Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
File:                     G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft (raw, json)
Hash identifier:          UnjAu3Q4+CaTKFXZ/GnUog5i9mASuBTmt1dfZJq+kJk=
Subject key identifier:   16:09:48:74:D6:62:AA:0A:C9:1B:85:B4:12:7E:A2:1F:6E:85:41:AD
Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
Certificate issuer:       /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Certificate serial:       01A0D983BD42BCD6D81DBCBA421CCD344CD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
Manifest number:          0526
Signing time:             Fri 25 Sep 2026 17:01:24 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:24 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:24 +0000
Files and hashes:         1: G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl (hash: bFRZt2iWNLgllVgdFBxIpGOSQDJRZTeVIhu6Op0vV2E=)
                          2: gKtJxrK81I9Dyc2P943nU7n_NFg.roa (hash: FbX29T2UzXYU9Jzwc1cwk5IktOA+UziqBTJuxuNpfOg=)
                          3: mNtB-xH-QhdKLqJsjGj6xp9WKiw.roa (hash: hEJab2DxVlPrR69lL6u2AYQEme1levJMaPuY085myQg=)
                          4: rgz-y7ThQzU-4VqCfX9Ota3d-p0.roa (hash: piFE9GnT4z5N6g/l0DAbRB4nCDUBJdWgytzAmBqGihU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:bd:42:bc:d6:d8:1d:bc:ba:42:1c:cd:34:4c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
        Validity
            Not Before: Sep 25 17:01:24 2026 GMT
            Not After : Sep 26 17:01:24 2026 GMT
        Subject: CN=16094874d662aa0ac91b85b4127ea21f6e8541ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:4d:a3:75:81:25:9d:7f:a3:d0:86:2a:c5:
                    cb:2b:87:5a:a9:7c:0b:1b:57:ec:44:e5:03:49:ff:
                    4e:04:45:f4:9d:83:3b:e6:de:8a:4a:66:40:9d:37:
                    45:0e:da:f4:76:d8:4b:1b:62:37:68:f3:0a:8a:9f:
                    de:13:b4:72:83:e1:99:f6:f3:36:22:58:63:21:4b:
                    44:56:15:58:82:34:18:5a:c3:3d:b4:6f:77:db:11:
                    10:09:f2:08:0a:78:4c:ef:8a:05:4f:37:e2:f9:0f:
                    06:a5:0b:b8:29:4a:b4:cc:c9:30:53:02:3e:c9:f9:
                    f7:21:c5:de:af:5e:10:83:47:31:64:3d:f3:1c:48:
                    05:c0:94:15:71:cd:23:cf:b6:c8:2b:f5:c9:f5:68:
                    45:b1:49:67:38:29:eb:25:c3:1b:16:b6:c1:6f:d0:
                    9d:45:83:b3:de:bd:3e:ec:c4:aa:6a:c6:3a:7b:c5:
                    c2:c1:38:d4:9b:54:79:c5:82:4d:e9:cb:71:51:5b:
                    e8:0b:fb:fe:92:eb:22:d3:6d:8e:ee:d1:9b:eb:ee:
                    88:3f:f9:ed:a9:81:18:76:41:91:56:5c:c0:98:6e:
                    0e:ec:ab:01:c6:ac:7c:1b:3b:47:97:03:2d:74:73:
