Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
File:                     apwfqpeD36srelPaP7D970zP6uU.mft (raw, json)
Hash identifier:          JfxeLDOMKwkMOsOGMS6Cf3R6CtJxQpyHwL6IGvkeJLQ=
Subject key identifier:   0B:AA:DE:BA:B2:9C:53:4B:99:23:B5:35:1B:95:BF:FB:78:39:EA:29
Authority key identifier: 6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
Certificate issuer:       /CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Certificate serial:       01A0D9BBAF8AB10227D831AE853DD581D9F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
Manifest number:          0588
Signing time:             Fri 25 Sep 2026 18:02:31 +0000
Manifest this update:     Fri 25 Sep 2026 18:02:31 +0000
Manifest next update:     Sat 26 Sep 2026 18:02:31 +0000
Files and hashes:         1: 4zGh0MUBekk_HwtHmTkO_YAQ85M.roa (hash: icZiFcOIbyfJDrtWOCLjWTmQXRjfFoXv0NM7bdtAKsM=)
                          2: DQFOw0x8RJL47XlL4ZturBkmc6E.roa (hash: R/q0l9NVDtxc2lMCCEWPf2Muc4aJ1zn9HBgJtXqaF0o=)
                          3: LePh5vrzBhoNO_6lU5I-FVwrIes.roa (hash: vYighBqDvO9MOWcU3J1pLlniKaytN1uAuJFxTtn+okE=)
                          4: UP2Wk7sOC_pJ-r2D-fCXTCeDSaE.roa (hash: ZCG1VWbK0Rc7KJ4YKyLYUpNJzUQV3wJoH1bAvG5hfNM=)
                          5: apwfqpeD36srelPaP7D970zP6uU.crl (hash: tJmYeRCKL/PODvRkr0eqvMsLXAVqEqQNggjd0KCOGe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:bb:af:8a:b1:02:27:d8:31:ae:85:3d:d5:81:d9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
        Validity
            Not Before: Sep 25 18:02:31 2026 GMT
            Not After : Sep 26 18:02:31 2026 GMT
        Subject: CN=0baadebab29c534b9923b5351b95bffb7839ea29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:88:9d:e8:6a:04:1f:5b:2f:20:31:e3:aa:b2:
                    34:04:5e:d6:e6:1a:4c:4a:75:42:9e:ca:27:18:30:
                    77:0f:f9:bc:96:7d:2e:f8:90:7a:4f:e7:d7:47:30:
                    69:b8:29:2d:c2:e7:e2:29:09:43:04:fd:f9:b4:a6:
                    6b:38:ab:0e:d6:d0:39:f4:da:a0:57:5a:3e:8e:b1:
                    7f:04:c9:5e:ef:cc:da:9f:db:47:c1:66:3c:c5:15:
                    cd:19:85:e2:54:25:e4:ff:be:ef:b5:27:da:ed:c6:
                    2c:fb:32:8e:08:b3:9e:8f:5b:04:72:9d:09:b3:d9:
                    7d:7a:15:8f:98:44:e4:b7:8d:3f:8e:75:46:b2:b1:
                    36:ef:69:70:f7:cb:89:4d:96:bb:d0:35:85:a6:6c:
                    ca:27:eb:a4:e2:a4:d1:1d:0e:db:04:e4:95:fc:9f:
                    6c:45:a0:ba:5b:9e:60:bd:eb:32:10:a0:6f:50:c3:
                    30:5a:04:0b:4a:c5:7b:4d:4e:a8:51:71:e8:69:15:
                    b1:dc:9c:31:b2:68:a8:33:a8:03:fa:79:a2:d6:a8:
                    b1:e0:72:94:ed:dd:a0:63:3d:d5:75:68:f4:75:d1:
                    1d:d3:88:28:8a:2e:a9:28:61:f6:9e:61:50:77:02:
