Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
File:                     b5jR-Z44M-9AHUY0juyLdSCIxV0.mft (raw, json)
Hash identifier:          xLYXtv0hVGtHmZq33TXCLr+LDjoOaaqsWZKmX7/aP9M=
Subject key identifier:   76:D0:80:EC:BC:86:92:44:1B:E3:27:95:C8:AC:8E:23:44:AF:70:92
Authority key identifier: 6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
Certificate issuer:       /CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Certificate serial:       01A04B08C78CFF65B2266405F3D340290CCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
Manifest number:          1A29
Signing time:             Sat 29 Aug 2026 01:01:01 +0000
Manifest this update:     Sat 29 Aug 2026 01:01:01 +0000
Manifest next update:     Sun 30 Aug 2026 01:01:01 +0000
Files and hashes:         1: 2SyshcQ_2gWj_23t_m2U7jgbj_U.roa (hash: lRMQZe3R/FYfC5kwvS4qJ8O7HGdmAd7kegNyR4eFVYA=)
                          2: _y0shl9XbGKewggiWt9Wky_Qe2c.roa (hash: dGQMNAtm8KXyPpa13qK35PC1V0DcW3wrBLCGs16+jBY=)
                          3: b5jR-Z44M-9AHUY0juyLdSCIxV0.crl (hash: G2/WAxwrw7N3sLhML54RgB6SKhaL4SBkv4sgx/h8z5M=)
                          4: zgnhZA2Ms9zFROsM4W_krWdJUrU.roa (hash: ThJPP+0mzyZhXlrvZaDTuUtA3VUBiiIjG2csyaedK3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Aug 2026 23:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:4b:08:c7:8c:ff:65:b2:26:64:05:f3:d3:40:29:0c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f98d1f99e3833ef401d46348eec8b752088c55d
        Validity
            Not Before: Aug 29 01:01:01 2026 GMT
            Not After : Aug 30 01:01:01 2026 GMT
        Subject: CN=76d080ecbc8692441be32795c8ac8e2344af7092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a9:25:02:55:27:5c:a1:19:3b:9d:72:48:bd:
                    86:d6:76:a9:23:26:02:10:17:1b:7c:12:06:fe:67:
                    bf:ae:f5:3f:f2:32:7f:e2:35:d0:c2:33:a0:40:77:
                    f2:1e:f8:c2:e9:6e:7e:e7:24:f8:ce:14:25:62:68:
                    00:0f:11:97:8c:7e:10:12:55:c9:da:a3:88:d7:4a:
                    aa:53:e3:06:79:6a:16:38:96:36:cf:8e:fc:ae:77:
                    ad:b7:f9:f2:59:98:da:9a:d6:a6:f3:db:2c:28:b8:
                    cc:a7:da:d8:77:bd:4a:04:ba:6f:89:77:7d:10:d3:
                    8e:c5:29:85:c6:8f:b5:9c:fb:6d:ad:5b:b0:32:2a:
                    9a:54:3c:44:6d:25:bb:5c:a9:12:87:f2:02:7a:75:
                    a2:d0:a4:1a:9b:58:4c:c7:82:ff:55:8d:4c:a4:65:
                    3f:7f:6f:ef:eb:a0:24:7b:f7:1b:14:38:4c:a6:c9:
                    df:86:8c:39:9e:fe:0a:6c:e3:5b:98:4a:a3:36:8c:
                    e3:79:93:e6:36:18:ba:1e:d3:4b:92:e1:00:66:2c:
                    c3:7d:ad:97:3a:31:30:44:ac:24:7d:2d:29:35:3f:
                    85:e2:e9:02:0c:d1:fb:b7:07:56:21:28:c7:e2:90:
                    28:c8:25:39:42:20:2e:8f:40:2c:c9:f3:f1:17:52:
                    1e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D0:80:EC:BC:86:92:44:1B:E3:27:95:C8:AC:8E:23:44:AF:70:92
            X509v3 Authority Key Identifier:
                keyid:6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:39:a6:46:2e:2f:f9:69:7c:52:dd:bf:c7:dd:24:6d:89:d3:
         e9:1b:c9:76:34:04:d7:8a:58:ea:00:f6:f9:3f:7c:c0:75:c3:
         a4:80:fa:8f:47:a0:34:a4:35:0c:f7:67:89:4d:ef:ec:9a:06:
         99:8a:bf:d4:bc:a4:d3:e7:2a:e8:e0:26:94:c7:c3:f3:e2:dd:
         71:17:8a:27:2e:af:8c:70:17:27:26:58:2c:18:f3:c1:41:c7:
         a4:e8:89:a6:98:a7:7f:53:f8:2c:fb:1a:d5:51:21:e5:3a:39:
         89:b3:de:f2:68:3b:50:c7:76:5d:19:ed:68:b1:34:1b:1e:0f:
         45:76:4e:27:bf:b6:01:ae:2d:59:80:03:1a:a1:28:55:22:d2:
         20:11:70:01:ec:52:10:20:4f:76:12:76:a5:15:0c:a3:ca:2d:
         91:e5:2a:c0:36:62:02:d1:76:38:0a:7c:c2:a1:65:76:4b:bf:
         82:b0:60:00:fb:28:4c:1a:d5:cf:57:c0:3a:e0:cb:9e:07:e9:
         b5:b3:f9:34:1d:93:45:2a:f3:7b:76:c1:64:4e:d6:c9:3c:e3:
         e7:e5:b7:75:90:5c:72:49:10:84:f8:ed:6a:ca:92:bc:35:45:
         38:e3:35:72:49:41:fd:18:f2:6f:a7:96:74:f6:47:3b:e8:1a:
         d7:bd:37:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBLCMeM/2WyJmQF89NAKQzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOThkMWY5OWUzODMzZWY0MDFkNDYzNDhlZWM4Yjc1MjA4
OGM1NWQwHhcNMjYwODI5MDEwMTAxWhcNMjYwODMwMDEwMTAxWjAzMTEwLwYDVQQD
Eyg3NmQwODBlY2JjODY5MjQ0MWJlMzI3OTVjOGFjOGUyMzQ0YWY3MDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqklAlUnXKEZO51ySL2G1napIyYC
EBcbfBIG/me/rvU/8jJ/4jXQwjOgQHfyHvjC6W5+5yT4zhQlYmgADxGXjH4QElXJ
2qOI10qqU+MGeWoWOJY2z478rnett/nyWZjamtam89ssKLjMp9rYd71KBLpviXd9
ENOOxSmFxo+1nPttrVuwMiqaVDxEbSW7XKkSh/ICenWi0KQam1hMx4L/VY1MpGU/
f2/v66Ake/cbFDhMpsnfhow5nv4KbONbmEqjNozjeZPmNhi6HtNLkuEAZizDfa2X
OjEwRKwkfS0pNT+F4ukCDNH7twdWISjH4pAoyCU5QiAuj0AsyfPxF1IeDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbQgOy8hpJEG+MnlcisjiNEr3CSMB8GA1UdIwQY
MBaAFG+Y0fmeODPvQB1GNI7si3UgiMVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVqUi1aNDRNLTlBSFVZMGp1eUxkU0NJeFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zYzA4ZjEtOTZlMC00YzU0LWE0NjYt
MDdkNGIxMTVjYzgyLzEvYjVqUi1aNDRNLTlBSFVZMGp1eUxkU0NJeFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zYzA4ZjEtOTZlMC00YzU0LWE0NjYtMDdkNGIxMTVjYzgy
LzEvYjVqUi1aNDRNLTlBSFVZMGp1eUxkU0NJeFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzmmRi4v
+Wl8Ut2/x90kbYnT6RvJdjQE14pY6gD2+T98wHXDpID6j0egNKQ1DPdniU3v7JoG
mYq/1Lyk0+cq6OAmlMfD8+LdcReKJy6vjHAXJyZYLBjzwUHHpOiJppinf1P4LPsa
1VEh5To5ibPe8mg7UMd2XRntaLE0Gx4PRXZOJ7+2Aa4tWYADGqEoVSLSIBFwAexS
ECBPdhJ2pRUMo8otkeUqwDZiAtF2OAp8wqFldku/grBgAPsoTBrVz1fAOuDLngfp
tbP5NB2TRSrze3bBZE7WyTzj5+W3dZBcckkQhPjtasqSvDVFOOM1cklB/Rjyb6eW
dPZHO+ga1703fA==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:30:52 2026 by rpki-client