Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
File:                     8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft (raw, json)
Hash identifier:          dPR9yfbzvlMCoHrsjIurhCNp5vJdwT3/ePOXD6lHuQU=
Subject key identifier:   B3:5E:67:3B:B1:C5:FB:61:10:69:B6:CF:FA:DD:C1:13:AA:C0:6A:97
Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
Certificate issuer:       /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Certificate serial:       01A000CA4C5BB053C6617441A51805210A65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
Manifest number:          1959
Signing time:             Fri 14 Aug 2026 15:00:52 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:52 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:52 +0000
Files and hashes:         1: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl (hash: HgUkITUw1GOIrQWc5B1u4ZpTNUJPyjl7Se8Jw8TGYzY=)
                          2: PdYJMM8g9bzS-zaiDRpQNcIoAAM.roa (hash: nV+JTD3ujjyKHyqyqk7w4WpsjNbLI/Jo7BdCyaZPoos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:4c:5b:b0:53:c6:61:74:41:a5:18:05:21:0a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
        Validity
            Not Before: Aug 14 15:00:52 2026 GMT
            Not After : Aug 15 15:00:52 2026 GMT
        Subject: CN=b35e673bb1c5fb611069b6cffaddc113aac06a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:1d:87:fe:26:36:25:b9:5f:d4:af:ff:7f:
                    c8:72:58:4f:7b:62:c7:24:10:f4:f3:48:eb:04:6c:
                    66:f1:41:2d:9b:ac:1c:31:25:54:9b:db:ae:1f:0c:
                    1f:74:ce:98:d0:15:7e:08:94:3a:9a:d5:a3:ee:e5:
                    fa:2f:9b:8f:58:74:a5:db:d4:78:5c:68:36:a5:20:
                    69:86:03:ef:71:76:2f:6a:99:d2:36:5d:ca:65:56:
                    cf:2a:5c:1d:ee:bf:a2:cb:73:09:83:ee:70:a1:af:
                    a3:21:89:e7:a7:1c:3d:49:37:a1:3c:fc:6b:91:85:
                    ce:2e:28:f8:3c:a7:80:26:a2:5c:0d:80:6f:da:d8:
                    fd:4c:45:f3:7f:02:71:dc:ab:1d:30:04:52:a8:91:
                    02:79:20:f8:c4:fa:f3:bb:d2:2d:b5:93:61:84:33:
                    4d:3f:d7:1b:94:cd:13:bb:25:b1:82:2b:b7:a3:fa:
                    0e:0a:aa:55:9c:bd:90:41:03:65:71:c4:08:da:cb:
                    13:45:a1:76:da:6c:18:f1:0e:a0:b6:ae:75:05:59:
                    a4:d6:38:7b:b8:1d:3e:a8:c9:a3:a5:71:f2:e4:28:
                    90:57:17:43:6d:cb:90:39:c7:9d:b5:84:93:0e:2e:
                    3f:23:b8:a4:7a:cc:dc:7e:9b:2d:61:da:9c:04:9c:
                    21:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5E:67:3B:B1:C5:FB:61:10:69:B6:CF:FA:DD:C1:13:AA:C0:6A:97
            X509v3 Authority Key Identifier:
                keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d8:de:50:83:d7:5f:54:58:30:e6:0c:48:5f:e4:1d:92:7e:
         58:4f:2b:61:66:5a:3a:8f:49:b7:c7:aa:a6:0f:b4:cb:d1:1d:
         f6:91:c3:40:5d:98:ad:77:5a:65:e5:cd:fa:bb:e0:4f:95:b6:
         e5:02:71:19:ec:8e:55:b8:27:00:41:7b:ff:e4:2d:d5:bd:3a:
         76:47:ab:9f:62:27:f0:22:6f:46:b8:43:2d:30:41:df:a4:a5:
         63:cf:62:ee:ed:22:de:b6:d1:25:1e:27:b9:4b:ea:88:b6:3e:
         e3:5c:4b:de:53:f4:6f:dd:6a:d7:d6:b0:f9:fd:6e:8b:32:0e:
         91:31:ec:d2:c6:86:fc:e3:ec:7f:39:11:87:69:71:8d:ba:34:
         cc:1b:97:73:23:ba:f3:99:28:7d:a3:1b:0b:ac:89:7d:37:86:
         c7:61:5b:69:55:2e:69:c9:a3:a0:e4:ed:c9:d4:c5:5a:14:39:
         1f:a0:f6:70:75:84:c0:e0:35:b0:14:b4:0a:59:2d:5e:74:79:
         fe:4e:dd:2e:cd:e2:47:d8:73:3e:56:ef:9b:2a:90:df:6e:e5:
         73:b7:db:98:9a:e0:a4:33:c6:07:52:87:d3:1c:d4:0f:1d:af:
         e2:0c:69:46:52:0d:d6:dc:ef:35:bc:28:ed:df:f0:fa:d2:8a:
         03:44:cc:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAykxbsFPGYXRBpRgFIQplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZWY2YTZjZmNlMzQzZjkxNGM5YWQ5NGMzNDEwZGEwMGE3
Y2QxY2MwHhcNMjYwODE0MTUwMDUyWhcNMjYwODE1MTUwMDUyWjAzMTEwLwYDVQQD
EyhiMzVlNjczYmIxYzVmYjYxMTA2OWI2Y2ZmYWRkYzExM2FhYzA2YTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13Ydh/4mNiW5X9Sv/3/IclhPe2LH
JBD080jrBGxm8UEtm6wcMSVUm9uuHwwfdM6Y0BV+CJQ6mtWj7uX6L5uPWHSl29R4
XGg2pSBphgPvcXYvapnSNl3KZVbPKlwd7r+iy3MJg+5woa+jIYnnpxw9STehPPxr
kYXOLij4PKeAJqJcDYBv2tj9TEXzfwJx3KsdMARSqJECeSD4xPrzu9IttZNhhDNN
P9cblM0TuyWxgiu3o/oOCqpVnL2QQQNlccQI2ssTRaF22mwY8Q6gtq51BVmk1jh7
uB0+qMmjpXHy5CiQVxdDbcuQOcedtYSTDi4/I7ikeszcfpstYdqcBJwhHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNeZzuxxfthEGm2z/rdwROqwGqXMB8GA1UdIwQY
MBaAFPPvamz840P5FMmtlMNBDaAKfNHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85MzNlZGMtMjMwZi00YmZjLWJjNDct
MmM0NzYzZDY0ZDQzLzEvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi85MzNlZGMtMjMwZi00YmZjLWJjNDctMmM0NzYzZDY0ZDQz
LzEvOC05cWJQempRX2tVeWEyVXcwRU5vQXA4MGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdjeUIPX
X1RYMOYMSF/kHZJ+WE8rYWZaOo9Jt8eqpg+0y9Ed9pHDQF2YrXdaZeXN+rvgT5W2
5QJxGeyOVbgnAEF7/+Qt1b06dkern2In8CJvRrhDLTBB36SlY89i7u0i3rbRJR4n
uUvqiLY+41xL3lP0b91q19aw+f1uizIOkTHs0saG/OPsfzkRh2lxjbo0zBuXcyO6
85kofaMbC6yJfTeGx2FbaVUuacmjoOTtydTFWhQ5H6D2cHWEwOA1sBS0ClktXnR5
/k7dLs3iR9hzPlbvmyqQ327lc7fbmJrgpDPGB1KH0xzUDx2v4gxpRlIN1tzvNbwo
7d/w+tKKA0TMgA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:55 2026 by rpki-client