                    dc:fe:c3:de:ea:e8:78:65:ac:32:82:59:84:d2:d9:
                    79:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AA:DE:BA:B2:9C:53:4B:99:23:B5:35:1B:95:BF:FB:78:39:EA:29
            X509v3 Authority Key Identifier:
                keyid:6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:bf:bc:e5:b8:88:3a:e5:77:f6:d7:ec:91:54:e1:89:c6:df:
         ec:57:bb:75:38:6e:5e:30:5d:1e:b1:32:4f:39:21:2b:45:a6:
         13:eb:f9:6b:17:2e:5b:c3:05:86:28:be:4f:2c:a3:5c:0d:ba:
         ef:9c:9b:08:e6:0e:04:b4:58:15:61:4a:3d:ab:fa:7d:eb:37:
         5f:e6:0c:f1:68:55:df:05:54:29:00:f3:17:0d:18:be:4d:17:
         d8:4b:02:c7:d2:ea:d8:b8:54:7f:81:ab:99:bc:5b:f6:0c:89:
         a8:11:19:3a:1c:80:02:a7:d1:9c:b2:9a:f2:b9:6d:ab:9e:d3:
         6c:1d:25:73:ac:4c:28:86:d0:01:65:31:af:de:10:b3:67:a4:
         3f:d7:92:84:2c:84:80:7b:85:59:d5:54:c0:80:88:6e:0f:94:
         a6:9d:a6:85:7c:bb:45:be:f1:a7:fa:dd:92:89:8b:71:3f:df:
         fd:91:7e:91:ad:97:56:1e:03:a8:60:af:f3:4b:1c:33:13:ed:
         5f:ec:31:21:88:71:48:f1:38:6f:ae:9b:cd:e0:e3:9d:9e:82:
         db:03:72:c9:94:f0:64:6a:5e:ff:34:9d:82:ad:35:d9:6e:b0:
         1c:b6:45:66:d3:03:51:73:f5:27:21:bd:2f:ec:4f:6d:f8:39:
         99:bc:13:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZu6+KsQIn2DGuhT3Vgdn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOWMxZmFhOTc4M2RmYWIyYjdhNTNkYTNmYjBmZGVmNGNj
ZmVhZTUwHhcNMjYwOTI1MTgwMjMxWhcNMjYwOTI2MTgwMjMxWjAzMTEwLwYDVQQD
EygwYmFhZGViYWIyOWM1MzRiOTkyM2I1MzUxYjk1YmZmYjc4MzllYTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04id6GoEH1svIDHjqrI0BF7W5hpM
SnVCnsonGDB3D/m8ln0u+JB6T+fXRzBpuCktwufiKQlDBP35tKZrOKsO1tA59Nqg
V1o+jrF/BMle78zan9tHwWY8xRXNGYXiVCXk/77vtSfa7cYs+zKOCLOej1sEcp0J
s9l9ehWPmETkt40/jnVGsrE272lw98uJTZa70DWFpmzKJ+uk4qTRHQ7bBOSV/J9s
RaC6W55gvesyEKBvUMMwWgQLSsV7TU6oUXHoaRWx3JwxsmioM6gD+nmi1qix4HKU
7d2gYz3VdWj0ddEd04goii6pKGH2nmFQdwLc/sPe6uh4ZawyglmE0tl5mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuq3rqynFNLmSO1NRuVv/t4OeopMB8GA1UdIwQY
MBaAFGqcH6qXg9+rK3pT2j+w/e9Mz+rlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zZmQ0YjYtYjQxNC00OTAyLTg5MWYt
ZDJiYjdjNzk1YTg2LzEvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zZmQ0YjYtYjQxNC00OTAyLTg5MWYtZDJiYjdjNzk1YTg2
LzEvYXB3ZnFwZUQzNnNyZWxQYVA3RDk3MHpQNnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvr+85biI
OuV39tfskVThicbf7Fe7dThuXjBdHrEyTzkhK0WmE+v5axcuW8MFhii+TyyjXA26
75ybCOYOBLRYFWFKPav6fes3X+YM8WhV3wVUKQDzFw0Yvk0X2EsCx9Lq2LhUf4Gr
mbxb9gyJqBEZOhyAAqfRnLKa8rltq57TbB0lc6xMKIbQAWUxr94Qs2ekP9eShCyE
gHuFWdVUwICIbg+Upp2mhXy7Rb7xp/rdkomLcT/f/ZF+ka2XVh4DqGCv80scMxPt
X+wxIYhxSPE4b66bzeDjnZ6C2wNyyZTwZGpe/zSdgq012W6wHLZFZtMDUXP1JyG9
L+xPbfg5mbwTVg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:43:35 2026 by rpki-client