Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.mft
File:                     u72o46G37fejOqiqTb0qhU7_gYE.mft (raw, json)
Hash identifier:          PIVHTXr7Nnz/uPOYAh0GIpG87k/DtC2PXMfMxK0+vm0=
Subject key identifier:   86:23:D5:82:2B:29:D5:EF:AE:BB:74:AF:84:B0:F0:BC:5E:C6:46:D0
Authority key identifier: BB:BD:A8:E3:A1:B7:ED:F7:A3:3A:A8:AA:4D:BD:2A:85:4E:FF:81:81
Certificate issuer:       /CN=bbbda8e3a1b7edf7a33aa8aa4dbd2a854eff8181
Certificate serial:       01A0DC17224047370EDF8B941864D54FDFBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u72o46G37fejOqiqTb0qhU7_gYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.mft
Manifest number:          EC
Signing time:             Sat 26 Sep 2026 05:01:38 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:38 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:38 +0000
Files and hashes:         1: Gt-6orGpXZKA9oiAT_yxlXlxxLU.roa (hash: VIGJrby0dx0a4mdrc24JbAt5nTLlizl4UvAfIY1Ljk8=)
                          2: NNe_KVkbtoUNciwcDVdLIM-H_pk.roa (hash: iqBPaLh4Raz6sGJ+2W7WyQyTVa6OZlfKJNf5U6VNov4=)
                          3: u72o46G37fejOqiqTb0qhU7_gYE.crl (hash: 2RlT9gnLn66QrfKw4LNahxmyaFH4VB03JsjAyf8uCtE=)
                          4: zRSMxCTICRmqaApMDWLjvx4v7tc.roa (hash: Xe8tO8CH+JL0TpluqdZvk0OELd/rckLpi+p6kQ2cnSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u72o46G37fejOqiqTb0qhU7_gYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 05:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:22:40:47:37:0e:df:8b:94:18:64:d5:4f:df:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbda8e3a1b7edf7a33aa8aa4dbd2a854eff8181
        Validity
            Not Before: Sep 26 05:01:38 2026 GMT
            Not After : Sep 27 05:01:38 2026 GMT
        Subject: CN=8623d5822b29d5efaebb74af84b0f0bc5ec646d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:0f:de:36:1d:6b:c3:e6:de:66:2f:62:39:
                    46:27:13:90:29:c4:7e:8a:aa:d5:48:e9:ed:ab:ca:
                    9b:59:d6:a2:5b:a1:e5:5a:04:0f:19:42:ab:8e:8f:
                    8f:93:37:7f:cb:89:a5:0e:71:e8:ce:a9:40:f6:c9:
                    28:a4:01:4d:29:a9:bf:a5:79:35:45:a5:89:d9:74:
                    b5:db:b4:08:bf:c6:65:cb:4b:32:de:b3:3a:d4:b6:
                    44:ca:5e:fc:fa:1d:c0:e4:ef:fe:5b:27:1d:22:09:
                    b8:90:05:b9:eb:6f:1d:3f:ba:84:80:d5:5e:6b:13:
                    98:8c:86:4c:f4:c9:6f:c2:2d:b2:f8:53:5c:76:41:
                    16:2b:b4:c3:8c:61:3e:c6:ce:86:5a:96:a6:5e:90:
                    83:4e:43:29:20:76:12:dd:91:2f:c2:b1:79:84:1a:
                    0a:de:c9:60:14:73:7e:df:14:72:ba:22:7e:6a:5b:
                    95:4f:ce:85:b9:c6:4a:6d:3a:05:74:bc:90:46:ab:
                    e6:b4:69:26:ba:96:b7:ac:56:0f:37:f5:e9:1c:c2:
                    af:31:0c:a5:d6:05:36:5b:73:5a:9c:53:38:3e:c8:
                    13:cf:b5:28:c3:1b:ad:37:77:a5:57:68:be:cb:d1:
                    70:3d:b2:f9:6e:22:b3:fb:5e:b7:c0:c0:76:07:4f:
                    b7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:23:D5:82:2B:29:D5:EF:AE:BB:74:AF:84:B0:F0:BC:5E:C6:46:D0
            X509v3 Authority Key Identifier:
                keyid:BB:BD:A8:E3:A1:B7:ED:F7:A3:3A:A8:AA:4D:BD:2A:85:4E:FF:81:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u72o46G37fejOqiqTb0qhU7_gYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:81:05:e7:e4:73:8d:1a:79:d4:d1:4f:e6:99:30:19:37:13:
         18:77:1f:da:84:f3:bf:7a:05:9b:98:5e:e5:82:6e:fb:fd:07:
         be:b5:7f:a3:8a:a2:5d:52:9e:97:56:d3:9a:71:1b:fe:6b:a1:
         cd:a6:8e:fd:b1:7b:de:f1:1a:27:b2:67:dd:3e:49:72:aa:5e:
         4b:a5:53:20:fe:04:e5:8d:67:1f:8d:14:77:e1:32:03:6c:d5:
         c1:98:1d:1c:83:62:a9:e0:29:36:5e:10:5d:be:c7:14:a2:87:
         ab:eb:b4:04:d0:59:12:2b:f3:b1:8e:0f:86:37:e7:69:1a:f6:
         c9:49:55:6e:9f:13:e9:d1:dd:0b:0c:42:72:c3:bb:ab:07:75:
         b7:6c:52:07:8c:9c:65:c9:7c:f1:f6:67:7f:90:52:05:2b:9c:
         e8:b6:f4:60:3c:6b:0f:6b:7b:ea:da:1a:e1:50:bf:21:cc:65:
         f9:80:fb:d0:1a:af:fc:6d:60:02:dd:d8:72:7b:e0:fc:27:e5:
         05:85:92:fb:29:3b:c6:1d:22:48:11:bb:e5:ee:9e:50:3d:04:
         5a:9a:85:2a:05:7a:59:d3:45:5b:a9:64:a7:a3:b7:a7:1f:a8:
         e2:96:7b:54:a6:fe:61:52:1e:87:e3:7b:94:ed:74:08:b2:cd:
         03:27:83:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcFyJARzcO34uUGGTVT9++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYmRhOGUzYTFiN2VkZjdhMzNhYThhYTRkYmQyYTg1NGVm
ZjgxODEwHhcNMjYwOTI2MDUwMTM4WhcNMjYwOTI3MDUwMTM4WjAzMTEwLwYDVQQD
Eyg4NjIzZDU4MjJiMjlkNWVmYWViYjc0YWY4NGIwZjBiYzVlYzY0NmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwwP3jYda8Pm3mYvYjlGJxOQKcR+
iqrVSOntq8qbWdaiW6HlWgQPGUKrjo+Pkzd/y4mlDnHozqlA9skopAFNKam/pXk1
RaWJ2XS127QIv8Zly0sy3rM61LZEyl78+h3A5O/+WycdIgm4kAW5628dP7qEgNVe
axOYjIZM9Mlvwi2y+FNcdkEWK7TDjGE+xs6GWpamXpCDTkMpIHYS3ZEvwrF5hBoK
3slgFHN+3xRyuiJ+aluVT86FucZKbToFdLyQRqvmtGkmupa3rFYPN/XpHMKvMQyl
1gU2W3NanFM4PsgTz7UowxutN3elV2i+y9FwPbL5biKz+163wMB2B0+3LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYj1YIrKdXvrrt0r4Sw8LxexkbQMB8GA1UdIwQY
MBaAFLu9qOOht+33ozqoqk29KoVO/4GBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTcybzQ2RzM3ZmVqT3FpcVRiMHFoVTdfZ1lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYmE1MWMtMTc3MC00ZGZhLTgzNjct
MjhmNjhhNGExNDNiLzEvdTcybzQ2RzM3ZmVqT3FpcVRiMHFoVTdfZ1lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wYmE1MWMtMTc3MC00ZGZhLTgzNjctMjhmNjhhNGExNDNi
LzEvdTcybzQ2RzM3ZmVqT3FpcVRiMHFoVTdfZ1lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4EF5+Rz
jRp51NFP5pkwGTcTGHcf2oTzv3oFm5he5YJu+/0HvrV/o4qiXVKel1bTmnEb/muh
zaaO/bF73vEaJ7Jn3T5JcqpeS6VTIP4E5Y1nH40Ud+EyA2zVwZgdHINiqeApNl4Q
Xb7HFKKHq+u0BNBZEivzsY4PhjfnaRr2yUlVbp8T6dHdCwxCcsO7qwd1t2xSB4yc
Zcl88fZnf5BSBSuc6Lb0YDxrD2t76toa4VC/Icxl+YD70Bqv/G1gAt3Ycnvg/Cfl
BYWS+yk7xh0iSBG75e6eUD0EWpqFKgV6WdNFW6lkp6O3px+o4pZ7VKb+YVIeh+N7
lO10CLLNAyeDKQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:40:29 2026 by rpki-client