Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
File:                     00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json)
Hash identifier:          GX1H4J0IT+f+/Vz94NjFs+KbMSOwGHdzSIAJLM+B3uI=
Subject key identifier:   9F:88:DA:B8:65:36:FA:8A:FB:2F:18:7B:22:7B:A4:DD:61:72:72:07
Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
Certificate issuer:       /CN=d346e5d46291f6bc53b965865051ba399749eb2d
Certificate serial:       01A03F3B9123DB6A3508675DC4CCE1961958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
Manifest number:          05C9
Signing time:             Wed 26 Aug 2026 18:01:03 +0000
Manifest this update:     Wed 26 Aug 2026 18:01:03 +0000
Manifest next update:     Thu 27 Aug 2026 18:01:03 +0000
Files and hashes:         1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: tpddtUqURqD3i5kvtCsBO+5NyUKFJuB7qMmn/1K6wCo=)
                          2: Fb3aBBcJ_RU5gPWUY71udWZuQ_o.roa (hash: VnpK440llW/db9ofXXkT+hMi7FL519qaQ5nOCrY4q+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 18:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:3b:91:23:db:6a:35:08:67:5d:c4:cc:e1:96:19:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d
        Validity
            Not Before: Aug 26 18:01:03 2026 GMT
            Not After : Aug 27 18:01:03 2026 GMT
        Subject: CN=9f88dab86536fa8afb2f187b227ba4dd61727207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:e6:6f:97:37:f8:7f:b8:1c:2e:69:82:46:
                    f9:56:3a:53:46:45:ac:d8:6a:cd:7e:a8:0b:e0:16:
                    23:94:e6:87:6a:41:63:8d:9b:2b:b0:36:fc:65:47:
                    ef:92:c6:e6:98:7c:6b:94:5c:e2:b6:39:1a:0c:69:
                    b0:0e:a3:53:c9:ec:43:78:82:53:5e:2e:4d:8f:df:
                    ae:83:71:73:cf:0b:76:7f:5a:ea:74:26:68:5d:a9:
                    e0:f1:d5:a7:de:5e:b4:b7:bc:ff:4d:5b:db:26:d4:
                    be:bd:83:88:c3:7a:46:6b:bc:d9:c7:a9:17:b2:bc:
                    fb:2f:1b:86:c7:66:6a:22:7b:d8:23:1f:00:b0:af:
                    c1:ac:e0:01:92:c8:ed:82:01:39:69:52:8f:9f:9c:
                    56:1c:9f:e2:cf:28:ea:3c:9c:13:19:c6:00:c1:b2:
                    88:fc:47:a1:00:81:7b:6e:71:b0:a1:4e:f1:68:24:
                    73:ee:38:af:ed:0d:6e:20:ff:9d:aa:d7:46:5a:04:
                    b3:73:1a:1f:1b:3d:00:7d:8a:ed:4e:92:ff:6c:79:
                    b4:e0:18:fa:a1:09:2c:a5:4d:23:8c:05:16:bb:a1:
                    d5:9c:27:cf:03:a6:a3:84:b9:05:0e:c8:24:cb:bc:
                    5d:a4:85:2f:12:1c:4e:44:b9:44:c0:6c:3d:99:7b:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:88:DA:B8:65:36:FA:8A:FB:2F:18:7B:22:7B:A4:DD:61:72:72:07
            X509v3 Authority Key Identifier:
                keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:fe:a4:11:21:e4:eb:6f:b1:ca:bd:b5:9f:6e:50:d9:d5:c2:
         d9:4d:6f:36:6d:bf:de:18:d7:a1:f2:38:bb:87:a5:5c:00:ce:
         72:32:dc:db:4c:68:e4:cf:c6:12:3b:15:ea:31:84:66:11:a5:
         97:23:ce:08:8c:b3:39:98:eb:c7:7f:a5:ad:42:63:fb:e4:01:
         53:bd:ef:f8:57:df:bd:7f:50:49:07:4b:e5:3d:65:a5:53:d3:
         88:78:49:c1:65:2d:b4:a5:43:04:fb:12:de:a8:8c:55:66:3c:
         21:f3:d9:55:23:b0:16:f0:6d:6e:2b:8d:23:0f:9c:33:21:75:
         17:61:72:d0:9e:f0:67:15:15:d0:ee:4c:d4:ec:75:82:ca:a2:
         fc:1c:be:4b:63:aa:e8:b2:39:9e:08:cb:7a:ff:3d:43:56:e5:
         e7:fc:f6:1a:d2:ef:c3:15:01:ed:88:c6:aa:8b:d1:77:24:bd:
         cc:5c:55:c1:b5:99:20:9e:92:1f:7f:4b:50:b9:6b:40:4a:f2:
         a9:29:6f:11:20:06:9f:17:4b:c0:66:ae:73:05:df:bb:a3:27:
         5a:4c:9d:3e:3c:d4:6b:8c:46:28:33:ff:25:40:d7:ba:16:bb:
         82:85:21:d3:a0:56:f2:f9:16:1e:2d:bc:90:8e:25:d3:57:78:
         cf:9a:3c:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/O5Ej22o1CGddxMzhlhlYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDZlNWQ0NjI5MWY2YmM1M2I5NjU4NjUwNTFiYTM5OTc0
OWViMmQwHhcNMjYwODI2MTgwMTAzWhcNMjYwODI3MTgwMTAzWjAzMTEwLwYDVQQD
Eyg5Zjg4ZGFiODY1MzZmYThhZmIyZjE4N2IyMjdiYTRkZDYxNzI3MjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPrmb5c3+H+4HC5pgkb5VjpTRkWs
2GrNfqgL4BYjlOaHakFjjZsrsDb8ZUfvksbmmHxrlFzitjkaDGmwDqNTyexDeIJT
Xi5Nj9+ug3Fzzwt2f1rqdCZoXang8dWn3l60t7z/TVvbJtS+vYOIw3pGa7zZx6kX
srz7LxuGx2ZqInvYIx8AsK/BrOABksjtggE5aVKPn5xWHJ/izyjqPJwTGcYAwbKI
/EehAIF7bnGwoU7xaCRz7jiv7Q1uIP+dqtdGWgSzcxofGz0AfYrtTpL/bHm04Bj6
oQkspU0jjAUWu6HVnCfPA6ajhLkFDsgky7xdpIUvEhxORLlEwGw9mXtqyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+I2rhlNvqK+y8YeyJ7pN1hcnIHMB8GA1UdIwQY
MBaAFNNG5dRikfa8U7llhlBRujmXSestMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83YzhlOWMtZWM0OC00YTkwLTg2ZTUt
M2U5NDNmOTdmZjMxLzEvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83YzhlOWMtZWM0OC00YTkwLTg2ZTUtM2U5NDNmOTdmZjMx
LzEvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFf6kESHk
62+xyr21n25Q2dXC2U1vNm2/3hjXofI4u4elXADOcjLc20xo5M/GEjsV6jGEZhGl
lyPOCIyzOZjrx3+lrUJj++QBU73v+FffvX9QSQdL5T1lpVPTiHhJwWUttKVDBPsS
3qiMVWY8IfPZVSOwFvBtbiuNIw+cMyF1F2Fy0J7wZxUV0O5M1Ox1gsqi/By+S2Oq
6LI5ngjLev89Q1bl5/z2GtLvwxUB7YjGqovRdyS9zFxVwbWZIJ6SH39LULlrQEry
qSlvESAGnxdLwGaucwXfu6MnWkydPjzUa4xGKDP/JUDXuha7goUh06BW8vkWHi28
kI4l01d4z5o8nw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:21 2026 by rpki-client