Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File:                     axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier:          q8adQyE4RcKH43whWYGKccd4sU32UwTxX8+byvM3Fv0=
Subject key identifier:   BE:49:28:0A:31:32:23:24:7A:C6:ED:DA:D4:67:38:A5:B4:4F:FB:3D
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019FC9A5112C2DFB1423C4A6608950AD6FDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number:          123A
Signing time:             Mon 03 Aug 2026 22:01:05 +0000
Manifest this update:     Mon 03 Aug 2026 22:01:05 +0000
Manifest next update:     Tue 04 Aug 2026 22:01:05 +0000
Files and hashes:         1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=)
                          2: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=)
                          3: IMoGaiROnW6LTILmyh94FF46a9s.roa (hash: YGEQqYNkK01s4h4tP2/taaUxOF3aULWqQu6lncXBybs=)
                          4: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=)
                          5: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=)
                          6: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: wHmTgxHpzBIpvDKkty+COHB0kWuhJxZzGcnJEmSures=)
                          7: kb1i0Euop8uoZI3hbnb2E8DBgcA.roa (hash: /59t43jCATUh6sMhTHPSZs3hBikNt8v++IxN2wJ5leg=)
                          8: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=)
                          9: rjckdxrOW6yb8UbBlQuItd3xhV8.roa (hash: 0JVOip2Nlhin+Ly1iQyyyD/alQ1c3usrAontHun6a3c=)
                          10: xddt07zyoLb-y4ddIpmNk_Ngnlo.roa (hash: yi5hHDSKd9O5g6YykPT5aDJKpKMiWzWCSa5v86IH4b8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Aug 2026 22:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c9:a5:11:2c:2d:fb:14:23:c4:a6:60:89:50:ad:6f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Aug  3 22:01:05 2026 GMT
            Not After : Aug  4 22:01:05 2026 GMT
        Subject: CN=be49280a313223247ac6eddad46738a5b44ffb3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:87:03:0d:ed:aa:50:0d:63:a9:21:ae:47:
                    d2:aa:1d:d5:ce:a1:81:0e:64:d2:43:92:5a:ce:9b:
                    bc:13:96:82:c3:c9:72:cf:60:1f:b1:f6:e9:f4:4d:
                    14:39:61:b2:66:09:a9:ea:4a:24:81:9b:e3:4b:30:
                    c8:97:bc:05:c5:9f:4d:bc:46:d7:d3:6a:cf:86:cb:
                    27:f7:e6:82:7d:83:32:54:0d:3c:fd:ca:eb:39:a8:
                    29:fd:84:24:ef:25:4d:1c:bd:50:b2:f9:1e:09:c1:
                    0d:e9:9a:fb:bf:35:d4:dd:e3:1e:64:aa:d4:33:3b:
                    7f:13:be:84:dc:6f:ef:5b:2f:eb:6d:59:e5:ec:e5:
                    8e:ae:d0:42:32:1c:9a:cd:a5:1e:46:25:98:d0:ed:
                    84:e3:79:81:a0:2d:0e:24:11:ef:95:6d:95:b2:88:
