Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
File:                     F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft (raw, json)
Hash identifier:          YNWJp/ipPyVhrSabXnmvkKHPAS+USWDKnq6W/hTa0ms=
Subject key identifier:   78:5D:61:1A:E2:9A:63:7A:4B:FB:4D:0F:F6:78:50:7D:52:D3:2E:12
Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
Certificate issuer:       /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Certificate serial:       01A0D45E0494287631155FCA2C4B019C609E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
Manifest number:          0CE8
Signing time:             Thu 24 Sep 2026 17:02:06 +0000
Manifest this update:     Thu 24 Sep 2026 17:02:06 +0000
Manifest next update:     Fri 25 Sep 2026 17:02:06 +0000
Files and hashes:         1: 1-2UtBiTjHsLQddCqGP3gVri-xW0.roa (hash: DJE2DUvAsy++YyvCOr1N7VjrxiOrJBdKXmpjw8gEGfk=)
                          2: 3Syacw0kA1-ynTLjhAFHVC60Ux8.roa (hash: U3SW2ZOoHktaoXakRfEn1+6KwZhVhuD7PQXG5yVZEPA=)
                          3: Esustr-nKce0GYWSsdcq1S7FWqk.roa (hash: 2zstjXpc+hHGR68Drzr0jQj4a47IKNLiUrHDnn0u3wk=)
                          4: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl (hash: J/YsLFoAbiKk3reQTeP00ebOH9CtwFN1rurKFPyeNhM=)
                          5: GnkphrOjuxTcnLnVByZAmcLPCW8.roa (hash: JM+qW4wdjiqLdb+xSRmHLF9aUafcLcAwlui6gPABGZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 17:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:5e:04:94:28:76:31:15:5f:ca:2c:4b:01:9c:60:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
        Validity
            Not Before: Sep 24 17:02:06 2026 GMT
            Not After : Sep 25 17:02:06 2026 GMT
        Subject: CN=785d611ae29a637a4bfb4d0ff678507d52d32e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:3b:38:07:da:95:30:ea:d3:2c:61:70:eb:
                    50:01:d9:f7:c1:c9:79:05:d4:8f:28:14:87:6e:4b:
                    7e:63:89:5a:6f:c7:08:d5:04:0f:a9:ba:01:30:9f:
                    72:05:9d:f0:50:ed:88:4b:f8:e4:15:f0:af:53:d6:
                    be:8d:35:32:21:c3:cf:e1:fd:47:29:4b:94:55:3e:
                    ae:57:35:aa:e3:98:11:b0:40:d4:65:e0:3d:cd:80:
                    3c:3c:47:71:c2:4f:77:79:da:40:96:f4:77:75:b0:
                    29:0e:ee:91:d8:65:4a:a7:5a:8b:25:4e:63:ec:76:
                    fc:bd:ed:25:89:12:b1:89:83:08:46:3c:6a:4c:ac:
                    13:86:b5:57:d7:1a:2d:81:9e:6c:16:f7:d6:27:e1:
                    9e:8d:72:e2:10:63:a8:ec:7b:1b:ad:63:78:09:73:
                    c5:82:f1:12:f7:3c:38:5e:5f:82:a1:a4:fe:62:a9:
                    76:b7:fc:f1:dc:45:24:07:c0:3b:d6:90:3a:d5:9f:
                    71:c3:57:b9:51:cb:7e:89:20:73:2e:6d:26:79:c7:
                    d5:cf:ba:25:70:5a:98:1c:02:da:6b:ce:ff:23:ae:
