Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
File:                     8M0rO57YMSbUXboSAD1sbjWms4A.mft (raw, json)
Hash identifier:          +jRCwxulx8qQST+yf9sKtfG5cbphbWPguXXifxG8DnU=
Subject key identifier:   51:87:D9:DB:E2:E3:14:BA:11:11:9E:C4:DB:1F:97:92:C8:4F:86:22
Authority key identifier: F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
Certificate issuer:       /CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Certificate serial:       01A0CAB4A79A89E98465A75ACA23D6A8CC17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
Manifest number:          178F
Signing time:             Tue 22 Sep 2026 20:00:32 +0000
Manifest this update:     Tue 22 Sep 2026 20:00:32 +0000
Manifest next update:     Wed 23 Sep 2026 20:00:32 +0000
Files and hashes:         1: 8M0rO57YMSbUXboSAD1sbjWms4A.crl (hash: IfEfzUSoDgNx4GlJZWyTiZaYITGwql0hiGjRB7BHZ5Y=)
                          2: ddIfNiRppOj1v3M6aJwVqmijL0I.roa (hash: EfC5UqZXOZKbq7DWkiDFRsm66HUflEVOFO98FL8DAwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:b4:a7:9a:89:e9:84:65:a7:5a:ca:23:d6:a8:cc:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
        Validity
            Not Before: Sep 22 20:00:32 2026 GMT
            Not After : Sep 23 20:00:32 2026 GMT
        Subject: CN=5187d9dbe2e314ba11119ec4db1f9792c84f8622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:12:6e:8c:37:d3:ff:2b:06:0d:4e:e1:b6:bb:
                    2b:24:08:08:10:c9:dd:e6:80:97:09:fb:ed:cf:e6:
                    71:d0:c3:47:af:16:5f:d9:15:7d:7f:7f:d9:e1:0e:
                    fd:dc:9a:9a:33:72:7b:d5:90:a4:6b:8b:42:79:a9:
                    49:ab:dc:33:f0:97:38:ce:52:78:19:2a:f9:89:3b:
                    be:d6:91:73:22:06:68:3a:75:7a:29:0a:1f:5c:08:
                    97:91:a6:53:85:cb:22:e0:51:48:c9:95:4d:6e:f7:
                    86:56:f3:73:37:58:22:87:e6:43:6f:a7:78:4b:89:
                    bb:95:0f:a8:ae:7c:f9:29:c2:1e:01:ac:b2:18:ca:
                    f0:c8:8d:c2:ab:f0:e8:d9:30:34:fd:c3:5d:03:f8:
                    8a:1b:36:46:fe:9b:e5:9e:3f:df:e1:f3:80:39:34:
                    73:98:3b:8f:ca:e4:2a:fc:61:81:6d:85:10:28:38:
                    00:b5:59:c3:93:b0:94:98:e5:20:c7:44:fd:3e:81:
                    87:1f:dc:b1:03:2c:96:a9:56:82:9a:2d:0a:07:2b:
                    92:85:cb:2f:13:24:7f:87:5c:20:4c:b4:80:72:55:
                    07:56:29:fa:ed:7a:90:6d:85:57:dc:59:12:9d:02:
                    7f:ec:9c:00:08:f6:75:66:50:21:11:10:c5:7f:8c:
                    ea:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:87:D9:DB:E2:E3:14:BA:11:11:9E:C4:DB:1F:97:92:C8:4F:86:22
            X509v3 Authority Key Identifier:
                keyid:F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:90:f6:7a:84:2a:47:28:2c:5b:e7:79:fd:d8:59:aa:32:
         a8:ff:aa:ac:d4:6c:4f:ab:72:4b:09:7f:ad:99:10:27:34:10:
         2a:50:51:77:3c:f0:27:fe:f7:97:e6:b9:e5:50:3c:15:2a:90:
         71:67:6c:6c:ef:07:17:99:a6:ee:07:e8:75:2b:72:92:f5:07:
         e2:34:fd:52:23:ed:4f:e8:5a:ef:2a:5e:ee:92:a5:67:2e:1d:
         32:20:2b:84:ac:c5:a7:51:0b:9f:d4:40:29:6b:47:38:d7:b0:
         32:75:8c:4f:73:a6:bb:c5:67:37:20:a6:1d:21:18:62:e3:6d:
         9d:03:c2:6e:7d:5c:6e:13:ab:68:59:c5:0c:a5:41:4e:8a:01:
         79:de:f4:a5:f4:37:c2:ee:42:5a:11:6b:3f:4a:74:2e:d5:40:
         ed:67:20:58:84:eb:31:39:ec:a1:5f:52:88:4f:d8:ba:d2:8a:
         1a:72:e7:da:ea:69:77:91:e4:d4:d6:dd:0d:07:0c:e8:bb:d7:
         33:60:31:d8:3c:6b:10:85:2b:76:2a:ed:1e:57:82:65:55:93:
         1d:e1:24:44:9c:27:20:ac:79:37:38:09:5b:b0:e3:6f:c0:f9:
         f5:42:aa:dd:52:90:7d:21:fe:f8:11:a6:09:da:d6:45:45:6d:
         4f:90:a6:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKtKeaiemEZadayiPWqMwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2QyYjNiOWVkODMxMjZkNDVkYmExMjAwM2Q2YzZlMzVh
NmIzODAwHhcNMjYwOTIyMjAwMDMyWhcNMjYwOTIzMjAwMDMyWjAzMTEwLwYDVQQD
Eyg1MTg3ZDlkYmUyZTMxNGJhMTExMTllYzRkYjFmOTc5MmM4NGY4NjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BJujDfT/ysGDU7htrsrJAgIEMnd
5oCXCfvtz+Zx0MNHrxZf2RV9f3/Z4Q793JqaM3J71ZCka4tCealJq9wz8Jc4zlJ4
GSr5iTu+1pFzIgZoOnV6KQofXAiXkaZThcsi4FFIyZVNbveGVvNzN1gih+ZDb6d4
S4m7lQ+ornz5KcIeAayyGMrwyI3Cq/Do2TA0/cNdA/iKGzZG/pvlnj/f4fOAOTRz
mDuPyuQq/GGBbYUQKDgAtVnDk7CUmOUgx0T9PoGHH9yxAyyWqVaCmi0KByuShcsv
EyR/h1wgTLSAclUHVin67XqQbYVX3FkSnQJ/7JwACPZ1ZlAhERDFf4zqtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGH2dvi4xS6ERGexNsfl5LIT4YiMB8GA1UdIwQY
MBaAFPDNKzue2DEm1F26EgA9bG41prOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQt
N2M5ZTEwNTE3YzI1LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQtN2M5ZTEwNTE3YzI1
LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuqQ9nqE
KkcoLFvnef3YWaoyqP+qrNRsT6tySwl/rZkQJzQQKlBRdzzwJ/73l+a55VA8FSqQ
cWdsbO8HF5mm7gfodStykvUH4jT9UiPtT+ha7ype7pKlZy4dMiArhKzFp1ELn9RA
KWtHONewMnWMT3Omu8VnNyCmHSEYYuNtnQPCbn1cbhOraFnFDKVBTooBed70pfQ3
wu5CWhFrP0p0LtVA7WcgWITrMTnsoV9SiE/YutKKGnLn2uppd5Hk1NbdDQcM6LvX
M2Ax2DxrEIUrdirtHleCZVWTHeEkRJwnIKx5NzgJW7Djb8D59UKq3VKQfSH++BGm
CdrWRUVtT5Cm8g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:38:23 2026 by rpki-client