Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File:                     1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier:          /wWd8BynRx7dG85Qg/0FMipwgaRAvqFdoHe7F2wpLpY=
Subject key identifier:   5E:CE:99:91:7E:8D:F6:B9:04:30:DB:08:EC:B4:52:FE:72:D1:EE:56
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer:       /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial:       01A08979E9BBA0308D79D042FFB575B6BF49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number:          07E8
Signing time:             Thu 10 Sep 2026 04:01:03 +0000
Manifest this update:     Thu 10 Sep 2026 04:01:03 +0000
Manifest next update:     Fri 11 Sep 2026 04:01:03 +0000
Files and hashes:         1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: MwTu0yUqq3Gar9EqBrHxuc9F5lYjegX/rO/bf0La9kI=)
                          2: sorUGGWe1LLztpuUErMIMbx90dE.roa (hash: e/DVtYzq//vQzs5AELDtVTrdhuXE8VIADl3/vxdL9m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:79:e9:bb:a0:30:8d:79:d0:42:ff:b5:75:b6:bf:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
        Validity
            Not Before: Sep 10 04:01:03 2026 GMT
            Not After : Sep 11 04:01:03 2026 GMT
        Subject: CN=5ece99917e8df6b90430db08ecb452fe72d1ee56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:a0:d7:58:01:73:1a:c5:20:c5:02:74:fc:
                    97:32:53:fd:73:b0:61:4f:72:d4:fc:9b:dd:05:4e:
                    bc:7b:2f:ba:3a:66:4e:aa:44:48:68:fc:78:cc:36:
                    e0:da:d4:50:0c:de:ee:7c:2c:db:04:b7:46:b2:97:
                    73:db:cc:c1:a3:6a:60:fe:4b:d4:53:2d:a4:e3:06:
                    1f:73:4a:51:91:4d:da:e0:3e:2a:66:47:99:7b:2c:
                    f2:da:94:f5:41:e3:6e:ec:03:3a:ec:f5:73:3f:c6:
                    ed:52:59:e8:ad:3d:2c:1a:d9:59:2c:7b:18:59:00:
                    97:d9:d6:16:2d:f4:c8:2b:75:98:21:4d:c7:bb:2d:
                    18:77:a0:a6:d0:6a:5e:e0:ee:36:72:9a:20:c4:c2:
                    c9:3e:fc:a9:47:78:6c:29:8d:0a:a1:75:80:b8:bc:
                    e0:f5:90:b0:91:cf:86:21:55:3e:b8:a7:22:db:c2:
                    91:3f:68:34:62:59:18:3e:7b:42:fd:f2:b4:1a:cb:
                    1c:ae:7e:da:a8:aa:77:7d:d6:8d:36:68:27:07:55:
                    32:81:78:07:2e:e4:b2:d7:21:b4:41:ea:74:7b:11:
                    b4:24:dd:1e:2a:ba:cb:34:17:1b:6b:a9:ae:ef:0f:
                    ab:40:b2:7c:96:01:c0:df:9a:9c:0f:b6:4f:a1:0b:
                    0b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CE:99:91:7E:8D:F6:B9:04:30:DB:08:EC:B4:52:FE:72:D1:EE:56
            X509v3 Authority Key Identifier:
                keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f1:1e:16:37:c2:d1:52:c6:6a:8f:01:45:aa:7e:3d:84:01:
         ae:d3:2b:e7:37:04:6a:04:8d:58:98:1b:89:58:6f:69:25:62:
         5c:c7:cc:cd:2a:37:c3:67:6b:ba:6a:6d:18:94:ea:50:0c:a7:
         77:ef:84:51:92:69:01:93:67:2d:35:66:f1:32:f9:4e:5c:5f:
         d8:ff:26:af:b9:33:23:3a:19:81:ab:8b:6e:b0:6d:de:ee:fc:
         19:f5:a9:6c:bf:59:a5:78:c3:85:fa:16:45:d5:1b:34:5e:c6:
         54:1f:1e:29:b0:d5:d4:a7:61:6d:9b:81:95:7f:e8:75:b2:f8:
         b8:e6:b4:71:62:e6:3a:21:c6:ff:11:bb:cf:d2:a8:d6:36:ac:
         66:81:f0:62:c5:14:39:5b:49:bf:4d:f0:0a:36:42:f0:d2:64:
         70:45:4a:a2:44:e1:af:ae:08:b6:a3:c9:1d:b9:af:cd:7e:2e:
         2a:22:f2:9c:fd:32:cb:77:12:40:e3:d6:6e:43:39:68:01:b8:
         5f:bb:dd:62:1b:82:f4:26:44:c0:ff:e1:41:ad:1c:3e:26:2a:
         b5:d0:56:5f:c9:49:a3:c5:d6:d1:70:57:14:31:a0:06:9b:3f:
         20:65:26:5e:4a:08:fa:e5:21:97:86:2c:8c:2d:33:51:a6:5c:
         85:5f:ba:76
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaCJeem7oDCNedBC/7V1tr9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWZmNGRmMmVmYzY5ZWNjMTkyZWE1YWVmZDdiM2I5N2Y1
ODA5MDEwHhcNMjYwOTEwMDQwMTAzWhcNMjYwOTExMDQwMTAzWjAzMTEwLwYDVQQD
Eyg1ZWNlOTk5MTdlOGRmNmI5MDQzMGRiMDhlY2I0NTJmZTcyZDFlZTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+Gg11gBcxrFIMUCdPyXMlP9c7Bh
T3LU/JvdBU68ey+6OmZOqkRIaPx4zDbg2tRQDN7ufCzbBLdGspdz28zBo2pg/kvU
Uy2k4wYfc0pRkU3a4D4qZkeZeyzy2pT1QeNu7AM67PVzP8btUlnorT0sGtlZLHsY
WQCX2dYWLfTIK3WYIU3Huy0Yd6Cm0Gpe4O42cpogxMLJPvypR3hsKY0KoXWAuLzg
9ZCwkc+GIVU+uKci28KRP2g0YlkYPntC/fK0Gsscrn7aqKp3fdaNNmgnB1UygXgH
LuSy1yG0Qep0exG0JN0eKrrLNBcba6mu7w+rQLJ8lgHA35qcD7ZPoQsLgwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFF7OmZF+jfa5BDDbCOy0Uv5y0e5WMB8GA1UdIwQY
MBaAFPsf9N8u/GnswZLqWu/Xs7l/WAkBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14XzAzeTc4YWV6Qmt1cGE3OWV6dVg5WUNRRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvNjc5ZTE1LWUxYTMtNDJiNS05Yjdi
LTNmMWMwMjNhZGEwNS8xLzEteF8wM3k3OGFlekJrdXBhNzllenVYOVlDUUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RiLzY3OWUxNS1lMWEzLTQyYjUtOWI3Yi0zZjFjMDIzYWRh
MDUvMS8xLXhfMDN5NzhhZXpCa3VwYTc5ZXp1WDlZQ1FFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPEe
FjfC0VLGao8BRap+PYQBrtMr5zcEagSNWJgbiVhvaSViXMfMzSo3w2drumptGJTq
UAynd++EUZJpAZNnLTVm8TL5Tlxf2P8mr7kzIzoZgauLbrBt3u78GfWpbL9ZpXjD
hfoWRdUbNF7GVB8eKbDV1KdhbZuBlX/odbL4uOa0cWLmOiHG/xG7z9Ko1jasZoHw
YsUUOVtJv03wCjZC8NJkcEVKokThr64ItqPJHbmvzX4uKiLynP0yy3cSQOPWbkM5
aAG4X7vdYhuC9CZEwP/hQa0cPiYqtdBWX8lJo8XW0XBXFDGgBps/IGUmXkoI+uUh
l4YsjC0zUaZchV+6dg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:35:20 2026 by rpki-client