Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File:                     S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier:          YfnFc2Xh9N4ZtJz0aTdUHSP4gz24KwJOYeYstnFdzAs=
Subject key identifier:   20:84:FB:11:F7:6C:F4:29:42:06:AE:54:55:D1:5C:44:71:EF:4D:69
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer:       /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial:       01A08C0CEA85A870CE50F0054C6F675F1543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number:          1052
Signing time:             Thu 10 Sep 2026 16:00:51 +0000
Manifest this update:     Thu 10 Sep 2026 16:00:51 +0000
Manifest next update:     Fri 11 Sep 2026 16:00:51 +0000
Files and hashes:         1: 2_k_HZd8W3XpuxNJe50aSdmXyGk.roa (hash: fblUX67x5XT5dcCCQ4gbZ0xddj2udVIWNnjAZBdQkUU=)
                          2: 5w2GQsmluME7TY1nPdqfrlgiIhU.roa (hash: YsFPorWldlvTTXN7yy0IuoUUD15lyphFyE2sSDvKCEA=)
                          3: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: M3oHBhZ57YrdyFXVFokNyY+SATMTUeDEZcKs1KQDE3Q=)
                          4: c2NaEAlgVUYgoY72a0dwilashus.roa (hash: fAkWFixs8K72eGX6Cl0h1wXhSk4FbU9HoS7xaKjx650=)
                          5: lGdSHulI1aCQa7Y7_s7DEeMThKg.roa (hash: DuDTAKwJ9a+im27pqZxeXh7ZRg71UIpf2vEZIS5LbXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0c:ea:85:a8:70:ce:50:f0:05:4c:6f:67:5f:15:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
        Validity
            Not Before: Sep 10 16:00:51 2026 GMT
            Not After : Sep 11 16:00:51 2026 GMT
        Subject: CN=2084fb11f76cf4294206ae5455d15c4471ef4d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:98:21:35:72:6f:72:37:c4:9d:7e:20:1f:
                    d1:82:8f:d9:b1:2a:ee:bf:c8:5d:28:7d:29:4d:9f:
                    0b:8e:0b:2b:e4:40:76:d5:98:39:19:72:48:6c:99:
                    07:32:74:ca:0c:fa:42:4c:02:26:e6:64:f2:16:6d:
                    01:96:1f:a0:b9:2d:dd:8e:4d:0b:4e:f9:d9:2a:25:
                    f8:ac:d3:9b:95:80:6e:6e:ad:8a:ae:92:5f:f1:c7:
                    87:f7:30:71:90:d6:2d:df:e1:7e:f0:01:0c:a0:69:
                    7a:eb:d5:85:86:09:e3:50:27:73:f5:79:fd:cb:ff:
                    48:7b:a4:f9:8f:ab:70:48:c9:52:c4:fb:55:ef:ef:
                    6f:69:3a:bd:76:e1:04:1e:89:71:55:12:93:79:0b:
                    45:f7:65:46:c5:d7:eb:33:26:15:8f:d7:97:15:d1:
                    14:57:ab:c8:0f:c0:36:c8:65:61:33:01:a8:7a:45:
                    34:2f:92:a7:38:2c:00:fd:f8:49:8c:e3:52:de:7f:
                    02:45:42:63:1e:59:20:ca:f8:96:2f:3a:db:a1:42:
                    d6:42:c2:03:ce:52:ca:f0:63:90:3a:ac:40:a7:c0:
                    61:09:7f:d8:a5:64:f6:b8:a6:82:04:0b:71:2e:eb:
                    88:a9:ed:0b:98:9b:f5:2d:b4:de:42:0d:b8:f3:c7:
                    80:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:84:FB:11:F7:6C:F4:29:42:06:AE:54:55:D1:5C:44:71:EF:4D:69
            X509v3 Authority Key Identifier:
                keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:fb:cc:88:8b:59:b6:a8:c1:10:d2:56:49:63:d5:f1:b6:
         86:db:da:48:be:60:c7:40:80:78:7d:48:92:6a:db:94:a0:05:
         bf:8a:21:b9:c9:72:d1:ef:68:42:60:a7:5c:3a:2d:fe:fd:65:
         c5:fa:61:bb:94:78:47:ce:9d:bd:0a:5d:32:d9:86:bf:23:a3:
         2f:d0:d0:59:ee:c5:b2:91:c2:f9:83:ab:d4:3c:fb:15:bf:46:
         d6:ff:d8:fa:3e:a8:43:30:81:9c:b0:e0:19:24:1f:89:eb:82:
         70:89:0a:13:16:9d:80:45:67:cc:82:3a:b6:46:b0:ef:86:bb:
         da:20:b5:6c:ea:37:68:d3:61:be:44:85:0a:ed:83:92:42:fc:
         88:c7:9a:57:28:45:c5:5e:ef:c2:b4:ac:9b:ef:f0:0a:ad:2d:
         33:21:db:fb:0d:1f:d9:8d:7d:1d:c8:55:e2:d1:8f:85:a4:32:
         5b:45:e9:49:30:ff:26:15:d4:23:1e:a4:2c:09:6a:c7:17:a8:
         43:a4:a2:6e:d9:7d:ca:46:d3:e4:cf:6e:d9:1d:92:2c:bb:45:
         10:7b:1d:6a:fc:71:3c:0c:75:e8:ed:8d:3e:06:ce:62:af:ef:
         89:ad:66:48:fb:e3:10:88:80:cb:eb:36:09:57:0a:d4:6d:25:
         af:74:fb:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDOqFqHDOUPAFTG9nXxVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZWNjYzlkMWE3NmU5MTQ2OWNiNjNiMTJiZjcyNWQ3ZGVi
YWZiMWIwHhcNMjYwOTEwMTYwMDUxWhcNMjYwOTExMTYwMDUxWjAzMTEwLwYDVQQD
EygyMDg0ZmIxMWY3NmNmNDI5NDIwNmFlNTQ1NWQxNWM0NDcxZWY0ZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI6YITVyb3I3xJ1+IB/Rgo/ZsSru
v8hdKH0pTZ8Ljgsr5EB21Zg5GXJIbJkHMnTKDPpCTAIm5mTyFm0Blh+guS3djk0L
TvnZKiX4rNOblYBubq2KrpJf8ceH9zBxkNYt3+F+8AEMoGl669WFhgnjUCdz9Xn9
y/9Ie6T5j6twSMlSxPtV7+9vaTq9duEEHolxVRKTeQtF92VGxdfrMyYVj9eXFdEU
V6vID8A2yGVhMwGoekU0L5KnOCwA/fhJjONS3n8CRUJjHlkgyviWLzrboULWQsID
zlLK8GOQOqxAp8BhCX/YpWT2uKaCBAtxLuuIqe0LmJv1LbTeQg2488eA/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCE+xH3bPQpQgauVFXRXERx701pMB8GA1UdIwQY
MBaAFEvszJ0adukUactjsSv3JdfeuvsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTkt
NGY0Yjk5NGUwZWIyLzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTktNGY0Yjk5NGUwZWIy
LzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAal37zIiL
WbaowRDSVklj1fG2htvaSL5gx0CAeH1IkmrblKAFv4ohucly0e9oQmCnXDot/v1l
xfphu5R4R86dvQpdMtmGvyOjL9DQWe7FspHC+YOr1Dz7Fb9G1v/Y+j6oQzCBnLDg
GSQfieuCcIkKExadgEVnzII6tkaw74a72iC1bOo3aNNhvkSFCu2DkkL8iMeaVyhF
xV7vwrSsm+/wCq0tMyHb+w0f2Y19HchV4tGPhaQyW0XpSTD/JhXUIx6kLAlqxxeo
Q6Sibtl9ykbT5M9u2R2SLLtFEHsdavxxPAx16O2NPgbOYq/via1mSPvjEIiAy+s2
CVcK1G0lr3T7qw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:48:23 2026 by rpki-client