Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
File:                     w1k5CyF0quIpYaDzwp_EAvH-I8g.mft (raw, json)
Hash identifier:          t2MlHMgqcbOiXRLQjUL2K5t1VfiWGj3ZeaA9N/W203c=
Subject key identifier:   4E:71:E2:66:BE:D2:55:06:2F:47:37:E7:D0:B9:55:AB:43:A7:0B:4E
Authority key identifier: C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8
Certificate issuer:       /CN=c359390b2174aae22961a0f3c29fc402f1fe23c8
Certificate serial:       01A0DC4E2E82D12F01396AC84074F13394EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
Manifest number:          06E0
Signing time:             Sat 26 Sep 2026 06:01:45 +0000
Manifest this update:     Sat 26 Sep 2026 06:01:45 +0000
Manifest next update:     Sun 27 Sep 2026 06:01:45 +0000
Files and hashes:         1: QAwwrbxhwHqZob00Jsa5Cjy2Lhk.roa (hash: qU0LPfBSzfyFQh7WeA13rtQNW4XzMc/LZcEBe2o1shw=)
                          2: w1k5CyF0quIpYaDzwp_EAvH-I8g.crl (hash: N4SeOe3ImYxtBy0XuihOMeYl2ALaCtA0dgLZ7W87ZZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4e:2e:82:d1:2f:01:39:6a:c8:40:74:f1:33:94:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c359390b2174aae22961a0f3c29fc402f1fe23c8
        Validity
            Not Before: Sep 26 06:01:45 2026 GMT
            Not After : Sep 27 06:01:45 2026 GMT
        Subject: CN=4e71e266bed255062f4737e7d0b955ab43a70b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:fd:7f:d4:b7:06:7b:d3:cd:34:83:31:5b:
                    4d:6c:b6:ca:80:08:27:8e:d5:bc:98:4f:5d:f4:65:
                    d8:ff:7e:41:11:89:e1:5e:92:8a:67:21:62:cd:fe:
                    1c:53:18:89:18:bd:e0:63:82:4c:bd:09:ed:aa:50:
                    ff:44:73:08:51:e1:09:bc:7f:8f:c3:a5:bd:43:46:
                    59:ec:c1:0f:f1:1f:ef:89:38:d7:ae:e9:37:a5:ef:
                    86:b7:03:e8:65:c9:fd:bf:8b:07:8d:91:fc:12:50:
                    fa:cf:4b:a2:1c:5a:90:49:9c:4c:30:1f:8f:ff:e1:
                    8b:de:50:51:ac:fd:9c:43:12:e8:81:dd:23:aa:d1:
                    e5:13:df:40:b2:d7:10:4f:a3:0c:6a:61:df:ac:cf:
                    3f:c1:a2:8f:0d:a3:b6:5d:51:7e:42:88:b5:70:1d:
                    5d:b4:3b:75:a1:17:57:5d:dd:e1:2c:17:af:e6:6e:
                    c5:59:cb:b9:71:fb:3d:e0:7c:14:3d:0c:31:83:a5:
                    76:4c:f4:14:61:0c:d7:18:24:1a:b9:c1:b0:2e:38:
                    c3:1e:94:46:d9:47:d9:19:03:e5:2c:cd:fc:5f:29:
                    9f:4f:98:fc:50:fd:6c:09:a8:b3:5d:ee:d6:3b:35:
                    56:48:14:1e:e8:5e:ad:1c:92:8b:fa:38:5e:95:d5:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:71:E2:66:BE:D2:55:06:2F:47:37:E7:D0:B9:55:AB:43:A7:0B:4E
