Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
File:                     r22p1WtCwrgWsa5rGFElq_IVk-8.mft (raw, json)
Hash identifier:          3Gz4Owp7B47n70c2ZQgYSFpgw90fKtGxNNX+4ONq2g0=
Subject key identifier:   00:06:92:57:66:ED:82:A1:A2:C9:6E:9F:66:9E:A7:22:D6:6D:BE:21
Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF
Certificate issuer:       /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
Certificate serial:       01A0FC467E7CCB953FBB8B80C6233ADEEC85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
Manifest number:          0539
Signing time:             Fri 02 Oct 2026 11:01:13 +0000
Manifest this update:     Fri 02 Oct 2026 11:01:13 +0000
Manifest next update:     Sat 03 Oct 2026 11:01:13 +0000
Files and hashes:         1: 3vsJC6fNuGN4-OcDnwBO6CepBDE.roa (hash: wGJI9xj8xX1LfIyL9p4tn79/tsV9eiEKpUNCD9TJPfk=)
                          2: F2aeFjJsEe0Ev-pYnuxbm8GUj-s.roa (hash: //RGqq5vbdwe1kcXBXm0ImZrQGGNEM4aNxYmS22uVKk=)
                          3: Ml1bL44N6RRHfCMhiwaHxYoFYqE.roa (hash: mv51AxdRu44rhiit2eu9uxAPSqaXVemKhG4H6GIdqJU=)
                          4: QZX4N0nFVU70Vj9ggeWrbayajWQ.roa (hash: fTLW/j3hk4V2QwQlXrG/uL9IIw5WAjCaWcGJ+gp3yXU=)
                          5: VoMhQ5y_uxLsu5nfRtG8bOviLlw.roa (hash: fnlgaHZDH37hg0Ckb563HOlkmEqGNqOIf1PdxlJVeTo=)
                          6: r22p1WtCwrgWsa5rGFElq_IVk-8.crl (hash: 6qmr0c+IaOiScP2Aldmsg0taFOrgkBO776bH8LmNJ60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:46:7e:7c:cb:95:3f:bb:8b:80:c6:23:3a:de:ec:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
        Validity
            Not Before: Oct  2 11:01:13 2026 GMT
            Not After : Oct  3 11:01:13 2026 GMT
        Subject: CN=0006925766ed82a1a2c96e9f669ea722d66dbe21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:1d:e9:af:49:a3:9f:ea:d3:c1:ee:16:61:
                    eb:75:24:e8:90:9c:a8:09:9c:0a:6f:63:2c:c7:9e:
                    dc:67:d0:c9:d7:9e:82:f0:c8:93:ad:d3:ae:03:57:
                    f8:13:f4:5d:f9:2b:89:70:56:9a:70:38:34:ba:b8:
                    f2:e5:07:7d:c8:58:45:36:2b:08:fa:2a:e7:38:9a:
                    b3:44:26:61:a6:97:4a:b1:c0:fc:34:10:d5:8a:3d:
                    23:8f:37:ca:72:30:6e:e7:d1:d6:54:79:b8:9e:0d:
                    26:43:d9:73:83:b6:4e:78:b1:1c:70:40:8e:9b:75:
                    fb:31:a0:7e:eb:00:83:d5:51:d9:92:b5:89:46:7f:
                    55:e2:98:4d:03:ed:1e:ef:35:d0:59:33:2d:a9:43:
                    7c:c4:77:c6:58:4c:81:47:5d:a1:36:c0:67:59:6d:
                    84:0e:6a:b6:be:d6:68:b3:ad:e5:41:84:83:6a:74:
                    08:a0:8a:d6:3b:d0:3e:22:bd:93:93:13:1a:14:a8:
                    fe:f8:bf:d5:be:b0:4f:50:56:da:08:40:15:73:6a:
                    9a:6d:06:04:ff:3d:28:5d:23:f9:f5:1b:9c:ed:dd:
