Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
File:                     rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json)
Hash identifier:          6QiGOg3y8QNwjyf5Y52mmdbnrbBiNN5RntEjmrX4GlY=
Subject key identifier:   8D:FD:C5:D0:2C:F9:17:A5:DF:3E:0D:9C:37:B4:CD:F6:5F:0D:74:53
Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
Certificate issuer:       /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Certificate serial:       019FA0A86C0F1BD8B03998FC221A4F94B737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
Manifest number:          0A50
Signing time:             Sun 26 Jul 2026 23:00:19 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:19 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:19 +0000
Files and hashes:         1: PwY0v3FgqPK7UsO8_Ta4MegSFlM.roa (hash: 3aTcfO9vdu7qWCaFGCqBM2AkObZO7u8nWp9PGSX53QM=)
                          2: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: 1ICkSAR+F9y4DhjC7k08SxuZdMFj/voYMo4RHDMOO5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:6c:0f:1b:d8:b0:39:98:fc:22:1a:4f:94:b7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
        Validity
            Not Before: Jul 26 23:00:19 2026 GMT
            Not After : Jul 27 23:00:19 2026 GMT
        Subject: CN=8dfdc5d02cf917a5df3e0d9c37b4cdf65f0d7453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:d0:3b:5e:cc:34:9e:71:cf:8b:5e:86:89:
                    c6:63:d2:3b:d7:56:50:b3:7e:0e:e1:4f:0f:9f:d9:
                    13:d2:09:ca:3c:02:dd:b7:c5:e9:d0:8b:73:65:c1:
                    22:08:2c:f9:d0:2f:4e:1d:97:eb:f7:c2:f4:a7:ad:
                    f1:6a:15:95:a9:7f:dc:17:ce:8c:01:88:63:65:e0:
                    53:08:74:00:be:b1:7e:a8:a2:dc:5e:67:04:7c:f1:
                    de:57:2a:70:96:e6:2c:2d:66:78:cb:5d:de:2a:48:
                    be:f8:4d:77:58:46:12:60:3f:3c:98:e4:5d:06:4f:
                    a6:09:cd:67:41:b8:e4:fb:ed:32:e1:38:40:c6:fe:
                    51:7c:5a:ad:48:f6:58:4d:00:b3:98:c8:17:18:58:
                    f4:3b:2b:36:ff:cb:e6:e6:63:e8:5e:95:60:1b:71:
                    14:f5:bb:85:0d:b1:94:d3:3c:30:ae:b5:65:2a:b3:
                    fc:ed:ec:e7:f3:53:6e:2e:35:8a:7d:f4:03:bf:17:
                    72:72:de:46:fd:d2:78:d6:9b:1f:0f:79:a9:cb:4e:
                    35:db:ef:00:a6:c1:2f:31:9a:08:0f:15:f3:02:27:
                    4d:64:f2:c9:73:11:6b:33:7f:e7:b1:10:e2:f9:d5:
                    98:4f:18:9d:a2:16:c0:e7:a2:8f:5a:e8:c4:3b:e0:
                    a0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FD:C5:D0:2C:F9:17:A5:DF:3E:0D:9C:37:B4:CD:F6:5F:0D:74:53
            X509v3 Authority Key Identifier:
                keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7b:0a:8c:b3:ab:30:53:c1:1b:af:a7:49:3f:b9:62:f1:42:
         0e:a8:2f:1b:48:1a:50:f0:7b:89:dc:d1:95:14:c7:5c:31:ec:
         80:8a:4a:db:ed:b4:6d:89:a0:a3:87:79:34:06:5a:61:ba:0b:
         b4:13:57:49:fc:02:bc:e5:43:d3:55:f6:75:90:6d:7f:11:df:
         33:27:3d:09:0e:bc:4e:6f:ee:75:47:da:37:f8:c4:15:eb:fa:
         1a:08:04:cc:cf:1a:45:c0:a0:6f:ac:82:bf:7e:2b:e6:6d:e9:
         11:76:57:04:0c:17:40:9c:f0:f5:05:d6:b2:8d:af:46:ad:db:
         ef:17:51:83:de:62:ad:0b:fe:fc:59:9d:68:5b:3e:20:22:51:
         cb:28:f6:31:ee:9c:dd:ce:cc:5e:75:a3:b6:91:07:f3:41:f6:
         73:eb:95:31:ca:0c:7b:6a:94:c7:70:d7:fd:74:3b:f4:39:8a:
         af:37:19:00:35:e7:4c:a4:66:f3:97:7e:7b:69:11:a1:41:63:
         56:17:8d:f6:84:0d:d2:62:d1:bd:c7:1c:22:9b:1a:26:b6:30:
         2b:d6:ee:63:d6:38:5a:68:38:d7:53:db:f4:a0:2b:25:3c:cc:
         80:f3:5a:20:76:f5:ed:ff:68:7d:2f:11:57:5c:3b:d9:40:9f:
         94:0f:56:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gqGwPG9iwOZj8IhpPlLc3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmI4NmRkNzZkZDNjMWY3YjQwYzkxNjNmNzUyNTdiZTZk
MGVlZjUwHhcNMjYwNzI2MjMwMDE5WhcNMjYwNzI3MjMwMDE5WjAzMTEwLwYDVQQD
Eyg4ZGZkYzVkMDJjZjkxN2E1ZGYzZTBkOWMzN2I0Y2RmNjVmMGQ3NDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7nQO17MNJ5xz4tehonGY9I711ZQ
s34O4U8Pn9kT0gnKPALdt8Xp0ItzZcEiCCz50C9OHZfr98L0p63xahWVqX/cF86M
AYhjZeBTCHQAvrF+qKLcXmcEfPHeVypwluYsLWZ4y13eKki++E13WEYSYD88mORd
Bk+mCc1nQbjk++0y4ThAxv5RfFqtSPZYTQCzmMgXGFj0Oys2/8vm5mPoXpVgG3EU
9buFDbGU0zwwrrVlKrP87ezn81NuLjWKffQDvxdyct5G/dJ41psfD3mpy0412+8A
psEvMZoIDxXzAidNZPLJcxFrM3/nsRDi+dWYTxidohbA56KPWujEO+CgkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI39xdAs+Rel3z4NnDe0zfZfDXRTMB8GA1UdIwQY
MBaAFK27ht123Twfe0DJFj91JXvm0O71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgt
OWNjNjk1OWZmM2U5LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iZjhkMTMtNzlmMC00M2VhLTgyZDgtOWNjNjk1OWZmM2U5
LzEvcmJ1RzNYYmRQQjk3UU1rV1AzVWxlLWJRN3ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnsKjLOr
MFPBG6+nST+5YvFCDqgvG0gaUPB7idzRlRTHXDHsgIpK2+20bYmgo4d5NAZaYboL
tBNXSfwCvOVD01X2dZBtfxHfMyc9CQ68Tm/udUfaN/jEFev6GggEzM8aRcCgb6yC
v34r5m3pEXZXBAwXQJzw9QXWso2vRq3b7xdRg95irQv+/FmdaFs+ICJRyyj2Me6c
3c7MXnWjtpEH80H2c+uVMcoMe2qUx3DX/XQ79DmKrzcZADXnTKRm85d+e2kRoUFj
VheN9oQN0mLRvcccIpsaJrYwK9buY9Y4Wmg411Pb9KArJTzMgPNaIHb17f9ofS8R
V1w72UCflA9Wlg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:26:20 2026 by rpki-client