Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
File:                     gIBkPxusC6RJkhdbr7bFlTxz3iw.mft (raw, json)
Hash identifier:          76kHJyTCWMq94kFtfRFAiVM/2SWDlhRcbmX3VyZi1Ts=
Subject key identifier:   49:8D:AF:30:B9:74:54:7E:8B:02:48:3B:48:42:34:16:8E:73:19:03
Authority key identifier: 80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C
Certificate issuer:       /CN=8080643f1bac0ba44992175bafb6c5953c73de2c
Certificate serial:       01A0D6823E193BE054BBE6D2072357FC8DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
Manifest number:          032E
Signing time:             Fri 25 Sep 2026 03:00:54 +0000
Manifest this update:     Fri 25 Sep 2026 03:00:54 +0000
Manifest next update:     Sat 26 Sep 2026 03:00:54 +0000
Files and hashes:         1: gIBkPxusC6RJkhdbr7bFlTxz3iw.crl (hash: Gr4J2bDAA9n0SMVs45ru9lNu54zuNCX9mdgruqFNUvg=)
                          2: yeVF8Df3VPcnjSBNmqzoVDfx_BA.asa (hash: q/aLmgYWUuh1D94V+T+v2Y5wHbMtBtOfdm/5xzlYGS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:82:3e:19:3b:e0:54:bb:e6:d2:07:23:57:fc:8d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8080643f1bac0ba44992175bafb6c5953c73de2c
        Validity
            Not Before: Sep 25 03:00:54 2026 GMT
            Not After : Sep 26 03:00:54 2026 GMT
        Subject: CN=498daf30b974547e8b02483b484234168e731903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:d5:69:29:8c:f1:2a:8a:53:62:e3:90:26:
                    11:05:92:0f:9f:37:7a:b7:ef:39:69:26:e1:2b:35:
                    06:0b:34:2f:36:22:4f:bb:88:68:fd:62:f7:5e:14:
                    28:3b:f8:51:e6:31:ea:77:e6:6c:67:91:03:89:ae:
                    f3:20:7e:c7:33:f9:bc:3b:1e:00:a6:ea:91:97:fc:
                    d1:ae:9e:70:e9:91:f1:86:64:d9:b7:1c:1b:7b:73:
                    77:d0:4a:dc:db:f7:4a:78:4f:8b:35:94:09:45:14:
                    82:dd:5c:a3:43:7d:12:04:48:e1:b4:7f:8f:4f:8f:
                    db:6a:b3:85:02:dd:ca:fb:5e:f4:b7:95:0a:82:ef:
                    e3:3c:b6:11:90:72:de:ff:bd:ce:3f:ea:a2:9d:72:
                    02:37:fa:c9:8d:9e:03:e2:e4:36:b7:29:9e:51:94:
                    43:56:0f:d1:bf:81:17:66:ee:25:d7:8c:65:b0:6e:
                    1d:7b:b5:52:87:e4:22:98:e8:6c:8f:a1:53:8b:f9:
                    40:e3:9e:37:84:ea:57:c6:35:40:de:09:cc:59:e4:
                    62:45:db:ae:b8:33:f3:d8:58:7e:06:0b:3b:34:26:
                    a8:33:be:33:de:b1:1f:29:71:5e:02:be:60:5c:f8:
                    c0:95:a9:63:08:03:b3:70:83:a2:52:e1:21:ce:a1:
                    51:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8D:AF:30:B9:74:54:7E:8B:02:48:3B:48:42:34:16:8E:73:19:03
            X509v3 Authority Key Identifier:
                keyid:80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:49:62:1a:69:0a:47:43:6a:98:60:96:1e:40:46:2e:da:09:
         1d:8e:dc:3a:10:b9:92:61:ce:51:ad:5a:87:aa:dd:85:cc:14:
         0e:9a:56:22:fb:36:00:1e:57:0f:ca:e7:d1:b3:cf:8c:40:a5:
         5b:ec:97:25:78:01:dc:a3:91:40:14:0f:3e:30:0e:cb:2f:7a:
         0e:42:69:da:d6:22:45:21:3e:a6:4d:8c:89:6b:34:a3:e3:d4:
         15:61:d7:9d:3d:05:8b:fb:7e:e3:67:05:8b:85:af:76:1d:24:
         37:07:8d:d1:91:65:9e:a5:9e:41:cf:34:da:ae:bb:db:90:8f:
         a9:39:32:6e:2c:df:7c:af:81:36:9a:95:e2:2d:3c:6c:b0:e2:
         84:6f:38:9b:01:7f:5a:39:43:cd:cf:f3:99:df:c7:25:00:ca:
         20:21:90:ba:75:14:92:8f:5d:4e:a1:23:eb:0d:08:a8:9d:93:
         22:ba:c4:b3:7c:95:8b:2a:9a:e3:f7:c5:ab:56:62:e4:1c:93:
         c7:59:ca:3c:1a:de:37:f2:51:13:14:de:f7:52:f6:30:0a:21:
         3a:9d:87:18:4f:8b:2d:ae:bd:1b:84:d9:b5:9d:be:ef:d9:f0:
         e6:bd:f4:45:2e:b3:2a:b8:11:5d:b7:cc:56:fe:14:e1:60:8c:
         4e:95:a7:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWgj4ZO+BUu+bSByNX/I3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwODA2NDNmMWJhYzBiYTQ0OTkyMTc1YmFmYjZjNTk1M2M3
M2RlMmMwHhcNMjYwOTI1MDMwMDU0WhcNMjYwOTI2MDMwMDU0WjAzMTEwLwYDVQQD
Eyg0OThkYWYzMGI5NzQ1NDdlOGIwMjQ4M2I0ODQyMzQxNjhlNzMxOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbzVaSmM8SqKU2LjkCYRBZIPnzd6
t+85aSbhKzUGCzQvNiJPu4ho/WL3XhQoO/hR5jHqd+ZsZ5EDia7zIH7HM/m8Ox4A
puqRl/zRrp5w6ZHxhmTZtxwbe3N30Erc2/dKeE+LNZQJRRSC3VyjQ30SBEjhtH+P
T4/barOFAt3K+170t5UKgu/jPLYRkHLe/73OP+qinXICN/rJjZ4D4uQ2tymeUZRD
Vg/Rv4EXZu4l14xlsG4de7VSh+QimOhsj6FTi/lA4543hOpXxjVA3gnMWeRiRduu
uDPz2Fh+Bgs7NCaoM74z3rEfKXFeAr5gXPjAlaljCAOzcIOiUuEhzqFRKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmNrzC5dFR+iwJIO0hCNBaOcxkDMB8GA1UdIwQY
MBaAFICAZD8brAukSZIXW6+2xZU8c94sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0lCa1B4dXNDNlJKa2hkYnI3YkZsVHh6M2l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85NjQxNzktYzVlOC00OGMwLThiNjkt
MTQ5MmE1NzFjMWYzLzEvZ0lCa1B4dXNDNlJKa2hkYnI3YkZsVHh6M2l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85NjQxNzktYzVlOC00OGMwLThiNjktMTQ5MmE1NzFjMWYz
LzEvZ0lCa1B4dXNDNlJKa2hkYnI3YkZsVHh6M2l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0liGmkK
R0NqmGCWHkBGLtoJHY7cOhC5kmHOUa1ah6rdhcwUDppWIvs2AB5XD8rn0bPPjECl
W+yXJXgB3KORQBQPPjAOyy96DkJp2tYiRSE+pk2MiWs0o+PUFWHXnT0Fi/t+42cF
i4Wvdh0kNweN0ZFlnqWeQc802q6725CPqTkybizffK+BNpqV4i08bLDihG84mwF/
WjlDzc/zmd/HJQDKICGQunUUko9dTqEj6w0IqJ2TIrrEs3yViyqa4/fFq1Zi5ByT
x1nKPBreN/JRExTe91L2MAohOp2HGE+LLa69G4TZtZ2+79nw5r30RS6zKrgRXbfM
Vv4U4WCMTpWnvQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:46:47 2026 by rpki-client