                    e6:73:f5:8e:70:a9:7f:14:b4:f2:c3:09:07:16:39:
                    62:b4:51:e2:bd:5c:67:4b:81:f2:d3:a9:36:44:09:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:06:92:57:66:ED:82:A1:A2:C9:6E:9F:66:9E:A7:22:D6:6D:BE:21
            X509v3 Authority Key Identifier:
                keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:68:db:63:7a:de:f4:7e:b0:21:56:71:9a:5c:8f:b5:37:b8:
         c8:45:f1:61:df:fd:a5:91:9d:77:34:92:8d:4e:d2:63:bd:1c:
         92:9d:bf:9c:c6:63:88:c8:d5:a1:bc:c8:b5:08:bf:ee:eb:b5:
         7b:15:2e:db:7d:ad:46:00:e0:82:32:2a:fa:51:7e:31:cf:14:
         9d:74:1c:7e:40:c0:21:d2:6b:67:f2:05:20:52:95:f2:cd:08:
         80:88:91:dd:25:82:e7:95:5e:db:13:25:70:eb:21:2d:f5:ee:
         7a:26:2b:32:76:4d:45:5f:2e:28:62:f6:88:e0:d4:74:4c:3a:
         8e:d8:ae:83:13:a1:22:c4:ec:5d:3c:48:87:f6:04:2f:ea:f2:
         69:e1:93:18:ab:c8:7a:c0:7e:c2:e8:16:30:6e:fc:7a:82:b5:
         cd:16:1d:a9:44:8b:c8:0a:e5:05:1f:f9:bb:f1:12:5d:7e:08:
         c2:eb:14:5b:5f:fe:9f:c3:69:86:f4:c0:7c:26:17:11:e4:0d:
         cf:4a:6b:94:da:ac:93:03:4e:e5:1e:98:3b:68:65:21:0b:c9:
         29:b5:56:16:94:ed:86:87:03:a6:8a:23:bb:1b:69:75:c7:7e:
         d1:b7:bd:6e:10:ef:0a:65:40:4e:8f:5a:62:fb:88:78:be:44:
         a0:eb:b5:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD8Rn58y5U/u4uAxiM63uyFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNmRhOWQ1NmI0MmMyYjgxNmIxYWU2YjE4NTEyNWFiZjIx
NTkzZWYwHhcNMjYxMDAyMTEwMTEzWhcNMjYxMDAzMTEwMTEzWjAzMTEwLwYDVQQD
EygwMDA2OTI1NzY2ZWQ4MmExYTJjOTZlOWY2NjllYTcyMmQ2NmRiZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2sd6a9Jo5/q08HuFmHrdSTokJyo
CZwKb2Msx57cZ9DJ156C8MiTrdOuA1f4E/Rd+SuJcFaacDg0urjy5Qd9yFhFNisI
+irnOJqzRCZhppdKscD8NBDVij0jjzfKcjBu59HWVHm4ng0mQ9lzg7ZOeLEccECO
m3X7MaB+6wCD1VHZkrWJRn9V4phNA+0e7zXQWTMtqUN8xHfGWEyBR12hNsBnWW2E
Dmq2vtZos63lQYSDanQIoIrWO9A+Ir2TkxMaFKj++L/VvrBPUFbaCEAVc2qabQYE
/z0oXSP59Ruc7d3mc/WOcKl/FLTywwkHFjlitFHivVxnS4Hy06k2RAkivQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAGkldm7YKhoslun2aepyLWbb4hMB8GA1UdIwQY
MBaAFK9tqdVrQsK4FrGuaxhRJavyFZPvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQt
YjEwYTgzMmJjYTQzLzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQtYjEwYTgzMmJjYTQz
LzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2jbY3re
9H6wIVZxmlyPtTe4yEXxYd/9pZGddzSSjU7SY70ckp2/nMZjiMjVobzItQi/7uu1
exUu232tRgDggjIq+lF+Mc8UnXQcfkDAIdJrZ/IFIFKV8s0IgIiR3SWC55Ve2xMl
cOshLfXueiYrMnZNRV8uKGL2iODUdEw6jtiugxOhIsTsXTxIh/YEL+ryaeGTGKvI
esB+wugWMG78eoK1zRYdqUSLyArlBR/5u/ESXX4IwusUW1/+n8NphvTAfCYXEeQN
z0prlNqskwNO5R6YO2hlIQvJKbVWFpTthocDpoojuxtpdcd+0be9bhDvCmVATo9a
YvuIeL5EoOu1NA==
-----END CERTIFICATE-----
Generated at Fri Oct 2 21:44:53 2026 by rpki-client