Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File:                     E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier:          C9+yzUsRSv4vPN8aeUU5bq1e1wWFKccLFsCrRiyw9Xg=
Subject key identifier:   63:F8:3B:D4:A1:B6:0F:51:AC:AD:3F:0D:14:0A:46:31:38:A0:92:2B
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer:       /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial:       01A000CA47EC2D31FA225C536DBE2F619771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number:          1369
Signing time:             Fri 14 Aug 2026 15:00:51 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:51 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:51 +0000
Files and hashes:         1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: wHSaA5/v5ZywPxex8g2HoLJ/m1MTgiAJzDcbowh9wdA=)
                          2: da3VworWvFmFbR1FufRr5CMYvkc.roa (hash: hwa/D4Vf8y1DVcvliVC0sWu2QdlvVDaI6hD4bxSYxVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:47:ec:2d:31:fa:22:5c:53:6d:be:2f:61:97:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
        Validity
            Not Before: Aug 14 15:00:51 2026 GMT
            Not After : Aug 15 15:00:51 2026 GMT
        Subject: CN=63f83bd4a1b60f51acad3f0d140a463138a0922b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:27:88:9b:c6:5e:cc:b2:1d:99:fb:15:e8:
                    69:75:48:58:40:b2:42:45:af:55:7d:99:96:e2:86:
                    44:98:97:a9:73:5b:b3:a7:6f:89:99:a5:06:b6:2c:
                    fa:77:1e:05:b8:14:0c:5e:90:7c:81:ed:79:1d:55:
                    f9:24:61:95:1d:ac:07:ab:1b:0d:f0:e0:c5:b8:f3:
                    6c:33:1b:3e:d0:9a:ae:99:9a:c1:e2:04:ba:38:ae:
                    e2:dd:3a:c1:da:3b:83:89:a4:7a:ea:e1:b8:af:66:
                    d4:5a:fb:ae:03:37:60:f9:e1:99:35:67:e5:5b:75:
                    64:fd:1f:66:07:8d:b5:fa:b2:f7:65:16:2d:f0:8c:
                    f9:a3:4f:19:30:47:1e:50:c2:78:63:1d:ab:ed:34:
                    c8:aa:1d:d5:91:35:c4:2d:e2:40:14:2c:41:30:26:
                    e7:e7:c3:a7:36:57:58:f2:0f:bc:33:7a:52:46:06:
                    5e:b8:c2:21:ec:cc:c8:1f:7d:e5:79:7b:ea:ca:24:
                    2b:c0:47:ac:2f:ca:a5:17:c3:2c:85:31:5d:78:bb:
                    64:c7:fa:a5:e8:3b:58:96:e2:f1:c3:ad:3a:da:69:
                    dd:75:8f:22:8e:e8:bf:40:f2:46:af:76:f4:a3:a9:
                    7b:80:ac:19:9f:40:7c:60:f9:0a:7b:83:da:6b:71:
                    f8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F8:3B:D4:A1:B6:0F:51:AC:AD:3F:0D:14:0A:46:31:38:A0:92:2B
            X509v3 Authority Key Identifier:
                keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:8b:f4:b9:60:06:e8:27:e6:d0:b4:f9:66:bc:7d:90:ea:85:
         32:75:44:4c:31:e1:15:4b:f7:fe:ce:62:6d:fe:2e:94:52:dd:
         e1:b5:d8:82:2f:7e:75:43:1e:a4:f7:b8:d6:e1:c9:e3:5a:0c:
         ac:94:df:16:06:f6:3e:f5:35:af:fd:46:59:0b:90:c1:84:56:
         9b:b2:b2:b1:50:2f:5e:e8:95:ef:8b:c9:6a:fa:f1:2c:75:f2:
         b4:df:02:48:ca:f7:ca:ff:19:e4:1d:11:62:46:8c:fa:1b:df:
         7a:3a:52:d2:63:5a:5e:25:b6:08:2c:66:83:f9:00:1a:f7:45:
         8c:f2:b3:ea:3b:4d:ef:15:95:d9:6f:0a:f9:5e:c1:c7:89:dd:
         2d:1b:4c:a5:d5:e5:02:06:06:88:cf:cb:47:95:8a:b8:94:07:
         bb:72:8f:16:42:07:9a:82:81:de:ec:01:2f:cf:15:4e:f2:7a:
         45:7b:d0:b9:98:7a:84:ac:be:b2:84:83:a3:cc:8f:da:68:f2:
         c2:5f:47:49:16:fb:4f:8b:dd:36:f4:47:6b:3c:ba:5d:51:dc:
         e1:40:c6:3d:9f:36:a4:38:f1:3d:3c:98:cf:04:30:c9:bc:3f:
         46:64:fb:96:79:13:fa:fb:2a:90:9e:87:b1:2c:44:a8:b2:f5:
         49:79:b2:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAykfsLTH6IlxTbb4vYZdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzgzN2Q1ZDE3OTY5ZDJiYzBkNDRlNTYzNGE5NGJmN2Qz
NGU5MGIwHhcNMjYwODE0MTUwMDUxWhcNMjYwODE1MTUwMDUxWjAzMTEwLwYDVQQD
Eyg2M2Y4M2JkNGExYjYwZjUxYWNhZDNmMGQxNDBhNDYzMTM4YTA5MjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvggniJvGXsyyHZn7FehpdUhYQLJC
Ra9VfZmW4oZEmJepc1uzp2+JmaUGtiz6dx4FuBQMXpB8ge15HVX5JGGVHawHqxsN
8ODFuPNsMxs+0JqumZrB4gS6OK7i3TrB2juDiaR66uG4r2bUWvuuAzdg+eGZNWfl
W3Vk/R9mB421+rL3ZRYt8Iz5o08ZMEceUMJ4Yx2r7TTIqh3VkTXELeJAFCxBMCbn
58OnNldY8g+8M3pSRgZeuMIh7MzIH33leXvqyiQrwEesL8qlF8MshTFdeLtkx/ql
6DtYluLxw6062mnddY8ijui/QPJGr3b0o6l7gKwZn0B8YPkKe4Paa3H4iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGP4O9Shtg9RrK0/DRQKRjE4oJIrMB8GA1UdIwQY
MBaAFBN4N9XReWnSvA1E5WNKlL99NOkLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNnMzFkRjVhZEs4RFVUbFkwcVV2MzAwNlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81NDIzYzEtODcxZi00NjFjLTk5NzAt
NGRiM2YxODhmNWI2LzEvRTNnMzFkRjVhZEs4RFVUbFkwcVV2MzAwNlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81NDIzYzEtODcxZi00NjFjLTk5NzAtNGRiM2YxODhmNWI2
LzEvRTNnMzFkRjVhZEs4RFVUbFkwcVV2MzAwNlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIv0uWAG
6Cfm0LT5Zrx9kOqFMnVETDHhFUv3/s5ibf4ulFLd4bXYgi9+dUMepPe41uHJ41oM
rJTfFgb2PvU1r/1GWQuQwYRWm7KysVAvXuiV74vJavrxLHXytN8CSMr3yv8Z5B0R
YkaM+hvfejpS0mNaXiW2CCxmg/kAGvdFjPKz6jtN7xWV2W8K+V7Bx4ndLRtMpdXl
AgYGiM/LR5WKuJQHu3KPFkIHmoKB3uwBL88VTvJ6RXvQuZh6hKy+soSDo8yP2mjy
wl9HSRb7T4vdNvRHazy6XVHc4UDGPZ82pDjxPTyYzwQwybw/RmT7lnkT+vsqkJ6H
sSxEqLL1SXmylA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:37 2026 by rpki-client