Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
File:                     gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json)
Hash identifier:          mDJKP0428LGS0dBO3fpSrmKUdapbOWcIFQwMzljnS8M=
Subject key identifier:   EB:A1:0C:C4:78:2C:00:78:02:5A:7C:A0:77:A3:E7:41:B8:8E:54:78
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Certificate issuer:       /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial:       01A08AC3929A6CF137CAFC29D9581FF42A1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
Manifest number:          156B
Signing time:             Thu 10 Sep 2026 10:01:07 +0000
Manifest this update:     Thu 10 Sep 2026 10:01:07 +0000
Manifest next update:     Fri 11 Sep 2026 10:01:07 +0000
Files and hashes:         1: 3CKrmM_5W9qGNwDPT707OalHLD8.roa (hash: 2NaLVNwjCsDKmG9seV4wmBk1JF4GhywwWN0SoFKjTJk=)
                          2: 8QowToFWOkypHOOmOlay9H9m3cI.roa (hash: FEurkgF3+aXJgB8qUw5KyF+e2MK/WZfbCLqpt4IVc9o=)
                          3: FV-pMv8EGTaMa6CCbtYT2e9XnxQ.roa (hash: oCIb8FIypKIz4AB8jOeyTjsmMStjtBdK3bvDo7a5vjg=)
                          4: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: vgifRTWo6OUfQOl8avCrbgMyBf4dK3o2yUpqKmpmOxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 10:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:92:9a:6c:f1:37:ca:fc:29:d9:58:1f:f4:2a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
        Validity
            Not Before: Sep 10 10:01:07 2026 GMT
            Not After : Sep 11 10:01:07 2026 GMT
        Subject: CN=eba10cc4782c0078025a7ca077a3e741b88e5478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:06:ce:d7:2d:33:c4:f9:d7:50:9e:e0:af:
                    43:c3:7d:63:00:89:6b:0b:4c:f5:36:c5:48:4f:c6:
                    15:5f:a3:d0:51:f9:cb:f0:a0:ae:65:76:37:b4:dc:
                    41:57:ae:a6:42:50:7e:92:34:b2:e9:8a:8c:c9:d7:
                    2d:0c:63:31:3d:9d:72:22:c7:77:b8:a0:fc:d2:a6:
                    68:71:62:8e:ce:dd:df:64:55:6b:0d:2d:a4:17:0d:
                    a2:dd:ba:b5:8b:21:63:05:75:04:a4:2d:12:91:39:
                    7a:4b:ec:80:fd:49:3a:21:60:05:73:2c:29:6b:13:
                    e0:5f:42:b5:d6:a2:76:91:28:60:d1:fb:76:50:8b:
                    10:3c:f1:03:1c:1f:44:8c:59:55:6d:c9:04:57:dd:
                    08:fe:09:00:38:03:20:d4:4d:f7:22:10:e1:35:13:
                    81:88:aa:6d:10:48:0e:ec:dd:ac:0c:7e:71:d9:93:
                    e4:4b:88:54:14:fe:1c:e5:f9:26:a2:a6:a0:23:b9:
                    cd:9d:ab:0c:e0:05:e1:7e:eb:93:40:92:1d:d5:40:
                    e4:fc:a6:27:06:99:08:4b:fd:93:01:6f:57:6d:d1:
                    d6:01:f5:57:f8:69:2d:c2:cc:70:12:9b:65:55:62:
                    65:7d:6b:12:b8:05:07:d2:3e:f4:21:4f:ff:9c:75:
                    f1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A1:0C:C4:78:2C:00:78:02:5A:7C:A0:77:A3:E7:41:B8:8E:54:78
            X509v3 Authority Key Identifier:
                keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ef:ab:55:20:18:51:0a:7e:c9:22:d6:bf:67:fe:e1:42:65:
         68:35:07:00:89:99:a0:2f:84:78:4f:49:2c:bc:1f:a2:ec:43:
         36:69:81:7e:82:a4:6c:60:6c:9b:15:07:31:45:7e:79:17:bd:
         ba:2b:d1:25:56:1c:a6:5c:73:00:47:89:d2:0d:d1:a9:df:ea:
         3b:1c:d7:01:6b:a0:d1:1b:91:e8:b6:72:d1:75:d9:b7:19:8f:
         8d:28:5f:c7:c8:a9:a0:b9:93:c6:12:77:b0:9a:48:a0:c2:b8:
         75:08:19:09:46:71:82:f0:0a:e1:8a:6c:b0:e8:15:63:c1:3a:
         48:f2:0d:c1:58:bd:c4:65:50:76:64:de:cd:58:fd:f3:8f:60:
         d6:04:cd:49:d0:6a:50:96:b5:69:90:7b:34:27:00:70:56:42:
         ac:51:29:b5:81:cc:65:28:99:cd:15:c5:71:4a:4e:11:2f:f6:
         2e:9b:3a:65:9f:a8:3c:f8:83:15:6d:dd:0d:89:22:d1:9c:2f:
         62:54:6b:55:72:fc:9d:32:a2:41:43:69:55:d1:75:0e:9b:d8:
         92:bf:87:f5:04:6b:9a:27:71:40:56:bb:0b:2e:a9:1d:a9:6b:
         40:d9:4a:08:de:34:f3:09:63:43:e2:03:dd:58:db:a2:04:41:
         90:42:fb:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKw5KabPE3yvwp2Vgf9CoaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNTA1MDRmNGIxNzc2ZTgwYjhhZDlmOGIzNTZlNjEzYjU4
NWIzNWEwHhcNMjYwOTEwMTAwMTA3WhcNMjYwOTExMTAwMTA3WjAzMTEwLwYDVQQD
EyhlYmExMGNjNDc4MmMwMDc4MDI1YTdjYTA3N2EzZTc0MWI4OGU1NDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MAGztctM8T511Ce4K9Dw31jAIlr
C0z1NsVIT8YVX6PQUfnL8KCuZXY3tNxBV66mQlB+kjSy6YqMydctDGMxPZ1yIsd3
uKD80qZocWKOzt3fZFVrDS2kFw2i3bq1iyFjBXUEpC0SkTl6S+yA/Uk6IWAFcywp
axPgX0K11qJ2kShg0ft2UIsQPPEDHB9EjFlVbckEV90I/gkAOAMg1E33IhDhNROB
iKptEEgO7N2sDH5x2ZPkS4hUFP4c5fkmoqagI7nNnasM4AXhfuuTQJId1UDk/KYn
BpkIS/2TAW9XbdHWAfVX+GktwsxwEptlVWJlfWsSuAUH0j70IU//nHXxhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuhDMR4LAB4Alp8oHej50G4jlR4MB8GA1UdIwQY
MBaAFIBQUE9LF3boC4rZ+LNW5hO1hbNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjIt
MDE0NGEzMjgyYTJlLzEvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjItMDE0NGEzMjgyYTJl
LzEvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAne+rVSAY
UQp+ySLWv2f+4UJlaDUHAImZoC+EeE9JLLwfouxDNmmBfoKkbGBsmxUHMUV+eRe9
uivRJVYcplxzAEeJ0g3Rqd/qOxzXAWug0RuR6LZy0XXZtxmPjShfx8ipoLmTxhJ3
sJpIoMK4dQgZCUZxgvAK4YpssOgVY8E6SPINwVi9xGVQdmTezVj9849g1gTNSdBq
UJa1aZB7NCcAcFZCrFEptYHMZSiZzRXFcUpOES/2Lps6ZZ+oPPiDFW3dDYki0Zwv
YlRrVXL8nTKiQUNpVdF1DpvYkr+H9QRrmidxQFa7Cy6pHalrQNlKCN408wljQ+ID
3VjbogRBkEL7Mw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:53:50 2026 by rpki-client