                    0b:93:07:f2:81:71:ef:70:a2:2c:fa:6a:f4:09:92:
                    f5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:09:48:74:D6:62:AA:0A:C9:1B:85:B4:12:7E:A2:1F:6E:85:41:AD
            X509v3 Authority Key Identifier:
                keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a5:a7:d6:33:fe:07:61:40:06:4c:47:6e:02:9f:5b:19:25:
         ec:d7:d8:15:69:13:95:22:cd:c4:0d:89:86:32:4f:d7:85:44:
         20:55:bc:38:d8:e6:ba:7e:1e:89:ae:70:bd:39:d0:0d:6f:49:
         38:6d:4e:c8:5b:5c:14:cb:54:20:91:e5:3a:62:9e:d1:ed:dd:
         0a:06:21:97:95:36:3e:7c:9f:45:1b:c5:66:06:d1:c0:6b:3b:
         d3:7c:21:5b:94:28:01:44:e6:00:4b:f3:6b:68:2a:ce:c3:d1:
         89:1e:83:99:08:1f:71:fd:0a:77:fe:74:0a:17:cb:0b:f0:e3:
         b9:87:63:f4:4a:f4:b5:de:14:cb:bd:59:32:ae:af:a8:1e:77:
         99:24:dd:55:f8:b9:cf:61:16:4d:2b:b0:9d:14:0a:fd:64:44:
         3a:ab:4a:55:e1:3c:de:15:7d:78:33:68:b7:62:4f:3d:d8:97:
         69:96:c3:df:2b:af:c8:85:45:8f:14:86:83:81:a2:e9:11:81:
         d3:4d:24:61:f6:e2:74:fd:39:3c:60:8a:25:47:f1:e3:ff:e4:
         bc:1c:b6:a0:69:8f:ca:36:38:6d:fb:27:5e:d8:88:4d:b0:eb:
         55:fe:8b:e5:b1:55:a2:19:13:5c:a0:99:08:3f:c6:f3:37:5b:
         1b:f0:52:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZg71CvNbYHby6QhzNNEzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWEzZTk5YmJiMGRkYTc4MDg0MjE5YTYxMzQ5MmU1ZTZk
OWI0NWEwHhcNMjYwOTI1MTcwMTI0WhcNMjYwOTI2MTcwMTI0WjAzMTEwLwYDVQQD
EygxNjA5NDg3NGQ2NjJhYTBhYzkxYjg1YjQxMjdlYTIxZjZlODU0MWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAZNo3WBJZ1/o9CGKsXLK4daqXwL
G1fsROUDSf9OBEX0nYM75t6KSmZAnTdFDtr0dthLG2I3aPMKip/eE7Ryg+GZ9vM2
IlhjIUtEVhVYgjQYWsM9tG932xEQCfIICnhM74oFTzfi+Q8GpQu4KUq0zMkwUwI+
yfn3IcXer14Qg0cxZD3zHEgFwJQVcc0jz7bIK/XJ9WhFsUlnOCnrJcMbFrbBb9Cd
RYOz3r0+7MSqasY6e8XCwTjUm1R5xYJN6ctxUVvoC/v+kusi022O7tGb6+6IP/nt
qYEYdkGRVlzAmG4O7KsBxqx8GztHlwMtdHMLkwfygXHvcKIs+mr0CZL1zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYJSHTWYqoKyRuFtBJ+oh9uhUGtMB8GA1UdIwQY
MBaAFBvqPpm7sN2ngIQhmmE0kuXm2bRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2Ut
YTBiY2M5MTJkNzM1LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2UtYTBiY2M5MTJkNzM1
LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6Wn1jP+
B2FABkxHbgKfWxkl7NfYFWkTlSLNxA2JhjJP14VEIFW8ONjmun4eia5wvTnQDW9J
OG1OyFtcFMtUIJHlOmKe0e3dCgYhl5U2PnyfRRvFZgbRwGs703whW5QoAUTmAEvz
a2gqzsPRiR6DmQgfcf0Kd/50ChfLC/DjuYdj9Er0td4Uy71ZMq6vqB53mSTdVfi5
z2EWTSuwnRQK/WREOqtKVeE83hV9eDNot2JPPdiXaZbD3yuvyIVFjxSGg4Gi6RGB
000kYfbidP05PGCKJUfx4//kvBy2oGmPyjY4bfsnXtiITbDrVf6L5bFVohkTXKCZ
CD/G8zdbG/BSiA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:34:56 2026 by rpki-client