Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File:                     rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier:          lZ3SJ9N21ETE3/7Sq+55SwbwbI2YBnfQWQMEOTq/Zlk=
Subject key identifier:   F5:10:5E:65:65:3E:0B:B1:2F:CD:25:F0:FE:BD:3E:8E:A8:57:59:79
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer:       /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial:       01A10693B05E16644DE757DE5AD5DAA46B51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number:          1A8A
Signing time:             Sun 04 Oct 2026 11:01:44 +0000
Manifest this update:     Sun 04 Oct 2026 11:01:44 +0000
Manifest next update:     Mon 05 Oct 2026 11:01:44 +0000
Files and hashes:         1: AolLmsrxu_YfkN2P3XPeHyIz2ks.roa (hash: UFWD6pA+dhEhUsNa2fyV67fWUShMPubs4WIcGjgri0k=)
                          2: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: JYuZGj1jaEcRWtJjSOHuc0O3Wlb+tk4d0SKBfsQ5GYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:93:b0:5e:16:64:4d:e7:57:de:5a:d5:da:a4:6b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
        Validity
            Not Before: Oct  4 11:01:44 2026 GMT
            Not After : Oct  5 11:01:44 2026 GMT
        Subject: CN=f5105e65653e0bb12fcd25f0febd3e8ea8575979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:bf:5f:f0:c4:25:4f:18:c5:c5:8f:a4:6e:
                    e3:3a:7a:92:19:50:69:c9:2a:3c:87:82:d0:06:3f:
                    18:9c:2b:75:99:51:05:5d:21:b4:ae:1b:85:de:04:
                    8c:6f:5b:82:24:db:56:bb:da:68:12:70:e2:50:9f:
                    c7:36:db:3e:11:c0:ad:2c:90:83:3e:94:32:57:01:
                    74:4b:54:88:9a:cf:be:94:15:b7:5d:7e:21:4d:91:
                    e9:cf:45:f5:66:a4:32:e7:93:7d:d4:0f:54:d4:21:
                    d1:7f:a8:4c:a1:83:81:f1:4e:c9:5c:d5:e8:55:19:
                    c1:dc:ef:41:29:b6:97:d3:e5:37:c9:5a:bb:48:dc:
                    8a:66:31:df:08:47:03:6e:90:f0:96:46:2e:4f:58:
                    1f:04:0e:2f:2b:d9:57:a5:be:05:2a:7a:c5:2b:c3:
                    d0:4b:39:ce:b2:f9:01:e8:69:28:7d:86:06:e5:29:
                    75:67:67:51:7b:4f:77:2b:4d:ce:91:52:82:b6:88:
                    84:bd:77:b6:2e:75:3f:1f:4b:55:38:8d:b6:fc:4a:
                    44:98:14:53:78:32:e1:9b:43:2b:fd:81:57:b8:b7:
                    07:bd:22:7f:8e:2d:14:5a:96:a4:a9:b0:63:b8:28:
                    f4:83:85:ff:cb:98:29:c8:bf:44:3e:d5:88:89:c6:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:10:5E:65:65:3E:0B:B1:2F:CD:25:F0:FE:BD:3E:8E:A8:57:59:79
            X509v3 Authority Key Identifier:
                keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b0:b3:94:98:cb:98:fc:6c:55:de:67:c2:b5:9a:a1:49:1e:
         46:42:73:7c:42:d1:7e:08:67:6f:4e:6d:32:9b:f3:a8:49:2a:
         6b:1f:e6:3a:bd:8c:db:5f:eb:74:7a:a8:a1:73:fe:7a:c4:9b:
         9c:11:5d:32:02:2a:9f:25:a2:dc:da:47:f2:71:0f:c9:8e:ce:
         3b:71:1d:c0:5d:bf:30:f5:f6:26:fe:20:f6:c7:31:d7:cb:20:
         3d:34:9f:43:96:0b:45:4a:d3:fc:bb:a9:af:d5:f5:72:31:42:
         7b:38:6f:7f:28:72:8a:4f:f8:e7:8f:d4:3f:97:96:82:26:cf:
         07:93:56:dd:03:fa:3f:39:ac:90:e9:72:f8:4d:55:6d:06:b7:
         a5:7b:de:3b:98:e4:6d:5e:d1:d7:56:2e:20:22:dc:c5:fc:c5:
         25:1b:62:74:0b:a8:d5:f4:4d:fa:03:b7:17:16:74:46:26:c5:
         01:29:6b:3f:13:a4:89:0c:65:c3:57:20:52:1e:ea:94:d0:f3:
         01:47:40:48:a6:ea:d5:04:64:c0:8d:ae:ee:24:b6:ed:dd:8d:
         d3:43:0f:ac:fa:fa:06:a2:ea:15:2b:6b:a0:c0:81:5e:b1:30:
         ff:24:52:b0:d0:de:e8:4d:5d:d2:22:ea:42:8c:44:d6:86:a7:
         6f:15:87:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGk7BeFmRN51feWtXapGtRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYjM2NWFjZjZmOTE4NDk5NzA3ZGRhMTNmMDMzZTJjZDYx
MTAzMDgwHhcNMjYxMDA0MTEwMTQ0WhcNMjYxMDA1MTEwMTQ0WjAzMTEwLwYDVQQD
EyhmNTEwNWU2NTY1M2UwYmIxMmZjZDI1ZjBmZWJkM2U4ZWE4NTc1OTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqq/X/DEJU8YxcWPpG7jOnqSGVBp
ySo8h4LQBj8YnCt1mVEFXSG0rhuF3gSMb1uCJNtWu9poEnDiUJ/HNts+EcCtLJCD
PpQyVwF0S1SIms++lBW3XX4hTZHpz0X1ZqQy55N91A9U1CHRf6hMoYOB8U7JXNXo
VRnB3O9BKbaX0+U3yVq7SNyKZjHfCEcDbpDwlkYuT1gfBA4vK9lXpb4FKnrFK8PQ
SznOsvkB6GkofYYG5Sl1Z2dRe093K03OkVKCtoiEvXe2LnU/H0tVOI22/EpEmBRT
eDLhm0Mr/YFXuLcHvSJ/ji0UWpakqbBjuCj0g4X/y5gpyL9EPtWIicaVEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUQXmVlPguxL80l8P69Po6oV1l5MB8GA1UdIwQY
MBaAFK2zZaz2+RhJlwfdoT8DPizWEQMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMt
YWRhZGQ2Mjk1ODIyLzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMtYWRhZGQ2Mjk1ODIy
LzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALCzlJjL
mPxsVd5nwrWaoUkeRkJzfELRfghnb05tMpvzqEkqax/mOr2M21/rdHqooXP+esSb
nBFdMgIqnyWi3NpH8nEPyY7OO3EdwF2/MPX2Jv4g9scx18sgPTSfQ5YLRUrT/Lup
r9X1cjFCezhvfyhyik/454/UP5eWgibPB5NW3QP6PzmskOly+E1VbQa3pXveO5jk
bV7R11YuICLcxfzFJRtidAuo1fRN+gO3FxZ0RibFASlrPxOkiQxlw1cgUh7qlNDz
AUdASKbq1QRkwI2u7iS27d2N00MPrPr6BqLqFStroMCBXrEw/yRSsNDe6E1d0iLq
QoxE1oanbxWHfQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:23:09 2026 by rpki-client