Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File:                     U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier:          keDoCKCAiomHTWRjn3c2UVDegnfaFCTxv00TFyDfR68=
Subject key identifier:   58:2F:DC:08:23:52:BC:4F:5C:8F:5D:03:BE:69:EB:DE:E1:8E:B6:83
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer:       /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial:       01A08C43AE9E058DEFE561D57DFFC2451E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number:          1A51
Signing time:             Thu 10 Sep 2026 17:00:40 +0000
Manifest this update:     Thu 10 Sep 2026 17:00:40 +0000
Manifest next update:     Fri 11 Sep 2026 17:00:40 +0000
Files and hashes:         1: 92JgNy2UniVvWNA6kvsz4sovFIA.roa (hash: lAqICp0tk9GujbZHx2/6RHqqJpx7oSWIDsAW5NqmUFs=)
                          2: CRXS8yJabkFe9zngcADmlt5Mjh8.roa (hash: V+gmBDqtYsm9sl2kIiueYpvE2PqUIfwWQ+IMlLrBBzI=)
                          3: Jgm412TDqz8eqc-jU7VKAy0ZDsw.roa (hash: z/uYXvq2xIRczyrsXkqCGG5d8yfec3+FGNIntpcNWWU=)
                          4: QbAALDYZ_RGHs07gYUQih_CDJyk.roa (hash: +Uv/ugRA2zDra5XT10jpvOYMi9ZmxhbMWKYPoPRN5bM=)
                          5: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: Q+9Ou+NQlGDnOU8FYgcVZ53ihXMMzAU1YmoiZQdiZvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:43:ae:9e:05:8d:ef:e5:61:d5:7d:ff:c2:45:1e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
        Validity
            Not Before: Sep 10 17:00:40 2026 GMT
            Not After : Sep 11 17:00:40 2026 GMT
        Subject: CN=582fdc082352bc4f5c8f5d03be69ebdee18eb683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:48:19:1c:d9:9f:db:e1:5e:9b:c4:b1:eb:
                    46:39:fe:be:4f:e3:5d:d7:d8:20:3e:f2:b8:10:7e:
                    2d:28:a1:60:e4:81:99:c8:dd:5f:33:07:ca:b0:5b:
                    2c:3d:d8:73:94:91:42:bf:f4:13:9a:4f:7d:89:d7:
                    ff:b7:8d:4f:72:25:ec:af:90:5e:62:b3:f0:90:31:
                    d4:14:63:53:47:6a:84:f2:8e:46:24:36:91:1f:98:
                    71:e4:2c:0b:16:f0:78:20:e7:06:27:da:46:f7:4c:
                    44:05:16:23:73:10:cc:b6:94:51:85:b9:88:fc:a4:
                    8b:8d:4f:9c:8e:b7:03:cc:d8:de:9c:15:1a:57:c6:
                    cc:20:c5:3a:80:04:02:15:b3:12:83:52:78:ca:71:
                    39:f4:42:e7:a6:ad:ab:b1:e2:a7:33:1c:fc:d0:da:
                    a7:83:03:cd:54:f4:bb:d1:07:bf:b2:0a:47:70:80:
                    d8:a8:bd:ff:41:57:15:9e:8a:e2:f6:7d:2d:2a:f6:
                    fa:cc:ab:91:c7:6b:6a:58:46:f7:51:4b:85:f6:7f:
                    dd:0b:34:f0:5b:cf:2f:c6:43:10:00:b4:bb:ac:36:
                    bc:29:ea:03:90:ac:c4:ab:ce:eb:46:2a:b1:9e:8e:
                    c0:8c:ae:d3:f4:92:57:48:37:42:02:46:bd:07:f2:
                    fd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2F:DC:08:23:52:BC:4F:5C:8F:5D:03:BE:69:EB:DE:E1:8E:B6:83
            X509v3 Authority Key Identifier:
                keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3a:10:a2:a9:31:7f:1f:72:eb:66:90:24:c7:6e:5c:82:a6:
         84:b9:2e:44:e2:23:4c:9b:67:50:e2:25:50:c7:00:59:8f:db:
         eb:8a:07:9a:78:8c:5b:2d:45:3c:c9:44:fe:6c:1f:d6:aa:80:
         f9:fa:23:0a:c8:1a:70:19:a1:6e:c0:dd:ff:dd:9d:af:b3:81:
         11:96:e1:1b:53:b4:14:43:84:9f:b9:e2:64:17:ea:9a:20:a3:
         23:4c:4b:43:2a:11:bb:04:26:57:0d:37:2d:17:44:76:f3:c9:
         da:63:1b:5c:aa:c5:6a:6c:b2:79:61:5f:68:20:1e:22:64:89:
         c6:62:ca:8d:e1:90:11:ef:de:bb:75:6c:e6:7f:bd:17:09:0a:
         f5:69:d8:c6:fc:e0:5c:2c:c4:90:54:ff:45:b8:2a:48:6b:1e:
         62:85:86:c5:3b:d3:1a:e7:70:31:1c:1c:d4:4f:b5:54:d3:72:
         e0:7a:16:b0:77:ba:d7:f4:7a:9e:f0:48:5a:58:86:b3:72:eb:
         e2:ea:2b:96:03:3e:b7:bc:1f:34:21:fa:eb:07:3b:06:e2:34:
         7d:54:ae:ef:d1:af:b8:09:8e:b1:d1:f2:07:3a:7e:96:39:7a:
         ff:8b:82:b2:07:cf:85:75:20:04:8f:43:45:7d:5c:a1:84:40:
         6a:ca:33:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMQ66eBY3v5WHVff/CRR6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzkxMmEwNDExYmIwMTc0NTA3MDkyZDBjYTM1YTkxYWQ3
OTkwNWMwHhcNMjYwOTEwMTcwMDQwWhcNMjYwOTExMTcwMDQwWjAzMTEwLwYDVQQD
Eyg1ODJmZGMwODIzNTJiYzRmNWM4ZjVkMDNiZTY5ZWJkZWUxOGViNjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVtIGRzZn9vhXpvEsetGOf6+T+Nd
19ggPvK4EH4tKKFg5IGZyN1fMwfKsFssPdhzlJFCv/QTmk99idf/t41PciXsr5Be
YrPwkDHUFGNTR2qE8o5GJDaRH5hx5CwLFvB4IOcGJ9pG90xEBRYjcxDMtpRRhbmI
/KSLjU+cjrcDzNjenBUaV8bMIMU6gAQCFbMSg1J4ynE59ELnpq2rseKnMxz80Nqn
gwPNVPS70Qe/sgpHcIDYqL3/QVcVnori9n0tKvb6zKuRx2tqWEb3UUuF9n/dCzTw
W88vxkMQALS7rDa8KeoDkKzEq87rRiqxno7AjK7T9JJXSDdCAka9B/L9+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgv3AgjUrxPXI9dA75p697hjraDMB8GA1UdIwQY
MBaAFFPJEqBBG7AXRQcJLQyjWpGteZBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAt
ZTIxYzQzNmI2MmVmLzEvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kNzdlNjAtODkxNi00Zjk2LThlZDAtZTIxYzQzNmI2MmVm
LzEvVThrU29FRWJzQmRGQndrdERLTmFrYTE1a0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDoQoqkx
fx9y62aQJMduXIKmhLkuROIjTJtnUOIlUMcAWY/b64oHmniMWy1FPMlE/mwf1qqA
+fojCsgacBmhbsDd/92dr7OBEZbhG1O0FEOEn7niZBfqmiCjI0xLQyoRuwQmVw03
LRdEdvPJ2mMbXKrFamyyeWFfaCAeImSJxmLKjeGQEe/eu3Vs5n+9FwkK9WnYxvzg
XCzEkFT/RbgqSGseYoWGxTvTGudwMRwc1E+1VNNy4HoWsHe61/R6nvBIWliGs3Lr
4uorlgM+t7wfNCH66wc7BuI0fVSu79GvuAmOsdHyBzp+ljl6/4uCsgfPhXUgBI9D
RX1coYRAasozvw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:04:13 2026 by rpki-client