Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
File:                     b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft (raw, json)
Hash identifier:          VcxHcOBhtxzZKX0/TsaYuybajwUTsYKYjiaB7au7phM=
Subject key identifier:   9C:A8:A2:40:49:22:94:81:18:EB:0A:DE:8C:F1:4F:74:22:33:02:E8
Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
Certificate issuer:       /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Certificate serial:       01A0B65233339E4D99AE7020783CFB01BD61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
Manifest number:          05AD
Signing time:             Fri 18 Sep 2026 21:00:35 +0000
Manifest this update:     Fri 18 Sep 2026 21:00:35 +0000
Manifest next update:     Sat 19 Sep 2026 21:00:35 +0000
Files and hashes:         1: Qiay74MbBLJX0CXXaOcyKRwu1oE.roa (hash: kahuToIQXEZrrTaByaYWat/npZL3xVVcTJ88XatdcNg=)
                          2: b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl (hash: DC9rR669dToL1/9MzQC9QnprupUMM4JdDs+QH4VAKLA=)
                          3: wRTMOrkX1ouLA7Ftep2w9MCoso8.roa (hash: ZiDIanCBWcKXO0L8q8SokXWtymLcGL3qIpU5tjdgTQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:52:33:33:9e:4d:99:ae:70:20:78:3c:fb:01:bd:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
        Validity
            Not Before: Sep 18 21:00:35 2026 GMT
            Not After : Sep 19 21:00:35 2026 GMT
        Subject: CN=9ca8a2404922948118eb0ade8cf14f74223302e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:ea:ce:f3:93:f7:38:10:09:6e:c5:38:99:
                    02:b4:8c:03:d6:b7:83:6d:01:ac:93:7c:e7:aa:39:
                    a0:d1:8d:0d:46:a8:f8:bf:02:14:a6:61:0a:1b:41:
                    08:9a:db:fd:53:c0:16:a3:d4:de:1a:53:03:a6:cb:
                    f4:e7:59:ce:77:d2:64:ef:07:c6:79:12:67:92:d6:
                    e6:4f:ba:09:fd:2e:79:e7:9b:65:8a:ad:08:97:dc:
                    af:2e:6a:80:f7:d4:b2:53:03:4e:64:0e:77:f1:0c:
                    a7:3c:78:ed:2d:9f:c4:eb:d4:68:4d:41:7c:62:14:
                    85:6b:70:2a:9b:78:40:e5:76:9a:b2:12:06:2d:a5:
                    84:c2:6a:99:da:05:b7:e7:8e:7d:d1:55:1d:82:55:
                    eb:0c:7a:5d:17:b3:6d:73:63:66:52:aa:6b:f2:b9:
                    e2:2c:05:76:ef:48:1a:95:0a:df:be:39:08:81:86:
                    8e:33:81:81:65:5f:98:a8:c4:0f:a1:50:d8:ed:44:
                    d4:32:12:4a:95:c8:de:a8:d5:40:76:20:dd:9e:4e:
                    bb:4c:40:39:ac:bf:59:b0:33:09:4f:e6:de:9d:2b:
                    ab:89:4b:f6:34:75:f5:b7:6d:99:8d:de:ce:5e:16:
                    8e:36:86:5d:64:45:6b:e4:bd:58:da:7c:a7:ec:5a:
                    6d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A8:A2:40:49:22:94:81:18:EB:0A:DE:8C:F1:4F:74:22:33:02:E8
            X509v3 Authority Key Identifier:
                keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:20:85:6b:5c:5e:1f:68:94:dc:aa:30:7c:d8:6f:49:11:e3:
         ac:4c:44:be:00:b5:1d:50:7f:aa:f1:b7:3d:7b:c0:5c:70:e6:
         a3:21:e4:e2:a5:18:bc:e5:4f:4c:62:9a:dc:93:34:ed:eb:3e:
         12:1f:64:c3:3b:cd:fb:d8:65:61:41:c7:59:1b:68:4a:da:b7:
         1f:a4:33:58:94:ea:a6:e2:c1:86:9a:c1:5c:51:d8:09:cc:d9:
         86:aa:03:fc:95:9f:20:fc:c4:0c:6f:21:f6:e3:a0:05:5a:2d:
         e9:07:be:b1:29:d8:5e:be:0f:6b:b1:a4:5f:2a:5f:f8:68:47:
         f1:a9:d5:66:6c:9a:e6:08:94:8a:db:29:bf:7c:23:b0:3f:30:
         06:af:5d:6b:2a:4c:63:22:18:20:ba:5e:fd:15:55:d8:41:9b:
         81:c5:77:b0:6d:05:be:af:29:9d:3a:25:72:f1:28:6a:3d:de:
         8f:ef:1d:40:8f:7e:a0:66:fc:ec:8c:2c:21:56:c5:f0:a3:a9:
         58:08:c3:ee:83:80:f8:e0:6d:12:d7:2f:d8:5d:4b:9e:a0:7f:
         e2:41:48:d2:ca:74:8e:96:1e:d6:af:5f:a1:9a:d7:f9:c9:ba:
         a3:bc:dd:f4:a0:0e:2f:c7:45:68:b0:30:e6:2b:d8:f4:da:e1:
         45:ae:7f:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC2UjMznk2ZrnAgeDz7Ab1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNDZjZjk2NGE0NmZiNTBmMjViNWQxNGZkOTY1ZmQ2ODYx
MDQ4YTUwHhcNMjYwOTE4MjEwMDM1WhcNMjYwOTE5MjEwMDM1WjAzMTEwLwYDVQQD
Eyg5Y2E4YTI0MDQ5MjI5NDgxMThlYjBhZGU4Y2YxNGY3NDIyMzMwMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVnqzvOT9zgQCW7FOJkCtIwD1reD
bQGsk3znqjmg0Y0NRqj4vwIUpmEKG0EImtv9U8AWo9TeGlMDpsv051nOd9Jk7wfG
eRJnktbmT7oJ/S5555tliq0Il9yvLmqA99SyUwNOZA538QynPHjtLZ/E69RoTUF8
YhSFa3Aqm3hA5XaashIGLaWEwmqZ2gW354590VUdglXrDHpdF7Ntc2NmUqpr8rni
LAV270galQrfvjkIgYaOM4GBZV+YqMQPoVDY7UTUMhJKlcjeqNVAdiDdnk67TEA5
rL9ZsDMJT+benSuriUv2NHX1t22Zjd7OXhaONoZdZEVr5L1Y2nyn7FptlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyookBJIpSBGOsK3ozxT3QiMwLoMB8GA1UdIwQY
MBaAFG9Gz5ZKRvtQ8ltdFP2WX9aGEEilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjIt
OTlhMDhiOTEyNzRjLzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8xOTBkMDgtZjFiMS00ODAzLWE3MjItOTlhMDhiOTEyNzRj
LzEvYjBiUGxrcEctMUR5VzEwVV9aWmYxb1lRU0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSCFa1xe
H2iU3KowfNhvSRHjrExEvgC1HVB/qvG3PXvAXHDmoyHk4qUYvOVPTGKa3JM07es+
Eh9kwzvN+9hlYUHHWRtoStq3H6QzWJTqpuLBhprBXFHYCczZhqoD/JWfIPzEDG8h
9uOgBVot6Qe+sSnYXr4Pa7GkXypf+GhH8anVZmya5giUitspv3wjsD8wBq9daypM
YyIYILpe/RVV2EGbgcV3sG0Fvq8pnTolcvEoaj3ej+8dQI9+oGb87IwsIVbF8KOp
WAjD7oOA+OBtEtcv2F1LnqB/4kFI0sp0jpYe1q9foZrX+cm6o7zd9KAOL8dFaLAw
5ivY9NrhRa5/Zw==
-----END CERTIFICATE-----
Generated at Fri Sep 18 23:07:36 2026 by rpki-client