Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File:                     dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier:          XrZrWJhLT/7UORnQLvPIPW6EjY/zzWOKnaT9S+HSkeI=
Subject key identifier:   63:31:85:91:F8:49:B8:97:66:D4:A4:3A:BA:E0:E9:05:B9:3F:41:76
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer:       /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial:       01A0F41F4B3A0ACE68F91A083DB723EDB08D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number:          1558
Signing time:             Wed 30 Sep 2026 21:01:26 +0000
Manifest this update:     Wed 30 Sep 2026 21:01:26 +0000
Manifest next update:     Thu 01 Oct 2026 21:01:26 +0000
Files and hashes:         1: ISzoHWBHuetmLQLrWc6n51rZYYg.roa (hash: 1yzmUR8v23fkpuJd9tVMCHTMq6Cr5Yk1vOljZxe5hY0=)
                          2: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: yeYjhJCmaLHTBMiQNoqzK/S8phdrZsgZsiEFEXyge1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f4:1f:4b:3a:0a:ce:68:f9:1a:08:3d:b7:23:ed:b0:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
        Validity
            Not Before: Sep 30 21:01:26 2026 GMT
            Not After : Oct  1 21:01:26 2026 GMT
        Subject: CN=63318591f849b89766d4a43abae0e905b93f4176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fe:b3:77:a9:38:80:d3:19:7f:1b:1c:dd:6f:
                    dc:76:c6:b1:8d:38:9e:35:c6:6c:ff:c5:7f:21:8e:
                    39:4e:1d:76:09:1d:fd:96:01:4e:7d:2a:c0:7c:78:
                    c8:b4:6c:1c:58:20:d4:7f:9f:6c:86:d9:85:a6:5c:
                    21:ea:94:2e:10:a9:c4:cd:ca:07:a4:9e:24:9e:2b:
                    54:44:8f:a6:c9:3b:86:1b:bc:fc:4c:a3:bc:71:0f:
                    94:05:60:4d:77:d8:6e:1e:1c:bb:3f:15:a8:5b:60:
                    0d:d6:3c:2f:80:28:06:a4:5a:3e:d4:b4:ee:d7:51:
                    7f:0e:b3:9b:d4:32:e3:37:d0:48:5f:1f:cc:b2:29:
                    f2:50:42:48:6c:6e:62:46:07:35:7b:7e:42:33:13:
                    99:16:2f:f1:b3:d0:22:19:bd:d3:09:74:2f:4b:bc:
                    13:b3:02:37:e5:35:99:9b:ec:ff:ee:a2:6d:9f:b1:
                    19:0b:4d:41:8d:c2:89:2a:27:de:38:97:69:a8:3c:
                    26:92:e6:8a:d3:f5:22:a5:11:02:c6:65:b6:06:3d:
                    83:9a:78:6a:87:7a:ac:5b:7c:ba:dd:76:7a:76:58:
                    9d:69:b9:17:af:3c:b3:00:f6:51:7e:49:1a:4a:8e:
                    e9:83:63:72:87:0a:6d:76:20:f0:14:3b:ed:17:80:
                    74:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:31:85:91:F8:49:B8:97:66:D4:A4:3A:BA:E0:E9:05:B9:3F:41:76
            X509v3 Authority Key Identifier:
                keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:24:1e:d9:c4:fa:87:91:46:77:32:e9:d4:52:2f:5e:ab:00:
         f0:7e:4f:bb:19:42:45:a0:71:e0:ea:5d:a8:ab:ed:e3:7f:94:
         69:6b:9d:c1:95:74:84:60:b0:39:9d:63:9c:a7:ff:07:30:1a:
         61:39:71:95:7e:48:ed:9b:46:df:69:ab:59:85:51:e0:9d:d8:
         8c:4c:eb:91:0e:96:f0:47:31:9a:4b:a8:ad:ba:71:46:31:0a:
         c1:31:83:96:98:25:51:03:f2:0f:41:b8:73:23:e1:56:0c:13:
         f5:2f:16:c6:ea:20:dd:d6:56:c2:70:77:c5:bb:b7:75:76:9f:
         b4:6f:5b:19:22:74:f0:7f:e1:8a:74:9b:77:05:07:38:01:73:
         ce:b7:84:89:3f:30:8c:54:98:57:75:80:fd:30:eb:90:81:ac:
         4f:8c:08:b0:91:cf:f2:65:18:bc:8d:d6:24:21:cc:45:b8:95:
         f9:23:e2:39:82:59:97:22:ed:32:47:6f:99:a5:d0:9d:a0:70:
         41:10:80:34:8a:1d:4d:cc:92:53:ee:be:b5:ec:37:61:00:aa:
         75:e2:7d:1c:fa:a2:12:76:8a:8a:76:ba:89:86:25:08:78:a4:
         d4:bc:c6:53:53:7e:22:b1:96:00:5f:c4:b5:73:ef:d1:1d:c9:
         4c:a4:94:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD0H0s6Cs5o+RoIPbcj7bCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx
ZDNkZjAwHhcNMjYwOTMwMjEwMTI2WhcNMjYxMDAxMjEwMTI2WjAzMTEwLwYDVQQD
Eyg2MzMxODU5MWY4NDliODk3NjZkNGE0M2FiYWUwZTkwNWI5M2Y0MTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv6zd6k4gNMZfxsc3W/cdsaxjTie
NcZs/8V/IY45Th12CR39lgFOfSrAfHjItGwcWCDUf59shtmFplwh6pQuEKnEzcoH
pJ4knitURI+myTuGG7z8TKO8cQ+UBWBNd9huHhy7PxWoW2AN1jwvgCgGpFo+1LTu
11F/DrOb1DLjN9BIXx/MsinyUEJIbG5iRgc1e35CMxOZFi/xs9AiGb3TCXQvS7wT
swI35TWZm+z/7qJtn7EZC01BjcKJKifeOJdpqDwmkuaK0/UipRECxmW2Bj2Dmnhq
h3qsW3y63XZ6dlidabkXrzyzAPZRfkkaSo7pg2NyhwptdiDwFDvtF4B08QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMxhZH4SbiXZtSkOrrg6QW5P0F2MB8GA1UdIwQY
MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct
ODRiNTc2OTNjN2E4LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4
LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCQe2cT6
h5FGdzLp1FIvXqsA8H5PuxlCRaBx4OpdqKvt43+UaWudwZV0hGCwOZ1jnKf/BzAa
YTlxlX5I7ZtG32mrWYVR4J3YjEzrkQ6W8EcxmkuorbpxRjEKwTGDlpglUQPyD0G4
cyPhVgwT9S8Wxuog3dZWwnB3xbu3dXaftG9bGSJ08H/hinSbdwUHOAFzzreEiT8w
jFSYV3WA/TDrkIGsT4wIsJHP8mUYvI3WJCHMRbiV+SPiOYJZlyLtMkdvmaXQnaBw
QRCANIodTcySU+6+tew3YQCqdeJ9HPqiEnaKina6iYYlCHik1LzGU1N+IrGWAF/E
tXPv0R3JTKSUCw==
-----END CERTIFICATE-----
Generated at Thu Oct 1 08:01:33 2026 by rpki-client