            X509v3 Authority Key Identifier:
                keyid:C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:63:5b:47:87:38:09:16:fd:21:37:05:ff:2d:00:62:44:4e:
         8b:06:91:f3:ba:3b:2e:d0:30:85:fe:0d:5f:04:52:aa:a3:15:
         82:9d:15:6c:f8:74:a4:49:cf:20:11:e8:e9:4f:17:2e:32:f8:
         ac:3c:db:82:e4:66:b8:f4:c4:97:74:8d:3b:ed:73:73:cd:1e:
         67:ce:b8:12:00:a3:b3:fe:23:83:d3:da:19:eb:5e:ee:57:9e:
         0b:85:63:06:a7:21:ee:45:fe:60:d1:19:e6:cb:a4:20:c1:80:
         dc:38:ff:f4:c2:68:3b:a8:c7:78:9d:a6:08:0b:c9:4c:7e:7a:
         dd:a3:dc:0d:2e:67:44:d7:39:85:f6:17:21:4b:bd:1c:99:b3:
         30:d9:d2:2c:f5:cb:c0:38:e3:ec:0d:a7:9b:a5:71:6c:b7:83:
         99:44:de:fe:3c:68:98:dd:49:59:c0:fe:0b:18:24:b4:23:0b:
         9a:fb:8a:e0:da:45:0d:da:f6:78:92:c3:52:61:a0:4f:ee:12:
         6a:6a:67:4f:62:4a:50:45:7e:a5:9b:3b:83:0a:a1:06:94:b9:
         a0:de:73:97:1e:02:2d:ca:12:47:5a:37:2c:2f:94:64:7d:90:
         48:50:c5:c1:10:ee:c0:89:e2:2a:4e:18:aa:80:9c:c4:08:cc:
         17:f2:2f:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcTi6C0S8BOWrIQHTxM5TvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNTkzOTBiMjE3NGFhZTIyOTYxYTBmM2MyOWZjNDAyZjFm
ZTIzYzgwHhcNMjYwOTI2MDYwMTQ1WhcNMjYwOTI3MDYwMTQ1WjAzMTEwLwYDVQQD
Eyg0ZTcxZTI2NmJlZDI1NTA2MmY0NzM3ZTdkMGI5NTVhYjQzYTcwYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMb9f9S3BnvTzTSDMVtNbLbKgAgn
jtW8mE9d9GXY/35BEYnhXpKKZyFizf4cUxiJGL3gY4JMvQntqlD/RHMIUeEJvH+P
w6W9Q0ZZ7MEP8R/viTjXruk3pe+GtwPoZcn9v4sHjZH8ElD6z0uiHFqQSZxMMB+P
/+GL3lBRrP2cQxLogd0jqtHlE99AstcQT6MMamHfrM8/waKPDaO2XVF+Qoi1cB1d
tDt1oRdXXd3hLBev5m7FWcu5cfs94HwUPQwxg6V2TPQUYQzXGCQaucGwLjjDHpRG
2UfZGQPlLM38XymfT5j8UP1sCaizXe7WOzVWSBQe6F6tHJKL+jheldWtcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5x4ma+0lUGL0c359C5VatDpwtOMB8GA1UdIwQY
MBaAFMNZOQshdKriKWGg88KfxALx/iPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81YmJhN2ItZGFhNy00NDMyLTkyNzAt
ZWM1YzdkZTdhYWUxLzEvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81YmJhN2ItZGFhNy00NDMyLTkyNzAtZWM1YzdkZTdhYWUx
LzEvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGNbR4c4
CRb9ITcF/y0AYkROiwaR87o7LtAwhf4NXwRSqqMVgp0VbPh0pEnPIBHo6U8XLjL4
rDzbguRmuPTEl3SNO+1zc80eZ864EgCjs/4jg9PaGete7leeC4VjBqch7kX+YNEZ
5sukIMGA3Dj/9MJoO6jHeJ2mCAvJTH563aPcDS5nRNc5hfYXIUu9HJmzMNnSLPXL
wDjj7A2nm6VxbLeDmUTe/jxomN1JWcD+CxgktCMLmvuK4NpFDdr2eJLDUmGgT+4S
ampnT2JKUEV+pZs7gwqhBpS5oN5zlx4CLcoSR1o3LC+UZH2QSFDFwRDuwIniKk4Y
qoCcxAjMF/IvWw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:50:55 2026 by rpki-client