Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
File:                     uC57gGjErprkykw6ayCWGZp0H_I.mft (raw, json)
Hash identifier:          D0uhb4r1wMMoM6nwp8hkmR0b22ozf9WtQjAqYGzY3eI=
Subject key identifier:   86:EE:CB:39:E2:B4:24:B4:3C:F7:97:91:B9:B5:1F:DE:34:E7:F5:02
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Certificate issuer:       /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial:       01A08AFA657E37A2A5210299D97493A71A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
Manifest number:          16E3
Signing time:             Thu 10 Sep 2026 11:01:00 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:00 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:00 +0000
Files and hashes:         1: D9vGSctTQ6G39-Tj1KvzWEev7A0.roa (hash: dCtLdzE8AAyiXqvWxFMu+nXlWgdt/7ZcgVwWdiQ4TE4=)
                          2: J85fjuSQxz3wg1fx9HApSpky-cc.roa (hash: UxFrHM/u1QxNZlVa/F5dPFto/GBnUH2xgwkXvxIONS8=)
                          3: JSRjHuE9Dlxbd6kNUCmCyuTjzi8.roa (hash: zf3sZG8UyEv9zaK8C2m/Vb5bOTa/zuVQAu3HlY+cXHI=)
                          4: PGDw99LFu8cUJWnydQ7BWcOhXTI.roa (hash: x69/sh35YI+yTa5z+lbFr8Vns/76h1dYMvcCscIlmMQ=)
                          5: uC57gGjErprkykw6ayCWGZp0H_I.crl (hash: u3PM85kswbxaP1BLHCny9pRXCDE+NwU9rfhiH8Fda0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:65:7e:37:a2:a5:21:02:99:d9:74:93:a7:1a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
        Validity
            Not Before: Sep 10 11:01:00 2026 GMT
            Not After : Sep 11 11:01:00 2026 GMT
        Subject: CN=86eecb39e2b424b43cf79791b9b51fde34e7f502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:95:a2:80:be:f6:89:c8:71:a6:4d:39:8d:
                    0e:7a:4c:b3:25:f1:0c:7b:d0:41:01:f0:78:b7:8c:
                    da:4d:65:ca:7a:bd:a7:80:2e:40:1a:ff:f2:2b:ad:
                    77:55:95:dc:a7:5c:9d:d4:bd:8c:ca:67:6f:49:3e:
                    7d:f8:78:ef:9f:d0:41:c7:47:05:27:16:33:2e:3a:
                    56:3f:7a:f1:0a:3f:d7:91:d1:1a:0f:c9:59:bb:05:
                    ec:68:0a:d6:83:0f:f3:fd:44:04:e4:02:10:f4:51:
                    5e:2a:e7:79:63:33:1b:b9:93:6b:2d:38:03:5b:f9:
                    7e:79:4b:17:b9:b3:8f:0c:f2:9c:e7:9a:7c:5b:3a:
                    d0:27:f9:6d:b1:81:00:1b:c0:a5:1e:a8:bd:1d:11:
                    5e:fa:7b:b0:a6:af:40:b4:2b:61:12:03:bc:9f:45:
                    01:a4:76:db:5f:a4:64:78:fd:48:e0:84:ee:80:05:
                    ec:3d:8d:02:97:93:39:6d:39:52:b1:eb:64:b7:9c:
                    0a:15:01:2c:47:26:f5:c3:d2:03:bd:56:2d:00:74:
                    d5:bb:54:2b:9b:3a:50:d2:07:c5:7b:3d:d1:b5:0d:
                    d4:13:e7:28:1e:52:5c:69:0c:c5:6d:6d:99:64:e4:
                    74:4b:c5:a5:7e:5e:f2:4f:f3:17:52:95:8c:68:a0:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EE:CB:39:E2:B4:24:B4:3C:F7:97:91:B9:B5:1F:DE:34:E7:F5:02
            X509v3 Authority Key Identifier:
                keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:23:6e:3c:d2:c7:21:37:73:9f:2c:ea:ba:cc:ee:88:ac:1b:
         d7:a1:50:0d:b8:45:ec:64:9d:53:88:5e:8b:d3:99:c1:25:ac:
         68:8f:0c:e6:3b:b4:b3:ee:f3:42:16:2a:5d:14:02:ae:46:e0:
         3f:9e:80:86:f5:c5:b6:28:98:5c:08:96:b7:0a:fc:c7:76:15:
         ef:2f:5a:c5:c2:a4:ca:d2:f2:26:d1:6d:cf:d9:96:eb:e9:0f:
         97:1f:23:ea:84:96:c9:cb:70:06:1e:ec:80:de:b9:66:c5:85:
         33:8c:5a:15:be:03:a6:00:5d:34:5f:08:c2:fc:9c:b1:58:8c:
         f1:88:cf:c8:c8:03:e5:35:e4:ea:d8:c9:ba:aa:f0:96:60:e8:
         1d:ee:37:69:7c:10:51:d9:ed:dc:23:08:43:7f:59:c6:4c:7d:
         49:a3:ac:e4:bc:11:51:d9:c7:8f:88:ca:66:a8:3e:19:cd:01:
         3f:d9:70:34:9b:7d:0c:4d:d3:e6:be:e8:d4:b2:4e:c3:80:b6:
         73:ee:ee:e8:b9:4c:d8:5a:19:80:dc:7d:1c:9d:15:c4:0e:d0:
         dd:6b:59:f1:cb:ee:23:f5:5e:2b:23:33:f9:4a:d0:2c:16:ee:
         03:47:65:ad:25:06:65:de:00:e5:00:5f:61:e8:5f:dd:98:d4:
         a1:de:02:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+mV+N6KlIQKZ2XSTpxqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MmU3YjgwNjhjNGFlOWFlNGNhNGMzYTZiMjA5NjE5OWE3
NDFmZjIwHhcNMjYwOTEwMTEwMTAwWhcNMjYwOTExMTEwMTAwWjAzMTEwLwYDVQQD
Eyg4NmVlY2IzOWUyYjQyNGI0M2NmNzk3OTFiOWI1MWZkZTM0ZTdmNTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvuVooC+9onIcaZNOY0OekyzJfEM
e9BBAfB4t4zaTWXKer2ngC5AGv/yK613VZXcp1yd1L2MymdvST59+Hjvn9BBx0cF
JxYzLjpWP3rxCj/XkdEaD8lZuwXsaArWgw/z/UQE5AIQ9FFeKud5YzMbuZNrLTgD
W/l+eUsXubOPDPKc55p8WzrQJ/ltsYEAG8ClHqi9HRFe+nuwpq9AtCthEgO8n0UB
pHbbX6RkeP1I4ITugAXsPY0Cl5M5bTlSsetkt5wKFQEsRyb1w9IDvVYtAHTVu1Qr
mzpQ0gfFez3RtQ3UE+coHlJcaQzFbW2ZZOR0S8Wlfl7yT/MXUpWMaKAQmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbuyznitCS0PPeXkbm1H9405/UCMB8GA1UdIwQY
MBaAFLgue4BoxK6a5MpMOmsglhmadB/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMt
YWFkZmE5YzA2NzQyLzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMtYWFkZmE5YzA2NzQy
LzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhiNuPNLH
ITdznyzquszuiKwb16FQDbhF7GSdU4hei9OZwSWsaI8M5ju0s+7zQhYqXRQCrkbg
P56AhvXFtiiYXAiWtwr8x3YV7y9axcKkytLyJtFtz9mW6+kPlx8j6oSWyctwBh7s
gN65ZsWFM4xaFb4DpgBdNF8IwvycsViM8YjPyMgD5TXk6tjJuqrwlmDoHe43aXwQ
Udnt3CMIQ39Zxkx9SaOs5LwRUdnHj4jKZqg+Gc0BP9lwNJt9DE3T5r7o1LJOw4C2
c+7u6LlM2FoZgNx9HJ0VxA7Q3WtZ8cvuI/VeKyMz+UrQLBbuA0dlrSUGZd4A5QBf
Yehf3ZjUod4CIQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:51:18 2026 by rpki-client