Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
File:                     sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft (raw, json)
Hash identifier:          dQpGTcyxreOu5PdR9NqD/8kjQ/nfv72xRvS7A6DhDxM=
Subject key identifier:   49:C5:1E:B7:B5:91:FB:8A:80:58:4E:EC:14:B6:54:2F:B5:DD:A3:6F
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Certificate issuer:       /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial:       01A0024A9C11A723423D3C3FE9BA621ACB1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
Manifest number:          1542
Signing time:             Fri 14 Aug 2026 22:00:38 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:38 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:38 +0000
Files and hashes:         1: ob4RLJ_y_7wEvkHKUSSog54LQNw.roa (hash: Jads8EK5VWX+m/AfmuiROvWcFDNzh7waaTO1j/WWRvo=)
                          2: sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl (hash: YYZQlatSeAdYXFFNa1A9Egau8qN4w9dzrE1DfC2hkF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 22:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:9c:11:a7:23:42:3d:3c:3f:e9:ba:62:1a:cb:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
        Validity
            Not Before: Aug 14 22:00:38 2026 GMT
            Not After : Aug 15 22:00:38 2026 GMT
        Subject: CN=49c51eb7b591fb8a80584eec14b6542fb5dda36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dc:a8:ca:e9:e8:b7:34:23:94:68:71:ca:d5:
                    e8:d3:ee:e8:ff:c8:66:18:4a:77:0c:fb:1e:df:6f:
                    53:2f:06:ec:5c:7a:9d:8f:f4:1e:77:09:57:d4:f6:
                    b2:7b:e7:a7:a7:8f:0a:ba:0d:55:2e:4e:f4:cb:45:
                    9d:2e:10:aa:3d:e3:15:54:75:83:b5:eb:40:ae:30:
                    a5:6c:70:97:1c:4c:34:54:81:9b:f2:9b:ab:a0:22:
                    e1:e9:07:d6:20:65:64:b6:25:ea:f5:a7:4b:54:df:
                    50:ee:86:e9:bf:51:fc:54:29:1d:f2:9a:6f:4c:ce:
                    fb:42:6c:f1:24:a8:a6:38:d8:6b:93:3a:02:dd:3a:
                    7c:f6:7b:db:92:59:2b:e8:b2:b8:f8:3f:89:23:78:
                    86:88:dd:3a:fe:78:6f:5d:d9:20:9b:0d:b9:5c:1f:
                    e9:d2:3f:99:fe:e9:e0:6e:b6:cf:73:7b:cc:97:b9:
                    3f:7f:c8:a3:fa:9a:0d:34:3a:eb:b8:b0:63:fa:5f:
                    a2:90:c2:e0:9e:7d:79:dc:16:34:50:a9:e5:24:87:
                    a6:64:36:49:ac:99:a2:9f:de:27:f9:8e:aa:9f:2c:
                    c3:1a:41:c0:56:88:c2:3e:12:3f:02:28:d1:0b:a4:
                    13:1f:40:25:b9:ca:87:23:cf:3b:62:0c:86:1c:a0:
                    4e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C5:1E:B7:B5:91:FB:8A:80:58:4E:EC:14:B6:54:2F:B5:DD:A3:6F
            X509v3 Authority Key Identifier:
                keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b1:8c:ce:67:be:8e:fb:be:df:39:3d:cd:d8:b4:23:c5:85:
         b8:58:cc:ab:eb:9e:57:d6:c3:59:db:3e:e8:e3:40:a1:2c:f1:
         7e:5b:a6:da:e3:0d:e2:58:e5:e1:9d:19:c7:bd:e0:06:fa:58:
         e1:0a:8e:da:54:66:da:3b:42:40:d9:cd:5a:17:ce:57:6d:ae:
         a9:5b:af:5e:03:a2:5e:26:fa:b0:16:c0:68:13:60:99:7e:0f:
         97:14:95:b6:ce:1c:e7:34:a3:79:51:74:7e:bf:68:9b:4c:4d:
         83:08:1b:e2:96:b0:ae:01:a7:1c:a1:59:24:a9:83:82:c0:7b:
         28:c4:30:da:4c:aa:80:d2:c3:60:e8:2f:d5:87:b1:d4:07:7b:
         b1:dc:2d:e0:46:cf:33:77:1e:0e:af:92:7a:56:49:0c:82:84:
         54:be:ce:ad:03:46:de:be:cc:6f:b5:94:1b:41:0c:96:06:b5:
         45:69:81:e5:c9:7f:ee:f2:9b:cd:47:d0:fe:a9:02:9e:f6:1c:
         2e:ad:47:97:86:5d:60:8f:c2:2c:7a:64:81:b7:21:b3:2a:ea:
         9e:43:ad:a7:e5:97:7e:15:c7:7b:09:ba:5f:bc:2f:60:9b:30:
         b2:06:51:2d:e8:fc:e7:7c:9e:d0:43:24:e3:bd:81:69:33:8c:
         63:11:e9:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSpwRpyNCPTw/6bpiGsseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOTI0MjVhYjdkNjZiYWI3MTFmYmFhMjI3NTczNzc4MDc4
MzQxNTkwHhcNMjYwODE0MjIwMDM4WhcNMjYwODE1MjIwMDM4WjAzMTEwLwYDVQQD
Eyg0OWM1MWViN2I1OTFmYjhhODA1ODRlZWMxNGI2NTQyZmI1ZGRhMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9yoyunotzQjlGhxytXo0+7o/8hm
GEp3DPse329TLwbsXHqdj/QedwlX1Paye+enp48Kug1VLk70y0WdLhCqPeMVVHWD
tetArjClbHCXHEw0VIGb8puroCLh6QfWIGVktiXq9adLVN9Q7obpv1H8VCkd8ppv
TM77QmzxJKimONhrkzoC3Tp89nvbklkr6LK4+D+JI3iGiN06/nhvXdkgmw25XB/p
0j+Z/ungbrbPc3vMl7k/f8ij+poNNDrruLBj+l+ikMLgnn153BY0UKnlJIemZDZJ
rJmin94n+Y6qnyzDGkHAVojCPhI/AijRC6QTH0AlucqHI887YgyGHKBO+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnFHre1kfuKgFhO7BS2VC+13aNvMB8GA1UdIwQY
MBaAFLCSQlq31murcR+6oidXN3gHg0FZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYt
MDc1ZTgzZGQzMzU2LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80ZGEyZWEtYWJjMC00YmY0LTllMDYtMDc1ZTgzZGQzMzU2
LzEvc0pKQ1dyZldhNnR4SDdxaUoxYzNlQWVEUVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrGMzme+
jvu+3zk9zdi0I8WFuFjMq+ueV9bDWds+6ONAoSzxflum2uMN4ljl4Z0Zx73gBvpY
4QqO2lRm2jtCQNnNWhfOV22uqVuvXgOiXib6sBbAaBNgmX4PlxSVts4c5zSjeVF0
fr9om0xNgwgb4pawrgGnHKFZJKmDgsB7KMQw2kyqgNLDYOgv1Yex1Ad7sdwt4EbP
M3ceDq+SelZJDIKEVL7OrQNG3r7Mb7WUG0EMlga1RWmB5cl/7vKbzUfQ/qkCnvYc
Lq1Hl4ZdYI/CLHpkgbchsyrqnkOtp+WXfhXHewm6X7wvYJswsgZRLej853ye0EMk
472BaTOMYxHpwQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:33:07 2026 by rpki-client