Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.mft
File:                     G5bMQpAtOI5hHGLvFGg7_M6Dw6s.mft (raw, json)
Hash identifier:          UTg0mpe1VcOp+62olzL1TFIqnjoRfi5PRQKuafGUHuU=
Subject key identifier:   D6:75:EB:40:BB:94:4F:A7:3E:0E:D5:8D:BF:4B:DF:C2:54:F2:A3:6F
Authority key identifier: 1B:96:CC:42:90:2D:38:8E:61:1C:62:EF:14:68:3B:FC:CE:83:C3:AB
Certificate issuer:       /CN=1b96cc42902d388e611c62ef14683bfcce83c3ab
Certificate serial:       01A0DBA963E72B82C926C2556B2E18FC379B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.mft
Manifest number:          31
Signing time:             Sat 26 Sep 2026 03:01:46 +0000
Manifest this update:     Sat 26 Sep 2026 03:01:46 +0000
Manifest next update:     Sun 27 Sep 2026 03:01:46 +0000
Files and hashes:         1: 3a32IJmzLulvHDXPinVJuIWxxd0.asa (hash: k1qnCL9fUv9xE6kZymyF31c/7bS7xOt8+iPI7hRc540=)
                          2: G5bMQpAtOI5hHGLvFGg7_M6Dw6s.crl (hash: /j5JVBKqTJx9VUzdcTm0OfFJCJsVzTNwvSP7ssED0uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:63:e7:2b:82:c9:26:c2:55:6b:2e:18:fc:37:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b96cc42902d388e611c62ef14683bfcce83c3ab
        Validity
            Not Before: Sep 26 03:01:46 2026 GMT
            Not After : Sep 27 03:01:46 2026 GMT
        Subject: CN=d675eb40bb944fa73e0ed58dbf4bdfc254f2a36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:60:c9:16:b4:3d:9a:34:9f:3b:db:12:d2:
                    6e:b4:ce:4c:36:29:71:2c:08:05:03:c8:47:ae:dc:
                    7a:b3:3f:d3:74:1e:d8:e5:5f:09:7a:ea:04:db:9b:
                    7b:24:2e:9e:e0:09:af:f2:9b:e7:bb:d6:66:30:37:
                    4a:9e:14:08:83:3e:57:ac:fb:ff:f0:f1:6a:30:d2:
                    a7:74:7e:15:be:5a:9f:aa:f2:0b:66:c0:50:14:b7:
                    18:34:a0:18:3f:92:bd:ca:a5:ec:86:06:04:be:00:
                    6f:d6:bf:fb:25:69:bb:ec:9a:14:a8:1e:9b:0b:87:
                    7f:6b:1a:3b:c4:b5:56:1f:aa:f5:9b:90:ca:d6:b5:
                    13:b0:02:a2:dd:68:85:cd:d5:77:92:d0:fc:32:25:
                    05:0f:e1:8e:f3:ed:4d:a6:32:5e:83:ea:8d:12:1a:
                    08:37:f7:63:5b:42:8a:bd:4f:79:4a:8e:3e:22:3f:
                    df:7d:13:ae:8b:66:1f:53:6f:ba:30:7c:28:e6:52:
                    a3:5e:31:0b:fd:df:ca:46:e3:07:64:1a:80:66:87:
                    1d:54:ef:0a:1d:4d:cb:c1:e8:b8:5b:42:b6:0b:eb:
                    46:d2:da:83:9d:80:68:a1:9c:fa:f3:50:6d:f8:a7:
                    8e:d9:0c:9d:a7:f4:cf:4b:43:56:7b:07:cb:fb:11:
                    57:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:75:EB:40:BB:94:4F:A7:3E:0E:D5:8D:BF:4B:DF:C2:54:F2:A3:6F
            X509v3 Authority Key Identifier:
                keyid:1B:96:CC:42:90:2D:38:8E:61:1C:62:EF:14:68:3B:FC:CE:83:C3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c25b2b-0e93-4d4b-bfb2-b35d0ca3dea3/1/G5bMQpAtOI5hHGLvFGg7_M6Dw6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3d:b3:c5:c7:9f:f0:e9:3c:7d:eb:1a:40:b1:30:71:77:ef:
         42:69:a6:54:9a:0d:2b:c6:d7:c4:b8:ef:25:30:a9:c5:0f:87:
         e5:20:20:59:2f:51:c1:be:66:28:61:69:1d:80:9a:f2:d5:68:
         bc:c4:99:10:e4:1d:63:eb:21:2b:a1:95:d4:86:a5:dc:18:40:
         b8:f8:a0:1b:60:5d:cb:2f:12:ac:2e:eb:ae:cc:96:d8:a0:c3:
         64:c6:12:d1:89:88:da:9c:2f:97:4f:62:3f:6a:56:f0:c1:f6:
         12:cf:1b:79:9b:f3:17:19:ca:55:fc:f3:d6:ce:25:90:bd:f8:
         4f:20:a1:79:de:63:f9:b0:d2:72:f4:7a:f3:be:10:22:67:67:
         4c:68:26:b0:47:41:3c:9d:f4:77:f5:0e:31:8d:33:48:9c:34:
         11:8a:40:71:fc:ec:b5:51:33:f6:2b:56:79:54:40:0e:fc:49:
         a3:dc:23:3e:d1:74:fa:c0:11:ae:fd:19:c2:70:33:67:8f:3c:
         59:5d:88:83:47:7d:3d:53:bb:47:3d:bc:1f:36:70:34:2a:8d:
         84:ca:32:d7:f3:2c:f2:e1:54:c3:eb:5b:56:9f:89:dc:38:43:
         16:e4:dd:10:fa:02:ec:ed:61:b6:f0:56:84:57:aa:87:5f:ed:
         43:a5:ef:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqWPnK4LJJsJVay4Y/DebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOTZjYzQyOTAyZDM4OGU2MTFjNjJlZjE0NjgzYmZjY2U4
M2MzYWIwHhcNMjYwOTI2MDMwMTQ2WhcNMjYwOTI3MDMwMTQ2WjAzMTEwLwYDVQQD
EyhkNjc1ZWI0MGJiOTQ0ZmE3M2UwZWQ1OGRiZjRiZGZjMjU0ZjJhMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshFgyRa0PZo0nzvbEtJutM5MNilx
LAgFA8hHrtx6sz/TdB7Y5V8JeuoE25t7JC6e4Amv8pvnu9ZmMDdKnhQIgz5XrPv/
8PFqMNKndH4VvlqfqvILZsBQFLcYNKAYP5K9yqXshgYEvgBv1r/7JWm77JoUqB6b
C4d/axo7xLVWH6r1m5DK1rUTsAKi3WiFzdV3ktD8MiUFD+GO8+1NpjJeg+qNEhoI
N/djW0KKvU95So4+Ij/ffROui2YfU2+6MHwo5lKjXjEL/d/KRuMHZBqAZocdVO8K
HU3Lwei4W0K2C+tG0tqDnYBooZz681Bt+KeO2Qydp/TPS0NWewfL+xFXPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZ160C7lE+nPg7Vjb9L38JU8qNvMB8GA1UdIwQY
MBaAFBuWzEKQLTiOYRxi7xRoO/zOg8OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzViTVFwQXRPSTVoSEdMdkZHZzdfTTZEdzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jMjViMmItMGU5My00ZDRiLWJmYjIt
YjM1ZDBjYTNkZWEzLzEvRzViTVFwQXRPSTVoSEdMdkZHZzdfTTZEdzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9jMjViMmItMGU5My00ZDRiLWJmYjItYjM1ZDBjYTNkZWEz
LzEvRzViTVFwQXRPSTVoSEdMdkZHZzdfTTZEdzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUz2zxcef
8Ok8fesaQLEwcXfvQmmmVJoNK8bXxLjvJTCpxQ+H5SAgWS9Rwb5mKGFpHYCa8tVo
vMSZEOQdY+shK6GV1Ial3BhAuPigG2Bdyy8SrC7rrsyW2KDDZMYS0YmI2pwvl09i
P2pW8MH2Es8beZvzFxnKVfzz1s4lkL34TyChed5j+bDScvR6874QImdnTGgmsEdB
PJ30d/UOMY0zSJw0EYpAcfzstVEz9itWeVRADvxJo9wjPtF0+sARrv0ZwnAzZ488
WV2Ig0d9PVO7Rz28HzZwNCqNhMoy1/Ms8uFUw+tbVp+J3DhDFuTdEPoC7O1htvBW
hFeqh1/tQ6Xvaw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:46:17 2026 by rpki-client