Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
File:                     F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft (raw, json)
Hash identifier:          b8CHscfstoMFTh1ozaL2jAkOY5Hh90FfZm9AdJhKLes=
Subject key identifier:   BA:AF:84:B7:4D:F7:7C:58:3A:0D:34:E0:04:A7:84:1F:F6:EC:B0:48
Authority key identifier: 17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3
Certificate issuer:       /CN=179661a164d2d517ea7677fb229cafa19eba97f3
Certificate serial:       01A06EA7AD310E8D73EF95C0B09256257581
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
Manifest number:          1A3A
Signing time:             Fri 04 Sep 2026 23:01:17 +0000
Manifest this update:     Fri 04 Sep 2026 23:01:17 +0000
Manifest next update:     Sat 05 Sep 2026 23:01:17 +0000
Files and hashes:         1: F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl (hash: R5t/VwRoWOThyQIFh/h7zIiq0vpVtZBgxAkvJOlVEfA=)
                          2: b-TOc8izqpc5msF8KPMLjpjPE_Q.roa (hash: p/3L6t3Nc/a548YZku/GmrhmMy5Eya4d57uhNk9tYCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:ad:31:0e:8d:73:ef:95:c0:b0:92:56:25:75:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179661a164d2d517ea7677fb229cafa19eba97f3
        Validity
            Not Before: Sep  4 23:01:17 2026 GMT
            Not After : Sep  5 23:01:17 2026 GMT
        Subject: CN=baaf84b74df77c583a0d34e004a7841ff6ecb048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:e9:f0:6a:d3:7e:e4:ed:3b:f4:d2:94:23:
                    24:a5:cb:a3:d6:b4:14:70:c3:5e:45:86:b4:3f:e9:
                    05:62:a9:6e:de:71:d2:3d:93:1a:75:d8:3f:63:17:
                    ee:89:d0:6b:32:f4:87:ea:88:b7:7a:92:29:8a:25:
                    53:ab:6c:23:7a:f6:3d:1a:10:77:1f:57:12:4c:2c:
                    51:26:ce:8b:d1:54:24:2a:73:f2:80:58:6d:af:ff:
                    5c:56:e1:af:9b:d7:9d:79:af:b1:1b:5e:33:6e:34:
                    8b:a0:a9:87:37:f0:a9:7d:e9:59:72:0c:d2:fd:98:
                    bc:c2:0a:62:2f:a3:94:ad:eb:ce:86:19:55:7f:d7:
                    10:92:da:17:39:6b:92:72:c1:87:a8:e0:75:db:97:
                    4f:a1:db:4a:a4:a6:32:e6:d7:df:9f:9a:68:15:46:
                    17:bf:df:2f:6d:bb:e8:17:a1:7a:39:0c:29:eb:ed:
                    1b:9c:8d:82:bc:1f:f1:99:62:bc:24:5c:ba:22:d3:
                    82:04:9d:5a:85:05:0d:bf:1a:b4:bb:01:ea:dd:1d:
                    63:6d:0b:36:e2:d3:b9:23:31:d9:27:aa:c4:44:b3:
                    c5:48:15:a3:a3:03:09:7f:9f:29:c7:fa:14:ee:3e:
                    e6:8a:23:25:03:65:bd:64:0d:54:57:25:22:ac:25:
                    77:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AF:84:B7:4D:F7:7C:58:3A:0D:34:E0:04:A7:84:1F:F6:EC:B0:48
