Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File:                     U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier:          tuDTt1Wk8gLeBnEOMW8YXL1BKfI92YNJ0IhXEPwVfU4=
Subject key identifier:   86:28:43:10:E6:FC:9E:C1:65:B4:44:2A:98:25:AC:0A:8E:20:1D:7E
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer:       /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial:       01A0D9F1E8C21297E86C87250A81366EB7B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number:          1A59
Signing time:             Fri 25 Sep 2026 19:01:44 +0000
Manifest this update:     Fri 25 Sep 2026 19:01:44 +0000
Manifest next update:     Sat 26 Sep 2026 19:01:44 +0000
Files and hashes:         1: NnLh8TC21_I7aIxYqBVOxMDsYn8.roa (hash: abZc4byKeRvjtv7jM3QRQhlxOH/1CVxvgCdUA7yEv1Y=)
                          2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: gLU8aOJ1/SyNRuoXVwN/or/XcbjC4d9wbKlv4pPfcb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:f1:e8:c2:12:97:e8:6c:87:25:0a:81:36:6e:b7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
        Validity
            Not Before: Sep 25 19:01:44 2026 GMT
            Not After : Sep 26 19:01:44 2026 GMT
        Subject: CN=86284310e6fc9ec165b4442a9825ac0a8e201d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:ce:9d:55:c0:3e:25:df:8d:6d:05:56:41:
                    3a:de:f2:19:8b:1b:52:1c:6e:cd:a2:8b:19:74:ab:
                    57:1c:61:87:db:63:57:37:e9:50:9b:c1:06:73:49:
                    d3:2f:a2:95:b5:ca:02:39:4a:06:eb:cc:dd:17:b7:
                    30:e2:e5:59:35:1d:ac:f2:fe:d9:77:de:51:18:f4:
                    56:03:a0:38:bb:40:03:2d:f4:68:a6:9b:21:b4:af:
                    a9:bc:26:f4:30:f5:f3:00:06:0a:38:aa:29:b2:c0:
                    16:57:21:6a:68:9b:42:c6:1f:f1:f0:76:3a:48:bc:
                    cf:5c:b2:f3:27:d8:75:05:98:88:b5:06:b8:0e:ad:
                    a3:86:3c:78:23:2b:29:fb:bf:c1:43:71:10:f4:08:
                    f2:9f:58:ba:af:4c:85:6c:05:ce:2e:be:0b:42:c0:
                    72:ae:44:a7:63:0b:2f:fd:bb:18:eb:12:31:d2:f3:
                    8e:42:dd:73:3a:53:c2:63:7a:57:7f:57:0a:88:80:
                    ef:3b:da:4b:bb:d2:1a:ae:78:45:80:b9:4f:63:0f:
                    38:09:de:7b:e8:26:f5:e6:f3:dd:6f:14:90:44:ec:
                    53:96:4d:c7:e9:62:15:1b:a6:27:32:85:e7:6d:d1:
                    3f:85:2d:7b:37:ff:4b:48:a3:a4:20:35:f4:3e:cc:
                    69:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:28:43:10:E6:FC:9E:C1:65:B4:44:2A:98:25:AC:0A:8E:20:1D:7E
            X509v3 Authority Key Identifier:
                keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:54:32:9a:53:17:53:a8:2e:50:ec:17:cf:c8:0c:19:b3:60:
         d1:0c:25:dc:b2:c5:5b:61:da:6b:af:a6:23:5f:39:6d:4e:ad:
         89:07:df:53:d8:50:e0:b0:01:a9:08:0e:28:99:8f:88:60:b6:
         49:0b:ef:a8:4b:f0:74:44:e5:ec:4c:ce:25:db:f9:aa:15:e9:
         31:44:61:1c:4d:dc:e2:8f:96:22:32:49:7d:1b:ee:29:ba:9f:
         f6:0f:68:af:33:ea:d0:96:3e:62:a3:bc:27:1a:4a:a5:38:91:
         63:c5:64:43:54:44:0c:aa:c1:b8:69:8b:b1:12:c1:5b:82:44:
         9a:ef:45:dd:92:29:8b:c7:72:5e:21:a1:56:ae:d5:22:ff:37:
         45:95:c0:e5:00:99:71:d5:9f:f7:3b:d6:28:ea:0d:e5:e6:f4:
         07:1a:65:9f:5d:31:95:20:3d:6f:f4:d5:58:9c:34:f7:19:09:
         3c:91:88:1a:5b:68:72:1d:75:c0:21:bc:f1:39:fc:af:7e:f5:
         98:dc:da:4e:4a:92:b2:a7:e1:36:94:1e:6a:86:0b:e3:8e:03:
         4e:a3:2e:cf:3b:8c:5b:c4:33:17:3f:73:44:df:12:0d:73:be:
         fa:f4:f4:64:db:4b:5b:0b:a3:18:20:b5:83:1e:7b:16:2f:ec:
         9b:f2:16:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZ8ejCEpfobIclCoE2bre5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjhiYWNjMzY1OWRjYjMzODlhYTQ3ZTM2NjRhNWY4Mjg0
ZTAwYWYwHhcNMjYwOTI1MTkwMTQ0WhcNMjYwOTI2MTkwMTQ0WjAzMTEwLwYDVQQD
Eyg4NjI4NDMxMGU2ZmM5ZWMxNjViNDQ0MmE5ODI1YWMwYThlMjAxZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl/OnVXAPiXfjW0FVkE63vIZixtS
HG7NoosZdKtXHGGH22NXN+lQm8EGc0nTL6KVtcoCOUoG68zdF7cw4uVZNR2s8v7Z
d95RGPRWA6A4u0ADLfRoppshtK+pvCb0MPXzAAYKOKopssAWVyFqaJtCxh/x8HY6
SLzPXLLzJ9h1BZiItQa4Dq2jhjx4Iysp+7/BQ3EQ9Ajyn1i6r0yFbAXOLr4LQsBy
rkSnYwsv/bsY6xIx0vOOQt1zOlPCY3pXf1cKiIDvO9pLu9IarnhFgLlPYw84Cd57
6Cb15vPdbxSQROxTlk3H6WIVG6YnMoXnbdE/hS17N/9LSKOkIDX0PsxpOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYoQxDm/J7BZbREKpglrAqOIB1+MB8GA1UdIwQY
MBaAFFP4usw2WdyzOJqkfjZkpfgoTgCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iMzVkNmEtOGJkNC00MmJkLWFiZGQt
MTUxMDdiY2E0NWI1LzEvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9iMzVkNmEtOGJkNC00MmJkLWFiZGQtMTUxMDdiY2E0NWI1
LzEvVV9pNnpEWlozTE00bXFSLU5tU2wtQ2hPQUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElQymlMX
U6guUOwXz8gMGbNg0Qwl3LLFW2Haa6+mI185bU6tiQffU9hQ4LABqQgOKJmPiGC2
SQvvqEvwdETl7EzOJdv5qhXpMURhHE3c4o+WIjJJfRvuKbqf9g9orzPq0JY+YqO8
JxpKpTiRY8VkQ1REDKrBuGmLsRLBW4JEmu9F3ZIpi8dyXiGhVq7VIv83RZXA5QCZ
cdWf9zvWKOoN5eb0Bxpln10xlSA9b/TVWJw09xkJPJGIGltoch11wCG88Tn8r371
mNzaTkqSsqfhNpQeaoYL444DTqMuzzuMW8QzFz9zRN8SDXO++vT0ZNtLWwujGCC1
gx57Fi/sm/IWNw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:13:52 2026 by rpki-client