Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
File:                     Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json)
Hash identifier:          Z1gqXjhnIVPa5dF4bST2gz50ffdrIOeqYOIUbHu8QJA=
Subject key identifier:   7D:6B:F0:FD:D5:49:BC:33:81:67:D6:D5:2F:D0:DA:5F:46:A8:E6:29
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Certificate issuer:       /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial:       01A0593268EDE8B0AD592B15A6DC3CB48C9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
Manifest number:          0540
Signing time:             Mon 31 Aug 2026 19:01:10 +0000
Manifest this update:     Mon 31 Aug 2026 19:01:10 +0000
Manifest next update:     Tue 01 Sep 2026 19:01:10 +0000
Files and hashes:         1: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: xc2ehd3CoDc9ASqokcS+B0tfNTSX77oAIVkYPfuDq9Q=)
                          2: UWFOafME42L6O6C8tCsylQ1qM5Y.roa (hash: kTp8dPuulE0KVt0WY/U+hGiw2jKgDTK8kmDYSbikY3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 19:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:59:32:68:ed:e8:b0:ad:59:2b:15:a6:dc:3c:b4:8c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
        Validity
            Not Before: Aug 31 19:01:10 2026 GMT
            Not After : Sep  1 19:01:10 2026 GMT
        Subject: CN=7d6bf0fdd549bc338167d6d52fd0da5f46a8e629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:ce:58:f7:a7:86:96:5d:89:7e:42:2f:ca:
                    63:e9:03:25:4e:8d:0b:7e:5b:14:72:14:e6:d3:9a:
                    1a:c0:03:e2:85:b2:75:a6:96:f1:f6:b2:1c:31:de:
                    5b:6e:0c:0d:60:e6:1a:42:6a:ff:f0:aa:f7:3e:f8:
                    8b:bd:ee:f7:14:d0:92:da:ed:e6:6b:ec:5f:2a:90:
                    e1:c0:24:8d:cd:53:cc:3c:d8:27:0f:34:6e:b7:dc:
                    29:6f:5f:b7:c3:98:5f:7e:e9:21:a5:1e:eb:a4:c4:
                    c5:87:68:15:71:cf:0f:ec:6b:9b:08:ca:b4:27:1a:
                    3f:a2:21:6c:01:6a:4f:f2:12:a4:a9:2c:90:54:bf:
                    9a:f3:af:4a:9e:bd:bf:d9:61:e5:71:a1:99:81:e3:
                    d1:12:42:d7:f3:bb:73:8b:83:ff:da:83:b0:39:0c:
                    b8:30:31:63:90:51:84:19:49:fc:de:97:85:3c:78:
                    0c:79:2f:6a:f4:ab:ec:e5:9c:7d:2a:c5:cb:66:68:
                    36:35:f4:ad:bd:f2:c3:fa:76:02:65:75:16:1e:f4:
                    ad:09:70:70:5b:30:bc:b8:29:35:57:33:16:26:1f:
                    10:e6:7c:f9:fd:b9:bf:15:49:92:e0:c7:a5:ca:65:
                    ba:7c:ec:9b:7e:e8:f9:09:71:ed:a3:7a:d5:59:b1:
                    85:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6B:F0:FD:D5:49:BC:33:81:67:D6:D5:2F:D0:DA:5F:46:A8:E6:29
            X509v3 Authority Key Identifier:
                keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ed:de:11:a6:ac:19:51:31:ae:59:10:a5:94:be:9a:72:83:
         d7:97:b6:1a:a2:6d:d1:8b:a6:ac:7b:7b:e0:44:39:66:1d:1a:
         c6:a7:56:6d:12:d7:22:22:af:d9:56:4f:02:43:bf:f8:7a:4d:
         11:aa:a5:2a:31:6b:cb:e1:38:81:f2:a1:d7:03:73:f5:30:35:
         e9:fd:88:dd:68:d1:38:ab:d1:35:c3:12:29:9f:1a:8f:bd:d0:
         81:7f:5e:ca:91:d5:2b:01:6e:02:6f:22:eb:67:8a:47:3a:b6:
         a3:f9:31:0a:0d:4a:75:06:13:2f:74:80:99:13:a7:f9:85:20:
         ca:95:da:f0:18:ec:4f:5b:a2:56:bf:3b:a8:f4:6c:ea:17:a6:
         ea:7d:ca:e6:d2:cc:0b:83:04:77:63:b2:e8:ab:7a:6d:39:51:
         e0:0e:7d:13:cf:db:62:a4:ff:12:c1:4f:4d:8d:c5:b6:6f:d9:
         aa:9c:ed:3b:83:e8:e2:ee:c8:b3:6a:37:07:a1:08:af:d8:24:
         d8:3b:8b:34:c2:e0:4e:bd:80:12:88:8a:69:d5:f7:23:9a:d1:
         10:af:69:d1:db:c0:8a:b5:67:7a:6e:da:10:ef:de:50:76:ba:
         c5:8b:44:2c:f2:19:8a:07:5d:40:6c:53:c2:ba:7b:46:43:8f:
         8f:ca:91:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBZMmjt6LCtWSsVptw8tIydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmRiMDg4ZTk4ZTRlNjQxNWQ5NDQxNDIyMTI0NDgzNjkw
MDViNDgwHhcNMjYwODMxMTkwMTEwWhcNMjYwOTAxMTkwMTEwWjAzMTEwLwYDVQQD
Eyg3ZDZiZjBmZGQ1NDliYzMzODE2N2Q2ZDUyZmQwZGE1ZjQ2YThlNjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSbOWPenhpZdiX5CL8pj6QMlTo0L
flsUchTm05oawAPihbJ1ppbx9rIcMd5bbgwNYOYaQmr/8Kr3PviLve73FNCS2u3m
a+xfKpDhwCSNzVPMPNgnDzRut9wpb1+3w5hffukhpR7rpMTFh2gVcc8P7GubCMq0
Jxo/oiFsAWpP8hKkqSyQVL+a869Knr2/2WHlcaGZgePREkLX87tzi4P/2oOwOQy4
MDFjkFGEGUn83peFPHgMeS9q9Kvs5Zx9KsXLZmg2NfStvfLD+nYCZXUWHvStCXBw
WzC8uCk1VzMWJh8Q5nz5/bm/FUmS4MelymW6fOybfuj5CXHto3rVWbGFMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1r8P3VSbwzgWfW1S/Q2l9GqOYpMB8GA1UdIwQY
MBaAFBX9sIjpjk5kFdlEFCISRINpAFtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUt
MmY2M2FiNDZmMzFjLzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUtMmY2M2FiNDZmMzFj
LzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtu3eEaas
GVExrlkQpZS+mnKD15e2GqJt0YumrHt74EQ5Zh0axqdWbRLXIiKv2VZPAkO/+HpN
EaqlKjFry+E4gfKh1wNz9TA16f2I3WjROKvRNcMSKZ8aj73QgX9eypHVKwFuAm8i
62eKRzq2o/kxCg1KdQYTL3SAmROn+YUgypXa8BjsT1uiVr87qPRs6hem6n3K5tLM
C4MEd2Oy6Kt6bTlR4A59E8/bYqT/EsFPTY3Ftm/ZqpztO4Po4u7Is2o3B6EIr9gk
2DuLNMLgTr2AEoiKadX3I5rREK9p0dvAirVnem7aEO/eUHa6xYtELPIZigddQGxT
wrp7RkOPj8qRLw==
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:21:18 2026 by rpki-client