Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File:                     ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier:          iR61q/R8FDCRCG+NXeaefafkk56tFog/0mrBhvN96Mo=
Subject key identifier:   74:BE:11:AF:E5:06:EC:E6:F2:4D:67:24:21:8F:CB:61:C0:17:93:43
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer:       /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial:       01A06FF17CF1423C4B40A1829C45E476398A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number:          1785
Signing time:             Sat 05 Sep 2026 05:01:32 +0000
Manifest this update:     Sat 05 Sep 2026 05:01:32 +0000
Manifest next update:     Sun 06 Sep 2026 05:01:32 +0000
Files and hashes:         1: 123WXGbRTZdeisXrE-k_3g3EMvk.roa (hash: PVrjq81b7ONxfTHO259I9HIBssHsthuK6wCJzCfRRBw=)
                          2: 3JLEaN47mFd4AJ1ulcTajHwX46Q.roa (hash: 7nuv0xJK6J/Wz9ZBABmkHA68zDZCu6LbMkw8k4JA0aY=)
                          3: 3m4ZcWe4AoRitpxIdoHTfvPCTz4.roa (hash: R1IDNKkyr2PRIrfMe44b/uoEQJhofAwIdcVDkSZ0J1s=)
                          4: ktGWBH_rz8CZASP_zJHcbXXlp7Y.roa (hash: WQj8sJ8bysuFkPbFG5oVPz6oUf8fVBbz+1mkOQXAzAY=)
                          5: qmwlU-LpszPGm_f_AiX4jfEipIU.roa (hash: eBcbl11HwyKBKgKCJIYPrcRxwRYlzqQyOytUqmTgqj8=)
                          6: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: NRFyDnnGFqyJZyUZPPMdq3p3lHyLTVmDU0zw/8+jY7g=)
                          7: wwateRuj040-ENpDYQ6qLA2XVl0.roa (hash: NH6PZI4atftudx1FEvFD8kdIjwc++XEY3pey7kw2zFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:f1:7c:f1:42:3c:4b:40:a1:82:9c:45:e4:76:39:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
        Validity
            Not Before: Sep  5 05:01:32 2026 GMT
            Not After : Sep  6 05:01:32 2026 GMT
        Subject: CN=74be11afe506ece6f24d6724218fcb61c0179343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:8f:cf:be:95:f7:82:67:27:b0:6e:76:cb:
                    1c:55:4c:e8:09:e8:4d:83:44:58:37:3f:19:fe:91:
                    48:01:9b:65:a6:5c:1a:41:7d:51:38:1f:bd:36:2d:
                    75:34:14:f4:ac:c3:03:1c:fe:77:93:0a:27:e4:b1:
                    e1:42:2b:2a:19:b5:46:ef:91:ff:42:79:32:e0:95:
                    a3:b5:f9:92:06:bd:b8:f2:fa:a6:f3:ce:50:92:94:
                    d0:07:86:3c:4a:3f:00:47:96:ac:3e:7f:ff:f5:59:
                    71:06:f2:ed:53:a5:97:f7:dc:89:41:18:3e:d2:77:
                    d8:55:df:72:38:8b:28:9d:10:da:aa:d2:1b:84:b8:
                    ff:12:f2:05:cc:bf:9c:7b:15:14:20:5b:32:5e:79:
                    a4:d6:93:e9:f0:78:a4:90:3c:a1:ca:45:8c:64:67:
                    e9:f9:dc:1b:ba:0a:be:cd:35:50:e5:9b:1c:af:a4:
                    e9:97:bb:e6:67:cf:0c:4c:91:78:06:4f:6d:3d:bb:
                    6d:91:03:94:fe:59:01:64:ef:07:6d:a8:cf:28:0b:
                    81:22:be:1f:d1:3e:60:19:75:50:e0:7c:72:72:02:
                    6c:a0:5d:41:ee:db:f4:e7:7b:55:81:e0:16:3d:a4:
                    5b:dd:0f:93:d5:40:0d:48:b6:76:9a:ce:dc:02:d6:
                    6b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BE:11:AF:E5:06:EC:E6:F2:4D:67:24:21:8F:CB:61:C0:17:93:43
            X509v3 Authority Key Identifier:
                keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:18:bd:90:de:5a:6d:84:b6:8b:df:ae:5f:d4:5e:4d:8c:8f:
         02:0e:8f:b8:e8:6c:14:08:cb:77:95:9d:b2:eb:0c:b1:2a:bb:
         39:d6:d6:89:91:b3:69:e6:25:55:4e:80:61:8b:ad:d0:82:5c:
         2a:40:ce:29:88:24:10:cd:8d:b7:64:8a:89:67:32:9d:4d:ff:
         ff:13:a1:bd:ec:43:3e:7a:8c:d3:1b:c0:29:ff:03:50:b4:76:
         51:5b:47:ab:7e:04:7c:39:4f:7e:37:eb:79:a1:0a:16:b9:7a:
         0f:1d:63:69:fa:47:3e:4f:de:36:5f:e6:be:e7:5a:d7:b2:7a:
         0c:be:26:df:3e:5f:d0:14:dc:30:b4:8e:44:cd:0a:38:50:d5:
         2a:29:6d:44:63:27:94:c8:1f:1a:59:8e:a4:00:4f:b6:8f:2c:
         b7:57:14:21:f7:3a:56:2d:23:7c:60:a2:86:4c:7b:22:b7:3d:
         9f:2a:1a:f2:c3:c1:29:50:0b:de:2a:e4:b5:e5:3a:a7:39:07:
         cf:06:04:6f:4e:be:d2:f5:87:c0:e5:e3:f3:fd:65:a5:7d:49:
         97:b4:38:ea:f4:62:4a:1a:20:3c:23:36:1d:18:75:25:1f:6e:
         ec:05:85:a0:a0:48:b5:db:cf:1c:8d:06:c7:24:1c:26:0e:29:
         d5:72:9b:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBv8XzxQjxLQKGCnEXkdjmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZTA4ZDkzMzZmMmU2Y2QxNjVlYjczMDI5N2ZlNmQyMGM4
M2MzOWEwHhcNMjYwOTA1MDUwMTMyWhcNMjYwOTA2MDUwMTMyWjAzMTEwLwYDVQQD
Eyg3NGJlMTFhZmU1MDZlY2U2ZjI0ZDY3MjQyMThmY2I2MWMwMTc5MzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzyPz76V94JnJ7BudsscVUzoCehN
g0RYNz8Z/pFIAZtlplwaQX1ROB+9Ni11NBT0rMMDHP53kwon5LHhQisqGbVG75H/
Qnky4JWjtfmSBr248vqm885QkpTQB4Y8Sj8AR5asPn//9VlxBvLtU6WX99yJQRg+
0nfYVd9yOIsonRDaqtIbhLj/EvIFzL+cexUUIFsyXnmk1pPp8HikkDyhykWMZGfp
+dwbugq+zTVQ5Zscr6Tpl7vmZ88MTJF4Bk9tPbttkQOU/lkBZO8HbajPKAuBIr4f
0T5gGXVQ4HxycgJsoF1B7tv053tVgeAWPaRb3Q+T1UANSLZ2ms7cAtZr7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHS+Ea/lBuzm8k1nJCGPy2HAF5NDMB8GA1UdIwQY
MBaAFK7gjZM28ubNFl63MCl/5tIMg8OaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAt
NDk3YmVkZDcxZWI5LzEvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAtNDk3YmVkZDcxZWI5
LzEvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBi9kN5a
bYS2i9+uX9ReTYyPAg6PuOhsFAjLd5WdsusMsSq7OdbWiZGzaeYlVU6AYYut0IJc
KkDOKYgkEM2Nt2SKiWcynU3//xOhvexDPnqM0xvAKf8DULR2UVtHq34EfDlPfjfr
eaEKFrl6Dx1jafpHPk/eNl/mvuda17J6DL4m3z5f0BTcMLSORM0KOFDVKiltRGMn
lMgfGlmOpABPto8st1cUIfc6Vi0jfGCihkx7Irc9nyoa8sPBKVAL3irkteU6pzkH
zwYEb06+0vWHwOXj8/1lpX1Jl7Q46vRiShogPCM2HRh1JR9u7AWFoKBItdvPHI0G
xyQcJg4p1XKbUw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:20:53 2026 by rpki-client