Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.mft
File:                     _QucZp7t9WiEnkSyLUsPABFImts.mft (raw, json)
Hash identifier:          qGq5provMSsGS5KK8wSZpfnQOCbg67xaBOeUx2RXdps=
Subject key identifier:   CC:77:DC:B1:04:F5:A2:D9:FA:10:F7:02:D0:73:A2:C8:01:90:03:5B
Authority key identifier: FD:0B:9C:66:9E:ED:F5:68:84:9E:44:B2:2D:4B:0F:00:11:48:9A:DB
Certificate issuer:       /CN=fd0b9c669eedf568849e44b22d4b0f0011489adb
Certificate serial:       01A026218D8A5F7120D93D0E3DFB10B9145B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.mft
Manifest number:          8D
Signing time:             Fri 21 Aug 2026 21:02:08 +0000
Manifest this update:     Fri 21 Aug 2026 21:02:08 +0000
Manifest next update:     Sat 22 Aug 2026 21:02:08 +0000
Files and hashes:         1: LefwY8gpcZ-R-tJPrykmBr0pJFk.roa (hash: cf3hQ7ddtb5GAFex4VifyP4EhX3vFqnUNjT44D+CIHQ=)
                          2: QEAgodlhX0q31m_BwmFzK4J6e_I.roa (hash: ifPYPV007NLuqIpdttAdYACWibvcd1/6B9YqJ6XHc+w=)
                          3: _QucZp7t9WiEnkSyLUsPABFImts.crl (hash: qVCquBm1EcRKjbfXoYGNLK+x3ZzifCp8lnNQWftOH7g=)
                          4: v8b045fqfv6vOCgmZrVMvK97ie4.roa (hash: 2NOScfLaz7B1SjBU8c3qFZzj0fv2grUazeuB2RYFYjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:21:8d:8a:5f:71:20:d9:3d:0e:3d:fb:10:b9:14:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd0b9c669eedf568849e44b22d4b0f0011489adb
        Validity
            Not Before: Aug 21 21:02:08 2026 GMT
            Not After : Aug 22 21:02:08 2026 GMT
        Subject: CN=cc77dcb104f5a2d9fa10f702d073a2c80190035b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:6c:ab:94:20:50:9f:45:fd:b1:f1:df:40:
                    9c:48:82:d4:4a:d8:db:6b:df:2b:86:87:8f:a3:65:
                    f8:fb:3a:47:15:48:8e:b6:86:29:2a:93:e8:7f:7a:
                    ad:ea:20:1b:74:e3:3e:60:77:8b:d5:db:55:88:40:
                    a1:79:24:de:c1:fd:ad:f6:57:80:e7:5e:5b:b1:e5:
                    9a:37:55:25:8a:6d:94:21:cb:37:6b:f4:4c:5b:ef:
                    4e:cb:f0:80:7c:53:8d:32:f9:49:68:61:11:d9:c9:
                    d0:03:dd:e9:94:46:fd:91:bf:af:95:dd:92:bd:cf:
                    47:c5:85:da:ee:c3:7e:06:45:11:dd:3a:46:49:91:
                    b4:a1:9f:2e:36:06:60:5c:bb:44:ae:90:71:36:aa:
                    29:ac:31:ac:7f:0d:d7:8f:83:b0:a8:7f:4d:c8:b7:
                    8f:3a:4b:96:a8:aa:1a:5e:1e:f7:ea:8f:3c:83:7b:
                    02:42:71:de:50:c3:40:c4:c1:6c:22:ca:6d:f9:ef:
                    ea:73:7d:ca:58:6a:f3:08:65:e7:6d:27:da:06:6c:
                    82:9d:a2:55:41:f2:68:5e:b3:5c:bf:a0:ea:3f:0a:
                    cc:a3:b2:f5:7f:9e:b1:e6:25:a5:e9:d5:09:9f:32:
                    3c:e8:ef:73:4a:6c:89:a2:46:ae:d0:e8:d4:a5:f9:
                    13:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:77:DC:B1:04:F5:A2:D9:FA:10:F7:02:D0:73:A2:C8:01:90:03:5B
            X509v3 Authority Key Identifier:
                keyid:FD:0B:9C:66:9E:ED:F5:68:84:9E:44:B2:2D:4B:0F:00:11:48:9A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1e:49:6a:c1:ef:ea:0a:ae:8d:3a:c9:5e:bf:cf:db:cb:1c:
         c4:df:5a:e4:b0:a8:e3:b8:71:4e:f7:c2:15:ce:29:81:a2:1a:
         54:8f:b4:0f:67:97:6d:75:b1:c8:2d:92:8e:a2:57:c0:82:e1:
         9c:39:65:f1:d0:49:36:51:bd:af:b6:b8:2a:af:4a:30:d2:b0:
         95:38:72:d7:8c:4b:1f:76:ae:da:c5:d8:9e:48:52:29:26:9f:
         a7:e7:a4:63:c1:a3:42:fa:67:60:be:60:8b:82:fc:3d:fb:fa:
         58:54:67:1e:e0:7f:e9:f0:d3:16:42:8b:61:ef:0a:0d:c3:b8:
         35:ca:27:1b:51:ed:82:1b:23:a4:0e:4d:6d:a8:c8:b2:fa:b1:
         1f:7a:4d:37:3b:19:e9:7a:ea:ba:45:1e:7f:3f:27:fe:6d:bc:
         e9:d8:84:1c:eb:2e:c6:19:10:ea:e0:63:8f:82:c0:1a:96:0f:
         09:e0:46:89:33:51:01:61:5a:1c:a1:58:e5:2e:90:8f:ab:f2:
         ef:eb:a8:48:56:8e:da:40:b1:45:7a:dd:2b:5c:88:40:19:43:
         f1:4e:2b:dc:08:35:93:f8:fd:d2:57:06:85:3b:a3:b2:1d:7d:
         c0:2d:5d:20:cd:0b:f2:34:5b:81:be:d4:42:a4:8e:f4:25:40:
         23:3e:bb:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAmIY2KX3Eg2T0OPfsQuRRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMGI5YzY2OWVlZGY1Njg4NDllNDRiMjJkNGIwZjAwMTE0
ODlhZGIwHhcNMjYwODIxMjEwMjA4WhcNMjYwODIyMjEwMjA4WjAzMTEwLwYDVQQD
EyhjYzc3ZGNiMTA0ZjVhMmQ5ZmExMGY3MDJkMDczYTJjODAxOTAwMzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEVsq5QgUJ9F/bHx30CcSILUStjb
a98rhoePo2X4+zpHFUiOtoYpKpPof3qt6iAbdOM+YHeL1dtViECheSTewf2t9leA
515bseWaN1Ulim2UIcs3a/RMW+9Oy/CAfFONMvlJaGER2cnQA93plEb9kb+vld2S
vc9HxYXa7sN+BkUR3TpGSZG0oZ8uNgZgXLtErpBxNqoprDGsfw3Xj4OwqH9NyLeP
OkuWqKoaXh736o88g3sCQnHeUMNAxMFsIspt+e/qc33KWGrzCGXnbSfaBmyCnaJV
QfJoXrNcv6DqPwrMo7L1f56x5iWl6dUJnzI86O9zSmyJokau0OjUpfkTmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMx33LEE9aLZ+hD3AtBzosgBkANbMB8GA1UdIwQY
MBaAFP0LnGae7fVohJ5Esi1LDwARSJrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1F1Y1pwN3Q5V2lFbmtTeUxVc1BBQkZJbXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAt
ZjYwZDZmNzE4MmExLzEvX1F1Y1pwN3Q5V2lFbmtTeUxVc1BBQkZJbXRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80OTY3NzMtNTAxOC00OGRjLWEyNDAtZjYwZDZmNzE4MmEx
LzEvX1F1Y1pwN3Q5V2lFbmtTeUxVc1BBQkZJbXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZh5JasHv
6gqujTrJXr/P28scxN9a5LCo47hxTvfCFc4pgaIaVI+0D2eXbXWxyC2SjqJXwILh
nDll8dBJNlG9r7a4Kq9KMNKwlThy14xLH3au2sXYnkhSKSafp+ekY8GjQvpnYL5g
i4L8Pfv6WFRnHuB/6fDTFkKLYe8KDcO4NconG1HtghsjpA5NbajIsvqxH3pNNzsZ
6XrqukUefz8n/m286diEHOsuxhkQ6uBjj4LAGpYPCeBGiTNRAWFaHKFY5S6Qj6vy
7+uoSFaO2kCxRXrdK1yIQBlD8U4r3Ag1k/j90lcGhTujsh19wC1dIM0L8jRbgb7U
QqSO9CVAIz671A==
-----END CERTIFICATE-----
Generated at Sat Aug 22 00:52:59 2026 by rpki-client