Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
File:                     RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json)
Hash identifier:          PzMAGx/t7G0iIy7JG+XTBMqLV2OwUrdGapXujX2TfGA=
Subject key identifier:   86:41:24:48:C4:C9:F5:72:83:93:71:5D:D2:5C:79:0B:6A:D4:00:23
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Certificate issuer:       /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial:       01A06F1519AA189E22D76B11999E218C5D1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
Manifest number:          1A3D
Signing time:             Sat 05 Sep 2026 01:00:48 +0000
Manifest this update:     Sat 05 Sep 2026 01:00:48 +0000
Manifest next update:     Sun 06 Sep 2026 01:00:48 +0000
Files and hashes:         1: 3gIp0do7jiNRekvTGYYcxp0N4KQ.asa (hash: NdEXhwinGvt8QXFqMCRPd1EsUHvL+9wNCdKJKLs61vs=)
                          2: 99lIgCZ8a0ei-5wRBXuee2SsGpY.roa (hash: 1ppSKjyGESECn+t5RQboX3iN+5A+rZBrqwtQSTJrj4A=)
                          3: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: OVl9r5s/BXEruHfSj1O5/6kdjmfN3/nq7xUlXFijl4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:15:19:aa:18:9e:22:d7:6b:11:99:9e:21:8c:5d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
        Validity
            Not Before: Sep  5 01:00:48 2026 GMT
            Not After : Sep  6 01:00:48 2026 GMT
        Subject: CN=86412448c4c9f5728393715dd25c790b6ad40023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ba:20:38:03:95:0a:f2:3b:4a:1c:16:2b:01:
                    cc:05:5b:c5:b2:d7:b6:3c:92:15:ba:fe:f4:11:56:
                    c8:d3:d4:73:ad:5f:d5:ea:f8:75:c7:6f:19:57:8e:
                    cf:c4:6d:60:cd:fc:7b:84:cc:74:34:62:9b:f7:59:
                    dc:c8:df:12:72:c5:49:d2:2d:69:a0:8a:b8:dd:c3:
                    a1:6a:73:ee:14:1d:cb:78:3e:e5:a9:d6:f5:6b:5f:
                    93:25:8d:6a:4f:6b:ff:b0:83:94:17:c1:73:1e:d2:
                    0f:52:a3:64:7b:44:e8:0b:05:97:2a:32:9e:ea:d0:
                    0d:22:2a:0f:14:be:1e:5b:c3:b0:2f:ca:d9:59:9c:
                    d2:d6:e5:8c:e2:d3:c5:c2:f6:0c:fd:8b:7c:e2:38:
                    da:ef:2f:3c:fc:3a:0f:0f:ee:20:64:7e:5c:64:da:
                    31:7b:e3:1a:4d:d4:77:34:a8:49:07:34:f9:d7:00:
                    7b:72:f9:ed:8c:48:fc:f1:23:00:96:ac:46:dd:af:
                    0c:2b:f6:c3:a4:f1:06:9d:7d:1f:00:7b:e0:d2:d1:
                    1f:8e:b6:25:3f:93:17:b7:d0:ef:4d:d5:06:1c:3d:
                    c3:70:fd:bb:43:c0:c1:55:c2:85:e7:34:55:83:ba:
                    30:64:f4:00:09:39:ee:5b:0d:1b:36:aa:ba:e9:09:
                    89:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:41:24:48:C4:C9:F5:72:83:93:71:5D:D2:5C:79:0B:6A:D4:00:23
            X509v3 Authority Key Identifier:
                keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:79:77:04:69:40:ab:33:b1:cf:9a:51:ac:ac:b6:85:3c:50:
         9c:b5:8e:53:6a:51:b7:ac:a4:37:13:1f:52:51:a8:63:44:d5:
         1a:0f:17:f8:19:5c:1b:0d:d0:99:77:3c:e1:53:13:39:4a:7e:
         4e:bd:73:c8:d9:8f:47:32:15:71:50:8d:74:25:1c:52:5b:89:
         33:f5:70:06:cf:67:2b:fa:ac:be:e4:13:9b:60:af:64:59:99:
         94:12:8f:17:be:a7:d8:35:41:e3:ea:3e:85:72:d4:8e:3f:90:
         76:19:d9:d8:74:3f:5d:2c:5d:9b:a2:19:18:a9:0e:ab:c0:b4:
         ce:00:ca:b4:0e:23:d5:b8:82:2d:c4:fb:71:1d:07:bd:76:e9:
         b3:8a:64:9a:e8:55:5d:28:21:b2:95:e3:aa:75:a9:c9:a1:b0:
         cf:22:67:85:46:ee:bf:ce:6e:bc:f5:65:04:18:93:90:a1:37:
         02:c9:3c:49:cf:18:b5:de:53:a3:75:4e:c2:1e:4d:f0:36:a0:
         c2:ea:4e:3a:1a:6e:a0:da:22:62:91:dd:af:aa:49:39:b9:99:
         4b:38:bf:d5:aa:48:0b:92:3e:0c:84:8c:cc:e0:ed:6b:4e:ac:
         f4:5e:d9:55:19:6d:4a:c3:77:79:a6:4b:08:a5:23:4a:84:2e:
         ac:72:f3:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvFRmqGJ4i12sRmZ4hjF0fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OTFiZmQzY2ZlYzVhMTEwOGYxYzg2ODU0NzY0ZTJiOTAz
ZDc4ODgwHhcNMjYwOTA1MDEwMDQ4WhcNMjYwOTA2MDEwMDQ4WjAzMTEwLwYDVQQD
Eyg4NjQxMjQ0OGM0YzlmNTcyODM5MzcxNWRkMjVjNzkwYjZhZDQwMDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bogOAOVCvI7ShwWKwHMBVvFste2
PJIVuv70EVbI09RzrV/V6vh1x28ZV47PxG1gzfx7hMx0NGKb91ncyN8ScsVJ0i1p
oIq43cOhanPuFB3LeD7lqdb1a1+TJY1qT2v/sIOUF8FzHtIPUqNke0ToCwWXKjKe
6tANIioPFL4eW8OwL8rZWZzS1uWM4tPFwvYM/Yt84jja7y88/DoPD+4gZH5cZNox
e+MaTdR3NKhJBzT51wB7cvntjEj88SMAlqxG3a8MK/bDpPEGnX0fAHvg0tEfjrYl
P5MXt9DvTdUGHD3DcP27Q8DBVcKF5zRVg7owZPQACTnuWw0bNqq66QmJ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZBJEjEyfVyg5NxXdJceQtq1AAjMB8GA1UdIwQY
MBaAFEaRv9PP7FoRCPHIaFR2TiuQPXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81ZWE1ZjAtMDJkNy00YjBmLWIwYjIt
MWI4NjE3N2FmMGRkLzEvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81ZWE1ZjAtMDJkNy00YjBmLWIwYjItMWI4NjE3N2FmMGRk
LzEvUnBHXzA4X3NXaEVJOGNob1ZIWk9LNUE5ZUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHl3BGlA
qzOxz5pRrKy2hTxQnLWOU2pRt6ykNxMfUlGoY0TVGg8X+BlcGw3QmXc84VMTOUp+
Tr1zyNmPRzIVcVCNdCUcUluJM/VwBs9nK/qsvuQTm2CvZFmZlBKPF76n2DVB4+o+
hXLUjj+QdhnZ2HQ/XSxdm6IZGKkOq8C0zgDKtA4j1biCLcT7cR0HvXbps4pkmuhV
XSghspXjqnWpyaGwzyJnhUbuv85uvPVlBBiTkKE3Ask8Sc8Ytd5To3VOwh5N8Dag
wupOOhpuoNoiYpHdr6pJObmZSzi/1apIC5I+DISMzODta06s9F7ZVRltSsN3eaZL
CKUjSoQurHLzMA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:08:32 2026 by rpki-client