            X509v3 Authority Key Identifier:
                keyid:17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e9:94:7d:af:db:d9:04:dd:72:82:08:f2:4b:6f:5a:57:c1:
         b1:e0:0c:0a:3c:f2:05:14:4d:f6:f0:66:25:26:f8:40:fe:60:
         19:05:69:2a:90:ad:e9:91:83:e2:3d:14:e1:cf:8b:c0:73:b3:
         0f:b2:2a:ce:59:7d:da:9b:c5:1d:0a:22:d8:13:69:00:99:6d:
         04:a5:1d:6f:9d:90:74:e8:a1:31:78:05:5d:16:d9:22:bf:28:
         ba:c0:86:eb:75:df:cc:73:51:65:ac:73:42:cc:26:d7:53:5a:
         a6:e4:4b:17:ba:51:8f:d3:54:cc:fc:94:8e:67:5e:94:01:7a:
         4b:07:d0:35:9f:b6:21:df:03:a1:f4:d9:18:7c:c5:53:d7:4a:
         0f:1a:85:16:d5:c3:45:97:91:c8:71:fc:57:0b:69:b7:6d:21:
         05:5b:39:fb:65:e4:44:bb:68:60:17:79:7f:a6:fb:18:86:bd:
         a9:8b:f5:10:35:c6:6d:19:9e:13:72:95:0e:f2:c1:a5:c5:13:
         1d:a0:86:52:4d:b4:25:be:d6:6d:e2:99:a6:48:b1:1c:77:e3:
         ba:db:44:18:4a:0c:98:90:96:66:ea:c0:20:26:bf:d3:bb:0e:
         e6:4a:2b:42:57:fb:4a:65:66:ab:1c:3c:19:55:62:3f:fb:72:
         f7:90:58:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBup60xDo1z75XAsJJWJXWBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTY2MWExNjRkMmQ1MTdlYTc2NzdmYjIyOWNhZmExOWVi
YTk3ZjMwHhcNMjYwOTA0MjMwMTE3WhcNMjYwOTA1MjMwMTE3WjAzMTEwLwYDVQQD
EyhiYWFmODRiNzRkZjc3YzU4M2EwZDM0ZTAwNGE3ODQxZmY2ZWNiMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX3p8GrTfuTtO/TSlCMkpcuj1rQU
cMNeRYa0P+kFYqlu3nHSPZMaddg/YxfuidBrMvSH6oi3epIpiiVTq2wjevY9GhB3
H1cSTCxRJs6L0VQkKnPygFhtr/9cVuGvm9edea+xG14zbjSLoKmHN/CpfelZcgzS
/Zi8wgpiL6OUrevOhhlVf9cQktoXOWuScsGHqOB125dPodtKpKYy5tffn5poFUYX
v98vbbvoF6F6OQwp6+0bnI2CvB/xmWK8JFy6ItOCBJ1ahQUNvxq0uwHq3R1jbQs2
4tO5IzHZJ6rERLPFSBWjowMJf58px/oU7j7miiMlA2W9ZA1UVyUirCV38wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqvhLdN93xYOg004ASnhB/27LBIMB8GA1UdIwQY
MBaAFBeWYaFk0tUX6nZ3+yKcr6GeupfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mODQwMDEtNjY0ZC00OTk4LThjMzUt
ZTRmMmUwYjIzNTBmLzEvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mODQwMDEtNjY0ZC00OTk4LThjMzUtZTRmMmUwYjIzNTBm
LzEvRjVaaG9XVFMxUmZxZG5mN0lweXZvWjY2bF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOmUfa/b
2QTdcoII8ktvWlfBseAMCjzyBRRN9vBmJSb4QP5gGQVpKpCt6ZGD4j0U4c+LwHOz
D7Iqzll92pvFHQoi2BNpAJltBKUdb52QdOihMXgFXRbZIr8ousCG63XfzHNRZaxz
Qswm11NapuRLF7pRj9NUzPyUjmdelAF6SwfQNZ+2Id8DofTZGHzFU9dKDxqFFtXD
RZeRyHH8Vwtpt20hBVs5+2XkRLtoYBd5f6b7GIa9qYv1EDXGbRmeE3KVDvLBpcUT
HaCGUk20Jb7WbeKZpkixHHfjuttEGEoMmJCWZurAICa/07sO5korQlf7SmVmqxw8
GVViP/ty95BYkA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:46:59 2026 by rpki-client