Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.mft
File:                     R_C4YOE1Dgh6BnkxgQdPR7eVP6E.mft (raw, json)
Hash identifier:          joV7wX22RakyotFDHxtKxpfOPzp5pfWQov7cwhs8ln4=
Subject key identifier:   A3:E7:90:4A:82:16:E9:E3:61:EB:7F:47:49:6E:9F:69:97:58:FB:ED
Authority key identifier: 47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1
Certificate issuer:       /CN=47f0b860e1350e087a06793181074f47b7953fa1
Certificate serial:       01A06EDE34198FFD6FE181919ECEEA159B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.mft
Manifest number:          C0
Signing time:             Sat 05 Sep 2026 00:00:51 +0000
Manifest this update:     Sat 05 Sep 2026 00:00:51 +0000
Manifest next update:     Sun 06 Sep 2026 00:00:51 +0000
Files and hashes:         1: 6qJR-6j_XHCjQn0pcbOBuw-osrc.roa (hash: IoUxiZrCNqGL9+ySrTWrGXpAnVJTxmrgfcq6Z0LdZaU=)
                          2: R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl (hash: aOhBOSDMazKz8bRZQ246HPNhfoSwppKYeNyj6akHJ4c=)
                          3: oOuq9szBVVXp_8OsgCZ3pu28ddg.roa (hash: 7GdmHYyxJ/9UYfdFEu9F0OgfiQh0ULa76jQWllePHj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:de:34:19:8f:fd:6f:e1:81:91:9e:ce:ea:15:9b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47f0b860e1350e087a06793181074f47b7953fa1
        Validity
            Not Before: Sep  5 00:00:51 2026 GMT
            Not After : Sep  6 00:00:51 2026 GMT
        Subject: CN=a3e7904a8216e9e361eb7f47496e9f699758fbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ff:0a:a8:e5:f0:28:f8:4a:d3:89:92:04:a8:
                    1d:dc:0c:f7:fa:cc:b5:a1:e6:14:3a:da:81:7b:de:
                    e5:ef:fd:dc:b0:cd:f2:9e:f1:54:08:76:cb:b1:94:
                    60:73:45:cd:16:29:fe:e8:83:6f:b1:90:4b:36:83:
                    86:b6:09:c2:89:2a:4b:bc:e6:3a:96:b3:fe:8a:d9:
                    8d:64:a3:cd:da:1f:f4:9b:16:fb:b2:ab:2d:54:85:
                    4a:7c:98:99:07:23:fa:38:a8:a9:f3:23:3c:99:c2:
                    2b:25:02:12:eb:4f:b2:b2:dc:dc:97:53:2f:75:28:
                    30:0b:9f:30:fe:f2:39:7a:14:6d:7f:24:e8:dd:b0:
                    ed:32:39:c9:21:aa:7f:69:81:30:9b:ee:5a:d2:a0:
                    a6:0a:a7:1c:4c:2b:6f:1f:d4:3d:83:14:ad:74:37:
                    70:09:f3:b4:31:8c:c4:9b:f5:d2:45:b3:58:7b:7a:
                    45:26:2c:0d:54:5e:e4:e7:fc:a0:82:5e:56:9f:80:
                    27:c9:63:d5:d2:b4:17:3d:3f:c8:15:f3:54:20:cb:
                    14:0c:d0:5b:13:62:e1:2e:90:af:a7:1d:98:3f:06:
                    f5:a0:e3:d8:f7:f5:8f:35:aa:4c:19:66:8b:7b:87:
                    cb:ac:b9:f9:6a:2a:4f:a0:4a:99:d5:1f:68:ec:7a:
                    4c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E7:90:4A:82:16:E9:E3:61:EB:7F:47:49:6E:9F:69:97:58:FB:ED
            X509v3 Authority Key Identifier:
                keyid:47:F0:B8:60:E1:35:0E:08:7A:06:79:31:81:07:4F:47:B7:95:3F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/baa675-4ce7-4294-8c8c-22fd502d15e8/1/R_C4YOE1Dgh6BnkxgQdPR7eVP6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:47:83:13:94:b8:77:13:78:be:7b:a6:38:fa:c4:75:47:e4:
         ee:95:f3:b3:5a:df:17:c9:ca:0d:72:65:c3:27:dd:4c:a1:aa:
         d0:df:5a:27:17:88:6b:be:8d:11:db:a4:8a:7d:f8:d2:74:27:
         b2:01:ad:6a:0a:fd:46:34:62:8a:5c:0d:d4:13:3a:95:5c:d5:
         c6:16:ec:51:88:29:45:22:5a:4f:fc:71:ce:e9:f7:a9:52:0e:
         e1:37:ab:b5:de:99:52:f4:ee:51:3f:b2:87:6e:bf:cb:65:c8:
         2e:47:55:87:c4:46:dd:62:c6:bb:c4:85:0b:f2:f4:50:58:1f:
         ad:4f:85:66:96:7b:22:ae:fd:35:6f:0e:50:7c:cc:0a:be:f3:
         a3:99:9b:40:f6:31:43:c7:cc:10:dc:01:32:ce:99:dd:fc:60:
         d6:43:40:ce:20:13:4c:88:be:45:2c:34:4e:9a:da:7c:97:0d:
         92:e1:61:b7:ba:7a:95:f3:a3:38:42:82:f2:76:20:5e:b1:b8:
         30:cd:41:c9:3d:2e:74:7f:49:65:8b:f1:2a:79:7e:80:17:a3:
         c1:bc:e8:99:e1:5d:5e:36:9d:78:7f:e5:06:18:00:26:cc:74:
         be:32:0c:5f:60:7d:b8:7a:2e:a0:0f:19:9f:fd:20:be:05:3a:
         32:ea:48:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBu3jQZj/1v4YGRns7qFZsWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZjBiODYwZTEzNTBlMDg3YTA2NzkzMTgxMDc0ZjQ3Yjc5
NTNmYTEwHhcNMjYwOTA1MDAwMDUxWhcNMjYwOTA2MDAwMDUxWjAzMTEwLwYDVQQD
EyhhM2U3OTA0YTgyMTZlOWUzNjFlYjdmNDc0OTZlOWY2OTk3NThmYmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP8KqOXwKPhK04mSBKgd3Az3+sy1
oeYUOtqBe97l7/3csM3ynvFUCHbLsZRgc0XNFin+6INvsZBLNoOGtgnCiSpLvOY6
lrP+itmNZKPN2h/0mxb7sqstVIVKfJiZByP6OKip8yM8mcIrJQIS60+ystzcl1Mv
dSgwC58w/vI5ehRtfyTo3bDtMjnJIap/aYEwm+5a0qCmCqccTCtvH9Q9gxStdDdw
CfO0MYzEm/XSRbNYe3pFJiwNVF7k5/yggl5Wn4AnyWPV0rQXPT/IFfNUIMsUDNBb
E2LhLpCvpx2YPwb1oOPY9/WPNapMGWaLe4fLrLn5aipPoEqZ1R9o7HpMoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPnkEqCFunjYet/R0lun2mXWPvtMB8GA1UdIwQY
MBaAFEfwuGDhNQ4IegZ5MYEHT0e3lT+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUl9DNFlPRTFEZ2g2Qm5reGdRZFBSN2VWUDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iYWE2NzUtNGNlNy00Mjk0LThjOGMt
MjJmZDUwMmQxNWU4LzEvUl9DNFlPRTFEZ2g2Qm5reGdRZFBSN2VWUDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iYWE2NzUtNGNlNy00Mjk0LThjOGMtMjJmZDUwMmQxNWU4
LzEvUl9DNFlPRTFEZ2g2Qm5reGdRZFBSN2VWUDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkeDE5S4
dxN4vnumOPrEdUfk7pXzs1rfF8nKDXJlwyfdTKGq0N9aJxeIa76NEdukin340nQn
sgGtagr9RjRiilwN1BM6lVzVxhbsUYgpRSJaT/xxzun3qVIO4Tertd6ZUvTuUT+y
h26/y2XILkdVh8RG3WLGu8SFC/L0UFgfrU+FZpZ7Iq79NW8OUHzMCr7zo5mbQPYx
Q8fMENwBMs6Z3fxg1kNAziATTIi+RSw0TprafJcNkuFht7p6lfOjOEKC8nYgXrG4
MM1ByT0udH9JZYvxKnl+gBejwbzomeFdXjadeH/lBhgAJsx0vjIMX2B9uHouoA8Z
n/0gvgU6MupItQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:29:39 2026 by rpki-client