Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File:                     88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier:          pCNCz4AqqEd6msYsIvbczESWLmWTHf/Zhrd5D31/jXU=
Subject key identifier:   F2:C3:9B:3C:CA:5E:44:7D:9E:19:27:5F:F2:6C:E2:0C:10:0B:E6:1D
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer:       /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial:       01A0032690D9B78DCF306ED7AF07F7652C0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number:          1A04
Signing time:             Sat 15 Aug 2026 02:00:54 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:54 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:54 +0000
Files and hashes:         1: 4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa (hash: mv8lr0tXFFzJvbhtM86qbyUU00UwUrjvcbsKld0kTWE=)
                          2: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: afejj+lD6LnAS63TUb3osbIbxNr5dTYk+F91Tm97Da8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:90:d9:b7:8d:cf:30:6e:d7:af:07:f7:65:2c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
        Validity
            Not Before: Aug 15 02:00:54 2026 GMT
            Not After : Aug 16 02:00:54 2026 GMT
        Subject: CN=f2c39b3cca5e447d9e19275ff26ce20c100be61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1d:bd:67:17:e2:8a:a4:47:db:e1:7b:47:c4:
                    8c:71:14:a7:9f:02:35:cd:4e:2e:0a:19:69:48:14:
                    06:cc:52:8c:c6:ac:4c:60:cc:4f:71:74:e4:dd:2c:
                    ce:ac:3f:24:c9:e8:78:0b:c9:c5:b2:f4:ea:f4:81:
                    fd:85:e4:54:b7:0e:39:09:bb:09:f2:cf:cc:f8:22:
                    ae:81:1c:64:e8:d7:93:26:17:4e:ee:1a:5f:43:01:
                    d3:3b:cb:30:e8:93:d4:9d:38:f3:58:10:2f:31:ae:
                    dc:15:aa:7e:de:1d:40:b4:94:e9:7c:f9:fa:c9:30:
                    4b:15:a6:68:c9:db:1d:e2:21:ce:36:f0:ca:d7:73:
                    57:60:41:dd:24:54:30:0f:4f:a6:a8:db:78:d0:75:
                    83:c6:cb:4e:34:7c:39:fd:84:66:19:5e:4a:82:6d:
                    be:d3:4d:45:c0:06:35:45:69:dd:bb:23:e0:aa:c4:
                    91:5f:3a:bc:82:71:d7:94:ac:0c:52:1f:e1:03:9f:
                    e5:36:9a:68:0b:84:05:cc:38:3f:ae:4f:37:5c:59:
                    df:b9:b0:67:d1:e2:c4:9f:77:2b:69:58:c1:3c:e9:
                    ba:84:df:fd:ac:1b:a8:df:0f:21:f9:24:6f:fd:fd:
                    b7:b9:a9:30:5b:9f:86:2c:b3:83:89:f1:53:f7:35:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C3:9B:3C:CA:5E:44:7D:9E:19:27:5F:F2:6C:E2:0C:10:0B:E6:1D
            X509v3 Authority Key Identifier:
                keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b2:61:58:96:63:7a:aa:d0:36:1e:bf:4e:9a:07:34:99:b4:
         e4:9f:f3:9c:5c:15:90:ff:bc:a6:7f:6d:1d:eb:90:3c:18:7c:
         fd:af:95:9b:c4:73:f7:70:e0:c6:93:02:93:4c:48:08:ef:72:
         2d:55:e3:86:f3:73:54:81:b4:44:7b:72:75:00:35:48:40:d5:
         55:00:56:a5:ad:18:d0:c6:5c:ff:7b:c5:8b:f7:cd:9c:13:81:
         4b:81:3d:06:a8:0e:df:b8:19:b6:1a:d2:03:8f:38:0c:a0:72:
         1a:55:35:ac:4a:e4:ad:18:44:90:28:54:50:95:69:35:a4:38:
         20:49:53:94:e0:26:15:d1:31:91:ec:1e:1a:cd:14:0a:c1:c7:
         fa:e8:d9:56:e7:25:79:56:26:f9:f0:04:41:99:7e:8b:05:90:
         ae:db:59:a3:ac:11:26:ac:1b:88:69:02:49:b7:ea:75:14:29:
         31:01:86:af:29:2a:b8:72:36:3b:61:93:b6:5b:ea:27:1e:de:
         96:80:7b:63:7e:b2:f6:70:6a:65:61:6d:ab:da:77:c2:f9:fe:
         42:fa:26:24:80:81:2d:72:8c:55:6b:78:2f:89:2b:d8:07:96:
         c1:1f:e5:b7:d8:b7:23:01:d8:c3:5a:c8:f0:f7:29:91:f2:0e:
         2c:8c:f8:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADJpDZt43PMG7Xrwf3ZSwNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzY2I3N2E3MDc1ZjkyN2NjNDAxOGQ1NmU2Y2Q3NWM1OThk
YzNhNTEwHhcNMjYwODE1MDIwMDU0WhcNMjYwODE2MDIwMDU0WjAzMTEwLwYDVQQD
EyhmMmMzOWIzY2NhNWU0NDdkOWUxOTI3NWZmMjZjZTIwYzEwMGJlNjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh29ZxfiiqRH2+F7R8SMcRSnnwI1
zU4uChlpSBQGzFKMxqxMYMxPcXTk3SzOrD8kyeh4C8nFsvTq9IH9heRUtw45CbsJ
8s/M+CKugRxk6NeTJhdO7hpfQwHTO8sw6JPUnTjzWBAvMa7cFap+3h1AtJTpfPn6
yTBLFaZoydsd4iHONvDK13NXYEHdJFQwD0+mqNt40HWDxstONHw5/YRmGV5Kgm2+
001FwAY1RWnduyPgqsSRXzq8gnHXlKwMUh/hA5/lNppoC4QFzDg/rk83XFnfubBn
0eLEn3craVjBPOm6hN/9rBuo3w8h+SRv/f23uakwW5+GLLODifFT9zUfpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLDmzzKXkR9nhknX/Js4gwQC+YdMB8GA1UdIwQY
MBaAFPPLd6cHX5J8xAGNVubNdcWY3DpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kZDAxYWQtNmMyNy00NTdmLWIwNjQt
NzA3NzExYjgxZWY3LzEvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kZDAxYWQtNmMyNy00NTdmLWIwNjQtNzA3NzExYjgxZWY3
LzEvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7JhWJZj
eqrQNh6/TpoHNJm05J/znFwVkP+8pn9tHeuQPBh8/a+Vm8Rz93DgxpMCk0xICO9y
LVXjhvNzVIG0RHtydQA1SEDVVQBWpa0Y0MZc/3vFi/fNnBOBS4E9BqgO37gZthrS
A484DKByGlU1rErkrRhEkChUUJVpNaQ4IElTlOAmFdExkeweGs0UCsHH+ujZVucl
eVYm+fAEQZl+iwWQrttZo6wRJqwbiGkCSbfqdRQpMQGGrykquHI2O2GTtlvqJx7e
loB7Y36y9nBqZWFtq9p3wvn+QvomJICBLXKMVWt4L4kr2AeWwR/lt9i3IwHYw1rI
8PcpkfIOLIz4uA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 10:09:34 2026 by rpki-client