Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft
File:                     feM_CE7LgSODxwJ1w4XUYZstox8.mft (raw, json)
Hash identifier:          LVj95zv/L5vC9Y53Ve5q38eoj7mrGVyt4No29Pl97LI=
Subject key identifier:   1B:19:A3:BF:86:75:3F:A0:F7:8B:1B:94:F1:92:0C:C1:C4:2E:37:B0
Authority key identifier: 7D:E3:3F:08:4E:CB:81:23:83:C7:02:75:C3:85:D4:61:9B:2D:A3:1F
Certificate issuer:       /CN=7de33f084ecb812383c70275c385d4619b2da31f
Certificate serial:       01A03D16031025D056C73FEC610DE79D2D4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/feM_CE7LgSODxwJ1w4XUYZstox8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft
Manifest number:          012C
Signing time:             Wed 26 Aug 2026 08:00:47 +0000
Manifest this update:     Wed 26 Aug 2026 08:00:47 +0000
Manifest next update:     Thu 27 Aug 2026 08:00:47 +0000
Files and hashes:         1: 5Scl3zXAEvT9Imonr9uJSjo6tG8.asa (hash: 2kTmN9J7DNO7vHCgKZRb1obKROe/qCTKWR7Gio+rcvQ=)
                          2: feM_CE7LgSODxwJ1w4XUYZstox8.crl (hash: tkJhc7ENOxJz4GR77vwZOHEw0nM5fyTkzxATKs91Vqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/feM_CE7LgSODxwJ1w4XUYZstox8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3d:16:03:10:25:d0:56:c7:3f:ec:61:0d:e7:9d:2d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de33f084ecb812383c70275c385d4619b2da31f
        Validity
            Not Before: Aug 26 08:00:47 2026 GMT
            Not After : Aug 27 08:00:47 2026 GMT
        Subject: CN=1b19a3bf86753fa0f78b1b94f1920cc1c42e37b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:11:92:28:c3:f7:2e:0c:62:44:66:5a:dd:
                    62:9d:e9:e9:eb:c7:00:f9:94:e6:b3:fd:b8:71:6e:
                    71:64:07:c0:dd:e5:2b:60:56:e1:6c:40:84:1e:40:
                    29:1e:b2:ea:21:6a:9a:e5:f1:c3:23:fe:05:a4:97:
                    a4:a4:19:d6:a0:90:54:40:a2:84:fa:2f:22:a0:50:
                    ab:7f:fe:59:3e:d8:2c:3c:a9:ed:2a:53:c0:3f:b0:
                    15:23:b8:3d:01:c5:52:13:d3:d9:39:70:29:f0:45:
                    15:b7:bf:8b:fb:84:1d:d0:c6:5c:f9:6a:a4:5d:ab:
                    0d:22:92:1d:ea:59:b2:21:ef:90:19:1c:e0:62:24:
                    b4:ae:36:c4:bd:ba:31:46:9d:53:20:e5:6f:7b:ac:
                    2a:c0:e3:41:a8:bc:3f:35:2c:e0:19:67:53:e2:d1:
                    ce:8d:68:0e:27:d7:33:b7:ac:23:03:81:99:e2:3f:
                    5e:c4:eb:87:8d:b9:b3:be:09:9a:98:54:c8:fd:97:
                    9e:ff:bd:23:16:d2:0c:92:5b:56:d6:79:97:43:ff:
                    3d:e3:ef:cd:5c:cd:5d:b1:a4:0b:a6:9f:c2:3f:f3:
                    cb:48:94:74:8f:4a:a3:aa:c2:d2:d1:81:0c:fd:2c:
                    3b:21:71:7c:e1:bf:08:24:24:23:e6:ab:c4:18:b7:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:19:A3:BF:86:75:3F:A0:F7:8B:1B:94:F1:92:0C:C1:C4:2E:37:B0
            X509v3 Authority Key Identifier:
                keyid:7D:E3:3F:08:4E:CB:81:23:83:C7:02:75:C3:85:D4:61:9B:2D:A3:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feM_CE7LgSODxwJ1w4XUYZstox8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b1f2b-4615-4cad-8c26-6247ec30bfc8/1/feM_CE7LgSODxwJ1w4XUYZstox8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:67:48:52:dc:38:76:e2:0e:81:59:ff:75:f3:bb:83:58:f3:
         1c:96:61:be:97:19:5f:82:c7:4e:7c:a7:ae:bd:07:38:38:46:
         98:65:ca:62:dd:0d:58:66:a9:c4:1a:0c:81:5f:6a:9a:f0:62:
         72:af:b1:40:f7:85:d0:09:ba:d4:5b:d8:5b:e7:ab:a1:8b:3f:
         57:f1:72:50:3c:0e:cb:04:e6:3c:44:36:3d:c2:4b:b3:a0:ac:
         01:42:66:5f:6c:df:2e:10:64:24:ec:56:67:4d:15:5f:9e:d6:
         b6:9e:e6:1e:60:f8:4c:dd:55:e3:b1:03:ef:9e:1d:de:3d:95:
         3d:7f:07:eb:cf:89:43:74:ca:7a:8b:72:2d:9c:4b:a5:5b:5d:
         29:a8:92:d9:43:36:65:a9:91:09:7d:9a:02:64:13:80:49:de:
         82:ab:0d:7b:9b:7e:95:e9:2e:0a:47:fc:45:79:d6:74:0e:95:
         ee:ea:ca:71:30:81:0f:41:8e:c9:91:bd:7f:a5:be:5b:99:05:
         4b:64:60:ad:0b:b0:b3:4a:8d:d5:3a:b1:bd:40:5d:6a:78:02:
         9d:c2:9a:b1:e0:f8:98:3c:ff:bb:18:0d:d5:83:f9:2e:d2:fc:
         6c:e2:fb:74:f5:12:df:cd:e7:46:83:bb:7a:0d:d8:97:24:a6:
         2a:53:cd:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA9FgMQJdBWxz/sYQ3nnS1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTMzZjA4NGVjYjgxMjM4M2M3MDI3NWMzODVkNDYxOWIy
ZGEzMWYwHhcNMjYwODI2MDgwMDQ3WhcNMjYwODI3MDgwMDQ3WjAzMTEwLwYDVQQD
EygxYjE5YTNiZjg2NzUzZmEwZjc4YjFiOTRmMTkyMGNjMWM0MmUzN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVIRkijD9y4MYkRmWt1inenp68cA
+ZTms/24cW5xZAfA3eUrYFbhbECEHkApHrLqIWqa5fHDI/4FpJekpBnWoJBUQKKE
+i8ioFCrf/5ZPtgsPKntKlPAP7AVI7g9AcVSE9PZOXAp8EUVt7+L+4Qd0MZc+Wqk
XasNIpId6lmyIe+QGRzgYiS0rjbEvboxRp1TIOVve6wqwONBqLw/NSzgGWdT4tHO
jWgOJ9czt6wjA4GZ4j9exOuHjbmzvgmamFTI/Zee/70jFtIMkltW1nmXQ/894+/N
XM1dsaQLpp/CP/PLSJR0j0qjqsLS0YEM/Sw7IXF84b8IJCQj5qvEGLftxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsZo7+GdT+g94sblPGSDMHELjewMB8GA1UdIwQY
MBaAFH3jPwhOy4Ejg8cCdcOF1GGbLaMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVNX0NFN0xnU09EeHdKMXc0WFVZWnN0b3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yYjFmMmItNDYxNS00Y2FkLThjMjYt
NjI0N2VjMzBiZmM4LzEvZmVNX0NFN0xnU09EeHdKMXc0WFVZWnN0b3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yYjFmMmItNDYxNS00Y2FkLThjMjYtNjI0N2VjMzBiZmM4
LzEvZmVNX0NFN0xnU09EeHdKMXc0WFVZWnN0b3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGdIUtw4
duIOgVn/dfO7g1jzHJZhvpcZX4LHTnynrr0HODhGmGXKYt0NWGapxBoMgV9qmvBi
cq+xQPeF0Am61FvYW+eroYs/V/FyUDwOywTmPEQ2PcJLs6CsAUJmX2zfLhBkJOxW
Z00VX57Wtp7mHmD4TN1V47ED754d3j2VPX8H68+JQ3TKeotyLZxLpVtdKaiS2UM2
ZamRCX2aAmQTgEnegqsNe5t+lekuCkf8RXnWdA6V7urKcTCBD0GOyZG9f6W+W5kF
S2RgrQuws0qN1TqxvUBdangCncKaseD4mDz/uxgN1YP5LtL8bOL7dPUS383nRoO7
eg3YlySmKlPNHg==
-----END CERTIFICATE-----
Generated at Wed Aug 26 18:18:09 2026 by rpki-client