Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File:                     boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier:          qGdQD7JPOpJfHFJ74EVJfgYKP3U5ySKx5MWTk4xzah0=
Subject key identifier:   53:56:94:C0:30:2B:A9:44:9A:D8:BC:45:28:6A:82:19:9A:E4:37:A7
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer:       /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial:       01A0890C71D9D0EDAF5F17CD4B6294536572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number:          19A0
Signing time:             Thu 10 Sep 2026 02:01:29 +0000
Manifest this update:     Thu 10 Sep 2026 02:01:29 +0000
Manifest next update:     Fri 11 Sep 2026 02:01:29 +0000
Files and hashes:         1: 06gNA3LV7YBXuhA1rKiMTeDxRoA.roa (hash: d9wHD1t/r/V+XScUKTAXojVgXFDnOgiwl/ANGl0ElHU=)
                          2: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: AQWOiwfEMukIXrBC7ZsTpL/tSkXltbzOSbqcmuNa/XY=)
                          3: p_w8TFQKrPjZFeqKHXZkgHKF9Tc.roa (hash: tr6X6XVYM4REThJ5QdRO15I8HLm0u1bXqwDznTVnWXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:0c:71:d9:d0:ed:af:5f:17:cd:4b:62:94:53:65:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
        Validity
            Not Before: Sep 10 02:01:29 2026 GMT
            Not After : Sep 11 02:01:29 2026 GMT
        Subject: CN=535694c0302ba9449ad8bc45286a82199ae437a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:3f:8b:1f:20:ef:eb:40:f4:94:08:be:39:
                    01:b7:ff:7c:0d:49:81:80:d2:99:16:16:c9:d1:e8:
                    99:11:b3:5f:09:e7:01:8e:3b:e1:32:26:f8:14:d7:
                    f8:98:b5:2f:46:74:a5:db:17:24:06:f7:c4:62:82:
                    82:29:09:af:23:10:e8:e3:26:87:85:84:ad:0c:4c:
                    a1:53:88:a4:bc:14:d4:d0:61:0f:5e:74:80:a7:1f:
                    e9:55:38:42:02:8f:7a:da:79:05:3b:23:19:55:02:
                    51:74:2e:97:06:5b:1e:4c:36:58:2b:d9:9c:dc:85:
                    f6:0c:b3:f8:f3:7e:00:0c:8f:e8:d9:f2:95:04:2a:
                    e5:63:31:1c:9e:3f:ed:f6:d1:17:31:b7:62:f3:d3:
                    57:1e:60:4d:c4:f1:9e:3f:aa:b5:1e:8d:ef:0e:e7:
                    8e:80:4c:e0:25:f3:15:7d:c3:fe:eb:b4:a1:3c:fa:
                    fb:94:c4:eb:36:e8:3f:b1:06:d4:f9:1e:ee:1b:02:
                    81:2f:9a:42:60:c9:4e:f1:ea:b5:90:be:f0:37:f8:
                    3f:a9:fd:d5:cc:35:8b:66:06:72:47:ef:f3:01:d4:
                    d0:78:89:4c:ee:d7:5d:93:1f:24:b3:d2:6f:4e:57:
                    02:f4:04:0a:b0:2a:c3:74:43:c4:4d:86:55:71:57:
                    22:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:56:94:C0:30:2B:A9:44:9A:D8:BC:45:28:6A:82:19:9A:E4:37:A7
            X509v3 Authority Key Identifier:
                keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2b:93:f5:17:28:db:80:3a:10:d1:0c:4f:96:02:e2:8f:c3:
         9c:e5:84:c1:c5:3e:87:32:c2:d4:80:32:e9:c7:9d:80:21:2b:
         82:2c:be:31:3a:8c:39:b7:88:e3:3a:6e:3d:54:9c:59:93:5e:
         22:5f:8c:8b:45:8c:78:6f:3a:f1:19:52:42:e9:8e:1e:ac:02:
         0b:11:3d:37:25:81:b4:06:0c:7b:63:37:3f:16:9e:4c:ea:7a:
         f1:3a:15:e6:93:75:a4:24:a4:f7:e4:9a:56:b1:42:e4:2f:5b:
         35:d4:0e:84:6c:3d:37:83:65:dc:7a:1c:f4:36:29:53:de:30:
         cc:26:9e:be:ac:1b:e1:fc:50:31:90:a1:a4:8e:ba:45:08:d2:
         bc:da:bf:c7:18:87:7a:d2:dd:d3:99:12:11:20:fd:62:e8:43:
         76:eb:91:81:e0:ca:18:93:01:94:00:4c:b4:70:a8:a7:9f:eb:
         17:e4:0c:f8:18:d7:a4:39:4a:26:0a:09:4d:ac:51:54:21:1b:
         4e:f3:3a:c5:6d:16:4c:d0:3a:0e:15:36:64:72:56:dd:d2:39:
         ef:35:56:01:00:a6:5e:69:79:ea:7a:09:47:77:08:42:be:e4:
         e6:3b:65:79:b9:42:66:55:76:f2:af:9f:39:8f:b4:c9:95:50:
         3a:1f:6b:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJDHHZ0O2vXxfNS2KUU2VyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODMyNTE2NjFiMGI3NzQyNzFjNWNmNTI2YWFiODg0YjFm
YTdjN2UwHhcNMjYwOTEwMDIwMTI5WhcNMjYwOTExMDIwMTI5WjAzMTEwLwYDVQQD
Eyg1MzU2OTRjMDMwMmJhOTQ0OWFkOGJjNDUyODZhODIxOTlhZTQzN2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuno/ix8g7+tA9JQIvjkBt/98DUmB
gNKZFhbJ0eiZEbNfCecBjjvhMib4FNf4mLUvRnSl2xckBvfEYoKCKQmvIxDo4yaH
hYStDEyhU4ikvBTU0GEPXnSApx/pVThCAo962nkFOyMZVQJRdC6XBlseTDZYK9mc
3IX2DLP4834ADI/o2fKVBCrlYzEcnj/t9tEXMbdi89NXHmBNxPGeP6q1Ho3vDueO
gEzgJfMVfcP+67ShPPr7lMTrNug/sQbU+R7uGwKBL5pCYMlO8eq1kL7wN/g/qf3V
zDWLZgZyR+/zAdTQeIlM7tddkx8ks9JvTlcC9AQKsCrDdEPETYZVcVci9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNWlMAwK6lEmti8RShqghma5DenMB8GA1UdIwQY
MBaAFG6DJRZhsLd0Jxxc9SaquISx+nx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jNjI2ZDUtZDQwNS00MDZlLThjODEt
NWMwMTgxN2ZiODIyLzEvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jNjI2ZDUtZDQwNS00MDZlLThjODEtNWMwMTgxN2ZiODIy
LzEvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCuT9Rco
24A6ENEMT5YC4o/DnOWEwcU+hzLC1IAy6cedgCErgiy+MTqMObeI4zpuPVScWZNe
Il+Mi0WMeG868RlSQumOHqwCCxE9NyWBtAYMe2M3PxaeTOp68ToV5pN1pCSk9+Sa
VrFC5C9bNdQOhGw9N4Nl3Hoc9DYpU94wzCaevqwb4fxQMZChpI66RQjSvNq/xxiH
etLd05kSESD9YuhDduuRgeDKGJMBlABMtHCop5/rF+QM+BjXpDlKJgoJTaxRVCEb
TvM6xW0WTNA6DhU2ZHJW3dI57zVWAQCmXml56noJR3cIQr7k5jtleblCZlV28q+f
OY+0yZVQOh9r4w==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:19:07 2026 by rpki-client