                    f8:7e:ab:ce:9e:c6:55:45:81:9b:a4:e6:27:23:9c:
                    96:ea:a9:0e:56:99:2b:3c:fc:1b:c5:41:45:e3:cf:
                    8a:11:2e:00:f9:15:ee:49:5b:fb:39:c0:59:0d:ab:
                    f2:14:d3:17:bf:02:43:8b:c6:a2:7b:f2:71:76:70:
                    93:93:76:43:58:9b:52:4b:e8:88:0b:1d:b3:4e:8b:
                    51:b6:1c:02:bf:22:d1:1c:d5:21:4f:63:ba:ce:96:
                    b3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:49:28:0A:31:32:23:24:7A:C6:ED:DA:D4:67:38:A5:B4:4F:FB:3D
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ae:d4:ec:6a:5f:93:ec:3c:ff:14:9c:32:3e:8a:1e:12:90:
         78:f2:5c:1c:62:39:c0:47:3d:33:38:a7:30:00:61:6f:5e:a2:
         95:8f:d9:fd:36:be:4f:9f:2b:4d:b6:5c:fe:6e:34:2f:75:f5:
         63:da:61:cc:26:d5:1f:52:f9:ac:95:05:5a:df:00:cc:e5:bc:
         38:e1:4d:78:37:72:41:b8:86:9a:08:6c:7c:bd:b3:23:5b:00:
         5d:38:37:0b:8e:8c:69:6e:ad:78:ab:c1:b9:5f:bc:45:6e:f6:
         d5:6c:05:cc:7a:52:ca:11:8c:62:39:b5:c8:5b:ab:1f:6f:95:
         91:a0:33:77:fa:7f:bf:8c:eb:a3:3f:fa:8a:3c:4a:aa:fd:e4:
         e3:71:8c:7c:8c:58:e8:7d:b2:ee:15:7b:2c:07:e8:97:23:47:
         e2:af:ba:3e:6b:b1:d6:7a:d2:22:ae:c0:10:2a:f4:00:a7:31:
         f1:bd:17:6a:00:53:a4:53:ef:21:88:f8:74:89:72:c2:ef:cb:
         45:9f:95:f0:70:f7:11:fc:2c:16:b9:85:bd:3d:28:86:50:83:
         e2:ae:23:48:13:eb:0f:9e:cd:f2:83:5a:3e:e6:11:cd:2e:51:
         08:c7:c1:be:33:63:c6:96:86:d6:ce:ab:85:33:f9:ed:ca:d9:
         9f:6a:83:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/JpREsLfsUI8SmYIlQrW/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwODAzMjIwMTA1WhcNMjYwODA0MjIwMTA1WjAzMTEwLwYDVQQD
EyhiZTQ5MjgwYTMxMzIyMzI0N2FjNmVkZGFkNDY3MzhhNWI0NGZmYjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKeHAw3tqlANY6khrkfSqh3VzqGB
DmTSQ5Jazpu8E5aCw8lyz2Afsfbp9E0UOWGyZgmp6kokgZvjSzDIl7wFxZ9NvEbX
02rPhssn9+aCfYMyVA08/crrOagp/YQk7yVNHL1QsvkeCcEN6Zr7vzXU3eMeZKrU
Mzt/E76E3G/vWy/rbVnl7OWOrtBCMhyazaUeRiWY0O2E43mBoC0OJBHvlW2Vsoj4
fqvOnsZVRYGbpOYnI5yW6qkOVpkrPPwbxUFF48+KES4A+RXuSVv7OcBZDavyFNMX
vwJDi8aie/JxdnCTk3ZDWJtSS+iICx2zTotRthwCvyLRHNUhT2O6zpaz+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5JKAoxMiMkesbt2tRnOKW0T/s9MB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUq7U7Gpf
k+w8/xScMj6KHhKQePJcHGI5wEc9MzinMABhb16ilY/Z/Ta+T58rTbZc/m40L3X1
Y9phzCbVH1L5rJUFWt8AzOW8OOFNeDdyQbiGmghsfL2zI1sAXTg3C46MaW6teKvB
uV+8RW721WwFzHpSyhGMYjm1yFurH2+VkaAzd/p/v4zroz/6ijxKqv3k43GMfIxY
6H2y7hV7LAfolyNH4q+6Pmux1nrSIq7AECr0AKcx8b0XagBTpFPvIYj4dIlywu/L
RZ+V8HD3EfwsFrmFvT0ohlCD4q4jSBPrD57N8oNaPuYRzS5RCMfBvjNjxpaG1s6r
hTP57crZn2qDYA==
-----END CERTIFICATE-----
Generated at Tue Aug 4 08:50:16 2026 by rpki-client