Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File:                     2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier:          HKTx+1bw7ihXHBnQDMPwvGmeT6bVtq2WZfsAMqYLtoM=
Subject key identifier:   F1:53:2C:B6:BC:85:5B:BE:8D:B6:D2:79:11:B9:A1:AD:0E:C5:0B:DE
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer:       /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial:       01A001DD1ADFC7990811DA50B3D334B186B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number:          1466
Signing time:             Fri 14 Aug 2026 20:01:02 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:02 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:02 +0000
Files and hashes:         1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: KmZ0Rfe7iI15DpWH3sDYrHffWI1xilEsVLRaD6q8UJo=)
                          2: 6XH2Ydc6wVPa8tkpc3SeHIdYsRQ.roa (hash: KSE+FxkNnAUXtMkOMt61+w2teTVIXjXxk/ACFJUvjq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:1a:df:c7:99:08:11:da:50:b3:d3:34:b1:86:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
        Validity
            Not Before: Aug 14 20:01:02 2026 GMT
            Not After : Aug 15 20:01:02 2026 GMT
        Subject: CN=f1532cb6bc855bbe8db6d27911b9a1ad0ec50bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:36:ff:fa:02:d3:81:3c:dc:85:a2:df:97:
                    47:95:9b:a6:34:05:2d:e3:0a:65:5f:60:1d:ec:ee:
                    de:f0:7b:09:ad:54:41:39:f1:4b:c9:94:3c:30:92:
                    be:c6:d8:41:6e:ac:87:3c:3b:90:a5:a1:53:0e:ed:
                    f7:78:1b:b3:d6:de:5b:3e:b1:38:ad:d4:37:6d:3f:
                    81:49:70:29:19:fc:88:e3:f8:c9:35:be:92:06:60:
                    aa:6a:c8:d3:0c:c8:60:e9:1d:fe:08:55:a7:3e:04:
                    da:1d:9a:ef:c6:5a:38:b6:5c:4e:ec:b1:be:b0:f5:
                    1a:55:bc:22:94:9f:da:66:1e:2c:72:5a:99:86:cb:
                    4e:4f:c4:97:de:7d:c2:ba:29:24:b3:28:82:46:9c:
                    4e:e3:f3:68:59:57:89:28:d0:67:24:0d:93:d0:c8:
                    77:39:e1:6f:07:dc:fa:da:fb:c6:84:7d:2d:ef:c4:
                    a3:3f:14:86:44:d0:90:b4:c5:d7:95:3b:bd:a8:31:
                    d7:79:d1:d4:79:ce:70:54:a9:a4:4e:1e:af:bc:93:
                    41:13:07:f0:6d:65:f7:32:8b:0f:18:8c:e7:9e:eb:
                    35:59:d1:f2:79:67:d3:75:aa:c8:5c:84:87:e4:6e:
                    fb:24:43:e8:95:c1:77:e0:1d:63:65:97:6e:6f:73:
                    59:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:53:2C:B6:BC:85:5B:BE:8D:B6:D2:79:11:B9:A1:AD:0E:C5:0B:DE
            X509v3 Authority Key Identifier:
                keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f2:3d:73:6a:e0:c0:86:b5:14:dc:a6:b2:6a:c9:3c:15:40:
         ea:ff:8f:ef:10:47:33:05:8d:e6:0d:ce:51:df:5d:58:7d:61:
         9b:0d:2a:3b:e4:15:ef:c4:51:fa:a6:b0:1d:91:1b:ee:c4:07:
         7f:76:f4:ee:0b:21:9d:dd:e3:c0:33:5d:71:04:17:1a:13:b4:
         38:ba:8b:59:45:e4:37:72:ec:c2:ac:d5:78:05:54:e7:ec:3d:
         56:7d:bb:3b:dd:1a:0f:8a:57:4e:4c:d8:9a:b2:2e:03:84:4f:
         cb:ff:b4:f4:a8:1d:22:a6:a9:7e:38:49:b1:76:15:0e:f3:ce:
         ae:e1:eb:ff:41:d5:aa:77:92:47:45:80:8b:49:c4:48:a7:e1:
         f3:66:75:e6:aa:48:e1:ff:19:6e:93:25:7b:3e:8c:86:b7:88:
         f5:b4:48:e3:02:24:47:15:82:b4:cf:20:7b:e4:b3:a9:e8:7c:
         0e:dd:eb:d2:3b:95:37:cc:0e:93:55:2c:57:dd:78:eb:6c:78:
         67:76:a9:1d:73:26:47:18:b8:5c:09:2b:d0:3d:f2:3a:22:3d:
         39:03:25:fd:1d:24:1d:e3:7c:03:43:25:94:4a:d1:d9:e9:e7:
         3c:9f:d9:8f:20:b3:8e:1e:23:17:a1:15:28:a0:76:c7:e3:eb:
         78:b1:6b:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3Rrfx5kIEdpQs9M0sYa1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTE1NjA5NjU2ZjA4ZjdhMjhkMjRiN2M0YmE5YjYzOWNh
MGIwMDkwHhcNMjYwODE0MjAwMTAyWhcNMjYwODE1MjAwMTAyWjAzMTEwLwYDVQQD
EyhmMTUzMmNiNmJjODU1YmJlOGRiNmQyNzkxMWI5YTFhZDBlYzUwYmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnw2//oC04E83IWi35dHlZumNAUt
4wplX2Ad7O7e8HsJrVRBOfFLyZQ8MJK+xthBbqyHPDuQpaFTDu33eBuz1t5bPrE4
rdQ3bT+BSXApGfyI4/jJNb6SBmCqasjTDMhg6R3+CFWnPgTaHZrvxlo4tlxO7LG+
sPUaVbwilJ/aZh4sclqZhstOT8SX3n3CuikksyiCRpxO4/NoWVeJKNBnJA2T0Mh3
OeFvB9z62vvGhH0t78SjPxSGRNCQtMXXlTu9qDHXedHUec5wVKmkTh6vvJNBEwfw
bWX3MosPGIznnus1WdHyeWfTdarIXISH5G77JEPolcF34B1jZZdub3NZFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFTLLa8hVu+jbbSeRG5oa0OxQveMB8GA1UdIwQY
MBaAFNiRVgllbwj3oo0kt8S6m2OcoLAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMGU4ZTAtNjhkMy00ODllLWJjZjMt
ZmU0YjVlMzQ2ODQwLzEvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yMGU4ZTAtNjhkMy00ODllLWJjZjMtZmU0YjVlMzQ2ODQw
LzEvMkpGV0NXVnZDUGVpalNTM3hMcWJZNXlnc0FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/I9c2rg
wIa1FNymsmrJPBVA6v+P7xBHMwWN5g3OUd9dWH1hmw0qO+QV78RR+qawHZEb7sQH
f3b07gshnd3jwDNdcQQXGhO0OLqLWUXkN3LswqzVeAVU5+w9Vn27O90aD4pXTkzY
mrIuA4RPy/+09KgdIqapfjhJsXYVDvPOruHr/0HVqneSR0WAi0nESKfh82Z15qpI
4f8ZbpMlez6MhreI9bRI4wIkRxWCtM8ge+Szqeh8Dt3r0juVN8wOk1UsV91462x4
Z3apHXMmRxi4XAkr0D3yOiI9OQMl/R0kHeN8A0MllErR2ennPJ/ZjyCzjh4jF6EV
KKB2x+PreLFrVQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:22 2026 by rpki-client