Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
File:                     jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft (raw, json)
Hash identifier:          gUkPz9hY3Su/NlkaIkw0+HFlKTEvclMVyZ6OrCNvRAs=
Subject key identifier:   CF:77:5B:2D:E9:2C:E1:FF:06:06:60:E2:EA:25:7C:76:52:ED:DE:AA
Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
Certificate issuer:       /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Certificate serial:       019FFD5B2441625FAEE27A9DDEE3D8013EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
Manifest number:          19FE
Signing time:             Thu 13 Aug 2026 23:00:36 +0000
Manifest this update:     Thu 13 Aug 2026 23:00:36 +0000
Manifest next update:     Fri 14 Aug 2026 23:00:36 +0000
Files and hashes:         1: 0DnLoCEjuk9LA09NU-Pj6xztVUg.roa (hash: eavdDhCPv5oKejhQ3E73neB1uw2GLpbCsVavoHAgMTA=)
                          2: 6kx7RSGU2eDdKnON8ulnwP0DoEM.roa (hash: mBB9XF7/IVEobcs0wBYP2r9M7bnVaTZmf6dDGW+5sqI=)
                          3: S79Gb1Wgs93M_TFXtKZ_MxtZ8rY.roa (hash: iXSwMrT+vGCWBRxTBdKA3OOmkhNM967qgIOHYI7fwnY=)
                          4: jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl (hash: v5dFrZlGotpfMYVIUqC79odp18Ru6GvSc8h53DrdVmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fd:5b:24:41:62:5f:ae:e2:7a:9d:de:e3:d8:01:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
        Validity
            Not Before: Aug 13 23:00:36 2026 GMT
            Not After : Aug 14 23:00:36 2026 GMT
        Subject: CN=cf775b2de92ce1ff060660e2ea257c7652eddeaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:f0:4b:0b:6d:fa:c6:ca:66:29:74:f8:fb:
                    86:9e:90:f7:34:87:33:e4:f5:5f:fb:03:dc:8c:cf:
                    56:53:68:c8:b7:38:eb:27:e8:36:10:21:3d:a6:10:
                    cb:f9:a1:fb:4e:69:78:f5:df:46:79:6a:9d:50:88:
                    37:ff:69:5a:6f:ec:06:77:20:b3:4d:eb:43:08:90:
                    1c:bd:63:01:78:cf:7d:f2:5b:fc:6d:4c:7b:32:04:
                    66:87:be:09:d9:ba:ac:96:62:fa:f9:12:61:c3:99:
                    06:a4:d5:f2:86:a8:58:bf:29:d2:3f:95:61:ef:54:
                    a1:4f:4a:48:af:6a:49:30:23:15:80:7f:3b:50:f8:
                    a6:ea:15:26:b2:52:39:9f:f5:c0:f7:61:ee:34:0f:
                    be:75:8e:2f:d8:90:ce:12:90:3c:d5:67:65:d4:c1:
                    6d:e0:fa:03:67:9e:ee:ae:75:2b:74:74:8a:e9:ea:
                    41:73:7e:11:d5:71:f7:43:18:92:ca:c3:07:b3:84:
                    13:fb:3c:c6:b8:de:82:fb:49:20:b0:dd:47:6f:0f:
                    87:ff:e1:8e:00:59:5a:b8:8a:6f:01:5a:12:f2:23:
                    38:ee:23:af:78:fb:28:80:23:62:66:f0:88:8f:42:
                    91:62:c4:b3:01:2e:5d:ce:84:27:46:62:6f:a1:96:
                    e3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:77:5B:2D:E9:2C:E1:FF:06:06:60:E2:EA:25:7C:76:52:ED:DE:AA
            X509v3 Authority Key Identifier:
                keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ca:82:ab:06:e5:04:c1:a4:35:56:0b:12:1d:16:39:90:05:
         22:93:fd:17:91:75:7e:76:6b:de:02:42:65:9a:b0:17:ad:b9:
         14:40:d3:fd:32:5a:d4:1d:05:85:0a:56:70:15:93:cb:b1:a1:
         c5:9a:51:48:48:d6:5f:94:94:5c:64:90:57:1d:79:96:a1:b6:
         93:96:d2:d4:60:8c:73:b4:83:50:70:5d:96:3d:14:ba:05:9c:
         13:97:41:f2:bc:9b:f1:a5:e4:49:57:7d:4f:12:a7:6d:f6:2b:
         a5:e3:3d:84:8d:3e:17:ab:d9:b9:f4:3f:93:bd:36:02:b7:5b:
         f2:9a:d8:36:8a:a7:47:1c:23:68:fe:0a:30:24:f6:09:c6:33:
         f4:83:27:a1:cf:cd:f9:8e:a5:43:ba:83:d7:80:c3:be:e2:fe:
         0e:7d:c9:82:6c:d5:15:46:ad:4c:59:3d:b5:aa:ae:2e:05:4f:
         86:2c:a5:8f:cd:cf:e4:b2:f8:e9:03:2b:43:fc:eb:24:99:cc:
         70:59:5b:27:d7:96:12:cf:1e:9e:95:64:71:e5:f9:2b:e5:d1:
         30:96:67:fc:3b:de:52:3b:fa:8d:a9:69:0b:1a:81:c9:ac:3a:
         16:a4:c2:ed:f8:39:f4:bd:96:d0:c6:c6:35:1b:50:50:ee:03:
         7d:03:1b:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/9WyRBYl+u4nqd3uPYAT7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjUxZDA2NzA3MTVlYjY5ZWZhMmZiZmYxOTk4YzNiZGJk
OGE5ZjUwHhcNMjYwODEzMjMwMDM2WhcNMjYwODE0MjMwMDM2WjAzMTEwLwYDVQQD
EyhjZjc3NWIyZGU5MmNlMWZmMDYwNjYwZTJlYTI1N2M3NjUyZWRkZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxzwSwtt+sbKZil0+PuGnpD3NIcz
5PVf+wPcjM9WU2jItzjrJ+g2ECE9phDL+aH7Tml49d9GeWqdUIg3/2lab+wGdyCz
TetDCJAcvWMBeM998lv8bUx7MgRmh74J2bqslmL6+RJhw5kGpNXyhqhYvynSP5Vh
71ShT0pIr2pJMCMVgH87UPim6hUmslI5n/XA92HuNA++dY4v2JDOEpA81Wdl1MFt
4PoDZ57urnUrdHSK6epBc34R1XH3QxiSysMHs4QT+zzGuN6C+0kgsN1Hbw+H/+GO
AFlauIpvAVoS8iM47iOvePsogCNiZvCIj0KRYsSzAS5dzoQnRmJvoZbjGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM93Wy3pLOH/BgZg4uolfHZS7d6qMB8GA1UdIwQY
MBaAFI31HQZwcV62nvovv/GZjDvb2Kn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDkt
N2E3OTRkNWNlZDNkLzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDktN2E3OTRkNWNlZDNk
LzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsqCqwbl
BMGkNVYLEh0WOZAFIpP9F5F1fnZr3gJCZZqwF625FEDT/TJa1B0FhQpWcBWTy7Gh
xZpRSEjWX5SUXGSQVx15lqG2k5bS1GCMc7SDUHBdlj0UugWcE5dB8ryb8aXkSVd9
TxKnbfYrpeM9hI0+F6vZufQ/k702Ardb8prYNoqnRxwjaP4KMCT2CcYz9IMnoc/N
+Y6lQ7qD14DDvuL+Dn3JgmzVFUatTFk9taquLgVPhiylj83P5LL46QMrQ/zrJJnM
cFlbJ9eWEs8enpVkceX5K+XRMJZn/DveUjv6jalpCxqByaw6FqTC7fg59L2W0MbG
NRtQUO4DfQMbDg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 09:49:46 2026 by rpki-client