Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File:                     NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier:          qsP6MPOsPTWErM59fNUImrH89qiLSEjpztQNsR+/rr4=
Subject key identifier:   88:6E:3A:DD:CC:B7:AE:B1:77:09:BE:2F:10:00:EB:1F:7E:30:22:2F
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer:       /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial:       01A06D5E1DD7A141EE76CDDB7C58F8DEB674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number:          1845
Signing time:             Fri 04 Sep 2026 17:01:19 +0000
Manifest this update:     Fri 04 Sep 2026 17:01:19 +0000
Manifest next update:     Sat 05 Sep 2026 17:01:19 +0000
Files and hashes:         1: BZiuGChYteIV3-RFWRWSz2y3d3A.roa (hash: cNyCyKkwqm/596Q3tlgnaVI5Q+CFTR9OgN3nxKb0AOc=)
                          2: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: O1g37GAiRyrODFjgu4DDXVaXWtxbdfIqlO8MaQPZgi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:5e:1d:d7:a1:41:ee:76:cd:db:7c:58:f8:de:b6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
        Validity
            Not Before: Sep  4 17:01:19 2026 GMT
            Not After : Sep  5 17:01:19 2026 GMT
        Subject: CN=886e3addccb7aeb17709be2f1000eb1f7e30222f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:23:30:34:4a:b6:d6:4e:c4:e9:15:88:d5:a9:
                    fe:f7:ff:42:2d:53:43:7d:9e:88:cb:af:07:d9:cb:
                    0d:b0:9a:62:aa:07:4a:3a:b5:2e:70:eb:bd:c0:ab:
                    2d:a4:9d:15:05:bd:47:95:21:67:49:e3:2b:a7:3f:
                    cc:83:b5:eb:ef:ba:5e:9a:84:ce:29:c3:02:8d:b0:
                    14:1e:45:92:46:3f:38:bc:9a:11:f1:54:67:b3:03:
                    a6:26:92:8e:49:c0:43:7f:ef:e0:00:e4:12:36:90:
                    ca:6e:7c:88:b6:b0:88:9d:0b:70:78:5d:3e:78:06:
                    67:47:9d:9e:85:86:7b:ae:bf:4b:92:9c:a8:f0:88:
                    5b:7b:f6:d4:cc:08:f3:ee:92:63:a5:e5:31:fc:8d:
                    75:ac:82:db:2a:54:bb:79:0e:31:48:b3:71:d4:79:
                    d8:d7:32:25:24:a5:1c:f7:c1:6f:5f:4c:69:2c:a6:
                    ca:a2:1d:33:13:76:f2:ee:8c:aa:41:23:dc:2b:9d:
                    25:a2:59:ce:ce:1c:4e:0b:21:ea:9a:93:18:79:12:
                    eb:6d:d2:12:7c:b4:fb:74:5d:d7:0e:18:11:19:e4:
                    40:58:bd:7c:dc:cc:11:cf:41:b0:5e:db:63:a2:41:
                    b4:b2:80:a5:be:ba:31:94:8a:95:9f:48:a8:c4:f8:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6E:3A:DD:CC:B7:AE:B1:77:09:BE:2F:10:00:EB:1F:7E:30:22:2F
            X509v3 Authority Key Identifier:
                keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b2:61:0b:e9:32:83:3f:a4:67:a1:3c:3e:69:16:1f:82:99:
         33:88:1a:31:5a:3f:3c:b8:a0:f6:a9:7e:99:ba:f4:c8:fd:1b:
         ff:12:30:96:a5:94:2e:a2:70:3c:93:00:c1:30:63:35:ef:18:
         65:26:ba:29:38:5a:1a:2a:af:bb:4f:52:2a:66:a9:da:a6:6f:
         6d:f5:62:59:a3:33:9b:43:d9:0e:d6:b6:38:6d:01:ce:45:ca:
         17:ec:95:1f:00:df:c7:bc:ab:ab:71:ac:ac:c8:da:77:b4:ae:
         15:8d:3e:b9:60:c2:8e:2b:18:5f:68:03:44:87:72:d3:d2:6c:
         e1:48:41:46:27:e1:d6:4d:d1:25:ba:42:f5:4e:46:fa:97:68:
         8a:10:07:47:8a:ed:8e:43:2c:97:35:b4:20:93:cd:4c:97:40:
         51:f3:e0:27:4b:fe:d9:b7:59:79:e4:ae:1f:1e:8e:61:bb:fa:
         29:8b:dd:4a:6d:1b:ca:28:40:21:e9:c7:d2:75:cf:52:f2:42:
         31:6f:86:97:a4:31:21:68:b8:a2:09:2a:e9:d6:8a:a2:3e:6f:
         7f:0a:d8:f4:9d:95:a4:6d:06:b4:0e:38:3b:88:f4:e0:7b:4f:
         47:b3:cc:61:28:c9:cb:e7:95:63:fb:6e:41:9a:24:9d:73:05:
         24:c5:ee:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtXh3XoUHuds3bfFj43rZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjYxYzI2MTc1NmZhMDNhYzU3ZDFiZmM0ZGI4NTZlZjgw
ODk3NWEwHhcNMjYwOTA0MTcwMTE5WhcNMjYwOTA1MTcwMTE5WjAzMTEwLwYDVQQD
Eyg4ODZlM2FkZGNjYjdhZWIxNzcwOWJlMmYxMDAwZWIxZjdlMzAyMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iMwNEq21k7E6RWI1an+9/9CLVND
fZ6Iy68H2csNsJpiqgdKOrUucOu9wKstpJ0VBb1HlSFnSeMrpz/Mg7Xr77pemoTO
KcMCjbAUHkWSRj84vJoR8VRnswOmJpKOScBDf+/gAOQSNpDKbnyItrCInQtweF0+
eAZnR52ehYZ7rr9Lkpyo8Ihbe/bUzAjz7pJjpeUx/I11rILbKlS7eQ4xSLNx1HnY
1zIlJKUc98FvX0xpLKbKoh0zE3by7oyqQSPcK50lolnOzhxOCyHqmpMYeRLrbdIS
fLT7dF3XDhgRGeRAWL183MwRz0GwXttjokG0soClvroxlIqVn0ioxPhdcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhuOt3Mt66xdwm+LxAA6x9+MCIvMB8GA1UdIwQY
MBaAFDYmHCYXVvoDrFfRv8TbhW74CJdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTIt
NDQyYzA4MGFlNTQxLzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTItNDQyYzA4MGFlNTQx
LzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7JhC+ky
gz+kZ6E8PmkWH4KZM4gaMVo/PLig9ql+mbr0yP0b/xIwlqWULqJwPJMAwTBjNe8Y
ZSa6KThaGiqvu09SKmap2qZvbfViWaMzm0PZDta2OG0BzkXKF+yVHwDfx7yrq3Gs
rMjad7SuFY0+uWDCjisYX2gDRIdy09Js4UhBRifh1k3RJbpC9U5G+pdoihAHR4rt
jkMslzW0IJPNTJdAUfPgJ0v+2bdZeeSuHx6OYbv6KYvdSm0byihAIenH0nXPUvJC
MW+Gl6QxIWi4ogkq6daKoj5vfwrY9J2VpG0GtA44O4j04HtPR7PMYSjJy+eVY/tu
QZoknXMFJMXujA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:18:52 2026 by rpki-client