Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
File:                     1-uJ7jB3msWHHmKt7hRU9a6N5774.mft (raw, json)
Hash identifier:          mEQifOJqVcAn+vpqksC8HWj13dx/GtF9jYN76w6KuPc=
Subject key identifier:   97:96:1A:00:C3:02:09:22:67:8E:2A:2C:2B:60:A1:47:62:52:11:6C
Authority key identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE
Certificate issuer:       /CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
Certificate serial:       01A0024A80D986396D0DEF53FD420659A41E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
Manifest number:          0929
Signing time:             Fri 14 Aug 2026 22:00:31 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:31 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:31 +0000
Files and hashes:         1: 1-uJ7jB3msWHHmKt7hRU9a6N5774.crl (hash: 1uAvUsAXTdepXI2eXRtaiFBeSMeaZxnMc/VAZ7DCFnA=)
                          2: lRWtCCIDuQJq2Ldkhpx2iidtBtA.roa (hash: m3V7ZxeKJCHLbCgiwkcpzW9KXHJYWP9eJffVKGhevf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:80:d9:86:39:6d:0d:ef:53:fd:42:06:59:a4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
        Validity
            Not Before: Aug 14 22:00:31 2026 GMT
            Not After : Aug 15 22:00:31 2026 GMT
        Subject: CN=97961a00c3020922678e2a2c2b60a1476252116c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:57:9b:2a:65:60:07:84:d4:2c:57:8b:7f:
                    e3:da:89:e9:4f:d8:12:f4:6e:28:7c:24:c1:80:11:
                    20:9c:48:75:a5:34:af:dd:9f:45:7f:b4:82:7e:4a:
                    e4:c3:bf:ff:b3:00:51:8f:77:0a:38:2f:10:db:b7:
                    4e:df:41:51:5f:48:3d:2e:c9:5d:ee:35:ad:d7:99:
                    dc:de:1a:f1:66:99:91:7f:35:ea:65:ae:20:43:2c:
                    62:f0:2e:ca:e3:d3:c3:61:5d:62:20:fe:a5:ca:70:
                    21:23:97:34:a1:db:1d:4d:20:7b:b4:85:37:7e:b0:
                    27:0c:3a:56:aa:1a:00:28:80:a8:47:79:0c:b9:5b:
                    af:21:40:0b:8b:de:fb:84:06:76:fc:fa:dc:da:5e:
                    b1:a1:c4:16:7b:ff:f9:d3:ff:9a:58:d6:23:ce:b1:
                    50:f0:4d:27:d7:da:fb:e5:17:0e:3d:0a:55:18:9d:
                    47:69:11:4d:c2:54:78:08:8e:36:ff:54:11:d7:94:
                    11:56:75:fe:6c:ef:2d:fd:47:bc:6b:08:74:7f:6b:
                    de:96:cd:a8:3e:84:da:ce:b3:a1:34:7a:bc:77:7a:
                    14:2a:0c:45:ce:f7:13:0c:f6:db:8b:21:44:10:aa:
                    af:5f:85:ec:38:d3:a3:37:f5:f1:df:5c:e5:3a:e8:
                    4d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:96:1A:00:C3:02:09:22:67:8E:2A:2C:2B:60:A1:47:62:52:11:6C
            X509v3 Authority Key Identifier:
                keyid:FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e3:ee:79:df:76:33:94:f1:ad:e2:89:22:6d:da:6b:32:57:
         b1:33:ae:c5:1f:d6:e7:b1:8f:6f:4c:09:bd:1d:b1:23:cd:5d:
         ee:dc:51:f1:dd:91:d3:ff:92:e2:80:6d:90:da:3f:a4:88:48:
         66:bd:e8:45:bc:84:6b:78:f3:ef:3b:ab:e2:48:ce:05:04:b3:
         5d:1b:9c:e4:42:fe:8e:34:5d:0c:42:6e:3c:5e:b7:37:6b:2e:
         be:bb:b6:11:98:a1:8c:a5:4b:b5:08:4d:3c:d2:dd:ad:fc:30:
         1d:4b:ef:cf:09:80:34:2c:45:31:26:2c:d5:37:30:6a:34:ae:
         e6:b0:ba:de:53:c3:b5:26:b5:2b:60:da:64:9e:77:b4:01:60:
         a8:6d:7a:15:9b:77:ef:c5:d9:b9:00:e7:a2:78:a6:0c:25:7e:
         62:2d:db:d9:66:dd:db:25:32:a8:98:90:c3:48:ad:76:f6:0a:
         f4:af:d3:c8:b6:03:e4:90:12:46:6a:3b:54:68:51:a9:4f:a6:
         98:d9:74:e8:f7:3f:a2:c2:9a:7a:e5:ce:b2:e8:bb:f3:a9:0c:
         c8:02:af:b0:6e:34:15:f9:90:eb:fe:25:ff:50:d6:a6:b7:57:
         41:54:d1:49:30:3e:d2:20:c6:52:a0:df:57:01:41:81:fd:9d:
         31:e5:c1:60
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaACSoDZhjltDe9T/UIGWaQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTI3YjhjMWRlNmIxNjFjNzk4YWI3Yjg1MTUzZDZiYTM3
OWVmYmUwHhcNMjYwODE0MjIwMDMxWhcNMjYwODE1MjIwMDMxWjAzMTEwLwYDVQQD
Eyg5Nzk2MWEwMGMzMDIwOTIyNjc4ZTJhMmMyYjYwYTE0NzYyNTIxMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9ZXmyplYAeE1CxXi3/j2onpT9gS
9G4ofCTBgBEgnEh1pTSv3Z9Ff7SCfkrkw7//swBRj3cKOC8Q27dO30FRX0g9Lsld
7jWt15nc3hrxZpmRfzXqZa4gQyxi8C7K49PDYV1iIP6lynAhI5c0odsdTSB7tIU3
frAnDDpWqhoAKICoR3kMuVuvIUALi977hAZ2/Prc2l6xocQWe//50/+aWNYjzrFQ
8E0n19r75RcOPQpVGJ1HaRFNwlR4CI42/1QR15QRVnX+bO8t/Ue8awh0f2vels2o
PoTazrOhNHq8d3oUKgxFzvcTDPbbiyFEEKqvX4XsONOjN/Xx31zlOuhNJwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJeWGgDDAgkiZ44qLCtgoUdiUhFsMB8GA1UdIwQY
MBaAFPrie4wd5rFhx5ire4UVPWujee++MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11SjdqQjNtc1dISG1LdDdoUlU5YTZONTc3NC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvOTQyZWZhLTE4YTUtNDY0OS05OTI5
LTdiZTcxMzY3OTYwOC8xLzEtdUo3akIzbXNXSEhtS3Q3aFJVOWE2TjU3NzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA4Lzk0MmVmYS0xOGE1LTQ2NDktOTkyOS03YmU3MTM2Nzk2
MDgvMS8xLXVKN2pCM21zV0hIbUt0N2hSVTlhNk41Nzc0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKePu
ed92M5TxreKJIm3aazJXsTOuxR/W57GPb0wJvR2xI81d7txR8d2R0/+S4oBtkNo/
pIhIZr3oRbyEa3jz7zur4kjOBQSzXRuc5EL+jjRdDEJuPF63N2suvru2EZihjKVL
tQhNPNLdrfwwHUvvzwmANCxFMSYs1TcwajSu5rC63lPDtSa1K2DaZJ53tAFgqG16
FZt378XZuQDnonimDCV+Yi3b2Wbd2yUyqJiQw0itdvYK9K/TyLYD5JASRmo7VGhR
qU+mmNl06Pc/osKaeuXOsui786kMyAKvsG40FfmQ6/4l/1DWprdXQVTRSTA+0iDG
UqDfVwFBgf2dMeXBYA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:32:16 2026 by rpki-client