Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
File:                     V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft (raw, json)
Hash identifier:          2rLWyqG9QUtwURQEPV+D9kJYFN2dYDt06ZIMBgmRmaI=
Subject key identifier:   4B:B6:0D:7F:E4:A6:E4:2F:CE:C5:C8:52:53:CE:3B:DF:46:2A:FB:0B
Authority key identifier: 57:9D:54:9A:33:16:E4:25:71:CC:A5:F8:38:0E:2D:F5:9C:2B:34:A0
Certificate issuer:       /CN=579d549a3316e42571cca5f8380e2df59c2b34a0
Certificate serial:       01A08C43934B6286055C6441C803B8B50CE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
Manifest number:          B0
Signing time:             Thu 10 Sep 2026 17:00:33 +0000
Manifest this update:     Thu 10 Sep 2026 17:00:33 +0000
Manifest next update:     Fri 11 Sep 2026 17:00:33 +0000
Files and hashes:         1: HXHjwpKZ0hUuhA-ecTFWovLriWw.roa (hash: /sTU1en73B/4P9sdmgCdOcbF8vhNLR8j5kj2wC8xqfE=)
                          2: V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl (hash: ws1PMZLJmKVFtnDd7aCCDh3jegZniCuDWaYHRJL4tHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:43:93:4b:62:86:05:5c:64:41:c8:03:b8:b5:0c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579d549a3316e42571cca5f8380e2df59c2b34a0
        Validity
            Not Before: Sep 10 17:00:33 2026 GMT
            Not After : Sep 11 17:00:33 2026 GMT
        Subject: CN=4bb60d7fe4a6e42fcec5c85253ce3bdf462afb0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ad:2b:05:64:a7:34:c1:1e:7c:76:5d:ea:48:
                    1b:a8:ff:05:a7:a0:e1:24:a8:64:e7:92:d2:01:6b:
                    67:90:f0:74:84:ab:6e:97:bd:77:ff:5e:78:e2:d5:
                    d0:99:e3:fc:05:e5:9e:f7:75:7a:ce:b7:be:da:71:
                    35:df:4a:69:7f:34:ba:e7:03:bc:bf:19:12:b8:bc:
                    61:ad:c9:32:ee:96:01:74:f8:1a:e8:c0:ad:98:81:
                    9d:70:92:8b:e0:c3:8a:46:58:a5:69:32:a6:c4:38:
                    82:32:c7:0c:a4:cd:66:f1:eb:1c:85:c6:2d:87:78:
                    b7:8f:ed:d4:7e:e6:ab:81:03:42:1b:f8:89:cb:dc:
                    f6:d7:a9:fa:32:67:8c:78:9e:ca:71:4d:73:a3:25:
                    d7:6b:e7:52:e0:77:85:a3:57:37:5b:f7:be:f6:5d:
                    a8:03:e6:ed:5c:fd:cd:0c:af:bd:3b:bd:7a:fe:39:
                    d6:da:15:c4:38:d6:5b:b2:a5:81:28:be:1d:a4:d9:
                    01:6b:c9:97:9a:66:b5:c2:48:7b:2e:57:5d:bb:dc:
                    06:6d:bb:c6:ac:a5:2a:05:8e:e1:45:f0:3c:00:92:
                    31:73:4e:f0:2a:da:f2:46:76:94:37:bb:a0:9e:36:
                    1f:90:f6:3b:5c:77:21:61:df:2d:14:2d:09:5f:c3:
                    33:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B6:0D:7F:E4:A6:E4:2F:CE:C5:C8:52:53:CE:3B:DF:46:2A:FB:0B
            X509v3 Authority Key Identifier:
