Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
File:                     fVaVeG-EUNEEHciK2JLLtXDVlys.mft (raw, json)
Hash identifier:          lOAdpv7I9BaDQxiRxS/0AEGFoydi5q3NA9Kn1PLZzZI=
Subject key identifier:   59:EE:41:70:F7:94:08:68:5A:1F:9A:92:C6:BD:60:91:28:80:4E:90
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Certificate issuer:       /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial:       019FC9A589CF3E826166664C993B324DED4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
Manifest number:          1A02
Signing time:             Mon 03 Aug 2026 22:01:36 +0000
Manifest this update:     Mon 03 Aug 2026 22:01:36 +0000
Manifest next update:     Tue 04 Aug 2026 22:01:36 +0000
Files and hashes:         1: 12Ml7oPQhd6P-2dy0Uk0kZ7PDsk.roa (hash: PD8v9Q+OgcnW9fexnmunDxLbOBIKmFVo+JF+JBAe7ck=)
                          2: BDp1uT9kjFAm3N54RW5KWq6_pTM.roa (hash: KqNlOiugDBjYNqy42qin4bY/AA0qkt7dppw/YaijJ6Q=)
                          3: D-8LG2tVdd5-uleb8t-_wqh_Jl8.roa (hash: mVxwGRDiuc9C3st3JN7liHp0YNkXDsxa9l1VHNbN9/Q=)
                          4: Gias09ASbWXb_aQKiFfOMuiQKcg.roa (hash: i2h8OuNqg6FM+2wJRliKGa8uy6A9zEgQ4SXZUve7AdU=)
                          5: ZKFoN8fD1raVVjOmPZzWRUaaugA.roa (hash: R4OUda4QAMCAnPGIK71d8GhzpRyoNd21V6RUuQUoxZQ=)
                          6: fVaVeG-EUNEEHciK2JLLtXDVlys.crl (hash: 0ONPhRHtkHM3njMD0Tx6b+Z70vYLE1RqS+ler5fNT1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Aug 2026 22:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c9:a5:89:cf:3e:82:61:66:66:4c:99:3b:32:4d:ed:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
        Validity
            Not Before: Aug  3 22:01:36 2026 GMT
            Not After : Aug  4 22:01:36 2026 GMT
        Subject: CN=59ee4170f79408685a1f9a92c6bd609128804e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:e1:53:8c:78:d1:0d:af:bb:92:e0:e3:15:
                    49:99:e5:47:b4:e4:57:c3:8e:43:dc:2e:d7:44:70:
                    06:f3:ef:65:1a:b1:36:f2:28:b8:74:b1:09:5b:ad:
                    cb:4d:62:46:e5:5f:d9:ec:56:1f:dc:5d:fa:5e:07:
                    2f:e0:e5:58:cd:db:83:41:61:43:e4:98:06:cf:03:
                    22:49:30:fc:6c:38:cd:53:7a:57:8a:1a:d7:37:7f:
                    9e:dc:46:79:a8:ca:69:7e:c9:ac:57:05:db:97:fb:
                    76:f6:46:35:e3:bc:14:a9:e3:20:d0:9b:08:11:9b:
                    82:58:f4:ea:61:9e:1d:dc:e1:33:04:a4:36:5f:a2:
                    17:37:70:98:f7:68:4c:23:fb:64:bf:f3:74:28:68:
                    3d:29:30:9e:c9:a8:07:7f:f2:d0:a7:a9:27:57:ca:
                    2f:b2:6b:d8:be:30:1b:f5:a6:5b:67:38:85:fa:eb:
                    a8:46:51:c8:45:b1:2f:2b:e7:9c:76:a8:9e:5a:1f:
                    ae:ec:93:10:e4:d9:50:48:87:71:78:b2:d4:a7:10:
                    62:34:5d:a8:db:c4:87:8f:05:49:70:2e:ff:06:4b:
                    40:d2:5e:3d:60:f8:55:eb:11:fc:24:cb:43:d7:1b:
                    1e:cf:83:cf:43:da:83:3e:57:16:1c:06:28:82:56:
                    3a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EE:41:70:F7:94:08:68:5A:1F:9A:92:C6:BD:60:91:28:80:4E:90
            X509v3 Authority Key Identifier:
                keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:95:f7:78:0a:10:76:24:f6:4f:ba:a7:d4:01:ef:5a:b6:d3:
         da:ea:48:54:bd:71:76:27:72:7c:e6:c8:71:a7:b6:fe:05:03:
         86:9f:f9:5b:8c:05:7a:bd:07:66:95:c0:48:b2:4a:5e:a6:85:
         78:5e:2c:67:44:61:9c:dd:82:ff:97:cd:15:85:1a:b8:72:0c:
         0a:14:eb:66:e7:9f:db:8f:64:b9:65:82:ad:bb:6d:35:90:ea:
         0c:0d:92:3c:65:b6:bc:81:c4:a3:cd:9f:67:84:6c:8a:d9:ad:
         8f:87:1a:7c:45:7c:04:07:37:d5:da:36:5f:f2:0c:fa:53:40:
         9d:14:a9:60:c1:e6:8a:bb:a2:c0:5c:ac:10:7e:62:33:fb:fe:
         43:ee:f8:2c:da:8d:03:1d:61:3b:bd:98:ea:02:cd:56:1a:63:
         e6:e3:a5:5e:d9:c0:36:42:4f:7a:61:bd:6c:97:ac:70:c4:7a:
         5c:a5:ef:7e:3e:ab:13:f4:e7:e9:f3:2c:d7:51:7e:12:f5:f9:
         af:ec:ba:d7:34:4f:eb:03:e2:ee:cc:d6:54:f6:eb:4c:e8:2e:
         e7:80:47:ea:5c:8e:86:12:ff:aa:f7:92:85:3e:53:84:cc:70:
         a4:78:78:22:62:37:de:b4:ad:49:60:6e:54:9a:74:40:ed:5f:
         bd:98:9b:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/JpYnPPoJhZmZMmTsyTe1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTY5NTc4NmY4NDUwZDEwNDFkYzg4YWQ4OTJjYmI1NzBk
NTk3MmIwHhcNMjYwODAzMjIwMTM2WhcNMjYwODA0MjIwMTM2WjAzMTEwLwYDVQQD
Eyg1OWVlNDE3MGY3OTQwODY4NWExZjlhOTJjNmJkNjA5MTI4ODA0ZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrjhU4x40Q2vu5Lg4xVJmeVHtORX
w45D3C7XRHAG8+9lGrE28ii4dLEJW63LTWJG5V/Z7FYf3F36Xgcv4OVYzduDQWFD
5JgGzwMiSTD8bDjNU3pXihrXN3+e3EZ5qMppfsmsVwXbl/t29kY147wUqeMg0JsI
EZuCWPTqYZ4d3OEzBKQ2X6IXN3CY92hMI/tkv/N0KGg9KTCeyagHf/LQp6knV8ov
smvYvjAb9aZbZziF+uuoRlHIRbEvK+ecdqieWh+u7JMQ5NlQSIdxeLLUpxBiNF2o
28SHjwVJcC7/BktA0l49YPhV6xH8JMtD1xsez4PPQ9qDPlcWHAYoglY61wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnuQXD3lAhoWh+aksa9YJEogE6QMB8GA1UdIwQY
MBaAFH1WlXhvhFDRBB3IitiSy7Vw1ZcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDIt
NjNiMzM4MDhhNmE4LzEvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDItNjNiMzM4MDhhNmE4
LzEvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxZX3eAoQ
diT2T7qn1AHvWrbT2upIVL1xdidyfObIcae2/gUDhp/5W4wFer0HZpXASLJKXqaF
eF4sZ0RhnN2C/5fNFYUauHIMChTrZuef249kuWWCrbttNZDqDA2SPGW2vIHEo82f
Z4Rsitmtj4cafEV8BAc31do2X/IM+lNAnRSpYMHmiruiwFysEH5iM/v+Q+74LNqN
Ax1hO72Y6gLNVhpj5uOlXtnANkJPemG9bJescMR6XKXvfj6rE/Tn6fMs11F+EvX5
r+y61zRP6wPi7szWVPbrTOgu54BH6lyOhhL/qveShT5ThMxwpHh4ImI33rStSWBu
VJp0QO1fvZiblw==
-----END CERTIFICATE-----
Generated at Tue Aug 4 08:45:37 2026 by rpki-client