:E7:17
Authority key identifier: 6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E
Certificate issuer:       /CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e
Certificate serial:       01A0D64B5E6309CD03370CBC0528F0D29CED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft
Manifest number:          0350
Signing time:             Fri 25 Sep 2026 02:00:58 +0000
Manifest this update:     Fri 25 Sep 2026 02:00:58 +0000
Manifest next update:     Sat 26 Sep 2026 02:00:58 +0000
Files and hashes:         1: 7aMZ7Tnhqpd3dO5kGH-ltVT-Edk.roa (hash: F+aXagJfpXFb1BZvz603l6LLwlIqiSdjWHeDYjDB1Bs=)
                          2: b58jpjrWJaftMNptos3J6LW7gD4.crl (hash: 1b5347p1DZpk7Vrm4tolrBkRFrM13udhAEi6yPyfWvw=)
                          3: f7oJ5S7QhjbF7Hv3vAYtSNv0X-8.roa (hash: f3H5djjlFovDR3gNvScOu/4dBbS3OgO3hekLoTa++Qg=)
                          4: uOpNXNqtHI5fhaitzbdVAYNd-lI.roa (hash: rovI3vjkbKEi6l+iPvXBuVPVhZOqOPsoOuCNHyVt+3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4b:5e:63:09:cd:03:37:0c:bc:05:28:f0:d2:9c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9f23a63ad625a7ed30da6da2cdc9e8b5bb803e
        Validity
            Not Before: Sep 25 02:00:58 2026 GMT
            Not After : Sep 26 02:00:58 2026 GMT
        Subject: CN=4e29ca821d9ea146fd0d40167af7470bd741e717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6f:21:0f:b7:87:8c:d7:70:7d:7d:66:fe:33:
                    91:31:58:9c:be:e7:b4:34:6b:15:e2:3d:4b:05:b0:
                    60:cf:17:01:3c:06:e1:68:bd:69:c2:b5:9c:4f:a1:
                    fb:69:30:7d:a1:34:c4:9d:eb:85:a9:6d:f8:25:4a:
                    da:82:38:3e:f8:ca:39:5a:2c:3e:25:31:85:c3:f0:
                    8c:79:e7:af:38:8f:99:b2:ae:0e:33:60:79:0a:3c:
                    9e:19:09:52:f4:4a:7b:4c:05:c2:0d:bc:69:f0:7b:
                    5c:93:de:ba:72:58:87:3c:f4:52:75:08:45:f6:d4:
                    32:84:6c:39:00:92:06:86:57:e7:2f:7d:a7:75:9c:
                    be:f1:4b:5b:3d:05:40:b9:44:aa:30:46:cc:7d:52:
                    3b:f0:a1:37:c2:07:5a:16:c2:8d:d5:1c:36:ab:b1:
                    41:2b:17:80:50:38:58:73:6e:d6:cb:96:a9:f1:94:
                    f4:09:d7:f7:e6:95:a0:4c:3f:ad:39:a6:5f:1f:0c:
                    e0:41:eb:b0:b0:95:a3:b2:53:81:d9:d6:89:2e:6a:
                    6a:0c:03:a3:70:68:53:b7:04:83:d5:f1:a2:1a:7d:
                    58:d6:02:c3:f2:02:90:c5:f2:5a:e5:01:92:39:3c:
                    48:d8:c1:3f:b4:03:87:38:98:01:3c:98:76:5e:b7:
                    58:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:29:CA:82:1D:9E:A1:46:FD:0D:40:16:7A:F7:47:0B:D7:41:E7:17
            X509v3 Authority Key Identifier:
                keyid:6F:9F:23:A6:3A:D6:25:A7:ED:30:DA:6D:A2:CD:C9:E8:B5:BB:80:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b58jpjrWJaftMNptos3J6LW7gD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b72de4-6366-47fa-b6f6-d42bd682638d/1/b58jpjrWJaftMNptos3J6LW7gD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:04:18:58:4e:d0:6c:6e:f0:d5:cd:97:89:8f:ca:d4:b4:c3:
         b4:e5:a3:34:18:e2:49:31:b2:12:46:6c:3a:b9:59:a5:a6:f1:
         f0:cf:54:c8:c8:b1:b4:58:3b:66:7e:22:e5:84:15:83:db:46:
         b5:0f:b1:df:e5:d7:01:be:b1:36:e2:eb:be:e5:28:c5:a9:25:
         5e:ac:3e:07:32:11:6f:c7:62:44:4e:29:95:b2:f4:22:cd:27:
         38:5c:7f:3c:e1:d9:2e:5d:45:57:b8:0f:b9:72:d0:62:07:17:
         00:aa:60:6e:51:13:9f:36:b3:aa:ad:8d:0a:0b:22:5a:66:e5:
         92:ea:61:7f:e9:22:14:6a:f7:7c:7d:a0:35:3b:d2:00:d5:94:
         ba:b7:37:58:88:91:9c:87:a3:d1:fc:af:61:c4:02:46:18:aa:
         97:0f:2f:3f:8c:b4:75:9f:7f:8f:90:ed:01:ec:91:5b:22:4c:
         57:07:d3:85:de:3d:44:df:ce:eb:a1:b6:b4:ba:6e:0f:ca:1f:
         c5:b3:7c:b3:5a:a3:69:52:b9:49:ef:1d:25:0c:33:67:dc:06:
         1d:59:79:51:33:0b:0a:b1:15:9f:b6:3d:a5:16:bf:0b:99:c9:
         45:12:0c:2c:7f:3c:c0:c9:e8:1f:61:61:bf:75:57:fc:ab:51:
         0c:f3:cc:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWS15jCc0DNwy8BSjw0pztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOWYyM2E2M2FkNjI1YTdlZDMwZGE2ZGEyY2RjOWU4YjVi
YjgwM2UwHhcNMjYwOTI1MDIwMDU4WhcNMjYwOTI2MDIwMDU4WjAzMTEwLwYDVQQD
Eyg0ZTI5Y2E4MjFkOWVhMTQ2ZmQwZDQwMTY3YWY3NDcwYmQ3NDFlNzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG8hD7eHjNdwfX1m/jORMVicvue0
NGsV4j1LBbBgzxcBPAbhaL1pwrWcT6H7aTB9oTTEneuFqW34JUragjg++Mo5Wiw+
JTGFw/CMeeevOI+Zsq4OM2B5CjyeGQlS9Ep7TAXCDbxp8Htck966cliHPPRSdQhF
9tQyhGw5AJIGhlfnL32ndZy+8UtbPQVAuUSqMEbMfVI78KE3wgdaFsKN1Rw2q7FB
KxeAUDhYc27Wy5ap8ZT0Cdf35pWgTD+tOaZfHwzgQeuwsJWjslOB2daJLmpqDAOj
cGhTtwSD1fGiGn1Y1gLD8gKQxfJa5QGSOTxI2ME/tAOHOJgBPJh2XrdYEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4pyoIdnqFG/Q1AFnr3RwvXQecXMB8GA1UdIwQY
MBaAFG+fI6Y61iWn7TDabaLNyei1u4A+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjU4anBqcldKYWZ0TU5wdG9zM0o2TFc3Z0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNzJkZTQtNjM2Ni00N2ZhLWI2ZjYt
ZDQyYmQ2ODI2MzhkLzEvYjU4anBqcldKYWZ0TU5wdG9zM0o2TFc3Z0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNzJkZTQtNjM2Ni00N2ZhLWI2ZjYtZDQyYmQ2ODI2Mzhk
LzEvYjU4anBqcldKYWZ0TU5wdG9zM0o2TFc3Z0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgQYWE7Q
bG7w1c2XiY/K1LTDtOWjNBjiSTGyEkZsOrlZpabx8M9UyMixtFg7Zn4i5YQVg9tG
tQ+x3+XXAb6xNuLrvuUoxaklXqw+BzIRb8diRE4plbL0Is0nOFx/POHZLl1FV7gP
uXLQYgcXAKpgblETnzazqq2NCgsiWmblkuphf+kiFGr3fH2gNTvSANWUurc3WIiR
nIej0fyvYcQCRhiqlw8vP4y0dZ9/j5DtAeyRWyJMVwfThd49RN/O66G2tLpuD8of
xbN8s1qjaVK5Se8dJQwzZ9wGHVl5UTMLCrEVn7Y9pRa/C5nJRRIMLH88wMnoH2Fh
v3VX/KtRDPPMrg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:43:38 2026 by rpki-client