Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
File:                     s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json)
Hash identifier:          cZ2bnhRnde4BBEMeEvsdK7extBXS8pqbPnu9rV9tHxU=
Subject key identifier:   80:A0:52:71:21:E7:9F:31:A0:7B:97:AC:60:54:3B:39:4C:36:00:D2
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Certificate issuer:       /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial:       01A0D0B6A352D380659ECC3BF69266660F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
Manifest number:          1A81
Signing time:             Thu 24 Sep 2026 00:00:25 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:25 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:25 +0000
Files and hashes:         1: 0SfcrueR4QFb8tc3xCE9ChZKK7I.roa (hash: IdDOQHOx8rCnzoVeUvZ2P/Vc0fq61+r5BuBjfqgD4w8=)
                          2: 2-9TE0hGien7uJimnUsiIL-slx4.roa (hash: ITBjj6tI+9B/OwJk2K8Dzw0Ey9IFfvrN1KI8kY4JXFU=)
                          3: 4yoK_eJAZQm-WbM5DBSju_S_g9Y.roa (hash: lgK4wDh2/dU2RT27074ZUCpZTP9aGuib0EW4Skf9pnw=)
                          4: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (hash: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM=)
                          5: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (hash: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w=)
                          6: KplJ3LduqB8fju8Cp8wVC5kYaEw.roa (hash: 1HTgbzS5o5VYiYxgpRXb60MFv/qXACweKzDFgHcjSQo=)
                          7: T2XlEh6k8oXA5m_Hmkc7Jeq872U.roa (hash: /9TV0tPt7Hezx8nofCt10e+R7phZBTBRrAT2/hbBfq0=)
                          8: XD3CHImTefD8FuenptmC1xt8ItM.asa (hash: zINZ70P1S66UVaG5a/xPv//b9AHB0SJycGjf91yrXwY=)
                          9: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (hash: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA=)
                          10: cH5VUqUcKkt9HSVAYge0hus4RzQ.roa (hash: wbhN9oe6hbcxDEr+Ij32oivB3HfT5mVhEID8dWUc5rw=)
                          11: dIGZhkcQjwXD6TRRSDLTBNo_khY.roa (hash: iHaZdF9YmqdeJqR3BWg40wlZURcExcqa9x9g9e5Q+Sw=)
                          12: e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (hash: e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=)
                          13: esK7vUUmoe40XTn02C1nePqnmu4.roa (hash: OEIBdY80QQKHjWxchlaPmmZgXh8xpcGsK6uCERu5/OA=)
                          14: micpmXuBXJ3dOE45zxgN5f1tySY.roa (hash: timEpEuW2bJbH8o0L2R6fxPkiFxXOpRncmuh270Cg8o=)
                          15: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (hash: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew=)
                          16: qtDoqnaV9ZZGBUq4tRSN1Fvz-j0.roa (hash: GSE9R+oyIw7xMTL0Ep+U9AxHVf7kythML3j+Y7ovTM8=)
                          17: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: xIXs0OpV/cO8HHrKy2uCmTY4ktOEUqqnXnhPhm0+szU=)
                          18: xwR5dZkRnrr1skSXQMNYngkeNa8.roa (hash: hOBraH+aXlwWcJU3uccn3dhXaJ0+izS/UP4kbWzbnEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:a3:52:d3:80:65:9e:cc:3b:f6:92:66:66:0f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
        Validity
            Not Before: Sep 24 00:00:25 2026 GMT
            Not After : Sep 25 00:00:25 2026 GMT
        Subject: CN=80a0527121e79f31a07b97ac60543b394c3600d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9f:66:85:91:bb:ea:fc:06:b6:3d:6c:76:00:
                    6b:13:c7:3f:a3:ed:1c:e3:71:38:f7:66:57:bd:36:
                    00:5c:51:d8:9d:27:b3:fc:0e:33:5f:9c:a7:6b:ee:
                    3a:ff:67:ff:9f:8d:ec:9b:7d:ba:cb:e6:a8:ee:a6:
                    c0:e0:29:3f:f4:f7:e4:f6:cb:f1:b5:a9:bb:d7:9b:
                    f3:40:60:f7:90:8a:ca:60:9f:f7:43:95:16:ee:82:
                    fe:1c:0a:ac:fe:81:15:cc:15:3b:22:1d:98:be:93:
                    d7:b7:82:9a:a7:37:35:b3:8d:a9:08:56:5e:eb:88:
                    c2:0a:c4:fa:cb:17:67:3e:7f:2d:c1:a6:39:be:e0:
                    51:20:7f:12:3c:22:1f:21:e3:ea:3d:cf:11:4b:94:
                    a6:b5:c7:c8:8a:90:b1:76:d0:db:84:58:4a:46:92:
                    b7:64:50:b2:43:b6:c1:64:c3:2c:28:a4:fd:f1:24:
                    54:71:69:24:fc:6e:6e:10:93:7c:62:24:cb:6a:a7:
                    f3:e7:47:d7:28:19:c8:17:54:83:ab:d2:4e:17:07:
                    5c:8b:67:74:cb:67:9c:f9:64:8a:c0:aa:10:e5:c6:
                    b0:68:5a:2f:97:c0:c7:22:f4:8c:ff:ea:7f:93:82:
                    14:33:b4:10:88:3b:d9:fb:85:c7:f4:09:5c:8a:0c:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A0:52:71:21:E7:9F:31:A0:7B:97:AC:60:54:3B:39:4C:36:00:D2
            X509v3 Authority Key Identifier:
                keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:57:7c:11:00:f6:a1:8d:d4:27:e2:1d:c7:ba:55:ee:32:a7:
         15:a7:72:a8:c8:fb:71:4e:0a:53:56:ba:a2:0d:04:14:d9:b0:
         8c:ed:d0:6c:c1:31:22:14:63:7b:46:ce:fd:4a:21:8c:61:4b:
         7a:8d:61:da:1c:5f:65:6a:05:a8:85:61:32:15:a8:94:d9:5f:
         b2:a2:13:72:c2:5e:08:77:6e:16:69:3e:59:fe:fb:ba:fd:b4:
         8e:71:d6:3a:bf:8b:1d:15:a0:10:4c:39:a9:5b:25:5a:fa:59:
         39:70:58:17:7c:76:55:b7:05:7f:44:e5:18:11:bd:17:f7:05:
         2c:b3:97:9e:50:3c:37:84:fe:bd:78:f6:f4:2d:21:64:65:33:
         16:3d:d0:32:b8:7a:04:0f:95:f4:ff:07:01:4a:45:2c:52:ab:
         f7:21:c3:2d:32:85:56:a2:28:95:ab:5f:e5:b9:be:35:26:8f:
         38:18:5b:7d:7a:fa:e8:f8:45:07:55:79:1a:d9:ba:57:b5:2e:
         97:41:f3:fa:cb:fb:23:4a:cc:5b:72:ef:4b:86:f6:8e:ee:e1:
         1d:da:e9:72:29:42:af:30:00:97:e7:b7:e3:17:41:32:a9:1b:
         75:34:12:cb:69:2b:22:0c:72:3e:71:f5:c3:02:1d:4e:78:dc:
         35:80:3f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:54:47 2026 by rpki-client