                keyid:57:9D:54:9A:33:16:E4:25:71:CC:A5:F8:38:0E:2D:F5:9C:2B:34:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:a1:78:67:94:1f:cf:42:ee:6e:25:d4:e6:20:7e:a9:b6:
         e5:00:ac:61:8e:36:0a:1b:39:e5:13:14:8d:da:c6:ca:3e:4a:
         b7:fe:09:5e:58:db:4a:a9:64:71:59:37:43:65:86:a8:b6:df:
         1f:de:8d:b9:01:91:cb:e7:b9:0e:27:e7:db:99:3b:91:18:b1:
         22:b8:e0:7d:31:31:75:fb:70:0e:c4:c6:42:06:2e:93:54:5b:
         0a:37:5a:c7:ed:c7:39:65:d1:77:d0:4d:9d:46:7c:e7:e3:7d:
         41:12:95:ff:dd:d0:6c:bf:e5:f8:f9:b9:5d:0e:5f:e7:c5:01:
         8f:61:26:51:74:37:ff:2f:84:3f:fd:64:7a:d1:45:34:c2:45:
         d3:65:5b:27:5f:64:d4:b2:7f:49:a9:f2:23:cb:fd:4b:40:3d:
         f2:3d:17:b9:e9:e3:01:21:b3:3f:44:0b:7c:5a:d2:86:76:31:
         92:a5:3d:11:1a:90:f6:5b:c1:0e:c0:59:9a:29:6c:47:43:0c:
         a4:1c:6a:41:da:56:86:a2:08:ba:a8:11:99:b0:78:98:4e:d6:
         12:76:d3:95:88:1c:ae:74:2a:d8:8b:b6:31:bf:ce:d0:d9:d1:
         e4:25:d4:e3:c2:c8:26:a0:fe:31:f1:c5:28:a6:45:5f:52:e9:
         f1:25:84:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMQ5NLYoYFXGRByAO4tQzpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OWQ1NDlhMzMxNmU0MjU3MWNjYTVmODM4MGUyZGY1OWMy
YjM0YTAwHhcNMjYwOTEwMTcwMDMzWhcNMjYwOTExMTcwMDMzWjAzMTEwLwYDVQQD
Eyg0YmI2MGQ3ZmU0YTZlNDJmY2VjNWM4NTI1M2NlM2JkZjQ2MmFmYjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK0rBWSnNMEefHZd6kgbqP8Fp6Dh
JKhk55LSAWtnkPB0hKtul713/1544tXQmeP8BeWe93V6zre+2nE130ppfzS65wO8
vxkSuLxhrcky7pYBdPga6MCtmIGdcJKL4MOKRlilaTKmxDiCMscMpM1m8eschcYt
h3i3j+3UfuargQNCG/iJy9z216n6MmeMeJ7KcU1zoyXXa+dS4HeFo1c3W/e+9l2o
A+btXP3NDK+9O716/jnW2hXEONZbsqWBKL4dpNkBa8mXmma1wkh7Llddu9wGbbvG
rKUqBY7hRfA8AJIxc07wKtryRnaUN7ugnjYfkPY7XHchYd8tFC0JX8MzlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEu2DX/kpuQvzsXIUlPOO99GKvsLMB8GA1UdIwQY
MBaAFFedVJozFuQlccyl+DgOLfWcKzSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjUxVW1qTVc1Q1Z4ektYNE9BNHQ5WndyTktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yNDE0NWItMjMyNC00MzBkLWIwMmIt
NGE0NGViMGVhZjg2LzEvVjUxVW1qTVc1Q1Z4ektYNE9BNHQ5WndyTktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8yNDE0NWItMjMyNC00MzBkLWIwMmItNGE0NGViMGVhZjg2
LzEvVjUxVW1qTVc1Q1Z4ektYNE9BNHQ5WndyTktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1+heGeU
H89C7m4l1OYgfqm25QCsYY42Chs55RMUjdrGyj5Kt/4JXljbSqlkcVk3Q2WGqLbf
H96NuQGRy+e5Difn25k7kRixIrjgfTExdftwDsTGQgYuk1RbCjdax+3HOWXRd9BN
nUZ85+N9QRKV/93QbL/l+Pm5XQ5f58UBj2EmUXQ3/y+EP/1ketFFNMJF02VbJ19k
1LJ/SanyI8v9S0A98j0XuenjASGzP0QLfFrShnYxkqU9ERqQ9lvBDsBZmilsR0MM
pBxqQdpWhqIIuqgRmbB4mE7WEnbTlYgcrnQq2Iu2Mb/O0NnR5CXU48LIJqD+MfHF
KKZFX1Lp8SWEuw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:33:28 2026 by rpki-client