                    2a:f6:7d:6b:e3:3c:97:00:65:39:5c:54:32:15:b5:
                    6c:9e:4a:12:60:63:e4:a5:f1:e3:5e:40:4f:84:5d:
                    72:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5D:61:1A:E2:9A:63:7A:4B:FB:4D:0F:F6:78:50:7D:52:D3:2E:12
            X509v3 Authority Key Identifier:
                keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:66:ac:07:89:f9:50:da:7e:be:e6:4c:af:de:81:69:d1:c8:
         e8:56:51:5b:b4:81:ce:e5:c3:c3:f5:05:8e:6c:cf:f6:62:c6:
         fe:c0:81:6f:f6:a6:58:89:6a:48:2c:04:9b:ca:98:7d:63:14:
         2d:e4:de:35:44:e8:c5:5e:56:d9:c0:4f:63:42:9b:e6:fe:86:
         c8:b4:87:e6:e9:8e:97:e3:40:61:fd:7c:ad:f9:a6:0c:7f:b2:
         36:b7:0b:d8:f8:5c:24:7d:c2:5e:8a:89:b3:1b:a2:00:23:7d:
         14:7a:87:a0:fe:d1:dc:48:a0:85:99:7d:1a:e7:b9:a2:e9:1d:
         d1:3e:d2:9b:57:9e:0e:bb:18:54:21:d0:33:38:d2:62:c1:ad:
         a6:ab:f4:29:f4:41:ca:37:4d:d8:6b:92:21:3e:2e:f1:75:11:
         bd:41:59:04:78:03:8f:3e:19:d5:64:ff:73:1d:4d:62:65:bc:
         16:df:ff:6c:50:b9:9c:e4:9c:79:76:ec:fd:0e:88:de:96:da:
         5b:d6:9a:f5:f6:2d:93:89:e5:20:cd:0b:cd:7d:94:1a:52:0a:
         e1:87:ce:9d:a0:c4:46:20:12:7a:ec:77:a1:70:e6:fb:61:aa:
         27:51:08:7d:57:62:46:39:88:62:96:99:b3:a4:47:93:02:27:
         93:28:5f:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUXgSUKHYxFV/KLEsBnGCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YmJkNjAzNzRiYzIzZWQwN2QwMWMyNGU3Y2ZkOTE3OGI4
ZmVkMjEwHhcNMjYwOTI0MTcwMjA2WhcNMjYwOTI1MTcwMjA2WjAzMTEwLwYDVQQD
Eyg3ODVkNjExYWUyOWE2MzdhNGJmYjRkMGZmNjc4NTA3ZDUyZDMyZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMw7OAfalTDq0yxhcOtQAdn3wcl5
BdSPKBSHbkt+Y4lab8cI1QQPqboBMJ9yBZ3wUO2IS/jkFfCvU9a+jTUyIcPP4f1H
KUuUVT6uVzWq45gRsEDUZeA9zYA8PEdxwk93edpAlvR3dbApDu6R2GVKp1qLJU5j
7Hb8ve0liRKxiYMIRjxqTKwThrVX1xotgZ5sFvfWJ+GejXLiEGOo7HsbrWN4CXPF
gvES9zw4Xl+CoaT+Yql2t/zx3EUkB8A71pA61Z9xw1e5Uct+iSBzLm0mecfVz7ol
cFqYHALaa87/I64q9n1r4zyXAGU5XFQyFbVsnkoSYGPkpfHjXkBPhF1yqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhdYRrimmN6S/tND/Z4UH1S0y4SMB8GA1UdIwQY
MBaAFBe71gN0vCPtB9AcJOfP2ReLj+0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YjczZDctZjFmNS00ZThmLWE0YjYt
Y2RmODk2ODM1NDBlLzEvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81YjczZDctZjFmNS00ZThmLWE0YjYtY2RmODk2ODM1NDBl
LzEvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmasB4n5
UNp+vuZMr96BadHI6FZRW7SBzuXDw/UFjmzP9mLG/sCBb/amWIlqSCwEm8qYfWMU
LeTeNUToxV5W2cBPY0Kb5v6GyLSH5umOl+NAYf18rfmmDH+yNrcL2PhcJH3CXoqJ
sxuiACN9FHqHoP7R3EighZl9Gue5oukd0T7Sm1eeDrsYVCHQMzjSYsGtpqv0KfRB
yjdN2GuSIT4u8XURvUFZBHgDjz4Z1WT/cx1NYmW8Ft//bFC5nOSceXbs/Q6I3pba
W9aa9fYtk4nlIM0LzX2UGlIK4YfOnaDERiASeux3oXDm+2GqJ1EIfVdiRjmIYpaZ
s6RHkwInkyhfYw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:31:28 2026 by rpki-client