Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File:                     syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier:          2CgBGJCEdXsthNIrXlWnse/QRafPswwD4eaz9j/O5mI=
Subject key identifier:   C8:52:D9:29:9D:14:6D:03:98:BB:6A:DD:38:57:A7:81:F5:16:1B:FF
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer:       /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial:       01A0D727C258C624F41D53489804C0099B6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number:          15AF
Signing time:             Fri 25 Sep 2026 06:01:41 +0000
Manifest this update:     Fri 25 Sep 2026 06:01:41 +0000
Manifest next update:     Sat 26 Sep 2026 06:01:41 +0000
Files and hashes:         1: lTiIdOCkR7HQgUlBuUv00XWG8n8.roa (hash: 5GQQkbQ8C7wWLUQ4RuOd8R+85EFkyHaFY8FEJbVGNpw=)
                          2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: +bGDJlZgwTiaWz8FLV3z33wKdFXgXSrW5b0VqQTSiZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:27:c2:58:c6:24:f4:1d:53:48:98:04:c0:09:9b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
        Validity
            Not Before: Sep 25 06:01:41 2026 GMT
            Not After : Sep 26 06:01:41 2026 GMT
        Subject: CN=c852d9299d146d0398bb6add3857a781f5161bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2b:e1:3c:ce:6d:74:cd:f3:9a:df:89:03:65:
                    3b:cd:b7:54:cd:a9:75:e5:a9:8d:38:68:77:4b:e8:
                    3d:a2:24:74:64:ac:c5:98:b0:e5:af:ad:5a:d5:90:
                    64:69:29:18:63:f7:18:9b:1f:28:54:72:fc:d7:06:
                    ba:e2:c3:cb:07:b3:a6:0e:0c:1f:0a:68:7e:80:ec:
                    70:b8:72:c5:4f:06:e3:48:93:a4:49:47:3d:3b:6a:
                    9f:b3:a8:7d:7c:b6:46:fe:f4:a8:77:65:d3:98:d4:
                    28:db:7c:70:49:c6:b0:4e:6d:2d:ee:eb:88:ab:f9:
                    71:77:7a:fe:33:62:57:ab:a7:21:e8:8f:20:13:c8:
                    62:8c:92:27:c0:32:66:65:14:f3:4b:71:0d:7a:aa:
                    2f:5d:cf:3e:5d:32:04:14:0c:b1:28:07:d1:9a:c3:
                    7d:f1:e8:da:7a:ff:a4:6d:81:82:e1:e1:e4:40:fc:
                    f5:a9:ac:83:ed:b8:25:ce:b7:19:9e:ad:6b:cf:35:
                    ee:6a:c8:e7:93:ba:57:ef:5b:c2:33:88:2b:eb:8b:
                    50:b6:b8:5d:ad:41:64:55:5a:dc:34:f2:b0:01:52:
                    59:a4:3f:4d:88:74:d2:53:73:91:56:79:af:9d:b6:
                    0e:c4:de:a5:a0:02:96:93:99:d1:6b:8b:66:9c:bf:
                    3d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:52:D9:29:9D:14:6D:03:98:BB:6A:DD:38:57:A7:81:F5:16:1B:FF
            X509v3 Authority Key Identifier:
                keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7f:5b:7f:0d:fa:67:48:70:3e:f5:86:d1:81:61:a8:d0:c4:
         24:02:70:7a:68:45:d0:4a:24:15:e0:13:f4:f7:2f:a9:8a:f5:
         c8:77:28:5d:5a:1e:01:bf:c7:7b:ed:0a:fc:5d:c4:77:47:bc:
         d6:59:d3:f2:ef:64:ca:30:55:bb:fd:c4:fe:46:2c:5f:9e:33:
         d6:1c:99:47:39:94:e9:f0:dc:7f:d8:de:84:b2:58:8d:3b:65:
         2c:49:73:c0:df:a0:b2:58:22:62:c4:24:13:99:87:0e:af:82:
         60:78:9a:b3:a8:74:65:6c:08:60:27:9b:14:bf:2d:e5:0f:9e:
         4a:9b:cc:8a:34:da:1f:66:b2:4a:1e:38:32:da:96:be:0f:29:
         fd:cc:de:87:18:5a:a8:c0:57:53:31:56:35:b7:0c:7a:90:4e:
         a9:cf:f0:42:4c:45:4a:7e:c4:c0:04:32:df:20:a9:eb:4a:2b:
         61:f3:b4:58:c3:a8:3a:ee:98:73:8f:92:3d:e3:7c:fc:02:be:
         e9:03:c6:05:82:0b:43:ac:a3:4e:56:7d:30:8a:75:20:ff:f1:
         f9:01:57:32:9c:47:1c:ed:52:c3:77:dd:5d:c0:bd:a6:4e:bf:
         25:04:e3:e6:9e:7a:67:d1:fd:be:32:07:42:0e:fa:4c:e1:d9:
         02:20:94:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXJ8JYxiT0HVNImATACZtrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMjFjYjgyODkwOGY0MzA3NDllZTNhNWYyYTYyZGU1Zjgy
MmY3ZDEwHhcNMjYwOTI1MDYwMTQxWhcNMjYwOTI2MDYwMTQxWjAzMTEwLwYDVQQD
EyhjODUyZDkyOTlkMTQ2ZDAzOThiYjZhZGQzODU3YTc4MWY1MTYxYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ivhPM5tdM3zmt+JA2U7zbdUzal1
5amNOGh3S+g9oiR0ZKzFmLDlr61a1ZBkaSkYY/cYmx8oVHL81wa64sPLB7OmDgwf
Cmh+gOxwuHLFTwbjSJOkSUc9O2qfs6h9fLZG/vSod2XTmNQo23xwScawTm0t7uuI
q/lxd3r+M2JXq6ch6I8gE8hijJInwDJmZRTzS3ENeqovXc8+XTIEFAyxKAfRmsN9
8ejaev+kbYGC4eHkQPz1qayD7bglzrcZnq1rzzXuasjnk7pX71vCM4gr64tQtrhd
rUFkVVrcNPKwAVJZpD9NiHTSU3ORVnmvnbYOxN6loAKWk5nRa4tmnL89wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhS2SmdFG0DmLtq3ThXp4H1Fhv/MB8GA1UdIwQY
MBaAFLMhy4KJCPQwdJ7jpfKmLeX4IvfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYt
ODdmMzQxODg4NTYwLzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYtODdmMzQxODg4NTYw
LzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXn9bfw36
Z0hwPvWG0YFhqNDEJAJwemhF0EokFeAT9PcvqYr1yHcoXVoeAb/He+0K/F3Ed0e8
1lnT8u9kyjBVu/3E/kYsX54z1hyZRzmU6fDcf9jehLJYjTtlLElzwN+gslgiYsQk
E5mHDq+CYHias6h0ZWwIYCebFL8t5Q+eSpvMijTaH2aySh44MtqWvg8p/czehxha
qMBXUzFWNbcMepBOqc/wQkxFSn7EwAQy3yCp60orYfO0WMOoOu6Yc4+SPeN8/AK+
6QPGBYILQ6yjTlZ9MIp1IP/x+QFXMpxHHO1Sw3fdXcC9pk6/JQTj5p56Z9H9vjIH
Qg76TOHZAiCUHg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:25:54 2026 by rpki-client